Edit tour

macOS Analysis Report
Presentation.pptx

Overview

General Information

Sample name:	Presentation.pptx
Analysis ID:	1523864
MD5:	d6fe5c7469058b496c0eb7882bd99934
SHA1:	051f36a8d8b3134e163981f4ae4a0548853e7fe8
SHA256:	0441d5351a8829f35050985ebd60d7bd113eedd4747889b904588b84909148eb
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false

Signatures

Document contains embedded VBA macros

Document misses a certain OLE stream usually present in this Microsoft Office document type

Reads hardware related sysctl values

Reads the systems OS release and/or type

Reads the systems hostname

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523864
Start date and time:	2024-10-02 06:01:57 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultmacfilecookbook.jbs
Analysis system description:	Virtual Machine, Mojave (Office 16 16.27, Java 11.0.2+9, Adobe Reader 2019.010.20099)
macOS major version:	10.14
CPU architecture:	x86_64
Analysis Mode:	default
Sample name:	Presentation.pptx
Detection:	CLEAN
Classification:	clean2.macPPTX@0/56@1/0

Warnings

Excluded IPs from analysis (whitelisted): 23.215.201.216, 17.36.200.79, 23.219.155.175, 13.107.42.16, 52.111.243.29, 52.109.8.89, 52.111.227.28, 52.109.6.63, 184.28.118.99, 184.28.118.131, 13.107.5.88, 52.111.229.46, 23.35.206.101, 23.37.124.6, 52.111.227.13
Excluded domains from analysis (whitelisted): updates.cdn-apple.com.akadns.net, odc.officeapps.live.com, fs-wildcard.microsoft.com.edgekey.net, crl.apple.com, osiprod-eus2-buff-azsc-000.eastus2.cloudapp.azure.com, config-edge-skype.l-0007.l-msedge.net, e16604.g.akamaiedge.net, itunes.apple.com.edgekey.net, help.apple.com, officeclient.microsoft.com, init.itunes.apple.com, l-0007.l-msedge.net, lcdn-locator-usuqo.apple.com.akadns.net, afdo-tas-offload.trafficmanager.net, fs.microsoft.com, prod.roaming1.live.com.akadns.net, cus-azsc-000.odc.officeapps.live.com, lb._dns-sd._udp.0.11.168.192.in-addr.arpa, us1.roaming1.live.com.akadns.net, lcdn-locator.apple.com.akadns.net, updates.g.aaplimg.com, us.configsvc1.live.com.akadns.net, metadata.templates.cdn.office.net, nexusrules.officeapps.live.com, e11408.d.akamaiedge.net, us1.odcsm1.live.com.akadns.net, client-office365-tas.msedge.net, prod-w.nexus.live.com.akadns.net, config.edge.skype.com.trafficmanager.net, templatesmetadata.office.net.edgekey.net, cus-config.off
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://weather.service.msn.com/data.aspx
VT rate limit hit for: https://analysis.windows.net/powerbi/api
VT rate limit hit for: https://api.aadrm.com
VT rate limit hit for: https://api.addins.omex.office.net/api/addins/search
VT rate limit hit for: https://api.addins.store.officeppe.com/addinstemplate
VT rate limit hit for: https://api.diagnosticssdf.office.com/v2/feedback
VT rate limit hit for: https://api.office.net
VT rate limit hit for: https://api.powerbi.com/v1.0/myorg/groups
VT rate limit hit for: https://api.scheduler.
VT rate limit hit for: https://apis.live.net/v5.0/
VT rate limit hit for: https://asgsmsproxyapi.azurewebsites.net/
VT rate limit hit for: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
VT rate limit hit for: https://clients.config.office.net/user/v1.0/android/policies
VT rate limit hit for: https://clients.config.office.net/user/v1.0/ios
VT rate limit hit for: https://consent.config.office.com/consentcheckin/v1.0/consents
VT rate limit hit for: https://d.docs.live.net
VT rate limit hit for: https://dataservice.o365filtering.com/
VT rate limit hit for: https://dev0-api.acompli.net/autodetect
VT rate limit hit for: https://edge.skype.com/registrar/prod
VT rate limit hit for: https://edge.skype.com/rps
VT rate limit hit for: https://entitlement.diagnostics.office.com
VT rate limit hit for: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
VT rate limit hit for: https://globaldisco.crm.dynamics.com
VT rate limit hit for: https://graph.windows.net
VT rate limit hit for: https://incidents.diagnostics.office.com
VT rate limit hit for: https://incidents.diagnosticssdf.office.com
VT rate limit hit for: https://insertmedia.bing.office.net/odc/insertmedia
VT rate limit hit for: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
VT rate limit hit for: https://make.powerautomate.com
VT rate limit hit for: https://management.azure.com
VT rate limit hit for: https://messaging.engagement.office.com/
VT rate limit hit for: https://messaging.lifecycle.office.com/
VT rate limit hit for: https://mss.office.com
VT rate limit hit for: https://my.microsoftpersonalcontent.com
VT rate limit hit for: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
VT rate limit hit for: https://ncus.contentsync.
VT rate limit hit for: https://officeci.azurewebsites.net/api/
VT rate limit hit for: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
VT rate limit hit for: https://officepyservice.office.net/service.functionality
VT rate limit hit for: https://officesetup.getmicrosoftkey.com
VT rate limit hit for: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
VT rate limit hit for: https://outlook.office.com/autosuggest/api/v1/init?cvid=
VT rate limit hit for: https://outlook.office365.com
VT rate limit hit for: https://outlook.office365.com/api/v1.0/me/Activities
VT rate limit hit for: https://outlook.office365.com/autodiscover/autodiscover.json
VT rate limit hit for: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
VT rate limit hit for: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
VT rate limit hit for: https://powerlift-frontdesk.acompli.net
VT rate limit hit for: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
VT rate limit hit for: https://prod-global-autodetect.acompli.net/autodetect
VT rate limit hit for: https://pushchannel.1drv.ms
VT rate limit hit for: https://safelinks.protection.outlook.com/api/GetPolicy
VT rate limit hit for: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
VT rate limit hit for: https://store.office.cn/addinstemplate
VT rate limit hit for: https://substrate.office.com
VT rate limit hit for: https://substrate.office.com/search/api/v2/init
VT rate limit hit for: https://tasks.office.com
VT rate limit hit for: https://templatesmetadata.office.net/
VT rate limit hit for: https://web.microsoftstream.com/video/
VT rate limit hit for: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
VT rate limit hit for: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
VT rate limit hit for: https://wus2.contentsync.
VT rate limit hit for: https://www.odwebp.svc.ms

Runtime Messages

Command:	open "/Users/bernard/Desktop/Presentation.pptx"
PID:	625
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

System is macvm-mojave

mono-sgen32 New Fork (PID: 625, Parent: 537)

open (MD5: 34bd93241fa5d2aee225941b1ca14fa4) Arguments: /usr/bin/open /Users/bernard/Desktop/Presentation.pptx

xpcproxy New Fork (PID: 626, Parent: 1)

Microsoft PowerPoint (MD5: a27fcf153298f0494213c60a8138654e) Arguments: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint

xpcproxy New Fork (PID: 632, Parent: 1)

Office365ServiceV2 (MD5: c76d5ed86d9dca9ee41a2c47addb7405) Arguments: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2

xpcproxy New Fork (PID: 661, Parent: 1)

eficheck (MD5: 328beb81a2263449258057506bb4987f) Arguments: /usr/libexec/firmwarecheckers/eficheck/eficheck --integrity-check-daemon

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49352 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49353 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49354 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49355 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49356 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49360 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49362 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49361 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49364 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49365 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49366 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49489 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49490 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49491 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49492 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49493 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49494 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49498 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49501 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49502 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49503 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49504 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.67
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.67
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.67
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.67
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.67
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.67
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134
Source: unknown	TCP traffic detected without corresponding DNS query: 17.253.13.134

Source: global traffic	HTTP traffic detected: GET /assets/macos/com_apple_MobileAsset_KextDenyList/com_apple_MobileAsset_KextDenyList.xml HTTP/1.1Host: mesu.apple.comAccept: /If-Modified-Since: Tue, 06 Apr 2021 18:14:44 GMTUser-Agent: MobileAsset/1.1Accept-Language: en-usAccept-Encoding: br, gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /assets/macos/com_apple_MobileAsset_Font5/com_apple_MobileAsset_Font5.xml HTTP/1.1Host: mesu.apple.comAccept: /If-Modified-Since: Tue, 24 Mar 2020 18:25:48 GMTUser-Agent: MobileAsset/1.1Accept-Language: en-usAccept-Encoding: br, gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /assets/macos/com_apple_MobileAsset_PKITrustSupplementals/com_apple_MobileAsset_PKITrustSupplementals.xml HTTP/1.1Host: mesu.apple.comAccept: /If-Modified-Since: Tue, 09 Apr 2019 19:09:54 GMTUser-Agent: MobileAsset/1.1Accept-Language: en-usAccept-Encoding: br, gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /assets/macos/com_apple_MobileAsset_routined_defaults/com_apple_MobileAsset_routined_defaults.xml HTTP/1.1Host: mesu.apple.comAccept: /If-Modified-Since: Tue, 25 Jun 2019 19:58:17 GMTUser-Agent: MobileAsset/1.1Accept-Language: en-usAccept-Encoding: br, gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /2021/mobileassets/041-40471/B96AF6E1-5FF6-4786-9956-944A1AFE086A/com_apple_MobileAsset_KextDenyList/404087a7302927411b6ea0e05114d2c68355185e.zip HTTP/1.1Host: updates.cdn-apple.comAccept: /Accept-Language: en-usConnection: keep-aliveAccept-Encoding: br, gzip, deflateUser-Agent: mobileassetd (unknown version) CFNetwork/976 Darwin/18.2.0 (x86_64)
Source: global traffic	HTTP traffic detected: GET /2024/patches/052-54451/D609556E-69B1-482E-9C33-B2E3510A1311/com_apple_MobileAsset_TimeZoneUpdate/c5a4d0df08e8faecf4faebbbadc4d96a07d9d990.zip HTTP/1.1Host: updates.cdn-apple.comAccept: /Accept-Language: en-usConnection: keep-aliveAccept-Encoding: br, gzip, deflateUser-Agent: mobileassetd (unknown version) CFNetwork/976 Darwin/18.2.0 (x86_64)
Source: global traffic	HTTP traffic detected: GET /2024/patches/062-08173/234EE7F7-CC33-4CD3-85FC-60590A103560/com_apple_MobileAsset_CoreSuggestions/84f6102e2a09dd10dd694d795792a7771b6014fc.zip HTTP/1.1Host: updates.cdn-apple.comAccept: /Accept-Language: en-usConnection: keep-aliveAccept-Encoding: br, gzip, deflateUser-Agent: mobileassetd (unknown version) CFNetwork/976 Darwin/18.2.0 (x86_64)
Source: global traffic	HTTP traffic detected: GET /assets/macos/com_apple_MobileAsset_KextDenyList/com_apple_MobileAsset_KextDenyList.xml HTTP/1.1Host: mesu.apple.comAccept: /If-Modified-Since: Tue, 06 Apr 2021 18:14:44 GMTUser-Agent: MobileAsset/1.1Accept-Language: en-usAccept-Encoding: br, gzip, deflateConnection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: h3.apis.apple.map.fastly.net

Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Reads from socket in process: data			Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2 (PID: 632)	Reads from socket in process: data			Jump to behavior

Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: login.keychain-db.sb-07d82885-3EdlEq.277.dr, com.microsoft.Powerpoint.securebookmarks.plist.264.dr, login.keychain-db.sb-07d82885-4RT1zY.264.dr	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.aadrm.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.aadrm.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.cortana.ai
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.microsoftstream.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.office.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.onedrive.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://api.scheduler.
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://app.powerbi.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://augloop.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://augloop.office.com/v2
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://canary.designerapp.
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cdn.entity.
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://clients.config.office.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://clients.config.office.net/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cortana.ai
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cortana.ai/api
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://cr.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://d.docs.live.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://dev.cortana.ai
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://devnull.onenote.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://directory.services.
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ecs.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://edge.skype.com/rps
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://fpastorage.cdn.office.net/%s
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://fpastorage.cdn.office.net/firstpartyapp/addins.xml
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://graph.windows.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://graph.windows.net/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ic3.teams.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://invites.office.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://lifecycle.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://login.microsoftonline.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://login.windows.local
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://make.powerautomate.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://management.azure.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://management.azure.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://messaging.action.office.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://messaging.office.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://mss.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ncus.contentsync.
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://officeapps.live.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://officepyservice.office.net/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://onedrive.live.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://outlook.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://outlook.office.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://outlook.office365.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://outlook.office365.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://powerlift.acompli.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://res.cdn.office.net
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://service.powerapps.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://settings.outlook.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://staging.cortana.ai
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://substrate.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://tasks.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://webshell.suite.office.com
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://wus2.contentsync.
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	String found in binary or memory: https://www.yammer.com

Source: unknown	Network traffic detected: HTTP traffic on port 49351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49501
Source: unknown	Network traffic detected: HTTP traffic on port 49370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49491
Source: unknown	Network traffic detected: HTTP traffic on port 49354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49490
Source: unknown	Network traffic detected: HTTP traffic on port 49503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49360
Source: unknown	Network traffic detected: HTTP traffic on port 49353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49350
Source: unknown	Network traffic detected: HTTP traffic on port 49501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49503

Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Writes from socket in process: data			Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2 (PID: 632)	Writes from socket in process: data			Jump to behavior

Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49352 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49353 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49354 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49355 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49356 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49360 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49362 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.253.13.134:443 -> 192.168.11.12:49361 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49364 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49365 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.8:443 -> 192.168.11.12:49366 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49489 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49490 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49491 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49492 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49493 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49494 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49498 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49501 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49502 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49503 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49504 version: TLS 1.2

Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	OLE indicator, VBA macros: true
Source: CatalogCacheMetaData.xml.264.dr	OLE indicator, VBA macros: true
Source: microsoft powerpoint_Rules.xml.264.dr	OLE indicator, VBA macros: true

Source: C0A390DF-1012-B84C-AA3B-629416397471.264.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: CatalogCacheMetaData.xml.264.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: microsoft powerpoint_Rules.xml.264.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: classification engine

Classification label: clean2.macPPTX@0/56@1/0

Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Random device file read: /dev/urandom	Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Random device file read: /dev/urandom	Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2 (PID: 632)	Random device file read: /dev/urandom	Jump to behavior
Source: /usr/libexec/firmwarecheckers/eficheck/eficheck (PID: 661)	Random device file read: /dev/random	Jump to behavior

Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist			Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2 (PID: 632)	AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist			Jump to behavior

Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Log file created: /Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Caches/Microsoft/uls/com.microsoft.Powerpoint/logs/apple-device-log-20241001-2303.log			Jump to dropped file
Source: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2 (PID: 632)	Log file created: /Users/bernard/Library/Containers/com.microsoft.Office365ServiceV2/Data/Library/Caches/Microsoft/uls/com.microsoft.Office365ServiceV2/logs/apple-device-log-20241001-2303.log			Jump to dropped file

Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Binary plist file created: /private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/T/com.microsoft.Powerpoint/TemporaryItems/(A Document Being Saved By PowerPoint)/ci.plist	Jump to dropped file
Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	XML plist file created: /private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/T/com.microsoft.Powerpoint/TemporaryItems/(A Document Being Saved By PowerPoint)/com.microsoft.Powerpoint.securebookmarks.plist	Jump to dropped file
Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Binary plist file created: /Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Caches/com.microsoft.ctrlstrcaches/com.microsoft.Powerpoint.ctrlstrcache.en.plist	Jump to dropped file
Source: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2 (PID: 632)	Binary plist file created: /private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/T/com.microsoft.Office365ServiceV2/TemporaryItems/(A Document Being Saved By Office365ServiceV2)/ci.plist	Jump to dropped file

Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Sysctl read request: hw.availcpu (6.25)	Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Sysctl read request: hw.ncpu (6.3)	Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2 (PID: 632)	Sysctl read request: hw.availcpu (6.25)	Jump to behavior

Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Sysctl requested: kern.ostype (1.1)			Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	Sysctl requested: kern.osrelease (1.2)			Jump to behavior

Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)

Sysctl requested: kern.hostname (1.10)

Jump to behavior

Source: /usr/bin/open (PID: 625)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint (PID: 626)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2 (PID: 632)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2 (PID: 632)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	Direct Volume Access	OS Credential Dumping	31 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Shell
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Presentation.pptx	0%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
appledownload.map.fastly.net	0%	Virustotal		Browse
h3.apis.apple.map.fastly.net	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Link
https://shell.suite.office.com:1443	0%	Virustotal	Browse
https://login.microsoftonline.com/	0%	Virustotal	Browse
https://designerapp.azurewebsites.net	0%	Virustotal	Browse
https://api.diagnosticssdf.office.com	0%	Virustotal	Browse
https://outlook.office365.com/connectors	0%	Virustotal	Browse
https://autodiscover-s.outlook.com/	0%	Virustotal	Browse
https://api.addins.omex.office.net/appinfo/query	0%	Virustotal	Browse
https://useraudit.o365auditrealtimeingestion.manage.office.com	0%	Virustotal	Browse
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	0%	Virustotal	Browse
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	0%	Virustotal	Browse
https://clients.config.office.net/user/v1.0/tenantassociationkey	0%	Virustotal	Browse
https://powerlift.acompli.net	0%	Virustotal	Browse
https://cortana.ai	0%	Virustotal	Browse
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	Virustotal	Browse
https://lookup.onenote.com/lookup/geolocation/v1	0%	Virustotal	Browse
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	0%	Virustotal	Browse
https://entitlement.diagnosticssdf.office.com	0%	Virustotal	Browse
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	Virustotal	Browse
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	0%	Virustotal	Browse
https://cloudfiles.onenote.com/upload.aspx	0%	Virustotal	Browse
https://api.aadrm.com/	0%	Virustotal	Browse
https://ic3.teams.office.com	0%	Virustotal	Browse
https://ofcrecsvcapi-int.azurewebsites.net/	0%	Virustotal	Browse
https://www.yammer.com	0%	Virustotal	Browse
https://api.microsoftstream.com/api/	0%	Virustotal	Browse
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	0%	Virustotal	Browse
https://messagebroker.mobile.m365.svc.cloud.microsoft	0%	Virustotal	Browse
https://otelrules.svc.static.microsoft	0%	Virustotal	Browse
https://cr.office.com	0%	Virustotal	Browse
https://portal.office.com/account/?ref=ClientMeControl	0%	Virustotal	Browse
https://clients.config.office.net/c2r/v1.0/DeltaAdvisory	0%	Virustotal	Browse
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	0%	Virustotal	Browse
https://res.getmicrosoftkey.com/api/redemptionevents	0%	Virustotal	Browse
https://graph.ppe.windows.net	0%	Virustotal	Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
appledownload.map.fastly.net	151.101.3.8	true	false	0%, Virustotal, Browse	unknown
h3.apis.apple.map.fastly.net	151.101.195.6	true	false	0%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.diagnosticssdf.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://login.microsoftonline.com/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://shell.suite.office.com:1443	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://designerapp.azurewebsites.net	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://autodiscover-s.outlook.com/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://useraudit.o365auditrealtimeingestion.manage.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://outlook.office365.com/connectors	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://cdn.entity.	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://api.addins.omex.office.net/appinfo/query	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://clients.config.office.net/user/v1.0/tenantassociationkey	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://powerlift.acompli.net	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://rpsticket.partnerservices.getmicrosoftkey.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://lookup.onenote.com/lookup/geolocation/v1	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://cortana.ai	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://cloudfiles.onenote.com/upload.aspx	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://entitlement.diagnosticssdf.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://api.aadrm.com/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://ofcrecsvcapi-int.azurewebsites.net/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://canary.designerapp.	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://ic3.teams.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://www.yammer.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://api.microsoftstream.com/api/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://cr.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://otelrules.svc.static.microsoft	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://portal.office.com/account/?ref=ClientMeControl	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://clients.config.office.net/c2r/v1.0/DeltaAdvisory	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://edge.skype.com/registrar/prod	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://graph.ppe.windows.net	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://res.getmicrosoftkey.com/api/redemptionevents	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false	0%, Virustotal, Browse	unknown
https://powerlift-frontdesk.acompli.net	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://tasks.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://officeci.azurewebsites.net/api/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://sr.outlook.office.net/ws/speech/recognize/assistant/work	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://api.scheduler.	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://my.microsoftpersonalcontent.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://store.office.cn/addinstemplate	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://api.aadrm.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://edge.skype.com/rps	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://outlook.office.com/autosuggest/api/v1/init?cvid=	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://globaldisco.crm.dynamics.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://messaging.engagement.office.com/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://dev0-api.acompli.net/autodetect	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://www.odwebp.svc.ms	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://api.diagnosticssdf.office.com/v2/feedback	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://api.powerbi.com/v1.0/myorg/groups	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://web.microsoftstream.com/video/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://api.addins.store.officeppe.com/addinstemplate	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://graph.windows.net	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://dataservice.o365filtering.com/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://officesetup.getmicrosoftkey.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://analysis.windows.net/powerbi/api	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://prod-global-autodetect.acompli.net/autodetect	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://substrate.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://outlook.office365.com/autodiscover/autodiscover.json	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://consent.config.office.com/consentcheckin/v1.0/consents	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://d.docs.live.net	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://safelinks.protection.outlook.com/api/GetPolicy	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://ncus.contentsync.	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
http://weather.service.msn.com/data.aspx	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://apis.live.net/v5.0/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://officepyservice.office.net/service.functionality	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://templatesmetadata.office.net/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://messaging.lifecycle.office.com/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://mss.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://pushchannel.1drv.ms	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://management.azure.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://outlook.office365.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://wus2.contentsync.	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://incidents.diagnostics.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://clients.config.office.net/user/v1.0/ios	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://make.powerautomate.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://api.addins.omex.office.net/api/addins/search	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://insertmedia.bing.office.net/odc/insertmedia	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://outlook.office365.com/api/v1.0/me/Activities	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://api.office.net	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://incidents.diagnosticssdf.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://asgsmsproxyapi.azurewebsites.net/	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://clients.config.office.net/user/v1.0/android/policies	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://entitlement.diagnostics.office.com	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown
https://substrate.office.com/search/api/v2/init	C0A390DF-1012-B84C-AA3B-629416397471.264.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.3.8	appledownload.map.fastly.net	United States	54113	FASTLYUS	false
23.213.224.212	unknown	United States	5432	PROXIMUS-ISP-ASBE	false
151.101.131.6	unknown	United States	54113	FASTLYUS	false
151.101.195.6	h3.apis.apple.map.fastly.net	United States	54113	FASTLYUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
23.213.224.212	iUcNo0PKRy	Get hash	malicious	Unknown	Browse
23.213.224.212	palera1n-macos-universal	Get hash	malicious	Unknown	Browse
151.101.131.6	https://topawardpicks.top	Get hash	malicious	Unknown	Browse
	https://b3dc9.dynv6.net/en-tj/iphone	Get hash	malicious	Unknown	Browse
	https://b3dc9.dynv6.net/en-uz/mac	Get hash	malicious	Unknown	Browse
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFpWmkQCuyRKVYuXTODipkw1peyOsy7fzch2Qnjjx9TPdQLyq_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZOGY47MMsA28ivpkfbUZ4Lg9A-2BpxdwxU5dKnUeajmF4HirYei02RaLjIoVpk4gyUMhgj92hT-2FHMQ8mxdm73E1rDJWG4U3srGJQAD6HJNqRuM2BNyhWi1cyQGPjs9bNnt3sCHX9HQ-2B1vlq1IrWdBpEUzmyiy7qWzbIHuomspNWnTuqZh3GX5k14qG6xYuxyW10TSL-2Fdyl0iPN0SOJtTt8-2FwmWJD-2F8w79oLdqJEekHbPrO-2B0v5UFAy7DfQgXJdU4VdPg-3D	Get hash	malicious	Unknown	Browse
	http://grifon.info/announce?info_hash=%08%95%AE%D1m%DD%1A%0B%CEo%C0%27%3Af%7B%14sf%3FC&peer_id=-AZ5770-SNhwkI5WcC8E&supportcrypto=1&port=51797&azudp=51797&uploaded=0&downloaded=0&left=243670495&corrupt=0&event=started&numwant=75&no_peer_id=1&compact=1&key=j9C8cT74&azver=3(87.236.16.208)	Get hash	malicious	Unknown	Browse
	https://lookerstudio.google.com/reporting/d787ae12-bf74-43b9-af2f-d8d57b4065f6/page/RpuBE?s=t1OjWts8lSQ	Get hash	malicious	Unknown	Browse
	https://l.co.uk	Get hash	malicious	Unknown	Browse
	https://ab5.dultzman.ru/453661207694068nTmWxOZPLYNVYOTMBINCEQSANMABCGVTBFIXRSRIKIYCZTF	Get hash	malicious	Unknown	Browse
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFkILOsO1UnLItklUwD68rhtr94fRPJI4HAEjYZ7vdlgHTiHU_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZPRzSyzWe4FlQQyqQA-2BOTqGjWjoN-2BuPm4tzM5LM6f6tO2PXKa74YSjAhzL6onG-2BuKO989bZZj9vupVvXtBWU0qXeI6VZny9p-2FgjssbU9Je1I2RDoZPOLgxX8gxf2-2BzsuoGYoVqnaS5CYR1Z5WEWAcZP0wmQbm4ikqer-2BGrlVppyDdPw-2BxPiObQZTbU2ZeclEy9V5nUC-2BnwlvdDmQwsjghHkHuJFiwInVWpyiCgGFo0uYjlPs3G8hdAgJBJu-2F-2B0K864-3D#ZmluYW5jZUBjbGVhcnZpZXcuYWk=	Get hash	malicious	Unknown	Browse
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFkILOsO1UnLItklUwD68rhtr94fRPJI4HAEjYZ7vdlgHTiHU_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZPRzSyzWe4FlQQyqQA-2BOTqGjWjoN-2BuPm4tzM5LM6f6tO2PXKa74YSjAhzL6onG-2BuKO989bZZj9vupVvXtBWU0qXeI6VZny9p-2FgjssbU9Je1I2RDoZPOLgxX8gxf2-2BzsuoGYoVqnaS5CYR1Z5WEWAcZP0wmQbm4ikqer-2BGrlVppyDdPw-2BxPiObQZTbU2ZeclEy9V5nUC-2BnwlvdDmQwsjghHkHuJFiwInVWpyiCgGFo0uYjlPs3G8hdAgJBJu-2F-2B0K864-3D#ZmluYW5jZUBjbGVhcnZpZXcuYWk=	Get hash	malicious	Unknown	Browse
151.101.195.6	https://b3dc9.dynv6.net/en-uz/mac	Get hash	malicious	Unknown	Browse
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFpWmkQCuyRKVYuXTODipkw1peyOsy7fzch2Qnjjx9TPdQLyq_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZOGY47MMsA28ivpkfbUZ4Lg9A-2BpxdwxU5dKnUeajmF4HirYei02RaLjIoVpk4gyUMhgj92hT-2FHMQ8mxdm73E1rDJWG4U3srGJQAD6HJNqRuM2BNyhWi1cyQGPjs9bNnt3sCHX9HQ-2B1vlq1IrWdBpEUzmyiy7qWzbIHuomspNWnTuqZh3GX5k14qG6xYuxyW10TSL-2Fdyl0iPN0SOJtTt8-2FwmWJD-2F8w79oLdqJEekHbPrO-2B0v5UFAy7DfQgXJdU4VdPg-3D	Get hash	malicious	Unknown	Browse
	EACA1218AC7D98866DFE1F45785598942394234D.html	Get hash	malicious	Unknown	Browse
	http://grifon.info/announce?info_hash=%08%95%AE%D1m%DD%1A%0B%CEo%C0%27%3Af%7B%14sf%3FC&peer_id=-AZ5770-SNhwkI5WcC8E&supportcrypto=1&port=51797&azudp=51797&uploaded=0&downloaded=0&left=243670495&corrupt=0&event=started&numwant=75&no_peer_id=1&compact=1&key=j9C8cT74&azver=3(87.236.16.208)	Get hash	malicious	Unknown	Browse
	https://lookerstudio.google.com/reporting/d787ae12-bf74-43b9-af2f-d8d57b4065f6/page/RpuBE?s=t1OjWts8lSQ	Get hash	malicious	Unknown	Browse
	https://topawardpicks.top	Get hash	malicious	Unknown	Browse
	VFtaM6iwOv	Get hash	malicious	Unknown	Browse
	https://ab5.dultzman.ru/453661207694068nTmWxOZPLYNVYOTMBINCEQSANMABCGVTBFIXRSRIKIYCZTF	Get hash	malicious	Unknown	Browse
	https://eu2.contabostorage.com/0f057bf4d91340d3ae18d5f31372fa7e:new/document.html#rthurston@democracyforward.org	Get hash	malicious	Unknown	Browse
	NX76Su3VOr	Get hash	malicious	Unknown	Browse
151.101.3.8	https://www.rashakhodro.com/o/?c3Y9bzM2NV8xX29uZSZyYW5kPWJ6RkxWV3c9JnVpZD1VU0VSMTUwOTIwMjRVMTUwOTE1NDQ=N0123Ninfo@colemanenv.com	Get hash	malicious	Unknown	Browse
	extracted-pkg.ziphttps://fluencydirect-distro.s3.amazonaws.com/releases.macOS/FluencyDirect-11.0.10.40.pkg	Get hash	malicious	Unknown	Browse
	CloudChat	Get hash	malicious	Unknown	Browse
	http://cyberflix.elfhosted.com	Get hash	malicious	Unknown	Browse
	D4tDiMiUoh.dmg	Get hash	malicious	Unknown	Browse
	homebrew.dmg	Get hash	malicious	Unknown	Browse
	AGOVAccess	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGJKNTRado/Uk5-0wK6WZdXIMtQTCb4Xg/view?utm_content=DAGJKNTRado&utm_campaign=designshare&utm_medium=link&utm_source=	Get hash	malicious	Unknown	Browse
	http://185.95.84.79/rd/5mjHZC12186NGZJ251jxyezpsxaf8966VODRRIPVULWRYSF338370DCVV3303e9	Get hash	malicious	Unknown	Browse
	http://ctrk.klclick.com/l/01HZJ1F8TWXVPHDBM43248WJJK_4	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
appledownload.map.fastly.net	https://topawardpicks.top	Get hash	malicious	Unknown	Browse	151.101.195.8
	EACA1218AC7D98866DFE1F45785598942394234D.html	Get hash	malicious	Unknown	Browse	151.101.131.8
	http://grifon.info/announce?info_hash=%08%95%AE%D1m%DD%1A%0B%CEo%C0%27%3Af%7B%14sf%3FC&peer_id=-AZ5770-SNhwkI5WcC8E&supportcrypto=1&port=51797&azudp=51797&uploaded=0&downloaded=0&left=243670495&corrupt=0&event=started&numwant=75&no_peer_id=1&compact=1&key=j9C8cT74&azver=3(87.236.16.208)	Get hash	malicious	Unknown	Browse	151.101.131.8
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%E2%80%8Bxn--dic%C2%ADesisdeba%C2%ADrin%C2%ADas%C2%AD-6%C2%ADu%C2%ADb.%E2%80%8Bor%C2%ADg%2Fsys%2Fcss%2FvzEOd74Ux6iYa/YWxldGhpYS5oZXJtb3NpbGxvQHdyaS5vcmc=	Get hash	malicious	Unknown	Browse	151.101.131.8
	https://www.rashakhodro.com/o/?c3Y9bzM2NV8xX29uZSZyYW5kPWJ6RkxWV3c9JnVpZD1VU0VSMTUwOTIwMjRVMTUwOTE1NDQ=N0123Ninfo@colemanenv.com	Get hash	malicious	Unknown	Browse	151.101.3.8
	https://lookerstudio.google.com/reporting/d787ae12-bf74-43b9-af2f-d8d57b4065f6/page/RpuBE?s=t1OjWts8lSQ	Get hash	malicious	Unknown	Browse	151.101.67.8
	https://topawardpicks.top	Get hash	malicious	Unknown	Browse	151.101.67.8
	https://ab5.dultzman.ru/453661207694068nTmWxOZPLYNVYOTMBINCEQSANMABCGVTBFIXRSRIKIYCZTF	Get hash	malicious	Unknown	Browse	151.101.67.8
	https://securemsgdesk.cam/yte67	Get hash	malicious	Unknown	Browse	151.101.131.8
	extracted-pkg.ziphttps://fluencydirect-distro.s3.amazonaws.com/releases.macOS/FluencyDirect-11.0.10.40.pkg	Get hash	malicious	Unknown	Browse	151.101.3.8
h3.apis.apple.map.fastly.net	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFl1bBkz1ufgENuAZF1ODXRkOEXcot-2BlieaBFtd0IhXM08Jp__OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZOxzyaiykDuoFljiX91jkOGF7TGq8s59HY1LfNpqOHr1hEZu4XswpdGfGTbIsw4Mg7Ewx-2FAzTwbYOEI5c5W9xQE63UMPeYSBL2GJwQizVTVETCyjhoaIq4ot5vl7L-2BMO3KbJCX7vVUyT6NGOFhbY99Ap0lxFmjxSsCRRr7CrNGrevXE9jp8IJyovKPHHX6-2FxnVR-2BVdKd5S1Zkq94QkyDWCs9lCPSQ3LNxOSscF1edS7fTz6-2Bswo-2FZW2dAOCyCTKBxs-3D#Ymhhc2thci5zYW1iYXNpdmFuQHNhYW1hLmNvbQ==	Get hash	malicious	Unknown	Browse	151.101.3.6
	https://topawardpicks.top	Get hash	malicious	Unknown	Browse	151.101.131.6
	https://b3dc9.dynv6.net/en-tj/iphone	Get hash	malicious	Unknown	Browse	151.101.131.6
	https://b3dc9.dynv6.net/en-nz/itunes-gift-card-scams	Get hash	malicious	Unknown	Browse	151.101.3.6
	https://b3dc9.dynv6.net/en-uz/mac	Get hash	malicious	Unknown	Browse	151.101.195.6
	https://b3dc9.dynv6.net/en-uz/watch	Get hash	malicious	Unknown	Browse	151.101.3.6
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFpWmkQCuyRKVYuXTODipkw1peyOsy7fzch2Qnjjx9TPdQLyq_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZOGY47MMsA28ivpkfbUZ4Lg9A-2BpxdwxU5dKnUeajmF4HirYei02RaLjIoVpk4gyUMhgj92hT-2FHMQ8mxdm73E1rDJWG4U3srGJQAD6HJNqRuM2BNyhWi1cyQGPjs9bNnt3sCHX9HQ-2B1vlq1IrWdBpEUzmyiy7qWzbIHuomspNWnTuqZh3GX5k14qG6xYuxyW10TSL-2Fdyl0iPN0SOJtTt8-2FwmWJD-2F8w79oLdqJEekHbPrO-2B0v5UFAy7DfQgXJdU4VdPg-3D	Get hash	malicious	Unknown	Browse	151.101.131.6
	EACA1218AC7D98866DFE1F45785598942394234D.html	Get hash	malicious	Unknown	Browse	151.101.3.6
	https://www.rashakhodro.com/o/?c3Y9bzM2NV8xX29uZSZyYW5kPWJ6RkxWV3c9JnVpZD1VU0VSMTUwOTIwMjRVMTUwOTE1NDQ=N0123Ninfo@colemanenv.com	Get hash	malicious	Unknown	Browse	151.101.3.6
	https://lookerstudio.google.com/reporting/d787ae12-bf74-43b9-af2f-d8d57b4065f6/page/RpuBE?s=t1OjWts8lSQ	Get hash	malicious	Unknown	Browse	151.101.131.6

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	NhtSITq9Zp.vbs	Get hash	malicious	Remcos	Browse	185.199.108.133
	ejdc7iP3A7.vbs	Get hash	malicious	Remcos	Browse	185.199.109.133
	risTLdc664.vbs	Get hash	malicious	FormBook	Browse	185.199.108.133
	uLfuBVyZFV.vbs	Get hash	malicious	Unknown	Browse	185.199.108.133
	WW8kzvnphl.vbs	Get hash	malicious	Unknown	Browse	185.199.111.133
	2THp7fwNQD.vbs	Get hash	malicious	Unknown	Browse	185.199.111.133
	iJEK0xwucj.vbs	Get hash	malicious	Unknown	Browse	185.199.108.133
	mitec_purchase_order_PDF (1).vbs	Get hash	malicious	PXRECVOWEIWOEI Stealer	Browse	185.199.108.133
	https://unpaidrefund.top/view/mygov	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://sanbernardinoscounty.telcom-info.com/	Get hash	malicious	HtmlDropper	Browse	151.101.2.137
FASTLYUS	NhtSITq9Zp.vbs	Get hash	malicious	Remcos	Browse	185.199.108.133
	ejdc7iP3A7.vbs	Get hash	malicious	Remcos	Browse	185.199.109.133
	risTLdc664.vbs	Get hash	malicious	FormBook	Browse	185.199.108.133
	uLfuBVyZFV.vbs	Get hash	malicious	Unknown	Browse	185.199.108.133
	WW8kzvnphl.vbs	Get hash	malicious	Unknown	Browse	185.199.111.133
	2THp7fwNQD.vbs	Get hash	malicious	Unknown	Browse	185.199.111.133
	iJEK0xwucj.vbs	Get hash	malicious	Unknown	Browse	185.199.108.133
	mitec_purchase_order_PDF (1).vbs	Get hash	malicious	PXRECVOWEIWOEI Stealer	Browse	185.199.108.133
	https://unpaidrefund.top/view/mygov	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://sanbernardinoscounty.telcom-info.com/	Get hash	malicious	HtmlDropper	Browse	151.101.2.137
PROXIMUS-ISP-ASBE	SecuriteInfo.com.Linux.Siggen.9999.28931.8128.elf	Get hash	malicious	Mirai	Browse	213.181.35.20
	SecuriteInfo.com.Linux.Siggen.9999.28522.3483.elf	Get hash	malicious	Mirai	Browse	37.62.95.85
	SecuriteInfo.com.Linux.Siggen.9999.13221.8731.elf	Get hash	malicious	Unknown	Browse	87.67.249.245
	SecuriteInfo.com.Linux.Siggen.9999.32167.12194.elf	Get hash	malicious	Unknown	Browse	81.241.8.14
	jade.arm.elf	Get hash	malicious	Mirai	Browse	62.235.224.44
	jade.arm7.elf	Get hash	malicious	Mirai	Browse	62.235.224.42
	nIl2wyif6Q.elf	Get hash	malicious	Unknown	Browse	91.179.134.208
	YEFRJJNJiL.elf	Get hash	malicious	Gafgyt, Mirai, Okiru	Browse	91.178.248.250
	tVdq8lEt3e.elf	Get hash	malicious	Mirai, Okiru	Browse	213.49.53.56
	SecuriteInfo.com.Linux.Siggen.9999.5151.15671.elf	Get hash	malicious	Mirai	Browse	109.142.58.3
FASTLYUS	NhtSITq9Zp.vbs	Get hash	malicious	Remcos	Browse	185.199.108.133
	ejdc7iP3A7.vbs	Get hash	malicious	Remcos	Browse	185.199.109.133
	risTLdc664.vbs	Get hash	malicious	FormBook	Browse	185.199.108.133
	uLfuBVyZFV.vbs	Get hash	malicious	Unknown	Browse	185.199.108.133
	WW8kzvnphl.vbs	Get hash	malicious	Unknown	Browse	185.199.111.133
	2THp7fwNQD.vbs	Get hash	malicious	Unknown	Browse	185.199.111.133
	iJEK0xwucj.vbs	Get hash	malicious	Unknown	Browse	185.199.108.133
	mitec_purchase_order_PDF (1).vbs	Get hash	malicious	PXRECVOWEIWOEI Stealer	Browse	185.199.108.133
	https://unpaidrefund.top/view/mygov	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://sanbernardinoscounty.telcom-info.com/	Get hash	malicious	HtmlDropper	Browse	151.101.2.137

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
5c118da645babe52f060d0754256a73c	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFl1bBkz1ufgENuAZF1ODXRkOEXcot-2BlieaBFtd0IhXM08Jp__OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZOxzyaiykDuoFljiX91jkOGF7TGq8s59HY1LfNpqOHr1hEZu4XswpdGfGTbIsw4Mg7Ewx-2FAzTwbYOEI5c5W9xQE63UMPeYSBL2GJwQizVTVETCyjhoaIq4ot5vl7L-2BMO3KbJCX7vVUyT6NGOFhbY99Ap0lxFmjxSsCRRr7CrNGrevXE9jp8IJyovKPHHX6-2FxnVR-2BVdKd5S1Zkq94QkyDWCs9lCPSQ3LNxOSscF1edS7fTz6-2Bswo-2FZW2dAOCyCTKBxs-3D#Ymhhc2thci5zYW1iYXNpdmFuQHNhYW1hLmNvbQ==	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
	https://topawardpicks.top	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFpWmkQCuyRKVYuXTODipkw1peyOsy7fzch2Qnjjx9TPdQLyq_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZOGY47MMsA28ivpkfbUZ4Lg9A-2BpxdwxU5dKnUeajmF4HirYei02RaLjIoVpk4gyUMhgj92hT-2FHMQ8mxdm73E1rDJWG4U3srGJQAD6HJNqRuM2BNyhWi1cyQGPjs9bNnt3sCHX9HQ-2B1vlq1IrWdBpEUzmyiy7qWzbIHuomspNWnTuqZh3GX5k14qG6xYuxyW10TSL-2Fdyl0iPN0SOJtTt8-2FwmWJD-2F8w79oLdqJEekHbPrO-2B0v5UFAy7DfQgXJdU4VdPg-3D	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
	EACA1218AC7D98866DFE1F45785598942394234D.html	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
	http://grifon.info/announce?info_hash=%08%95%AE%D1m%DD%1A%0B%CEo%C0%27%3Af%7B%14sf%3FC&peer_id=-AZ5770-SNhwkI5WcC8E&supportcrypto=1&port=51797&azudp=51797&uploaded=0&downloaded=0&left=243670495&corrupt=0&event=started&numwant=75&no_peer_id=1&compact=1&key=j9C8cT74&azver=3(87.236.16.208)	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%E2%80%8Bxn--dic%C2%ADesisdeba%C2%ADrin%C2%ADas%C2%AD-6%C2%ADu%C2%ADb.%E2%80%8Bor%C2%ADg%2Fsys%2Fcss%2FvzEOd74Ux6iYa/YWxldGhpYS5oZXJtb3NpbGxvQHdyaS5vcmc=	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
	https://www.rashakhodro.com/o/?c3Y9bzM2NV8xX29uZSZyYW5kPWJ6RkxWV3c9JnVpZD1VU0VSMTUwOTIwMjRVMTUwOTE1NDQ=N0123Ninfo@colemanenv.com	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
	https://lookerstudio.google.com/reporting/d787ae12-bf74-43b9-af2f-d8d57b4065f6/page/RpuBE?s=t1OjWts8lSQ	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
	https://topawardpicks.top	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
	https://l.co.uk	Get hash	malicious	Unknown	Browse	17.253.13.134 151.101.131.6 151.101.195.6 151.101.3.8
7b1ac424884b798ca987e3e27b99d1a8	EACA1218AC7D98866DFE1F45785598942394234D.html	Get hash	malicious	Unknown	Browse	17.253.13.134
	MacKeeper.6.7.1.pkg	Get hash	malicious	Unknown	Browse	17.253.13.134
	https://restii.ru/shared	Get hash	malicious	Unknown	Browse	17.253.13.134
	D4tDiMiUoh.dmg	Get hash	malicious	Unknown	Browse	17.253.13.134
	https://m.exactag.com/ai.aspx?tc=d9608989bc40b07205bbd26a23a8d2e6b6b4f9&url=https://hr.economictimes.indiatimes.com/etl.php?url=https://m.exactag.com/ai.aspx?tc=d9608989bc40b07205bbd26a23a8d2e6b6b4f9&url=https://hr.economictimes.indiatimes.com/etl.php?url=https://eupoupei.com/lets/hit/huqxffrijn1dm/%2F/cHJvc2FyaW9AY29sZW1hbmVudi5jb20=	Get hash	malicious	Unknown	Browse	17.253.13.134

Dropped Files

⊘No context

Created / dropped Files

/Users/bernard/Desktop/~$Presentation.pptx

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.588421335044163
Encrypted:	false
SSDEEP:	3:YJfG1BlVF:YxG1Tv
MD5:	ADE111F47BD4B3DBE23C62618723CF48
SHA1:	C9D1D88EE24C00193621A1A7319AA0A1D50E25A3
SHA-256:	E5D9F4F74D6FE2DB47DA505A6B20D5209F925F13FDD35D06E4F7CF7FC3EDD600
SHA-512:	E3834A5418B2DB12BE902C8E8618A3F488D047DD370A78637F30F60B271D7559B2C078D79FD9C5493F482A06B625085F0B0EA0E28CA79D4266B2411CF8AA6F1F
Malicious:	false
Reputation:	low
Preview:	.Bernard. ..B.e.r.n.a.r.d. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

/Users/bernard/Library/Containers/com.microsoft.Office365ServiceV2/Data/Library/Caches/Microsoft/uls/com.microsoft.Office365ServiceV2/logs/apple-device-log-20241001-2303.log

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2
File Type:	ASCII text, with very long lines (10444), with CRLF line terminators
Category:	dropped
Size (bytes):	65833
Entropy (8bit):	5.524033431184828
Encrypted:	false
SSDEEP:	1536:5VYaZgyu/QEejaeXCmM/svG/sv6/svBM+J/hmQA/eBpOdeIorQ:5VYjpQxg
MD5:	6B7897793569B90975981D4A1351E7C0
SHA1:	25798E59252452417E62ED3765A39CAB86866EE7
SHA-256:	3B12B8BB3B489FF69DAFCC87CC7F40E9CE0BFB1B5A9A8A6E33A828B77898AD0C
SHA-512:	CA8822C4B392326FB3DABE02F402904960E9E8814B7A2EE3288FFE1FD02B81DEC2E7E438C582B413C9854E887741E577FD21456A47D1633645A61505D29C6889
Malicious:	false
Reputation:	low
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..10/02/2024 04:03:10.455 .com.microsoft.Office365ServiceV2.0x700008c0e000. com.microsoft.Office365ServiceV2.mbu.instrument.iangv.Information .Configuration {"FriendlyOSVersion":"Mac OS X 10.14.2 (18C54)","FriendlyAppVersion":"16.16.27 (201012)","NumScreens":1,"DATAID_SYS_VOL_SPACE":73380.4921875,"Screens":[{"height":768,"Index":0,"deviceResolutionHeight":72,"width":1024,"deviceResolutionWidth":72,"originY":0,"originX":0,"deviceBitsPerSample":8,"deviceColorSpaceName":"NSCalibratedRGBColorSpace"}],"DATAID_OS_BUILD":"18C54","DATAID_SCREEN_DEPTH":24,"DATAID_RESOLUTION":1024,"DATAID_HOME_VOL_SIZE":102199.9609375,"DATAID_HOME_VOL_SPACE":73380.4921875,"MainScreenIndex":0,"DATAID_SCREEN_DPI":72,"DATAID_SYS_VOL_SIZE":102199.9609375,"ProcessArchitecture":"x86_64"}.111E7CFD-99FF-4E53-BEE9-ED59BE90D18F ..10/02/2024 04:03:10.455 .com.microsoft.Office365ServiceV2.0x700008c0e000. com.mi

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/FontCache/systemfontmetadata.json

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JSON data
Category:	dropped
Size (bytes):	404675
Entropy (8bit):	5.093234573894204
Encrypted:	false
SSDEEP:	12288:xBRpxLzIE4BCuBozRIsjIYCBzzBQg71Q17OB3IiVX6Uu010Q0VSlcB2itvrmlwWQ:xBRpxL0BCuBoeBzxX6Uu010Q0VSlcB2W
MD5:	C001A613A117D3CD9536B257280C7274
SHA1:	4DDBDFCA63E5A98D45E6DF0F577352F189BF27E1
SHA-256:	00391D628C8EE3A28FF853B3107E01C352131B23F814EA73BC0218015B481F58
SHA-512:	CF91C3E19E1B9772C2C6CA695A2DC058A7D038963DF97C9F95822D0F410D5FB0C77EAB9E8ED75FD9B7DF92FC9564325AF503BBEE8A45EB70D5920C52CCEE6C02
Malicious:	false
Reputation:	low
Preview:	{"vm":1,"vi":7,"fc":999,"fl":[{"i":"AlBayan.ttc","p":"/Library/Fonts/AlBayan.ttc","s":188132,"l":1,"ft":[{"fi":0,"fa":["en-us","Al Bayan Plain"],"pf":["ar-eg","\u0627\u0644\u0628\u064A\u0627\u0646","en-us","Al Bayan"],"f":["en-us","Regular"],"pa":["ar-eg","\u0628\u0633\u064A\u0637","da-dk","Almindelig","de-de","Standard","en-us","Plain","es-es","Simple","fi-fi","Normaali","fr-fr","Simple","it-it","Piano","ja-jp","\u30D7\u30EC\u30FC\u30F3","ko-kr","\uBCF4\uD1B5\uCCB4","nb-no","Vanlig","nl-nl","Normaal","pt-br","Plano","ru-ru","\u041F\u0440\u044F\u043C\u043E\u0439","sv-se","Normal","zh-cn","\u666E\u901A\u4F53","zh-tw","\u5E73\u9AD4"],"fu":["ar-eg","\u0627\u0644\u0628\u064A\u0627\u0646 \u0628\u0633\u064A\u0637","en-us","Al Bayan Plain"],"g":["ar-eg","\u0627\u0644\u0628\u064A\u0627\u0646","en-us","Al Bayan"],"ps":["en-us","AlBayan"],"t":["ar-eg","\u0628\u0633\u064A\u0637","da-dk","Almindelig","de-de","Standard","en-us","Plain","es-es","Simple","fi-fi","Normaali","fr-fr","Simple","it-it","P

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CatalogCacheMetaData.xml

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	XML 1.0 document, ASCII text, with very long lines (13120), with no line terminators
Category:	dropped
Size (bytes):	13120
Entropy (8bit):	5.029243671786632
Encrypted:	false
SSDEEP:	384:liJbJbEbLEbLjbLjjbLjObLjvObLjv1bLjvn1bLjvnQbLjvnTQbLjvnT/bLjvnTu:liJbJbEbLEbLjbLjjbLjObLjvObLjv1A
MD5:	4516DDD02410825E263C6C19B561797C
SHA1:	1AD477A6767F0BF407C2ED25FEF4BAC773888661
SHA-256:	4028D470F67E4D83040123E58B81ABF1675BF26E262515F2DB28066EB67D9F6D
SHA-512:	04C64CBB969859AF73B24574E42A105DD2DB5DB58574F06E57C7E524CE58B395F9DA0D70B383C6F41303AF072F44A2BBF7C2532706FEDC801DDA370CD3EE8185
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?><root><version>1</version><Count>1</Count><Resource><Id>inkeffectocean_apple_0</Id><LAT>2024-10-02T04:03:22Z</LAT><key>inkeffectocean_apple.jpg</key><folder>Graphics</folder><type>10</type></Resource></root><?xml version="1.0" encoding="UTF-8" standalone="yes"?><root><version>1</version><Count>1</Count><Resource><Id>inkeffectocean_apple_0</Id><LAT>2024-10-02T04:03:22Z</LAT><key>inkeffectocean_apple.jpg</key><folder>Graphics</folder><type>10</type></Resource></root><?xml version="1.0" encoding="UTF-8" standalone="yes"?><root><version>1</version><Count>2</Count><Resource><Id>inkeffectocean_apple_0</Id><LAT>2024-10-02T04:03:22Z</LAT><key>inkeffectocean_apple.jpg</key><folder>Graphics</folder><type>10</type></Resource><Resource><Id>inkeffectgalaxy_apple_0</Id><LAT>2024-10-02T04:03:22Z</LAT><key>inkeffectgalaxy_apple.jpg</key><folder>Graphics</folder><type>10</type></Resource></root><?xml version="1.0" encoding="UTF-8" standalone="yes"?

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectbronze_apple.jpg

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 405x405, components 3
Category:	dropped
Size (bytes):	84396
Entropy (8bit):	7.9913099496507325
Encrypted:	true
SSDEEP:	1536:cIGM7F6nLjkUw5RRbYL/w1SqWyQawEPlmfXBQeIqv:F4nZ7GScQawE4XmeIW
MD5:	D8570FC799DD7D35BFED4D3098AB3E9D
SHA1:	7A1F0C7021BA61AEBD29E241AADCEDFB85C3642A
SHA-256:	881266FF8DF6E91E4101F9C6F8E01B2241FFCAA680A1B26292165AFD0F14E5FC
SHA-512:	A9D3DBEB069BAC50BADD0C7A23A00F142B3C5AF72E430D34FE4F746224BA37A5DC8AD9047259659C73E943F6421A2225F0F14C6ACB0B0DAAE85B6CC52D8DD62E
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$.............................................................................................q3V.....e++z.A...<..8..9+.........%,...6._i.D......C`.......YY3s.....)._Y..6+,3.H......L.<..}..r......s.18.f..#.........jD...g..l......&q..R.OEc.8.`...WB..0uf..v..7M...vg......4..tE..zG........4.A[.0yV.Z./...Dk'.8R>.m6......"......G..n..hVq7C.....;....eEi.K.c.l..rN.L4..H...n.t.....K...Y.<...,(...Q...[.S9....$...X..\.a..z...5.7.B..yd..}...BL.V.F.`.L.a.#".~=:Pj;.....l...^+.zY.<..h.(....pT....jS.5]....40..,.u..h..&.$../...3X....V.N.G9.:..-8U..8..._U.(...=V`.iy!....x...........H7a.....r...I...d.K.j.k....s.{.~...a.Yh....#..X....B....o..........mE.....sD.ST.)h25C9MXOe.RI...4rL-..4....].u.N.O.{<&A....i.BO .\|..O/..?..g.Yxu.M#..FUNnW.0...IB.Y..L..3..j..,"`5..@.l.c....$...p....?fI..D.e.g+....=..;+,.

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectgalaxy_apple.jpg

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 405x405, components 3
Category:	dropped
Size (bytes):	74219
Entropy (8bit):	7.988386472621452
Encrypted:	false
SSDEEP:	1536:7PZHrZIaLOpmhGPSExldCUGFkFEh1xJDO5G8dpsV3wuw/PPBgzaQFkewIRObD:rZHtIUOEhG6mldyqehXJ0G8dK11wPBgy
MD5:	F2D3F4899AA489D5EC478DC7C3CBB5FB
SHA1:	6E3DAE737EBE40F38917D7C07B28CAFCF5555CD9
SHA-256:	269197FEC12A677913CF6C9BB2F9B2A8B74EA4F5C52E578E89E1D9D2732229C5
SHA-512:	F8649A3F5D19C2F06E1F7AD0C36787F5AB038D37BD3C78603899835378E041B4A3C5F08BD848A5CC10B170566613CB5C2E92A9A7716D892A7E2DE684549D0908
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	......JFIF.............C....................................................................C................................................................................................................................................................~.hJ..R..7...........X..d,....v.1...%...y.5.<...m!..5...gV.;Q.z7.......Dq..d6bW..od.nV.@..I.T.....o.[z.h.R.C.w..E.T=.....F..z.r....@..A,........<.C...............N../j...tX&......9-...'...Z%...6.M..h.zl...z..h._.h.f.L...t.:B..L....k4<....(.n.]\..>..g\..O?y"1.e.......cl.Gq...9...j5..*+.E.....+VgF\|....V....Y.....;\|...H._...5.m.,][8.f.....]z!8u....3NC0.]..g.\|....A%..@e9....!.%...v3.&.n2B.F.e.3..+Q.u..d..W.yY.II5g..K.......u...vE.^....IiY."6}.f.......u....2...t..H...`W<..B....>K.......4.7..\....zCy;5!..l.m.S.....n..}....O~A.........J.K.:.K%h.:.&..roX.T..;.....k..e>..D..w\|.:...I.z9.@.....1t.d:...@.3......Q.ig....j[<......k.vHEpY..uy.s9..W..R=.....c}.s..!6...^)..wr........R...$E<......(....HbiF..\|L;...&B.

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectgold_apple.jpg

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 405x405, components 3
Category:	dropped
Size (bytes):	87622
Entropy (8bit):	7.991217118383026
Encrypted:	true
SSDEEP:	1536:se/4iF6/SfiQzvtwBONX1sszmE8plQtAx8xGoZ/7K9tJv:Sim8zVwB0zz9HaxqODJv
MD5:	0C4305204BE8030648DEEF0A6B772B85
SHA1:	00CFC8282A6DFCD01353A4A1636483B3FA59D850
SHA-256:	D5BDD3A022CB46E5810D32264052D038B9E3FE7FE6B4D1D5A315E1379D568399
SHA-512:	BA30CEA8CCF6EB5BA7DE4980A3D46A578235EB8395415DB22812C2F874520923F2684A4CA0C008F7DE0437A4A41185BC680E90B975CD9C8B9450DD80FC1A9896
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	......JFIF.............C....................................................................C..............................................................................................................................................................._.%g..2..._J...B.K.K.J.h...%.HG.~..X..z.......C....$..Uq...0K..).....8u.f..K......._r.W:...H.8P.+i.7.-.g&...zr..P....6m.E...0...Uj.t&...jg...-...............!...N...nu.%..^....=.........k..J..2..{I.B..A.xt.3.....1..9....ID.D....T.......-vVt.6B.c....._M(r.$ez...:Y.....Jq.....y...9..E.C..\J.Kj.%..&q..j.-.\s...sM.O.'b......q;).U$...7....W..Q.-F^jJz.y......G.........Z@.2.@I.,..l{X.&R.#f..-....s...H..U.$...o.....I(XNY..........OP.)6T.%g...Y.E.w.*.%t....z.........g%..'^v.U...m.7Vs-^..Y..2.....e=.s..?y\|.5Z3>.t.?k.eQ9.c9..),.Mz#....5d......%V.S..uI..j...ds..T....W.7%..z......`..WZ.7]D..4+.-....j:.-.2..j.n..M.%..IG.yD.^..;.J2pNCR..N[tF.\|<...F..T.o..k.u..mI9....i.%....'.U..r1I.sRU..^..c..EH....Q..?.

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectlava_apple.jpg

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 405x405, components 3
Category:	dropped
Size (bytes):	68998
Entropy (8bit):	7.980985438092091
Encrypted:	false
SSDEEP:	1536:MvduYCH1rELwJ9AtMcQLTTIbhk3KuFoQsznE7hsoBF:OuprMwJ9AtyvItk6uynEVsoX
MD5:	C7115E54CE318F1A9F243008FE422AB1
SHA1:	D3BF56888DA8112AA15189ED66BEDAE83AE8433C
SHA-256:	F831E10750920FE6B3B05E3B0F91A31FF87F4C84DC4A3210AA47ECC9C75455C1
SHA-512:	7E662DA83F76AEA36BBE5476B43A53479245CF28BB28B981EC20822580BD1C9B333CF631635EF3FEDF80F7D90AEF2DCF9318C915AB8A613E4FF58DEF733C19FD
Malicious:	false
Preview:	......Exif..II*.................Ducky.......N......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b56cf0d-9891-e64b-a346-98264b84a192" xmpMM:DocumentID="xmp.did:733F0DA5725811E7BBDDC82F50452972" xmpMM:InstanceID="xmp.iid:733F0DA4725811E7BBDDC82F50452972" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:40baeee4-8d01-cb47-88ff-96368960fabb" stRef:documentID="xmp.did:3b56cf0d-9891-e64b-a346-98264b84a192"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectocean_apple.jpg

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 405x405, components 3
Category:	dropped
Size (bytes):	67788
Entropy (8bit):	7.974716852912141
Encrypted:	false
SSDEEP:	1536:NiE9pfwZDig6oY74mZIMrT/0yV0GGgAD2kAST:Ni+gig/nut/7VMgS2s
MD5:	1291BC2D361ADFECECE17FC4BA39955B
SHA1:	A0D8349ECC1C87EA15E653E7DA0BB9D7F6A41888
SHA-256:	73B734D4F546848D1ABDC4D5B97AF096B8503A4BF3ADC476B7F87E123C87377F
SHA-512:	F1C421D06546D8949E3EA733B0AC80BA06E587B9675ABDE8F1E1DCB813728129E97CAA800C513C442F1B6AC86EB88A82FB6F0AF2959571A35F435632D3E611A3
Malicious:	false
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3b56cf0d-9891-e64b-a346-98264b84a192" xmpMM:DocumentID="xmp.did:694DCF44725811E7BEDDC8232AF86E6B" xmpMM:InstanceID="xmp.iid:694DCF43725811E7BEDDC8232AF86E6B" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:40baeee4-8d01-cb47-88ff-96368960fabb" stRef:documentID="xmp.did:3b56cf0d-9891-e64b-a346-98264b84a192"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectrainbowglitter_apple.jpg

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 405x405, components 3
Category:	dropped
Size (bytes):	153262
Entropy (8bit):	7.9827714103186995
Encrypted:	false
SSDEEP:	3072:KeWBTpHtifWR0XSnpqZWqJgCbxaCUiP6YCXr7D1vsPcsjVhTF0df:TWBfrncZWqJgCbwCUO8tAjV0J
MD5:	1D6620FEF62D8E0D2429F0875C3BD004
SHA1:	8A1B52DE18DBF5F401B6D2E9BFA195870F9AED1B
SHA-256:	38373A0F2AE2B95162802E45582602AA99CCF76595D1BC27DA32A95FB594F983
SHA-512:	1C9A57AAA80450B2625F2BCF604B727F933B15810F238EF9F20129122BCDFB4BBC3EDD624CABF2137E0CAC01DE4068176F1D590234496C9CFD38C4DA6EF751D8
Malicious:	false
Preview:	......JFIF.............C....................................................................C...............................................................................................................................................................?>....U.Vo9j8..No..v.....Ok.....req.."lr..?-/C.....k.......KwU.KF.G.Z..1M.....W..S.J.:9....,q...........>.n.e._k..B..U[...'.R....C.Tg}.T\|....S..5J.i.......9._M.....<....6y....o....B.M{..R\..?....DfV..Or.yNW}..R.&v.\|...N.H!.a.T{........F\|._V;.N.N6...z.m.<W.g.h#...=.!JDL`i.C...W...;.....Z.a.r.&.}.....]....-.PO..{...VMI..q...U4I.lh..4...+...^z...>.e.NQ.."d.^.]..?.(.q.T[)L.M~.B..K.. .ZU$.9..D....$(.=.8%Z....l.-!K...+&.7%K.U.ry..o.9^.e.&O..J.`.o...GD....a.kS.{..u..RX.".O...yA:%....?.U...3M.h.E...p.[-.4.P'=.....c.0.....iw.$..w.mz.z.#.)s..r...y..y..X.<.:s.R....PFT=C....G.F}oL.$..Q.........O.).Z....M...au.....X. ....4..#.R...4D../.....! 8.;......HI4....8.l...8.9l.6}>g...&.&U........5uj]{...V....(T....K..&.%>9

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectrosegold_apple.jpg

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 405x405, components 3
Category:	dropped
Size (bytes):	90345
Entropy (8bit):	7.992397164164287
Encrypted:	true
SSDEEP:	1536:R20GNBIZD9sGCktLlcmWZ5LQ87D/u5PoIdxEDMybeHiVYQN7ADGZ4nnN3GmI1+K0:RKkLCQgQCW5NdxsRbeHfQN7AdndW0
MD5:	FD87DBA2227C56D76B7BF324A34C271E
SHA1:	B1F283D5614B416802E132B9789FE9B983688D6E
SHA-256:	289FB85EC85BC9EBBC01F858F8E0ACA2A38BE697FF5217F96CBF0652CBC6AF1E
SHA-512:	7DD5201DF1AF91A4DA5435CC80881A685FB680B02A285119633133ADF3C13EA86545E89A0EDB32AED1C0FC56227EEF13B5006E70947C14F7B2BD833CBA0DA8DA
Malicious:	false
Preview:	......JFIF.............C....................................................................C................................................................................................................................................................Mhr.Eo...._.\.lo..#&..')..U.5....)4O.r.h.Z[.6K5.t..Z....Z....uvx........W>.....M .-....t.V...'..^3.h..MhvUR...M.^.s.l..O..h....d.9=...b.......h.CE..l.QJ-.A.i..[ss.l.S.....GMT[:..17..d...m.b.=.":..WC\.u(..\.?G...w...qIM!..g.C.s.D.e.z.....8:.Y(..).%.n.........Z..[<-[.jz.=...ko.t.fdU+....M'...14..Qo8.eKT..]w-....fOSA..q...!k.5.$)`.....f..B....=<p..r....Z.....Gd .D.L...az-.M\|.FH%..[l.~....!J..C..\t.?.......+.z....h..O..S/e`....O\|.(..u..?..?.B.:..'A..X.v........6G..%.==._-.e....!Z..>wFz'&....<.O....f.."4.J.#.h)..`q.L.N.WC.B../..m.!?C...;NZ..]...4..>qY+.Z..-m..v............j.....R9<......?*.\...i..m....Ku..J..l.J[..x.\..-...Y.m.=....Ui...R..[..3H..U.......\...........' ..9..14~....Ed.....

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectsilver_apple.jpg

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 405x405, components 3
Category:	dropped
Size (bytes):	70537
Entropy (8bit):	7.985060406112171
Encrypted:	false
SSDEEP:	1536:9i/wP5MGXOH6Moy1LA8TI6QoKU/0h9PeIpS5OeJLfEdC+ZinDrJeGaI6SZrK:94a5MGXOaMoyi8TI0KUUdZw5O8LfJii2
MD5:	72EDB703DA3FFA41A82650CC167CFA64
SHA1:	BD5357D5A8434DAC612038A1CA409C44B926E4A6
SHA-256:	E56DBDF74A0D097769378CDBD44E3C967BAE4B83E932784A909575149E64E24D
SHA-512:	B3A98AC03BA79F60A5D5083EBE5B0F50C57CC766FE4F52DCAFC9C80BE676C5A0A087D5D8A4BCACF1D38EB64B0B0CB2EE3796FBC4150991674717B62B5537A746
Malicious:	false
Preview:	......JFIF.............C........................................................ "..".......C...............................................................................................................................................................%..H..[..U...J.O...d.u...^i..H.T....q~dk#...F....Vf:....v..N.K..e#B..v.cM..)..tI.4.j9.&..#LU.z.....].s..........(..vJ..[........K>.J./..$....1thk4.K.G]T.......:..@..6....."......f.L....&T...zO.(..\|h..I:...9......S.U`U...$.L..UI[Y....{..%k3k...E.).&..h.ZaR.Ju......U...+..-.X...=d.\|C\...#.<..Y.D.NFrjs..rg..K.>6G.5..e...bze....j.....t`'..3V....IL@5...i.^hM.j3.lR..G..8,...%.%..e......[M....[:,.U_..eM..4H.p.2......jhJ^h6Z4:lr...w".$v...\|..oCp.W.\7.6...Z....f$.Cj.lcE@S..Oyz..y~.2.._%%.....&"Y...........`h....St}N.u..K..YZ.I"..U.a..2.h...59(5..Vq".@.....}RtV.O:Z..z...4..k..meSO.M.^....kg..2.Tj.]5...%..!A5...J.~l.W....9..'.$tt.}$4H.R...6GY......I2.GsB....-\|../E.l...n.Vq-U.{,.r.0.Z../V.. h.

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/oart.json

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JSON data
Category:	dropped
Size (bytes):	8515
Entropy (8bit):	2.376758026536063
Encrypted:	false
SSDEEP:	192:OGEGGGBGcGSGwGdGKGjWqGjWUGjW3GjWiGjWAGjWUGjWTGjWwG/zhGzPhGjf4:zJbwx3F8f02FU+UJiUsk
MD5:	53D49444EAF92E0CF5D2985CCAEDE42B
SHA1:	DA2D6C55752243AA5E638750F038DADF3C9FE6CC
SHA-256:	722A39658D2F3D5E333874F23485CEA9DA2B79EDA454FA7F5A9FEFBFDB9B2AD8
SHA-512:	B59D16AE8DCB2D9F02BF7CD594A94D140C9CB308DECFEEDF89B9C166657D8B6BD97FA7CFCF97F0D45E184A470B209F28F1ECC420C5CBF8D88D6E0E1C3AB48064
Malicious:	false
Preview:	{.. "MajorVersion": 1,.. "MinorVersion": 5,.. "ResFamily": [.. {.. "Family": "InkEffect",.. "Res": [.. {.. "n": "inkeffectrainbowglitter",.. "sub": [.. {.. "sn": "",.. "sid": 0,.. "ext": "jpg".. }.. ].. },.. {.. "n": "inkeffectgalaxy",.. "sub": [.. {.. "sn": "",.. "sid": 0,.. "ext": "jpg".. }.. ].. },.. {.. "n": "inkeffectgold",.. "sub": [.. {.. "sn": "",.. "sid": 0,.. "ext": "jpg".. }.. ].. },.. {.. "n": "inkeffectsilver",.. "sub": [.. {.

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/PowerPoint.CampaignStates.json

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	JSON data
Category:	dropped
Size (bytes):	451
Entropy (8bit):	5.09866447175595
Encrypted:	false
SSDEEP:	12:YmSrtw1nqZtuIkuf+IyzSMrxxmk60lv52080x:YZS12Zfc+Mrxxmk1prTx
MD5:	99E8312CFB1B70567C15197379D3048B
SHA1:	F15D182C42D355F843E7E68DC63330BE741B502D
SHA-256:	F366E7F6E7A7E3FCDF7696A168DF462011D401CAC60FB3416E9E25203F98FE47
SHA-512:	E67D0DA43A04645DEC76164EADA4FD3898926E6AF7B0E53743628A5E70DCB97580185E0FD4E4E3378A382C0B496475A9C559BB792089F450642A54A8BF08D389
Malicious:	false
Preview:	{"CampaignStates":[{"CampaignId":"092b8d95-cf3f-4172-a11b-f5bbc03077ac","LastNominationTimeUtc":"2024-10-02T04:03:14Z","LastNominationBuildNumber":"16.16.1012.27","DeleteAfterSecondsWhenStale":1296000,"ForceCandidacy":false,"IsCandidate":false,"DidCandidateTriggerSurvey":false,"LastSurveyActivatedTimeUtc":"1601-01-01T00:00:00Z","LastSurveyId":"","LastSurveyStartTimeUtc":"1601-01-01T00:00:00Z","LastSurveyExpirationTimeUtc":"1601-01-01T00:00:00Z"}]}

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/Office/16.0/WebServiceCache/AllUsers/officeclient.microsoft.com/C0A390DF-1012-B84C-AA3B-629416397471

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	174166
Entropy (8bit):	5.288905621881217
Encrypted:	false
SSDEEP:	1536:mi2XPRAhkbz41gwErLe7HW8bM/hM5cAZl1p5ihs7RXXIE4jqOdYLI:sHe7HW8bM/uXdYII
MD5:	22751DB9A795C6DF6260B686059598C0
SHA1:	D436A8428316B07C989B38859503F45512CAE2B2
SHA-256:	9009AC5184E43F433ECEDB7BFC4C022C8B7C0E418AFE84578D8425EC72B997A5
SHA-512:	0BBDE29391CB381A773B3C46B9EAA2494315580D7BD25B4E9C1FBD025EE93603EA95E6CB70E9DD61160031C5B8419C131E95AD4D92D1CB70E747B7DE73CC1D50
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-10-02T04:03:12">.. Build: 16.0.18112.40129-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/Office/16.0/microsoft powerpoint_Rules.xml

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	XML 1.0 document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	408109
Entropy (8bit):	5.096473555461403
Encrypted:	false
SSDEEP:	1536:EYgHauefRCkYatAYD8gQadOVTdAzaEIQMkXKJehMY:EYgHauefRLYp08uQVhAzay9
MD5:	13E9B372FB7C2891E8DDD1616180DFE8
SHA1:	87860EAA33E636D31B1F97F3658B9D792393B64B
SHA-256:	FB38B658FF115E1D588D415E8BD2469AA3F693CC1E2313200FB3A8BC68B5B353
SHA-512:	509AF2EFC858030C0AE3360655DC6C6E9BB46AB8CC8410A06561235DAA1E40780FAAA7719BBD99BD89751B19AAE230AF48EF9A0A5808BCD068E6392F6F11A60E
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?><Rules xmlns="urn:Rules"><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" xmlns=""><S><Etw T="1" E="159" G="{02fd33df-f746-4a10-93a0-2bc6273bc8e4}" /><F T="2"><O T="AND"><L><O T="NE"><L><S T="1" F="Warning" /></L><R><V V="37" T="U32" /></R></O></L><R><O T="NE"><L><S T="1" F="Warning" /></L><R><V V="29" T="U32" /></R></O></R></O></F><TI T="3" I="10min" /><A T="4" E="TelemetrySuspend" /><A T="5" E="TelemetryShutdown" /></S><G I="true" R="TriggerOldest"><S T="2"><F N="RuleID" /><F N="RuleVersion" /><F N="Warning" /><F N="Info" /></S></G><C T="U32" I="0" O="false" N="ErrorCount"><C><S T="2" /></C></C><C T="U32" I="1" O="false" N="ErrorRuleId"><S T="2" F="RuleID" /></C><C T="U16" I="2" O="false" N="ErrorRuleVersion"><S T="2" F="RuleVersion" /></C><C T="U8" I="3" O="false" N="WarningInfo"><S T="2" F="Warning" /></C><C

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Caches/Microsoft/uls/com.microsoft.Powerpoint/logs/apple-device-log-20241001-2303.log

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	ASCII text, with very long lines (804), with CRLF line terminators
Category:	dropped
Size (bytes):	837033
Entropy (8bit):	5.436067101628744
Encrypted:	false
SSDEEP:	24576:vHuTHLtHdBHMHHZlHBDHEyHZIHiUHPkHVRH/SHLwwQy8nLq:vHuTHLtHdBHMHHZlHBDHEyHZIHiUHPkG
MD5:	523E50DB7E3C57844F00BA64ACB946BE
SHA1:	E36D7C90B09D98677D7C7C5CF547291CC19D0C45
SHA-256:	BB7226EC843A4A87189FBFEB4E9FCC972501369BA1C59B374A8CFCE31922B3D2
SHA-512:	179AE32292AAB949D793F47C99FD14077D4990707F1358213A45E80D97552078A9CC50381C7667DD74B4CF68560254A61482CFC1798E9FE6576D8BD917C44DD0
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..10/02/2024 04:03:10.025 .com.microsoft.Powerpoint.0x700006128000. com.microsoft.Powerpoint.mbu.instrument.iangv.Information .Configuration {"FriendlyOSVersion":"Mac OS X 10.14.2 (18C54)","FriendlyAppVersion":"16.16.27 (201012)","NumScreens":1,"DATAID_SYS_VOL_SPACE":73380.46875,"Screens":[{"height":768,"Index":0,"deviceResolutionHeight":72,"width":1024,"deviceResolutionWidth":72,"originY":0,"originX":0,"deviceBitsPerSample":8,"deviceColorSpaceName":"NSCalibratedRGBColorSpace"}],"DATAID_OS_BUILD":"18C54","DATAID_SCREEN_DEPTH":24,"DATAID_RESOLUTION":1024,"DATAID_HOME_VOL_SIZE":102199.9609375,"DATAID_HOME_VOL_SPACE":73380.46875,"MainScreenIndex":0,"DATAID_SCREEN_DPI":72,"DATAID_SYS_VOL_SIZE":102199.9609375,"ProcessArchitecture":"x86_64"}.DA8D772F-4C23-4E26-9362-9E9FC9A2AD89 ..10/02/2024 04:03:10.025 .com.microsoft.Powerpoint.0x700006128000. com.microsoft.Powerpoint.mbu.instr

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Caches/com.microsoft.ctrlstrcaches/com.microsoft.Powerpoint.ctrlstrcache.en.plist

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	20176
Entropy (8bit):	6.111151786728878
Encrypted:	false
SSDEEP:	384:QznToxkJP0FD0LTdOcocQooNnJoiEX/xUni772:QDToqq10XdjtQ1NnGX/xUnk2
MD5:	BB062D78B7F7381BE159328BCABD3D84
SHA1:	4674A61046600CD621CB4F78CA9E7E600D370404
SHA-256:	B6700DB9120635C84F1968F3A9620EF1F5AABF4A622BA79A0E1758648B84CD1F
SHA-512:	B9C7B24777477E8DEA768E5506FFF2A2808A057F4D9CF3A2BDAB627976CC8C4728647ABC87FFA5696B5AC2F2F96D22F4010942AC9D2A2DB489257588AC5A4D88
Malicious:	false
Preview:	bplist00... ............................................................... .!.".#.$.%.&.'.(.)..+.,.-.../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.Z.[.\.].^._.`.a.b.c.d.e.f.g.h.i.j.k.l.m.n.o.p.q.r.s.t.u.v.w.x.y.z.{.\|.}.~................................................................................................................................................................................................................................................................................................................................... .!.".#.$.%.&.'.(.)..+.,.-.../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.Z.[.\.].^._.`.a.b.c.d.e.f.g.h.i.j.k.l.m.n.o.p.q.r.s.t.u.v.w.x.y.z.{.\|.}.~................................................................................................................................................................................................................................

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/ar.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.682960070915016
Encrypted:	false
SSDEEP:	3:Qy2dfTHcjKRjgP7ChujTnEln:QyST8jKWChujwln
MD5:	4776CB70FE00BC6AEB696B410A3DCEEE
SHA1:	5AAB4C605B9B31312F317672DA960D4E1CADE04C
SHA-256:	2E7A61627DEE2B425849E0682E244E6E85F8E44C056FF3F6073DF86C189BCFA6
SHA-512:	4CB5A7C012BCAA8E5E3753BAC81D5295C416F2B0E5540E0C322A4899606BA94765735D669AFC6A0C2D80C8B83415B9D9B8777A6835B3F3FB7639765C8C2E311A
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".#./.H.'.. .'.D../.B.J.B.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/cs.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	100
Entropy (8bit):	3.229003086392269
Encrypted:	false
SSDEEP:	3:Qy2dfTHxlMwbRR1tlMkPlMMl26:QySTIs318kdMM5
MD5:	586346536BCA4E3DDD3C38A9C1F17DC0
SHA1:	093794E09D9B3BE6FB85FA9EE01BED3AEEDA7875
SHA-256:	65BAAA09B58FCE46EB14351A8393DF64EFC090F495D01F35B3FF0D13EB5D0169
SHA-512:	512E8B42CF751A3780B8A2201FF7BF90B154D1C452291E3BC7BA2C6CF8F7E2CDB5B0C8E5642EABB168EFBB6FE1D84608273B1DFD46248E9248E9F824F377C725
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".N...s.t.r.o.j.e. .k.o.n.t.r.o.l.y. .p.r.a.v.o.p.i.s.u.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/da.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	82
Entropy (8bit):	3.1684506109768003
Encrypted:	false
SSDEEP:	3:Qy2dfTH0l+xRKN8iOEAc:QySTUltKtpc
MD5:	CF843AE5C1B90B1B55283AF897B542D3
SHA1:	B3BF056D596C71B7748E54506095759939D9B4B4
SHA-256:	B6D0DAEB079285256C87445E5AAB178D4E62FED927344C08CC2CBEABF809E451
SHA-512:	F7242C9270943723D4CDFFD231F281A74D9AF514F5F9B589DB51AB72F5508191C03303378AB289229331BF08698D804080772870973ECC31F6115B6F853B2E96
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".K.o.r.r.e.k.t.u.r.r.e.d.s.k.a.b.e.r.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/de.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	76
Entropy (8bit):	3.1543182699584356
Encrypted:	false
SSDEEP:	3:Qy2dfTH0l+xRKNy0lHMn:QySTUltEcsn
MD5:	FAC73D0043DAC6F75608769E9F61ED19
SHA1:	2BC5131486F2D11C046C5F8F318EF0304BD9D83D
SHA-256:	ECD6E22F111F573A0DE236CAD9A47F03B40CFEE8487778E140CB2CE032E6509D
SHA-512:	8758C199F4C8181A5147F3A2DD7717A2E675575DA3312929B308D0F227C9C35FAD79222CC13890884609DFBE8934990D8595BE9B07247E72D4C3835AA613E7FD
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".K.o.r.r.e.k.t.u.r.h.i.l.f.e.n.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/el.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	98
Entropy (8bit):	3.9086117266317446
Encrypted:	false
SSDEEP:	3:Qy2dfTHqmatEUmFMpmgmc7tfQ1Ejs:QySTKsMpmat41D
MD5:	F4D2E086599074426AC6A837DB387511
SHA1:	6C45111E53BC020B1CB3C212F54B0FBB6D09DDE2
SHA-256:	D8FF17F32E934DAB1C8316027821AE5038E40930D6FBCFD742A5DF3B1C7DC056
SHA-512:	2CF1D11507355AE9E08630F9D32F808B23ED3019E44D6C239748D6F2BC60E63741015F93507171CF91AE15D4D06C1B46E1CA384E752FC115A6CBF6A8A121629A
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. ."................. ................... ...............".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/en.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	74
Entropy (8bit):	2.910570932494852
Encrypted:	false
SSDEEP:	3:Qy2dfTHvlXQ2dft:QySTySt
MD5:	33710D103D50C71EAF39988FB87D38E4
SHA1:	7D3CA7064D7B04833810468367B856B99FD800B3
SHA-256:	CA4EBED01FEDD706C103D024A3B07B387D970386FA06EDF69B80C138091FE04C
SHA-512:	C4245216A0E64C1B7239CCDDA4DA4B7F1E5FA5EA0A0FBE8063CBA0B22597B8A94C51F0318E090AC1F8E57EF42A125968B04DA3BA45044FA28A62200CD17F5215
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".P.r.o.o.f.i.n.g. .T.o.o.l.s.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/es.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	98
Entropy (8bit):	3.174181436315041
Encrypted:	false
SSDEEP:	3:Qy2dfTH3lA1OLalLlYMlcFcKfLln:QyST+1OLaluMquMLln
MD5:	7F7EB49E58EDD8EF1A733E81D9B3BF89
SHA1:	AE6E8541E61D7EEB80111F3CA865DDE5543E1E14
SHA-256:	045C0D75E98636B8BFEA50A73ACE6A1ABFB58AFAEF095CFA17FB3496E651E561
SHA-512:	8FC0C304F6EF4C4A4E5EE7F841D69D26751219D2D41F0DB4E96FE5A6676822D493633ECF3052AE3E4053FE8D428D245A350107EE16BAF8983DB5F115B2EF4211
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".H.e.r.r.a.m.i.e.n.t.a.s. .d.e. .c.o.r.r.e.c.c.i...n.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/fi.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	94
Entropy (8bit):	3.1933319052994475
Encrypted:	false
SSDEEP:	3:Qy2dfTHrlAK2M3WlKMlyKYGrKEpwbl6n:QySTSg3iXthrfY6n
MD5:	EAAA665A7EC2260626D5A6F81FBFD2D5
SHA1:	318A5BC91DB8C5A1DF234AC230A6E189428C7CDA
SHA-256:	72C062C61C574212A40F01F192B4FB139A7BFE660EAE27F449EC4F3D316B6F57
SHA-512:	98AFA75F28EA404A8F80BD65F19DD875366AD28F2755E9E451280D8F7A2901E3EA00E48B2EBFD7DF64972073B56FB8D6B903948B0672043799BB6D77D6F88C0F
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".T.e.k.s.t.i.n.t.a.r.k.i.s.t.u.s.t.y...k.a.l.u.t.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/fr.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	90
Entropy (8bit):	3.2135874002924356
Encrypted:	false
SSDEEP:	3:Qy2dfTHwlskJMCFJiXWZWdLveln:QySTQlZuGodreln
MD5:	94D951325E7CAD48A4EF7AFC1E8C84AB
SHA1:	B64D44502252F8489EF3A8AB5769B3B626768C1F
SHA-256:	D5193640F18E4B4C810E1260B1D7DAD83865A4747C24B6052604D67968AB4936
SHA-512:	998CD7C1D2BCD4C42245EE0795509F39A7DFAF34A7B99214043E4B7157FB3F4328F9D1D905BBB3B24CDA79AE3A9DA5DB28A5C1EF735CAC89721FAAE851D5DF5D
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".O.u.t.i.l.s. .d.e. .v...r.i.f.i.c.a.t.i.o.n.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/he.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.4953528112598122
Encrypted:	false
SSDEEP:	3:Qy2dfTHkg5g8go0gmHMn:QySTE85gsmHMn
MD5:	DABCD4CC05E8583AD885AB3AF975C56F
SHA1:	F2ACFABCC2604B25B4970BA0803A27EDDA8D1E9B
SHA-256:	50188525648F74467732C32701BBBF3A5CFB9BA8F57872C550B3F95768C335F1
SHA-512:	3DB0CB1EB7C9D7B42F42C2D6F6C924BC223A09874D03ECDC87017A01BB34A0507ABCEC5D43A092BC88D41357C9A6FD1AD932984E2A5E68B512A2D4680A3215F3
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. ."....... .........".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/hu.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	82
Entropy (8bit):	3.3218078519938987
Encrypted:	false
SSDEEP:	3:Qy2dfTH6lralVvalWfI6Mn:QySTalruVvw
MD5:	2133A797E4A7634E9EC97C7428AF3C22
SHA1:	7695F54E21462CAE42E5DE87121C3BD7CC604FEF
SHA-256:	BCB4A4868E6E463F0D96BF2833432C615EDE7A5EE9BFD25CAA3AEA671F2B0255
SHA-512:	8878CD676837FC678AF64742A2DDFB658ECE2A76B84BFD397E2BD7C665B9D171F515BE3AD104DF218018F9666E98DC5D9EB6944834FB28052F96B9FE88C8F5F7
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".E.l.l.e.n.Q.r.z.Q. .e.s.z.k...z...k.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/id.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	88
Entropy (8bit):	3.1946185174642605
Encrypted:	false
SSDEEP:	3:Qy2dfTH+lJeidkMe9lNl:QySTelQidkM03l
MD5:	41FF3F9EE6BA77DFA346D568AAFF38D0
SHA1:	81CEEF719DCC9E32D3E0A879C4E8629DE02F32E5
SHA-256:	4B5096C36C4500677C01D2F23AB9429DF9F51F8BF1DCA8039283ABC939281C15
SHA-512:	A8F7E843BBB10D7EA64821D94234EBAF2A4489A4E1D207DF5D4A6AD4B2282F22E36A2274CA34DC52ED443AB073CC159C332AFC9A5B177AB0C3CD243D5B258F6E
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".A.l.a.t. .P.e.m.e.r.i.k.s.a. .B.a.h.a.s.a.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/it.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	92
Entropy (8bit):	3.1565773928186873
Encrypted:	false
SSDEEP:	3:Qy2dfTHslRgxqpkfyKwMRkln:QySTMl2cpkfZwMyl
MD5:	5BDBDA0D0D7B502F463363BAE5D3ECEE
SHA1:	01A8FF8F4437820AB135A252AF486D5F865866C1
SHA-256:	A337EAA4E641DA88B9A089AC343D0B5F545AF2F847A419747FA0253D91F256BA
SHA-512:	6F9584BFAC15E9EBF39828DF294211194E056E6DE80C637A110F1BAFCC48CFC9BB766EA5C84F61AF3C92A9D56AF596F86B463EBAD70C99101044B487893E922C
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".S.t.r.u.m.e.n.t.i. .d.i. .c.o.r.r.e.z.i.o.n.e.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/ja.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	56
Entropy (8bit):	3.599903661087115
Encrypted:	false
SSDEEP:	3:Qy2dfTHex5E6:QyST+x5E6
MD5:	DF7C9EEBC6BB4E445EC58AD78D2936E3
SHA1:	6400EF54A15F72B324A380F8568F78F2C77C2D27
SHA-256:	2DBD602F439E649DFFAADFF9E60FFF16220B5C706EC2DC4E7053B1DACDAE03BC
SHA-512:	152BEB94C317C82B73CED919DC0A20EF20DE92F7023455423A0FC667681A7F8178977E5950108936FD92CF0E8B7BFF2D63E3F9C4D0BB250E4BE1585AB4DBB96C
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".!hck.0.0.0".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/ko.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.605023076649061
Encrypted:	false
SSDEEP:	3:Qy2dfTHHgRdw3Il:QySTgRdw3Il
MD5:	8D088E90F5572158094887333B425415
SHA1:	0107D6C2460C36AC8EFD587797709AF3ADFF4101
SHA-256:	AD7461D4337C3DA696615DB1E4DFB5D675BAD15C861B003EB1FE2AA1C347618E
SHA-512:	D166239E530B5D6A73CF28DB9C2B34EAAF5CF271A79CE50D9BB3B4835A09AF9D199FEF0104700710227374260A0EA3B678E49ACD43119696EA96CA2D06613E30
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".... .P... ..l.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/nl.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	76
Entropy (8bit):	3.0917539607194424
Encrypted:	false
SSDEEP:	3:Qy2dfTHrlME7lAlC0llils:QySTGEhAlC0Pils
MD5:	F970AB662E0D5EDB33B8041F23EE9A58
SHA1:	31959CE6AF90382C2B3881F439B0D3D890CC5A78
SHA-256:	A288EFF6B89359C87D609195A1B47D2F2C42A83A24B104DB1463CF2B129196ED
SHA-512:	4A93CB0A1D7993239B26EFB5C87C56B9E485F48520324BBD7ED9523AEDA315272AF3722CC85CC071231BEF1D01764FAD2F0A802CC2C8529A1CBA9975BE9F295A
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".T.a.a.l.p.r.o.g.r.a.m.m.a.'.s.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/no.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	78
Entropy (8bit):	3.190589219350794
Encrypted:	false
SSDEEP:	3:Qy2dfTH0l+xRKNU+Rdd:QySTUlt++Rv
MD5:	24688CC64A3232577FB669D5847627B1
SHA1:	C808CBD9D557ECE65F1564B49E679CEBC4DEB274
SHA-256:	6F238BBE013D855C7C834D32D1C7D108137FBB2835234F68CAEE0BCCA37ECA9A
SHA-512:	0B4DDDCD174EB38727F919A9257F592CD997EA9C718A49E146D163A3A4D9E5155D138D07174AEE687DDEFDB7F5421A2C05490E0BE994993AB6E5CAF317E69A20
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".K.o.r.r.e.k.t.u.r.v.e.r.k.t...y.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/pl.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	90
Entropy (8bit):	3.42532968787373
Encrypted:	false
SSDEEP:	3:Qy2dfTHxlMXf8kilXPlKMlEP1dEln:QySTIP8xXdKkEPfEl
MD5:	B439AD1AEDEAA9BD4296C772FD48E3B4
SHA1:	61731198375551623B254122B402F70ABEDD24F3
SHA-256:	D6A65D7D6EAB2B75204E4474A5A75EC012317AB828D42C36F1E998D26F75BCB0
SHA-512:	77E0F53612CDD5FB43FE7390809894BDFE2BDA072EF4BE02AEB7DEE79C61EF7F7F8065FB82B61CBC342E888C9B5F5C1F8F7E2F5E05408BF4C614590C1CEAAC87
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".N.a.r.z...d.z.i.a. .s.p.r.a.w.d.z.a.j...c.e.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/pt.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	82
Entropy (8bit):	3.1044858244178184
Encrypted:	false
SSDEEP:	3:Qy2dfTHtl2iiK3AMlfkFrWikl:QySTLwMq0ikl
MD5:	27009EE68674F9397E53699A4D251B0E
SHA1:	8E7A79D6B5470E63095B636FB17457F56905EA0F
SHA-256:	7DAB4E34E50E7A7CF0ED44E7D82829825AE954AD57E615A7FB43EF3E7A096DBE
SHA-512:	B696919154863C108BFECE3324FD2490C81AF7F7A713E5D45CD528CDCBB7698AE081F324EBD29EFC42FD8EB74BC957795C04B4015C50EFA9BC9D69060A252BE7
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".R.e.v.i.s.o.r.e.s. .d.e. .T.e.x.t.o.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/pt_PT.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	122
Entropy (8bit):	3.302440069578964
Encrypted:	false
SSDEEP:	3:Qy2dfTH5lyNeH0MlcFpa6WdYclKhMlRmwIlWLWHM:QySTVH0Mq2jdYclKhMlRSlWqs
MD5:	EB7E26313860F756306FAE9447235174
SHA1:	39CDC7571936BCF089976F83EEA7B6594B2BACCF
SHA-256:	D43C25DCE728723725B552D331DC4166C88594E27B285864FBCC7F9609475ED9
SHA-512:	8BFDC43C5D7AC8B795327884ADFB187A412CF1546DE9E5CB5C8FFBB4415753DCC542B5FC80064B425222FB4FE6958447E091EC7A4C6F734D7DD3286537740EA6
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".F.e.r.r.a.m.e.n.t.a.s. .d.e. .V.e.r.i.f.i.c.a.....o. .L.i.n.g.u...s.t.i.c.a.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/ru.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	106
Entropy (8bit):	3.8291069798649797
Encrypted:	false
SSDEEP:	3:Qy2dfTHehcFuh7fLh0GY9YuM:QyST+h2uh7BY9Y/
MD5:	9FD7D227240F44B123D930CF82A28ECA
SHA1:	46B89E11FFE358B7229F8E3211119E4F2C234714
SHA-256:	75F4B16099AA3CD1CE766AF2E169D7E37CE3F4C66796258F7CBA5163EECA7987
SHA-512:	D39B49FF66E2AFC41BE0646D8905D0E0A5BBD6327CBB03615C571EBAF011CD941935902F577EB8944B064649CB6CD6EB86D8E865492EC3BDD5C443BDD02137F6
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".!.@.5.4.A.B.2.0. .?.@.>.2.5.@.:.8. .?.@.0.2.>.?.8.A.0.=.8.O.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/sk.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	82
Entropy (8bit):	3.1821020192544074
Encrypted:	false
SSDEEP:	3:Qy2dfTHxlMwbNBlRF3eEl:QySTIsbbl
MD5:	C554AF8796DEC9C0FB07B171AF92587E
SHA1:	7FCDEE38E1C526E1CDD9FD872AADDB1B356EE86E
SHA-256:	FBD30B5C7508E7C053A0325E93E08CAC03EEADB62242BDDE31115EAD8B3F94B9
SHA-512:	9865CF6CD6292819412674CE0646290F17A71322858CEB39B300108946B997216D03DABF363C9E24868A33271AFB57C098D7A7C6AC69B0BE6D85B0B05B6B8704
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".N...s.t.r.o.j.e. .k.o.r.e.k.t...r.y.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/sv.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.236661422561559
Encrypted:	false
SSDEEP:	3:Qy2dfTHslV3AtlXURcIs:QySTMl9At+Rcj
MD5:	202A6016EBEDA4C0F007446F1D74740D
SHA1:	FC3BB0DCE97AEDC946D7CD000D297DA0E7360B5F
SHA-256:	8A073E4FF39595EE3409FD59375B20D838C00E1B477BC7147B54D54126D84409
SHA-512:	C86321E781CC88103ED91F33ECC099E55DB091869C652A801B11B74304887A34D1EF2D6C281200D08D86E043390CAEAE53D7A1A475FCBE909F024D012E080774
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".S.p.r...k.v.e.r.k.t.y.g.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/th.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	90
Entropy (8bit):	3.983800138281137
Encrypted:	false
SSDEEP:	3:Qy2dfTH/r9dFN6RbWt2yri:QySTrl7W
MD5:	07F749180EDD607107E7FE5BEFCD2B80
SHA1:	D5E16FF9085F3A2B948FAA3ACE755ABFC1750414
SHA-256:	C8B9EE7470AF0699A66E7C3266327D175F479343447F646EC72EA4F042EE009E
SHA-512:	C5C2025CCED685E722C02B5B1CF12BC9D9926ED36A300FBD842547A9479B9E73BB2FDCC2CA95BC58F13ABC2819C4B79B569FD0B5604F3263674AC4E25BAE24AB
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".@...#.7.H.-...!.7.-...4.*.9.....L.-.1...).#.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/tr.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	94
Entropy (8bit):	3.3834261474120177
Encrypted:	false
SSDEEP:	3:Qy2dfTHmlEfulHJAleecMekkl:QySTGlEGlulvWks
MD5:	5BF4A82EAF85BA5AAB07403969D1E379
SHA1:	7DC8A1241C5230A03C009FC5A02FFBD5832685C8
SHA-256:	D8BEB30B0B00B7988294091A34E6971FE279F54364AC0BD568A92885952B0A23
SHA-512:	F6DBBF0F579F3EB4D27E20E889303259111E1A7DD3C39352E49557996151CB799FE7D48503E37E1F6F9E04E69CDEB97C122B748C7E8D7EC532CD5AEAA4148EF3
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".Y.a.z.1.m. .D.e.n.e.t.l.e.m.e. .A.r.a...l.a.r.1.".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/zh_CN.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	54
Entropy (8bit):	3.553732259345248
Encrypted:	false
SSDEEP:	3:Qy2dfTHePFel:QyST+sl
MD5:	7C5F09EEF6C3BA4DE766EE9543698C1F
SHA1:	54BBE49811B5BD941CC926BAC101E8B03BBE3EAB
SHA-256:	771161AF6389886C05A9C5B64878A9B9348A83FFDBF84DA23E2ACED033E2CB80
SHA-512:	EB6CF65FE7BEDAF6F3E73BBD693A81714DCF1C34882FACF81DECD5462087B32DCAC757516D5C9E22A58108B7D9CAAF9C280DBF1D0E1C702E6D7C871B2DF9BF46
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".!h.[.]wQ".;.

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/zh_TW.strings

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	54
Entropy (8bit):	3.553732259345248
Encrypted:	false
SSDEEP:	3:Qy2dfTHe+Vl:QyST+Ql
MD5:	7B02B52E6E18AE4A18CAE3CA7B42D2C0
SHA1:	87C06B55A63E2C3216E58ECE9DBED2CB9339BC50
SHA-256:	25228F342B3C20D7C1E017704538A68B3B55F937D5A9C91D80BAAE339D029AAC
SHA-512:	32E8674A6AC4478B4649067454101CD5A387F69F9EF48968364196659B2A9E39CEF72E743858542714C93F24CB55E4BDBD7D2AA973DE088105EE6FF3DF7C146A
Malicious:	false
Preview:	..".P.r.o.o.f.i.n.g. .T.o.o.l.s.". .=. .".!h...]wQ".;.

/Users/bernard/Library/Keychains/login.keychain-db.sb-07d82885-3EdlEq

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2
File Type:	DIY-Thermocam raw data (Lepton 3.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 963362762505407623593984.000000, slope 303834226087943251262072422400.000000
Category:	dropped
Size (bytes):	74372
Entropy (8bit):	5.041645298740678
Encrypted:	false
SSDEEP:	1536:kZoxchjXEq6+LClEXWtwE3oIeWAm1AWAmqmBdXmwAUUF4WbTz:kZoxchjXEq6+LCl8E3oIeWAKA1mnXBG
MD5:	B1DA7C06A13441AD7AA1B33C7D1952F9
SHA1:	17A96891A3A00762EFF6CD14021045D653D3AF8C
SHA-256:	496B6DE2FB1C959D0F7327C29F5DFFDD1C0D241A81071C76F8FBD3ABEBC4146C
SHA-512:	BBBE73AD7D44A8D59CF0101CCA60F4722EAF979F785923B5FAC12B5A9CCA3BD26DC1D3345675EE9A17FD84185F9E32EDF25EA7BCA9252A4EF99FBF1443F40382
Malicious:	false
Preview:	...................H...............H...............X...................D.......@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...(.......................!...%...........(.......................!...%...........(.......................!...%...........0.......................!...%........DBBlob.....D.......................!...%........CSSM_DL_DB_RECORD_PUBLIC_KEY...H.......................!...%........CSSM_DL_DB_RECORD_PRIVATE_KEY......H.......................!...%........CSSM_DL_DB_RECORD_SYMMETRIC_KEY............d.......P...\...\.......P...\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\........

/Users/bernard/Library/Keychains/login.keychain-db.sb-07d82885-4RT1zY

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	DIY-Thermocam raw data (Lepton 3.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 963362762505407623593984.000000, slope 303834226087943251262072422400.000000
Category:	dropped
Size (bytes):	74372
Entropy (8bit):	5.041498600301416
Encrypted:	false
SSDEEP:	1536:kZoxchjXEq6+LClEXWtwE3oIeWAm1AWAmqmBdimEAUUFvWbTy:kZoxchjXEq6+LCl8E3oIeWAKA1mnitU
MD5:	3F7E80B94364CF6D54AF53A85D0DF3C7
SHA1:	0B6C9F681357EC5EE023884DF79ECF69867D32D7
SHA-256:	BE349E11A506BF7924055A4D44FFE04C883E8159309A91114E4ADC3289224C0F
SHA-512:	BB9FA0311C9BC9AD7A6CC019E7BAA907903CD37362180E3B75A2E985B227B74A475126E6BC7734F57B40B1BF9F42383881855C00A483B8DEF68B228391063959
Malicious:	false
Preview:	...................H...............H...............X...................D.......@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...(.......................!...%...........(.......................!...%...........(.......................!...%...........0.......................!...%........DBBlob.....D.......................!...%........CSSM_DL_DB_RECORD_PUBLIC_KEY...H.......................!...%........CSSM_DL_DB_RECORD_PRIVATE_KEY......H.......................!...%........CSSM_DL_DB_RECORD_SYMMETRIC_KEY............d.......P...\...\.......P...\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\...............\........

/dev/null

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2
File Type:	ASCII text
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.6682162517618835
Encrypted:	false
SSDEEP:	3:tR7oUWV5VLXH/QXTMGHQa4O3WOv:nkVwXTMGr4hA
MD5:	3CE29A3CCD0CFCC976CE3AD67145652B
SHA1:	D181BAFA69D1A8D23DB9FCBA0BEED7286B0F2913
SHA-256:	40135ADCCD75C915328C513C5E33215F203A1C7DE7F6BCC9756CE9E136DF5D12
SHA-512:	3CA2B2163DCE91DC872C0BD5A47816BCCE6AC4F9087E3A9BBC4448B58EB2F545BCCF0A1899CBCD3B5AF4A735A625CAF6C18AFBA191E320B4B61AFF802E2206E3
Malicious:	false
Preview:	2024-10-01 23:03:10.027 Office365ServiceV2[632:5002] ApplePersistence=NO.

/private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/C/com.microsoft.Office365ServiceV2/mds/mdsDirectory.db_

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	48908
Entropy (8bit):	3.533814637805397
Encrypted:	false
SSDEEP:	384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGB5pBfbouR6/chQOnGqwc2U+v+h/:8MdGleOhpBouRwchQOnGqwc2U+v+h/
MD5:	0E4A0D1CEB2AF6F0F8D0167CE77BE2D3
SHA1:	414BA4C1DC5FC8BF53D550E296FD6F5AD669918C
SHA-256:	CCA093BCFC65E25DD77C849866E110DF72526DFFBE29D76E11E29C7D888A4030
SHA-512:	1DC5282D27C49A4B6F921BA5DFC88B8C1D32289DF00DD866F9AC6669A5A8D99AFEDA614BFFC7CF61A44375AE73E09CD52606B443B63636977C9CD2EF4FA68A20
Malicious:	false
Preview:	kych...........................`...X...p..S0..SX..Th..T...T...[...^h...........L...X...............T...........d...................t...............t...........<...............P...........0...........$...p...........l...........X.......@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...D.......................!...%@.......MDS_CDSADIR_CSSM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_KRMM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_EMM_RECORDTYPE.....L.......................!...%@......"MDS_CDSADIR_EMM_PRIMARY_RECORDTYPE.....H.......................!...%@.......MDS_CDSADIR_COMMON_RECORDTYPE......L.......................!...%@......"MDS_CDSADIR_CSP_PRIMARY_RECORDTYPE.....P.......................!...%@......%MDS_CDSADIR_CSP_CAPABILITY_R

/private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/C/com.microsoft.Office365ServiceV2/mds/mdsObject.db_

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	4404
Entropy (8bit):	3.5110922853353324
Encrypted:	false
SSDEEP:	24:mFkXs98w/mBr53CEb9ujBbCYoVeA7uBEUMy733Ka2VCneWHrUZRJkWnJI4FNMOQS:m6Xsh+CLjL3Pe3T5FFEfEn8xiYuuSsS
MD5:	D3A1859E6EC593505CC882E6DEF48FC8
SHA1:	F8E6728E3E9DE477A75706FAA95CEAD9CE13CB32
SHA-256:	3EBAFA97782204A4A1D75CFEC22E15FCDEAB45B65BAB3B3E65508707E034A16C
SHA-512:	EA2A749B105759EA33408186B417359DEFFB4A3A5ED0533CB26B459C16BB3524D67EDE5C9CF0D5098921C0C0A9313FB9C2672F1E5BA48810EDA548FA3209E818
Malicious:	false
Preview:	kych.......................................d...................0...............0...p...........@...@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...@.......................!...%@.......MDS_OBJECT_RECORDTYPE..............h........... ...`........... ...@.......................-...1...5...9...=@..............................X...............P................... ...p...........l...........d...........P...........H...........,...............h...........P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................RelationName.......P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................AttributeID........X....

/private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/C/com.microsoft.Powerpoint/mds/mdsDirectory.db_

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	97816
Entropy (8bit):	3.533814637805397
Encrypted:	false
SSDEEP:	1536:8MdGIApBouRwQQOnGqwc2U+v+hkMdGIApBouRwQQOnGqwc2U+v+h/:vKouRwQQOnGMKouRwQQOnGG
MD5:	A4C012BBB09B0B19F4A3234F4400E4A9
SHA1:	944771D35DB56488D63544C09418C4235B44E3B2
SHA-256:	EAC36EE71C5AE4B6D2024C333C2EB7B6C0415FBFCFC264A5B19C4F10BB0126B8
SHA-512:	7A0F6E0FB0276B769572ED32D0B0311EC84827F64436E4D0EB13DA5489277DD3705142F03F2C14C23E768FE7BD454A3E1C564BC275D3C1D740BB97CE0DE33759
Malicious:	false
Preview:	kych...........................`...X...p..S0..SX..Th..T...T...[...^h...........L...X...............T...........d...................t...............t...........<...............P...........0...........$...p...........l...........X.......@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...D.......................!...%@.......MDS_CDSADIR_CSSM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_KRMM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_EMM_RECORDTYPE.....L.......................!...%@......"MDS_CDSADIR_EMM_PRIMARY_RECORDTYPE.....H.......................!...%@.......MDS_CDSADIR_COMMON_RECORDTYPE......L.......................!...%@......"MDS_CDSADIR_CSP_PRIMARY_RECORDTYPE.....P.......................!...%@......%MDS_CDSADIR_CSP_CAPABILITY_R

/private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/C/com.microsoft.Powerpoint/mds/mdsObject.db_

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	8808
Entropy (8bit):	3.5110922853353324
Encrypted:	false
SSDEEP:	96:3X6LjLfe3qEn8kYuuSnX6LjLfe3qEn8kYuuSX:Ge3ZnG1SWe3ZnG1SX
MD5:	636C97726FA8460EAB35E0996589DB4C
SHA1:	D1BE760E43173671B670A20DED636CD93BCEE7C3
SHA-256:	1136941331967FDA088BB15807F23F25EF27E7BFEE1FCCFE1322965857CF23F7
SHA-512:	18AA47895D51DBFFBD8BA50A39F7BAFBD3FEAA825EEA03A004B9C0DFD27AC340626A21609FED79786A125521E5C2C9593571BEB14B5CCEC34461815C0ACEB218
Malicious:	false
Preview:	kych.......................................d...................0...............0...p...........@...@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...@.......................!...%@.......MDS_OBJECT_RECORDTYPE..............h........... ...`........... ...@.......................-...1...5...9...=@..............................X...............P................... ...p...........l...........d...........P...........H...........,...............h...........P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................RelationName.......P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................AttributeID........X....

/private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/T/com.microsoft.Office365ServiceV2/TemporaryItems/(A Document Being Saved By Office365ServiceV2)/ci.plist

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	57
Entropy (8bit):	3.2125246576774362
Encrypted:	false
SSDEEP:	3:N1n9z5+cZtTt4:N1n9FdZlt4
MD5:	4A6EAEF73E956D194C0A6097E25F2408
SHA1:	CF2A5A98CD62A9DB99E2BC45894CD6B80D31386A
SHA-256:	868970D5EF70AB113AFE61286EB79584016FC06C040FD7E88760CB8F90B47EDC
SHA-512:	4ECFA03D289518A42E2301A4FB8D60A0A06FF0AF5B311643F2E55AE6CACFF630F65EED0B210A473DE44DC660D0DFB3A403D6EBCC92DCEDF7DA1B99C18FA7D86A
Malicious:	false
Preview:	bplist00...Xseverity.2...................................

/private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/T/com.microsoft.Powerpoint/TemporaryItems/(A Document Being Saved By PowerPoint)/ci.plist

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	57
Entropy (8bit):	3.2125246576774362
Encrypted:	false
SSDEEP:	3:N1n9z5+cZtTt4:N1n9FdZlt4
MD5:	4A6EAEF73E956D194C0A6097E25F2408
SHA1:	CF2A5A98CD62A9DB99E2BC45894CD6B80D31386A
SHA-256:	868970D5EF70AB113AFE61286EB79584016FC06C040FD7E88760CB8F90B47EDC
SHA-512:	4ECFA03D289518A42E2301A4FB8D60A0A06FF0AF5B311643F2E55AE6CACFF630F65EED0B210A473DE44DC660D0DFB3A403D6EBCC92DCEDF7DA1B99C18FA7D86A
Malicious:	false
Preview:	bplist00...Xseverity.2...................................

/private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/T/com.microsoft.Powerpoint/TemporaryItems/(A Document Being Saved By PowerPoint)/com.microsoft.Powerpoint.securebookmarks.plist

Download File

Process:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	2682
Entropy (8bit):	4.401600908580117
Encrypted:	false
SSDEEP:	48:cfydZcTdLE4G3+HbI9SUWjEKhMyfydZcTdLE4G3+HbI9SUWjEKhMfWz:CyXchwmFlRvyXchwmFlRDz
MD5:	E22865569DBBCCD26868463EC504AE24
SHA1:	B3374F93E43FAE39C394B501A6CBD1C5EE676FCB
SHA-256:	A04062D33D7915D7A9A6429D3C620C0414A6B58869249A481891ED54EBC4C71D
SHA-512:	532DC159DB70AAF6A252EA799D5A55E5113059F5603B6E3F4BD1C184563B664DFFDF04A82C14D103600D936CB62FE5A3633420BB63081DB10A443AA8CE95B4CA
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>file:///Users/bernard/Desktop/Presentation.pptx</key>..<dict>...<key>kBookmarkDataKey</key>...<data>...Ym9va8ACAAAAAAQQMAAAAEgrC3v82tzl6C1a/HZa76kvzU61GL+xUITgJXvU...SG+yvAEAAAQAAAADAwAAAAgAKAUAAAABAQAAVXNlcnMAAAAHAAAAAQEAAGJl...cm5hcmQABwAAAAEBAABEZXNrdG9wABEAAAABAQAAUHJlc2VudGF0aW9uLnBw...dHgAAAAQAAAAAQYAABAAAAAgAAAAMAAAAEAAAAAIAAAABAMAAManCgADAAAA...CAAAAAQDAACwSBcAAwAAAAgAAAAEAwAAxkgXAAMAAAAIAAAABAMAAPuuGgAD...AAAAEAAAAAEGAAB0AAAAhAAAAJQAAACkAAAACAAAAAAEAABBxcOgG3inbhgA...AAABAgAAAQAAAAAAAAAPAAAAAAAAAAAAAAAAAAAACAAAAAQDAAACAAAAAAAA...AAQAAAADAwAA9gEAAAgAAAABCQAAZmlsZTovLy8MAAAAAQEAAE1hY2ludG9z...aCBIRAgAAAAEAwAAAGB/8xgAAAAIAAAAAAQAAEHBZQzpAAAAJAAAAAEBAAA2...QTRCNDg0Ny1FNDcxLTMyRkQtOEE4Ri0zQjg0OTcwMjk0NDUYAAAAAQIAAIEA...AAABAAAA7xMAAAEAAAAAAAAAAAAAAAEAAAABAQAALwAAAAAAAAABBQAAzAAA...AP7///8BAAAAAAAAABAAAAAEEAA

Static File Info

General

File type:	Microsoft PowerPoint 2007+
Entropy (8bit):	7.889029121709577
TrID:	PowerPoint Microsoft Office Open XML Format document (133004/1) 76.66% Microsoft PowerPoint Macro-enabled Open XML add-in (32504/1) 18.73% ZIP compressed archive (8000/1) 4.61%
File name:	Presentation.pptx
File size:	58'333 bytes
MD5:	d6fe5c7469058b496c0eb7882bd99934
SHA1:	051f36a8d8b3134e163981f4ae4a0548853e7fe8
SHA256:	0441d5351a8829f35050985ebd60d7bd113eedd4747889b904588b84909148eb
SHA512:	428e3063ebb9c88813d6aacf4c4c95af20def0cb81164b013904c7b20184b070efcb9f5d1114f74bcad4d8e792d199f90bdb2c98f8a20e7de98b70c535ed2124
SSDEEP:	1536:poAJHSuNPP3FJWcAHxcd+QJGGfsPYTBxvTu7iMFg6z7/:mnu5IydFJhfyGjvTu7pg6v/
TLSH:	FF43D008DA006646C3732175D935DCE0B6A64D97EA59EDEFD4DB38CE0AA5E83170D3C8
File Content Preview:	PK..........!.+O......4.......ppt/presentation.xml...n.0...'...o'J.WH.R5..&uR..........N.t....L..&...........xq}..s.R...._M.Cy...?...!s..(MxA..4E'......E=.%U.k....0\.I.vZ.s.S..VD]..r.m.....\|..I^!\|.<.2.....Y.......9......m.IYS.........6.....9...IQ.....AK..

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 2, 2024 06:03:00.696583033 CEST	443	49347	17.248.201.67	192.168.11.12
Oct 2, 2024 06:03:00.696666956 CEST	443	49347	17.248.201.67	192.168.11.12
Oct 2, 2024 06:03:00.697665930 CEST	49347	443	192.168.11.12	17.248.201.67
Oct 2, 2024 06:03:00.697841883 CEST	49347	443	192.168.11.12	17.248.201.67
Oct 2, 2024 06:03:00.701021910 CEST	443	49347	17.248.201.67	192.168.11.12
Oct 2, 2024 06:03:00.701102018 CEST	443	49347	17.248.201.67	192.168.11.12
Oct 2, 2024 06:03:00.701826096 CEST	49347	443	192.168.11.12	17.248.201.67
Oct 2, 2024 06:03:00.702269077 CEST	49347	443	192.168.11.12	17.248.201.67
Oct 2, 2024 06:03:00.710624933 CEST	443	49347	17.248.201.67	192.168.11.12
Oct 2, 2024 06:03:00.711180925 CEST	49347	443	192.168.11.12	17.248.201.67
Oct 2, 2024 06:03:00.745115042 CEST	443	49351	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:00.745183945 CEST	443	49351	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:00.746007919 CEST	49351	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:03:00.761348009 CEST	443	49352	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:00.762032032 CEST	49352	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:03:00.762892962 CEST	49352	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:03:00.766951084 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:00.767710924 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:00.786154032 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:00.792459011 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:00.897614956 CEST	443	49352	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:00.899715900 CEST	443	49352	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:00.899816990 CEST	443	49352	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:00.899877071 CEST	443	49352	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:00.899935007 CEST	443	49352	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:00.899980068 CEST	443	49352	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:00.901400089 CEST	49352	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:03:00.901459932 CEST	49352	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:03:00.901617050 CEST	49352	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:03:00.901926041 CEST	49352	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:03:00.909730911 CEST	49352	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:03:00.950306892 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:00.958142042 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:00.958960056 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:00.961384058 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:00.966083050 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:00.966662884 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:00.967921972 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:00.985385895 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.044647932 CEST	443	49352	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:01.044715881 CEST	443	49352	151.101.195.6	192.168.11.12
Oct 2, 2024 06:03:01.045542002 CEST	49352	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:03:01.123028994 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.123610020 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.124367952 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.133991003 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.134505987 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.134541035 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.134568930 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.135119915 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.135209084 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.135329962 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.140925884 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.143708944 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.143744946 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.143771887 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.144428015 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.144515991 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.144906044 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.150875092 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.159183979 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.159219980 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.159243107 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.159267902 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.160276890 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.160331964 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.160429001 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.162029982 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.162390947 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.164036036 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.285851002 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.286220074 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.286323071 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.286344051 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.287043095 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.287070990 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.287467957 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.307343960 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.308936119 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.309753895 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.316837072 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.327925920 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.328059912 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.328150988 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.328296900 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.329581022 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.329648018 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.329792023 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.333178043 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.333293915 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.333909035 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.334187984 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.335016966 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.344547987 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.344662905 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.345720053 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.346039057 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.355195045 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.355308056 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.356956959 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.357508898 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.365919113 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.365988970 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.366965055 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.367289066 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.371875048 CEST	49347	443	192.168.11.12	17.248.201.67
Oct 2, 2024 06:03:01.377496004 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.377527952 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.379251003 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.379492998 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.388058901 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.388084888 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.389842987 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.390388012 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.399514914 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.399540901 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.401243925 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.401711941 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.472368002 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.473093033 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.481728077 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.483104944 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.483247042 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.483257055 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.483495951 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.483505011 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.483647108 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.483661890 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.483674049 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.484153986 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.484388113 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.484388113 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.484882116 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.489967108 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.490075111 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.490694046 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.490952969 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.492007017 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.492022038 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.492644072 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.492863894 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.499277115 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.499290943 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.499300003 CEST	443	49347	17.248.201.67	192.168.11.12
Oct 2, 2024 06:03:01.499922991 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.500169992 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.503002882 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.503134012 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.503706932 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.503797054 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.508692026 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.509232044 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.513057947 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.513148069 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.513691902 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.515765905 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.515877008 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.516459942 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.517525911 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.525612116 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.527064085 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.527172089 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.528003931 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.528758049 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.529061079 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.529463053 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.540957928 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.541065931 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.541603088 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.543746948 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.555013895 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.555105925 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.555707932 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.556020021 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.568392038 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.568505049 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.569138050 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.570255041 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.578967094 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.579073906 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.579705954 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.583347082 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.588960886 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.589051962 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.589798927 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.591320992 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.598790884 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.598885059 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.599497080 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.604077101 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.608478069 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.608707905 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.609291077 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.609656096 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.618138075 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.618607044 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.619353056 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.619651079 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.628129959 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.628222942 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.628751040 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.628812075 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.637425900 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.637782097 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.638453960 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.639996052 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.647164106 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.647260904 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.647932053 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.649878979 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.654802084 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.655608892 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.656056881 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.656121016 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.656929970 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.656944990 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.657421112 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.657474995 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.662339926 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.662354946 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.663229942 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.666724920 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.666819096 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.667387009 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.674751997 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.674839973 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.675496101 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.679666042 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.680284977 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.683224916 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.683248997 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.684181929 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.684412956 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.684878111 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.685971022 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.686866045 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.687062979 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.687958956 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.689167976 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.695878029 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.695908070 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.696577072 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.696788073 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.698630095 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.698659897 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.699449062 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.700001001 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.702101946 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.702132940 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.702853918 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.703680992 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.705427885 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.705559969 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.705579042 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.705671072 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.705756903 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.706192017 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.706217051 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.706387043 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.707453012 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.708134890 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.708394051 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.708470106 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.709037066 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.709048033 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.709101915 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.709134102 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.709805965 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.710573912 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.714713097 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.714757919 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.715734005 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.715770006 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.719681978 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.719738007 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.720407009 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.720866919 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.720921993 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.721513033 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.721561909 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.721693993 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.727603912 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.727705002 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.728487968 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.728545904 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.730242014 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.730346918 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.731491089 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.731811047 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.733401060 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.733982086 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.739969969 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.740768909 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.740869045 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.741564989 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.741801023 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.751466036 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.752094030 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.755398035 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.849318981 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.850256920 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.859919071 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.860492945 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.860727072 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.861376047 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.861433983 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.864747047 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.865485907 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.865655899 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.866569042 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.867100000 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.867810965 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.868314028 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.868406057 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.869077921 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.869611025 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.906264067 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.906898975 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.920056105 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.921124935 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.921225071 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.943156004 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.943156004 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.962842941 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.973953009 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:01.998552084 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:01.999334097 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.000339985 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.000437021 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.001544952 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.002161980 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.037532091 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.038361073 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.046530962 CEST	49347	443	192.168.11.12	17.248.201.67
Oct 2, 2024 06:03:02.047561884 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.048660994 CEST	49347	443	192.168.11.12	17.248.201.67
Oct 2, 2024 06:03:02.125576019 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.125710011 CEST	443	49356	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.126534939 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.131827116 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.132431030 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.133032084 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.133049011 CEST	443	49356	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.133974075 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.134139061 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.134680986 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.145688057 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.145754099 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.146727085 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.147279024 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.147368908 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.147994041 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.148041010 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.148711920 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.156311035 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.158188105 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.158221960 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.159018993 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.164371967 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.165443897 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.171353102 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.171402931 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.172103882 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.174457073 CEST	443	49347	17.248.201.67	192.168.11.12
Oct 2, 2024 06:03:02.175065041 CEST	49347	443	192.168.11.12	17.248.201.67
Oct 2, 2024 06:03:02.176381111 CEST	443	49347	17.248.201.67	192.168.11.12
Oct 2, 2024 06:03:02.184223890 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.184314013 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.185055017 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.196413994 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.196491957 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.197149992 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.209494114 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.209568977 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.210172892 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.221116066 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.221180916 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.221859932 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.222033978 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.223869085 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.223992109 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.224463940 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.227619886 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.238415956 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.238492966 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.239072084 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.275316954 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.275393963 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.276278019 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.282398939 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.282473087 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.282995939 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.298326969 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.298405886 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.299103022 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.313971043 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.314089060 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.314798117 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.330465078 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.330552101 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.331181049 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.345860004 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.345938921 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.346837997 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.360491991 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.360567093 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.370764971 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.373615980 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.373697996 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.374454021 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.380199909 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.380765915 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.384130001 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.387165070 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.387242079 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.387861013 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.396051884 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.396648884 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.400290012 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.400369883 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.401005030 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.411421061 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.411494017 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.412286997 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.421710014 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.421794891 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.422430992 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.430300951 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.430388927 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.430996895 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.439146996 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.439233065 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.443661928 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.447796106 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.447882891 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.449482918 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.461528063 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.462352991 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.469930887 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.470591068 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.471311092 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.471386909 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.475186110 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.475264072 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.476310015 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.476392984 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.478977919 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.479091883 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.484021902 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.484095097 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.484493017 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.484679937 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.484679937 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.484771967 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.489651918 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.490010023 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.491226912 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.491290092 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.494225025 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.494479895 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.495079994 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.495260954 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.499322891 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.500011921 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.505167007 CEST	443	49356	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.506000996 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.506154060 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.598417044 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.646214962 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.646842957 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.650099039 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.650650024 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.650780916 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.651456118 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.658020973 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.658767939 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.723278046 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.723879099 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.724750042 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.724822044 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.725383043 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.867908001 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.868005991 CEST	443	49356	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.869133949 CEST	443	49356	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:02.869741917 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.913480043 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:02.956227064 CEST	443	49356	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:03.460614920 CEST	443	49356	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:03.460834980 CEST	443	49356	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:03.461519003 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:03.461762905 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:03.471812963 CEST	49356	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:03.471878052 CEST	443	49356	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.458848953 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.459883928 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.460530043 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.462131023 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.463366032 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.463426113 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.464126110 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.464190006 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.474716902 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.474751949 CEST	443	49360	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.475558043 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.477444887 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.477467060 CEST	443	49361	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.478003979 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.480156898 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.480182886 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.480940104 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.483789921 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.483808041 CEST	443	49360	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.484628916 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.484642029 CEST	443	49361	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.485461950 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.485479116 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.621725082 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.621793985 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.623229980 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.623296976 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.623342037 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.623673916 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.623765945 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.624589920 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.624650002 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.625812054 CEST	443	49355	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.626606941 CEST	49355	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.626653910 CEST	443	49353	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.627008915 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.627072096 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.627202034 CEST	49353	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.627556086 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.627614021 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.629952908 CEST	443	49350	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.630517006 CEST	49350	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.635663986 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.635724068 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.637145996 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.637200117 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.637447119 CEST	443	49354	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.638289928 CEST	49354	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.829343081 CEST	443	49360	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.830528021 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.830621004 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.830955029 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.831552982 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.831645012 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.832535028 CEST	443	49361	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.833167076 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.833268881 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.858964920 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.859010935 CEST	443	49360	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.859421015 CEST	443	49360	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.859987020 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.869067907 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.869102001 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.869669914 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.870199919 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.889727116 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.889827013 CEST	443	49361	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.891005039 CEST	443	49361	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.891539097 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.895437002 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.895576954 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.895929098 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:04.936242104 CEST	443	49361	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.940279007 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:04.940300941 CEST	443	49360	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.239398003 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.239531040 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.240256071 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.241108894 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.241188049 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.260370970 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.260749102 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.260888100 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.261137009 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.261200905 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.261749983 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.261799097 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.262161016 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.265876055 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.266057014 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.266596079 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.266679049 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.267136097 CEST	49362	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.267203093 CEST	443	49362	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.349358082 CEST	443	49360	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.349625111 CEST	443	49360	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.350107908 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.350194931 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.351229906 CEST	49360	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.351294994 CEST	443	49360	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.358719110 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.358812094 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.359471083 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.361294985 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.361361027 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.371591091 CEST	443	49361	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.371872902 CEST	443	49361	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.372358084 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.372606039 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.377434015 CEST	49361	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:05.377502918 CEST	443	49361	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:05.398638010 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.398770094 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.399382114 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.402156115 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.402226925 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.552961111 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.553695917 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.553744078 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.658904076 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.660546064 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.660701036 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.685211897 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.686873913 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.686925888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.760730028 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.760776997 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.761240959 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.761967897 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.782691956 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.782798052 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.783855915 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.784320116 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.784410954 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.784535885 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.785466909 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.786088943 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.801265001 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.805501938 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.805898905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.844221115 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.848256111 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.848256111 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.943979979 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.944586039 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.944617033 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.944705009 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.944945097 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.945091963 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.945171118 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.945231915 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.945719957 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.945997000 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.946432114 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.948776007 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.949073076 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.949203014 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.949341059 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.949354887 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.949419022 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.949901104 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.949961901 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.950166941 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.950189114 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.950356007 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.950510979 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.950607061 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.950690031 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.950745106 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.950854063 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.950881004 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.951071024 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.951121092 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.951328039 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.951456070 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.951570034 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.951987028 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.952107906 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.952146053 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.952198982 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.952702045 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.952780008 CEST	49364	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.952821970 CEST	443	49364	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.953708887 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.953880072 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.954462051 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.954508066 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.954669952 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.954726934 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.955276012 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.955509901 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.956342936 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.958275080 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.958446980 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.959058046 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.959115982 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.959244967 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.959302902 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.959891081 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.960076094 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.962795019 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.963143110 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.963985920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.964158058 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.964219093 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.964806080 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.966351032 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.967456102 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.968266964 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.968324900 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.968842983 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.970288992 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.971904993 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.973280907 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.973339081 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.974009991 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.980959892 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.981317997 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.981488943 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.981734991 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.981796980 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.981856108 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.982789040 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.984767914 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.985482931 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.986109972 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.986171961 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.986839056 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.989876986 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.990606070 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.990669966 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.991511106 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.991537094 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.991597891 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.991704941 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.992806911 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.994127989 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.994198084 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.994308949 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.994308949 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.994309902 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.994309902 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.994309902 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.994376898 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.994582891 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.994657993 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.995069027 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.995486021 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.998869896 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:05.999841928 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:05.999898911 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.000905991 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.004080057 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.005117893 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.085664988 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.087033987 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.087090969 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.087707043 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.087783098 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.088474035 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.088560104 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.089279890 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.091803074 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.092489004 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.092540979 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.093199968 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.095649958 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.096343040 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.099411964 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.099700928 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.100019932 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.100085020 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.101329088 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.102996111 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.103677034 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.103734970 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.104435921 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.104593039 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.104674101 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.106400967 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.106749058 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.106750011 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.106750011 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.106829882 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.106875896 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.106875896 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.106875896 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.107176065 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.107234001 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.107446909 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.108266115 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.109586000 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.110488892 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.110548019 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.112983942 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.113048077 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.113231897 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.113651991 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.113892078 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.115658045 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.116369009 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.116425037 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.117161036 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.118515968 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.118721962 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.119302034 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.119363070 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.119900942 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.127443075 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.127572060 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.128920078 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.128971100 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.128971100 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.129012108 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.129162073 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.129162073 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.129163027 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.129945040 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.131922960 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.136684895 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.136776924 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.136821985 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.138375998 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.138430119 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.138511896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.138511896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.138813972 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.138873100 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.138911009 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.139100075 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.139419079 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.145047903 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.145159006 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.152039051 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.152168989 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.152168989 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.152240992 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.152683973 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.152750969 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.153503895 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.153712988 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.153712988 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.153765917 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.154050112 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.154099941 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.154237986 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.154372931 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.154531956 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.154591084 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.154755116 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.155059099 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.155253887 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.155253887 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.156416893 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.156730890 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.160202026 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.160238028 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.160334110 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.161890030 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.161936045 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.162070990 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.162071943 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.162141085 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.162182093 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.162182093 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.162319899 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.162435055 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.162945986 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.229630947 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.229743004 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.232925892 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.232990980 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.233102083 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.233156919 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.233202934 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.233319998 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.233596087 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.233669996 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.238039970 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.239728928 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.239900112 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.241364956 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.241991997 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.242180109 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.242180109 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.242249012 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.242297888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.242340088 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.242630959 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.242691994 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.242877960 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.242947102 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.243232965 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.244882107 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.245069981 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.245126963 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.245168924 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.245388031 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.245388031 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.245604038 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.245652914 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.247813940 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.253227949 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.253324986 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.255019903 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.255086899 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.255285978 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.255352020 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.255392075 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.255426884 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.255517006 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.255899906 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.255984068 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.256288052 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.257975101 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.258128881 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.258183956 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.258223057 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.258265972 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.258414030 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.258662939 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.258712053 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.263292074 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.263367891 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.265139103 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.265187979 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.265358925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.265418053 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.265458107 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.265659094 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.265744925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.266089916 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.267888069 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.267957926 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.270028114 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.270227909 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.270421982 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.270421982 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.270464897 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.270505905 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.270550013 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.271059990 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.272972107 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.273053885 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.278034925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.278034925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.278034925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.278034925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.278125048 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.278162003 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.278162003 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.278162003 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.279170036 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.279782057 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.279855013 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.281594992 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.281780005 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.281780005 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.281829119 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.281971931 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.281971931 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.282017946 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.282159090 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.282407999 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.282824993 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.282896042 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.284487009 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.284588099 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.284589052 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.284632921 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.284661055 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.284661055 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.284774065 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.285203934 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.288288116 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.289622068 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.289691925 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.291239977 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.291470051 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.291470051 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.291527987 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.291584969 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.291640043 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.291659117 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.291659117 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.291774035 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.293196917 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.293293953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.293293953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.293354988 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.293354988 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.293397903 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.293502092 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.293502092 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.294015884 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.298243999 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.298315048 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.298706055 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.298783064 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.300559044 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.300745010 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.300745010 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.300790071 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.300915956 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.300915956 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.300915956 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.300916910 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.300987005 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.300987005 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.300987005 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.301048994 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.301100016 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.301100969 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.301379919 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.303544998 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.306911945 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.306982040 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.308955908 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.309170961 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.309170961 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.309171915 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.309171915 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.309230089 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.309357882 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.309820890 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.315946102 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.316016912 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.318723917 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.318913937 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.319108963 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.319142103 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.319169998 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.319310904 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.319508076 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.319812059 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.340651035 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.344052076 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.355701923 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.355782986 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.360990047 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.361043930 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.361043930 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.361043930 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.361089945 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.361130953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.361130953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.363114119 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.363220930 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.365267038 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.369549036 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.369887114 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.369951010 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.370001078 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370002031 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370069027 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370069027 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370127916 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370242119 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.370275974 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370764971 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370814085 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370814085 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370948076 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370948076 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.370948076 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.371301889 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.374000072 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.374068975 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.376909971 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.377000093 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.380964994 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.381999016 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.382920980 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.388334036 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.388407946 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.388612986 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.388977051 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.389048100 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.389153957 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.389262915 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.389332056 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.389616966 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.389656067 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.389955997 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.389997959 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.390194893 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.390317917 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.390345097 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.390594006 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.390683889 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.390683889 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.390712023 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.390733004 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.390878916 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.390969038 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.390969992 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.391000032 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.391026974 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.391341925 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.391534090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.391534090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.391566992 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.391726971 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.391726971 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.391773939 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.391904116 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.391905069 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.391943932 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.392016888 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.392107964 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.392311096 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.392399073 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.392529011 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.392658949 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.392749071 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.392890930 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.392982006 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.393086910 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.393244028 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.393244028 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.393908978 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.395220041 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.395328045 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.395467043 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.395734072 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.395800114 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.395921946 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.396095991 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.396095991 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.396292925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.396292925 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.396356106 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.396389961 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.399139881 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399214029 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399214029 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399311066 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399311066 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399434090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399434090 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399482012 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399529934 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399529934 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399529934 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399652004 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399652004 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.399703026 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.400716066 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.400799990 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.403078079 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.403146982 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.403217077 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.403276920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.403450966 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.403450966 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.403450966 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.403493881 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.403645039 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.404548883 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.404633045 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.404789925 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.404789925 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.404833078 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.404908895 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.405024052 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.405155897 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.405459881 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.405530930 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.405638933 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.408708096 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.408778906 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.408780098 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.408824921 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.408905983 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.408906937 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.408906937 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.409065008 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.409136057 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.409429073 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.410362959 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.410445929 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.410693884 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.410887003 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.410887957 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.410942078 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.410978079 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.410978079 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.410978079 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.414114952 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.414180994 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.414180994 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.414238930 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.414269924 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.414269924 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.414269924 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.414412022 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.414943933 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.415016890 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.415388107 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.415468931 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.417090893 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.417270899 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.417464018 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.417464018 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.417510033 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.417543888 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.417543888 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.417632103 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.417773008 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.417867899 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.417956114 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.418087959 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.418179035 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.418179035 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.418739080 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.419027090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.419058084 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.420305014 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.420361996 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.421387911 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.421468019 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.424537897 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.426613092 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.428937912 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.431710958 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.431921959 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.431922913 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.431957960 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.432115078 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432115078 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432147026 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.432311058 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432537079 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432537079 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432537079 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432565928 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.432579041 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.432591915 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432593107 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432609081 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.432691097 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432787895 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432787895 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.432806969 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.432822943 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.432980061 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433171034 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433219910 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433219910 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433414936 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433414936 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433439970 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.433471918 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.433480024 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.433514118 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433514118 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433533907 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.433609009 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433692932 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.433722973 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.433825970 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.434150934 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.434422970 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.436414003 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.437347889 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.442348003 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.444618940 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.444639921 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.444811106 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.444811106 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.444827080 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.444832087 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.445003033 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445015907 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.445051908 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445242882 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445260048 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.445435047 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445444107 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.445627928 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445627928 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445627928 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445627928 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445627928 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445645094 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.445655107 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.445662975 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.445724964 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.445734024 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.445838928 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446043968 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446043968 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446059942 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446069002 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446242094 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446242094 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446242094 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446257114 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446268082 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446429014 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446441889 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446446896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446446896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446459055 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446465969 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446610928 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446640968 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446641922 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446711063 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446768999 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.446868896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446868896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.446868896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.447079897 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.447081089 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.447104931 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.447117090 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.447338104 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.447365046 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.452629089 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.452652931 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.452666998 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.452678919 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.452811956 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453006029 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453006029 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453006029 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453195095 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453293085 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453293085 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453391075 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453401089 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.453489065 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453489065 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453499079 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.453732014 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453732014 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453747034 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.453973055 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453973055 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453973055 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.453988075 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.453999996 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.454020977 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.454262018 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.454262018 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.454453945 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.454454899 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.454591990 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.454591990 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.454607964 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.455629110 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.455641985 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.455677032 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.455701113 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.458233118 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458395004 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458395004 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458585978 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458633900 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458683014 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458781004 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458838940 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458956957 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458957911 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.458977938 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.459054947 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.459163904 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.459254980 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.459384918 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.459476948 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.459476948 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.459619045 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.459880114 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.460207939 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.460249901 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.462507010 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.462697029 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.462889910 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.462889910 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.462889910 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.462903976 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.462986946 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.464287043 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.464878082 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.464888096 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.464960098 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.464998007 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.469177008 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.469192982 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.469500065 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.472439051 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.472453117 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.472630978 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.472678900 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.472737074 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.472829103 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.472829103 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.472970963 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.472980976 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.473206043 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.473297119 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.473297119 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.473426104 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.473517895 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.473517895 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.473647118 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.473751068 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.473881006 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.474179983 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.474271059 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.492414951 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.492461920 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.492602110 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.492806911 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.494438887 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.494518042 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.494518042 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.494565010 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.494637966 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.494638920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.494735956 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.495014906 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.495896101 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.495999098 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.497637033 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.497718096 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.497718096 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.497762918 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.497867107 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.497867107 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.497868061 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.497987986 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.498404980 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.499819040 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.499919891 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.501451969 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.501534939 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.501667023 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.501713991 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.501763105 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.501904964 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.501991987 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.502317905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.502407074 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.503053904 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.503216982 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.504724979 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.504849911 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.504849911 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.504897118 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.504926920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.504926920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.505033016 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.505531073 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.506593943 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.506743908 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.508342981 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.508564949 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.508564949 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.508620977 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.508649111 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.508783102 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.508883953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.509223938 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.510082006 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.510204077 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.511784077 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.511873007 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.511873007 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.511918068 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.512027979 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.512027979 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.512027979 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.512515068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.513444901 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.513582945 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.514281988 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.514353037 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.516060114 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516293049 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516293049 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516293049 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516293049 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516356945 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.516436100 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516436100 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516436100 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516483068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516483068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516483068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516510963 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.516627073 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516916990 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.516925097 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.517000914 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.517163992 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.517203093 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.518023968 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.518194914 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.518790007 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.518974066 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.518974066 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519164085 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519165039 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519165039 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519165039 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519165039 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519241095 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519241095 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519241095 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519277096 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.519350052 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519350052 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.519648075 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.521246910 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.521420956 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.521501064 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.521517992 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.522563934 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.522607088 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.523051977 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.523231983 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.523231983 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.523257017 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.523427010 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.523427010 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.523427010 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.525132895 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.525141001 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.525160074 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.525216103 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.525223970 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.525240898 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.525329113 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.525329113 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.525398970 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.525520086 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.525569916 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.525569916 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.525614023 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.526170969 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.526276112 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.526316881 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.526598930 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.526690006 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.526690006 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.526819944 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.526819944 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.526918888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.526918888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.526918888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.527056932 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.527056932 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.527101994 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.527101994 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.527131081 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.527149916 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.528295040 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.528301001 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.528331041 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.528393984 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.528393984 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.528490067 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.528490067 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.528613091 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.528613091 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.528631926 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.528846979 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.529706001 CEST	49365	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.529722929 CEST	443	49365	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.530042887 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.530134916 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.530280113 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.530354977 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.530484915 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.530575037 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.530683041 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.530705929 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.530711889 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.530725956 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.532514095 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.532603979 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.532603979 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.532701015 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.532701015 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.532799006 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.532799006 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.533786058 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.534136057 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.534162045 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.535801888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.535938025 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.535938978 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.535954952 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.536012888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.536012888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.536125898 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.536480904 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.536509991 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.536633968 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.537081957 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.537127972 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.538376093 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.538466930 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.538466930 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.538564920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.538564920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.538688898 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.538688898 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.538954973 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.538980961 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.539052010 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.541323900 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.541352987 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.541354895 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.541459084 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.541575909 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.541598082 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.541697025 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.541785002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.541928053 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.543185949 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.543333054 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.543355942 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.543355942 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.543404102 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.543503046 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.543503046 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.543862104 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.544579029 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.544605017 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.546456099 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.546679974 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.546708107 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.546845913 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.547202110 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.547215939 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.547301054 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.547405958 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.547620058 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.548603058 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.548630953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.548630953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.548713923 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.548713923 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.548842907 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.548842907 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.548911095 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.548935890 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.549097061 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.550513029 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.550558090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.550688028 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.550708055 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.550779104 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.550950050 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.551039934 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.551127911 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.551496029 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.551521063 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.553123951 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.553456068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.553638935 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.553729057 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.553819895 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.553819895 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.553836107 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.554014921 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.554282904 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.554325104 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.554341078 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.554522038 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.554637909 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.554806948 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.555041075 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.555052042 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.555131912 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.555288076 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.555386066 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.555516958 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.555644989 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.555774927 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.555865049 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.555951118 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.556570053 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.556598902 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.556719065 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.558731079 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.558773041 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.558813095 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.558891058 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.558891058 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.558907032 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.558990002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.558990002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.558990002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.560797930 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.560825109 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.561856031 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.561945915 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.561945915 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562043905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562043905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562043905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562166929 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562166929 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562182903 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.562248945 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562264919 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562314034 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562314987 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562411070 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.562647104 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.563318968 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.563354969 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.565269947 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.565306902 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.567576885 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.569542885 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569567919 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.569642067 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569642067 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569681883 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569758892 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569758892 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569782972 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.569884062 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569884062 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569916010 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569958925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569958925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569960117 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.569993973 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.570033073 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.570056915 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.570056915 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.570105076 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.572027922 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.573642969 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.573693991 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.573767900 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.573767900 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.573853970 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.573853970 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.573935032 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.573959112 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.573959112 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.574089050 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.574089050 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.574162960 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.574162960 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.574162960 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.575205088 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.575438976 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.575438976 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.576260090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.576278925 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.576287985 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.577975988 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.578511000 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578594923 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578594923 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578668118 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578669071 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578669071 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578691006 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.578766108 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578766108 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578864098 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578864098 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578864098 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578974962 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.578984022 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.579353094 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.579651117 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.579742908 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.579742908 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.579839945 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.579839945 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.579839945 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.579963923 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.579963923 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.580060959 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.599555016 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.599667072 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.602489948 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.602767944 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.602812052 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.603120089 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.603172064 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.603218079 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.603332043 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.603406906 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.603627920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.603719950 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.624742985 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.624849081 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.626044035 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.626149893 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.627083063 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627140999 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627140999 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627194881 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.627240896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627242088 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627372980 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627372980 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627438068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627438068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627496004 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627609968 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627665043 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627794027 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.627821922 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.627863884 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.627945900 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.628007889 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.629877090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.629976988 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.629981995 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.629981995 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.630034924 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.630069971 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.630104065 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.630104065 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.630104065 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.630129099 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.631583929 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.631593943 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.631669998 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.631669998 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.631705999 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.631772995 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.631772995 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.631824970 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.631870985 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.631870985 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.632910013 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.633467913 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.633491039 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.633573055 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.633573055 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.633589029 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.633668900 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.633668900 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.633764982 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.633764982 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.633816004 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.633955956 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.635078907 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.635174990 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.635175943 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.635277033 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.635277033 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.635277987 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.635396957 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.635915041 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.636043072 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.636142015 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.637331009 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.637448072 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.638267040 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638353109 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638444901 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638444901 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638478041 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.638513088 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638513088 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638586998 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638586998 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638634920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638731956 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638731956 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638834953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638936043 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.638993979 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.639043093 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.639141083 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.639394045 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.640522957 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.640626907 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.640868902 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.640969992 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.640970945 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.641098022 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.641098022 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.641139030 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.641175032 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.641216040 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.641567945 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.642250061 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.642282009 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.642342091 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.642369032 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.642369032 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.642466068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.642466068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.642568111 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.642568111 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.642620087 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.643892050 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.643980980 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.643980980 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.644078016 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.644078970 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.644078970 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.644212008 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.644603968 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.644701958 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.646374941 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.646445036 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.646445036 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.646493912 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.646569014 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.646569014 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.646665096 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.647099972 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.649019003 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.649122000 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.651060104 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.651145935 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.651288033 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.651320934 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.651418924 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.651560068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.651650906 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.652014971 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.653217077 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.653326988 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.656491041 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.656567097 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.656567097 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.656620026 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.656686068 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.656800985 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.656897068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.656897068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.657387972 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.657711029 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.657743931 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.657805920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.657807112 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.657902002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.657902002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.658020973 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.658020973 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.658114910 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.658212900 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.658308983 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.658346891 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.658664942 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.658771992 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.660001993 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660092115 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660092115 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660213947 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660213947 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660213947 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660310984 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660310984 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660358906 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660409927 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660409927 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660409927 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.660583019 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.667876005 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.667912006 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.667932987 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.668145895 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.670073032 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.670113087 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.670279026 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.670420885 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.670420885 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.670667887 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.670758963 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.670780897 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.670850039 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.670953035 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.671087027 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.671266079 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.671499968 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.671590090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.671607971 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.671681881 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.671786070 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.671889067 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.672046900 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.672136068 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.672297955 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.672344923 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.672374010 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.672461033 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.672589064 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.672698975 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.672826052 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.672852039 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.672918081 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.673022985 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.673162937 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.673386097 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.673475027 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.673566103 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.673696041 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.673788071 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.673809052 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.673918009 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.673996925 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.674099922 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.674230099 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.674357891 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.674462080 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.674578905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.674671888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.674803019 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.674892902 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.675024033 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.675112963 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.675245047 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.675333977 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.675465107 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.675554991 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.675683975 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.676781893 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.676801920 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.676812887 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.677267075 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.677300930 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.678905010 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.678981066 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.679111004 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.679182053 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.679305077 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.679311991 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.679404020 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.679506063 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.679651976 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.679666996 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.679831982 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.679948092 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.680157900 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.680248976 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.680705070 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.680726051 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.680783987 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.680794001 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.680794001 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.680891991 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.680891991 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.680908918 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.680939913 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.681037903 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.681899071 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.682045937 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.682121992 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.682212114 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.682605982 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.682827950 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.682827950 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.682849884 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.683106899 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.683245897 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.683245897 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.683245897 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.683310986 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.683310986 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.683631897 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.684066057 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.685885906 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.685909033 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.687442064 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.687664032 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.687664032 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.687701941 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.687772989 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.687855005 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.687998056 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.688657999 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.691227913 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.691313028 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.693095922 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.693181992 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.693182945 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.693245888 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.693360090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.693360090 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.693526983 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.693969965 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.694319963 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.694421053 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.695943117 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.696023941 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.696024895 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.696080923 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.696109056 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.696155071 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.696222067 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.696624994 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.696729898 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.696774960 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.696814060 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.698776007 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.698776007 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.698874950 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.698990107 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.699117899 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.699215889 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.699311018 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.699338913 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.699429035 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.699471951 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.701014042 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.701035023 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.701119900 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.701119900 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.701217890 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.701217890 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.701272964 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.701314926 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.701316118 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.701360941 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.702172041 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.702263117 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.702263117 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.702320099 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.702368021 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.702415943 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.702496052 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.703898907 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.703994036 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.704660892 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.705360889 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.705449104 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.705449104 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.705499887 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.705646992 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.705646992 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.705688953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.706384897 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.706693888 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.706779957 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.707262039 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.708830118 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.708920002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.708920002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.708971977 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.708998919 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.709048033 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.709048033 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.709147930 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.709249020 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.709913015 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.709959984 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.711086988 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.711117983 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.711208105 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.711208105 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.711277008 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.711338997 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.711338997 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.711384058 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.711432934 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.711469889 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.711690903 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.711779118 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.712707996 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.712774038 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.712871075 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.712973118 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.712973118 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.713131905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.713131905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.713166952 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.713587046 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.713646889 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.714195967 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.714287043 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.714287043 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.714334011 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.714433908 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.714433908 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.714433908 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.714478970 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.714796066 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.714864016 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.715570927 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.715651989 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.715742111 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.715833902 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.715886116 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.715909004 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.715975046 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.716080904 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.716274977 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.716305971 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.716484070 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.716717958 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.716794014 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.716922998 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.717015028 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.717147112 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.717235088 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.717325926 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.717468977 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.717550993 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.717653036 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.717782021 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.717875957 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.764451981 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.824302912 CEST	49370	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:06.824331999 CEST	443	49370	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:06.824897051 CEST	49370	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:06.834182978 CEST	49370	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:06.834201097 CEST	443	49370	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:06.860114098 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.860132933 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.862303972 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.862303972 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.862303972 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.862319946 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.862401962 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.862401962 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.862451077 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.862550020 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.862967014 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.862988949 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.863122940 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.863132954 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.864821911 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.864845037 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.865736008 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.865825891 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.865904093 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.865904093 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866034985 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866034985 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866132021 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866132021 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866132021 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866144896 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.866267920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866267920 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866436958 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866528034 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.866775036 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.867892027 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.867914915 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.869884968 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.869998932 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.869998932 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.870012045 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.870026112 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.870218992 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.870218992 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.870223045 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.870238066 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.871781111 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.871793032 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.871872902 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.871872902 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.871988058 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.872066975 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.872066975 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.872114897 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.872272015 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.872291088 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.872416973 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.872426033 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.874614954 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.874691963 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.874691963 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.874789953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.874789953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.874789953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.874912024 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.875011921 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.875032902 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.876981020 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.877070904 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.877070904 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.877079010 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.877170086 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.877170086 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.877170086 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.877340078 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.877356052 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.877655983 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.877665997 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.878982067 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.879072905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.879072905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.879169941 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.879170895 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.879220009 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.879317045 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.879894972 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.879914045 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.881793022 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.881874084 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.881874084 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.881998062 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.881998062 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.903477907 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.903496027 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.903506994 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.903714895 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.905361891 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.905379057 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.905569077 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.905569077 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.905582905 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.905738115 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.905906916 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.906128883 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.906218052 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.906322002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.906452894 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.906543016 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.906555891 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.906672955 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.906750917 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.906856060 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.906999111 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.907089949 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.907181025 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.907272100 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.907282114 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.907402039 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.907506943 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.907741070 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.907845020 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.907933950 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.908039093 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.908138037 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.908169031 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.908242941 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.908258915 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.908351898 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.908508062 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.908600092 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.908689976 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.908792973 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.908922911 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909054041 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909286976 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909286976 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909296989 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.909384012 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909455061 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909585953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909585953 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909715891 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909715891 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909763098 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909813881 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909813881 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909813881 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.909909964 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.911056042 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.911262035 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.911360025 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.930778980 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.930804014 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.930816889 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.931032896 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.932666063 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.932684898 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.932756901 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.932756901 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.932777882 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.932852030 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.932852030 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.932972908 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.932972908 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933021069 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933031082 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.933070898 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933070898 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933168888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933168888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933168888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933271885 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933271885 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933320045 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933331013 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.933418989 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933418989 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933516026 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933516026 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933516979 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933526039 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.933614016 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.933665037 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.935307980 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935365915 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935367107 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935463905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935463905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935463905 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935587883 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935587883 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935633898 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935683966 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935683966 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935781956 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935781956 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935798883 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:06.935831070 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935929060 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935929060 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.935977936 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.936028004 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.936028004 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.936028004 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.936125994 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.936125994 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.936125994 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:06.936237097 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.040307999 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.136921883 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.137017012 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.137042046 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.137121916 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.137315989 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.137532949 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.137701988 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.137917042 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.137957096 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.138020992 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.138361931 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.138412952 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.138745070 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.138793945 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.139230013 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.139259100 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.139271975 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.139422894 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.141093969 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141094923 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141094923 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141205072 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.141246080 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.141267061 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.141288996 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141288996 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141288996 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141289949 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141289949 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141289949 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141330004 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.141375065 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.141407967 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141407967 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141407967 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141449928 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.141489029 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141489029 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141489983 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141680002 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141680956 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141680956 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141758919 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.141817093 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141817093 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141818047 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141886950 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141886950 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141928911 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.141980886 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141980886 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141980886 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.141982079 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.142041922 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.142041922 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.142041922 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.142086983 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.142127037 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144289017 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144351006 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144351006 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144445896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144445896 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144543886 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144543886 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144593000 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144691944 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144691944 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144691944 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144790888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144790888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144790888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144790888 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144895077 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144895077 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144992113 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.144992113 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.145040035 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.145138025 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.146691084 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.172894001 CEST	49366	443	192.168.11.12	151.101.3.8
Oct 2, 2024 06:03:07.172986031 CEST	443	49366	151.101.3.8	192.168.11.12
Oct 2, 2024 06:03:07.186026096 CEST	443	49370	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:07.186990976 CEST	49370	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:07.261174917 CEST	49370	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:07.261260033 CEST	443	49370	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:07.467653036 CEST	49370	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:07.467681885 CEST	443	49370	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:07.640841007 CEST	443	49370	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:07.641089916 CEST	443	49370	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:07.641556025 CEST	49370	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:07.641637087 CEST	49370	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:07.643579006 CEST	49370	443	192.168.11.12	17.253.13.134
Oct 2, 2024 06:03:07.643644094 CEST	443	49370	17.253.13.134	192.168.11.12
Oct 2, 2024 06:03:39.122783899 CEST	49489	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.122915983 CEST	443	49489	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.123513937 CEST	49489	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.124440908 CEST	49489	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.124526024 CEST	443	49489	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.437700033 CEST	443	49489	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.438612938 CEST	49489	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.438657045 CEST	49489	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.457931995 CEST	49489	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.458071947 CEST	443	49489	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.458372116 CEST	443	49489	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.458781958 CEST	49489	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.459060907 CEST	49489	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.482599974 CEST	49490	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.482688904 CEST	443	49490	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.483546972 CEST	49490	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.484731913 CEST	49490	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.484791040 CEST	443	49490	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.780663013 CEST	443	49490	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.781505108 CEST	49490	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.781505108 CEST	49490	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.786428928 CEST	49490	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.786638021 CEST	443	49490	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.787194014 CEST	443	49490	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.787239075 CEST	49490	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.787990093 CEST	49490	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.810086966 CEST	49491	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.810223103 CEST	443	49491	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:39.811104059 CEST	49491	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.812134981 CEST	49491	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:39.812222958 CEST	443	49491	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:40.108597040 CEST	443	49491	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:40.109463930 CEST	49491	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.109513044 CEST	49491	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.114434958 CEST	49491	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.114717007 CEST	443	49491	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:40.115288973 CEST	49491	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.144596100 CEST	49492	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.144725084 CEST	443	49492	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:40.145798922 CEST	49492	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.147104979 CEST	49492	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.147173882 CEST	443	49492	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:40.432852030 CEST	443	49492	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:40.433686018 CEST	49492	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.434007883 CEST	49492	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.439024925 CEST	49492	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:40.439315081 CEST	443	49492	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:40.439943075 CEST	49492	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.395672083 CEST	49493	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.395806074 CEST	443	49493	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:57.396519899 CEST	49493	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.397624969 CEST	49493	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.397727013 CEST	443	49493	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:57.680128098 CEST	443	49493	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:57.681010008 CEST	49493	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.681010008 CEST	49493	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.705791950 CEST	49493	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.706079960 CEST	443	49493	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:57.706684113 CEST	49493	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.772942066 CEST	49494	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.773049116 CEST	443	49494	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:57.776070118 CEST	49494	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.777131081 CEST	49494	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:57.777204990 CEST	443	49494	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:58.062875986 CEST	443	49494	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:58.063733101 CEST	49494	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:58.063954115 CEST	49494	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:58.072177887 CEST	49494	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:58.072446108 CEST	443	49494	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:58.073051929 CEST	49494	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:58.792063951 CEST	49344	80	192.168.11.12	23.213.224.212
Oct 2, 2024 06:03:58.920955896 CEST	80	49344	23.213.224.212	192.168.11.12
Oct 2, 2024 06:03:58.921601057 CEST	49344	80	192.168.11.12	23.213.224.212
Oct 2, 2024 06:03:59.199624062 CEST	49498	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:59.199793100 CEST	443	49498	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:59.200542927 CEST	49498	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:59.201589108 CEST	49498	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:59.201664925 CEST	443	49498	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:59.496428967 CEST	443	49498	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:59.497248888 CEST	49498	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:59.497250080 CEST	49498	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:59.501666069 CEST	49498	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:03:59.501920938 CEST	443	49498	151.101.131.6	192.168.11.12
Oct 2, 2024 06:03:59.502487898 CEST	49498	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.481889009 CEST	49501	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.482043982 CEST	443	49501	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:34.482882977 CEST	49501	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.484976053 CEST	49501	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.485054016 CEST	443	49501	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:34.766906977 CEST	443	49501	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:34.767802000 CEST	49501	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.767802000 CEST	49501	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.798702955 CEST	49501	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.798959017 CEST	443	49501	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:34.799562931 CEST	49501	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.842098951 CEST	49502	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.842200994 CEST	443	49502	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:34.842904091 CEST	49502	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.844322920 CEST	49502	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:34.844384909 CEST	443	49502	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:35.137852907 CEST	443	49502	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:35.138602018 CEST	49502	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.138849974 CEST	49502	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.144526005 CEST	49502	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.144602060 CEST	443	49502	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:35.144767046 CEST	443	49502	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:35.145240068 CEST	49502	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.145330906 CEST	49502	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.196266890 CEST	49503	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.196397066 CEST	443	49503	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:35.197098017 CEST	49503	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.199402094 CEST	49503	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.199469090 CEST	443	49503	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:35.496364117 CEST	443	49503	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:35.497189045 CEST	49503	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.497189045 CEST	49503	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.506077051 CEST	49503	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.506289959 CEST	443	49503	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:35.506825924 CEST	443	49503	151.101.131.6	192.168.11.12
Oct 2, 2024 06:04:35.506954908 CEST	49503	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.507334948 CEST	49503	443	192.168.11.12	151.101.131.6
Oct 2, 2024 06:04:35.532274008 CEST	49504	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:04:35.532371998 CEST	443	49504	151.101.195.6	192.168.11.12
Oct 2, 2024 06:04:35.533207893 CEST	49504	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:04:35.534519911 CEST	49504	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:04:35.534580946 CEST	443	49504	151.101.195.6	192.168.11.12
Oct 2, 2024 06:04:35.818480968 CEST	443	49504	151.101.195.6	192.168.11.12
Oct 2, 2024 06:04:35.819324017 CEST	49504	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:04:35.819324017 CEST	49504	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:04:35.829857111 CEST	49504	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:04:35.830070972 CEST	443	49504	151.101.195.6	192.168.11.12
Oct 2, 2024 06:04:35.830606937 CEST	443	49504	151.101.195.6	192.168.11.12
Oct 2, 2024 06:04:35.830773115 CEST	49504	443	192.168.11.12	151.101.195.6
Oct 2, 2024 06:04:35.831640005 CEST	49504	443	192.168.11.12	151.101.195.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 2, 2024 06:03:21.739370108 CEST	53	56798	1.1.1.1	192.168.11.12
Oct 2, 2024 06:04:34.345658064 CEST	59737	53	192.168.11.12	1.1.1.1
Oct 2, 2024 06:04:34.474740982 CEST	53	59737	1.1.1.1	192.168.11.12

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 2, 2024 06:04:34.345658064 CEST	192.168.11.12	1.1.1.1	0xf980	Standard query (0)	h3.apis.apple.map.fastly.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 2, 2024 06:03:05.236819983 CEST	1.1.1.1	192.168.11.12	0xacd7	No error (0)	appledownload.map.fastly.net		151.101.3.8	A (IP address)	IN (0x0001)	false
Oct 2, 2024 06:03:05.236819983 CEST	1.1.1.1	192.168.11.12	0xacd7	No error (0)	appledownload.map.fastly.net		151.101.67.8	A (IP address)	IN (0x0001)	false
Oct 2, 2024 06:03:05.236819983 CEST	1.1.1.1	192.168.11.12	0xacd7	No error (0)	appledownload.map.fastly.net		151.101.131.8	A (IP address)	IN (0x0001)	false
Oct 2, 2024 06:03:05.236819983 CEST	1.1.1.1	192.168.11.12	0xacd7	No error (0)	appledownload.map.fastly.net		151.101.195.8	A (IP address)	IN (0x0001)	false
Oct 2, 2024 06:03:13.098077059 CEST	1.1.1.1	192.168.11.12	0x18d9	No error (0)	templatesmetadata.office.net	templatesmetadata.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 06:04:34.474740982 CEST	1.1.1.1	192.168.11.12	0xf980	No error (0)	h3.apis.apple.map.fastly.net		151.101.195.6	A (IP address)	IN (0x0001)	false
Oct 2, 2024 06:04:34.474740982 CEST	1.1.1.1	192.168.11.12	0xf980	No error (0)	h3.apis.apple.map.fastly.net		151.101.131.6	A (IP address)	IN (0x0001)	false
Oct 2, 2024 06:04:34.474740982 CEST	1.1.1.1	192.168.11.12	0xf980	No error (0)	h3.apis.apple.map.fastly.net		151.101.67.6	A (IP address)	IN (0x0001)	false
Oct 2, 2024 06:04:34.474740982 CEST	1.1.1.1	192.168.11.12	0xf980	No error (0)	h3.apis.apple.map.fastly.net		151.101.3.6	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mesu.apple.com

updates.cdn-apple.com

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 2, 2024 06:03:00.899877071 CEST	151.101.195.6	443	192.168.11.12	49352	CN=bag.itunes.apple.com, O=Apple Inc., L=Cupertino, ST=California, C=US, SERIALNUMBER=C0806592, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US	CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 26 15:47:44 CEST 2024 Wed Apr 29 14:54:50 CEST 2020	Thu Dec 19 19:00:57 CET 2024 Thu Apr 11 01:59:59 CEST 2030	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47-49160-49170-10,65281-0-23-13-5-13172-18-16-11-10,29-23-24-25,0	5c118da645babe52f060d0754256a73c
Oct 2, 2024 06:03:00.899877071 CEST	151.101.195.6	443	192.168.11.12	49352	CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Apr 29 14:54:50 CEST 2020	Thu Apr 11 01:59:59 CEST 2030		5c118da645babe52f060d0754256a73c
Oct 2, 2024 06:03:01.134541035 CEST	17.253.13.134	443	192.168.11.12	49353	CN=mesu.apple.com, O=Apple Inc., ST=California, C=US C=US, ST=California, O=Apple Inc., CN=Apple Public Server ECC CA 12 - G1	C=US, ST=California, O=Apple Inc., CN=Apple Public Server ECC CA 12 - G1 CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jul 11 20:07:14 CEST 2024 Wed Jun 19 02:00:00 CEST 2019	Thu Apr 10 02:00:00 CEST 2025 Thu Dec 07 00:59:59 CET 2028	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47-49160-49170-10,65281-0-23-13-5-18-11-10,29-23-24-25,0	7b1ac424884b798ca987e3e27b99d1a8
Oct 2, 2024 06:03:01.134541035 CEST	17.253.13.134	443	192.168.11.12	49353	C=US, ST=California, O=Apple Inc., CN=Apple Public Server ECC CA 12 - G1	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Jun 19 02:00:00 CEST 2019	Thu Dec 07 00:59:59 CET 2028		7b1ac424884b798ca987e3e27b99d1a8
Oct 2, 2024 06:03:01.143744946 CEST	17.253.13.134	443	192.168.11.12	49354	CN=mesu.apple.com, O=Apple Inc., ST=California, C=US C=US, ST=California, O=Apple Inc., CN=Apple Public Server ECC CA 12 - G1	C=US, ST=California, O=Apple Inc., CN=Apple Public Server ECC CA 12 - G1 CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jul 11 20:07:14 CEST 2024 Wed Jun 19 02:00:00 CEST 2019	Thu Apr 10 02:00:00 CEST 2025 Thu Dec 07 00:59:59 CET 2028	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47-49160-49170-10,65281-0-23-13-5-18-11-10,29-23-24-25,0	7b1ac424884b798ca987e3e27b99d1a8
Oct 2, 2024 06:03:01.143744946 CEST	17.253.13.134	443	192.168.11.12	49354	C=US, ST=California, O=Apple Inc., CN=Apple Public Server ECC CA 12 - G1	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Jun 19 02:00:00 CEST 2019	Thu Dec 07 00:59:59 CET 2028		7b1ac424884b798ca987e3e27b99d1a8
Oct 2, 2024 06:03:01.286323071 CEST	17.253.13.134	443	192.168.11.12	49355	CN=mesu.apple.com, O=Apple Inc., ST=California, C=US C=US, ST=California, O=Apple Inc., CN=Apple Public Server ECC CA 12 - G1	C=US, ST=California, O=Apple Inc., CN=Apple Public Server ECC CA 12 - G1 CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jul 11 20:07:14 CEST 2024 Wed Jun 19 02:00:00 CEST 2019	Thu Apr 10 02:00:00 CEST 2025 Thu Dec 07 00:59:59 CET 2028	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47-49160-49170-10,65281-0-23-13-5-13172-18-16-11-10,29-23-24-25,0	5c118da645babe52f060d0754256a73c
Oct 2, 2024 06:03:01.286323071 CEST	17.253.13.134	443	192.168.11.12	49355	C=US, ST=California, O=Apple Inc., CN=Apple Public Server ECC CA 12 - G1	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Jun 19 02:00:00 CEST 2019	Thu Dec 07 00:59:59 CET 2028		5c118da645babe52f060d0754256a73c

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.11.12	49356	17.253.13.134	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 04:03:02 UTC	302	OUT	GET /assets/macos/com_apple_MobileAsset_KextDenyList/com_apple_MobileAsset_KextDenyList.xml HTTP/1.1 Host: mesu.apple.com Accept: / If-Modified-Since: Tue, 06 Apr 2021 18:14:44 GMT User-Agent: MobileAsset/1.1 Accept-Language: en-us Accept-Encoding: br, gzip, deflate Connection: keep-alive
2024-10-02 04:03:03 UTC	448	IN	HTTP/1.1 304 Not Modified Date: Wed, 02 Oct 2024 04:03:03 GMT Etag: "1afa42570224d35bc0a21a7660a0d130" Cache-Control: max-age=300 Vary: Accept-Encoding Connection: close Via: https/1.1 usmia1-edge-fx-005.ts.apple.com (acdn/255.14450), https/1.1 usmia1-edge-mx-015.ts.apple.com (acdn/255.14450), 1.1 df6c0e31a1933ce940fd0566dea8a45a.cloudfront.net (CloudFront) X-Cache: hit-stale CDNUUID: 1ec5da95-1756-4ed4-8261-dcd5cc7bbb2e-21011435273

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.11.12	49360	17.253.13.134	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 04:03:04 UTC	288	OUT	GET /assets/macos/com_apple_MobileAsset_Font5/com_apple_MobileAsset_Font5.xml HTTP/1.1 Host: mesu.apple.com Accept: / If-Modified-Since: Tue, 24 Mar 2020 18:25:48 GMT User-Agent: MobileAsset/1.1 Accept-Language: en-us Accept-Encoding: br, gzip, deflate Connection: keep-alive
2024-10-02 04:03:05 UTC	448	IN	HTTP/1.1 304 Not Modified Date: Wed, 02 Oct 2024 04:03:05 GMT Etag: "8c32d1b7427c4d24207476a02ce4102d" Cache-Control: max-age=300 Vary: Accept-Encoding Connection: close Via: https/1.1 usmia1-edge-fx-008.ts.apple.com (acdn/255.14450), https/1.1 usmia1-edge-mx-014.ts.apple.com (acdn/255.14450), 1.1 b7989b9b66051eb846e9d3655b3a98fc.cloudfront.net (CloudFront) X-Cache: hit-stale CDNUUID: 9f31e5f8-7765-4d4f-adb6-4c1ad367868b-21012015844

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.11.12	49362	17.253.13.134	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 04:03:04 UTC	320	OUT	GET /assets/macos/com_apple_MobileAsset_PKITrustSupplementals/com_apple_MobileAsset_PKITrustSupplementals.xml HTTP/1.1 Host: mesu.apple.com Accept: / If-Modified-Since: Tue, 09 Apr 2019 19:09:54 GMT User-Agent: MobileAsset/1.1 Accept-Language: en-us Accept-Encoding: br, gzip, deflate Connection: keep-alive
2024-10-02 04:03:05 UTC	781	IN	HTTP/1.1 200 OK Content-Type: text/xml Content-Length: 4094 Date: Wed, 02 Oct 2024 04:03:05 GMT Last-Modified: Thu, 26 Sep 2024 23:10:18 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: mUjgr.UYOK2VP.1J3JRJGiARVCrLxDMt Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: hit-stale, hit-stale Via: https/1.1 usmia1-edge-mx-008.ts.apple.com (acdn/255.14450), 1.1 d7e4efbf04cd06b48f67d091d80356aa.cloudfront.net (CloudFront), https/1.1 usmia1-edge-fx-007.ts.apple.com (acdn/255.14450) X-Amz-Cf-Pop: MIA50-P3 X-Amz-Cf-Id: 3B_RPLnUMJI_F6j_DJYqYOAZDXMfybyj_Ov02ELQuIl_0L9m1FNRng== Cache-Control: max-age=300, public CDNUUID: 709766ea-1331-4616-b901-0b08cf394360-3585471782 Etag: "e723639cf4b0ff343e731845567f8a4b" Age: 0 Connection: close
2024-10-02 04:03:05 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 70 6c 69 73 74 20 50 55 42 4c 49 43 20 22 2d 2f 2f 41 70 70 6c 65 2f 2f 44 54 44 20 50 4c 49 53 54 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 70 6c 65 2e 63 6f 6d 2f 44 54 44 73 2f 50 72 6f 70 65 72 74 79 4c 69 73 74 2d 31 2e 30 2e 64 74 64 22 3e 0a 3c 70 6c 69 73 74 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 0a 3c 64 69 63 74 3e 0a 09 3c 6b 65 79 3e 41 73 73 65 74 54 79 70 65 3c 2f 6b 65 79 3e 0a 09 3c 73 74 72 69 6e 67 3e 63 6f 6d 2e 61 70 70 6c 65 2e 4d 6f 62 69 6c 65 41 73 73 65 74 2e 50 4b 49 54 72 75 73 74 53 75 70 70 6c 65 6d 65 6e 74 61 6c 73 3c 2f 73 74 72 69 6e 67 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>AssetType</key><string>com.apple.MobileAsset.PKITrustSupplementals</string>
2024-10-02 04:03:05 UTC	1300	IN	Data Raw: 09 09 09 3c 69 6e 74 65 67 65 72 3e 32 3c 2f 69 6e 74 65 67 65 72 3e 0a 09 09 09 3c 6b 65 79 3e 5f 43 6f 6d 70 72 65 73 73 69 6f 6e 41 6c 67 6f 72 69 74 68 6d 3c 2f 6b 65 79 3e 0a 09 09 09 3c 73 74 72 69 6e 67 3e 7a 69 70 3c 2f 73 74 72 69 6e 67 3e 0a 09 09 09 3c 6b 65 79 3e 5f 43 6f 6e 74 65 6e 74 56 65 72 73 69 6f 6e 3c 2f 6b 65 79 3e 0a 09 09 09 3c 69 6e 74 65 67 65 72 3e 31 30 30 35 3c 2f 69 6e 74 65 67 65 72 3e 0a 09 09 09 3c 6b 65 79 3e 5f 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 3c 2f 6b 65 79 3e 0a 09 09 09 3c 69 6e 74 65 67 65 72 3e 32 33 36 39 38 3c 2f 69 6e 74 65 67 65 72 3e 0a 09 09 09 3c 6b 65 79 3e 5f 49 73 5a 69 70 53 74 72 65 61 6d 61 62 6c 65 3c 2f 6b 65 79 3e 0a 09 09 09 3c 74 72 75 65 2f 3e 0a 09 09 09 3c 6b 65 79 3e 5f 4d 61 73 74 65 72 65 Data Ascii: <integer>2</integer><key>_CompressionAlgorithm</key><string>zip</string><key>_ContentVersion</key><integer>1005</integer><key>_DownloadSize</key><integer>23698</integer><key>_IsZipStreamable</key><true/><key>_Mastere
2024-10-02 04:03:05 UTC	1300	IN	Data Raw: 41 34 49 42 44 77 41 77 67 67 45 4b 41 6f 49 42 41 51 43 31 79 34 44 34 56 59 42 50 48 4c 77 6e 48 6b 31 71 66 69 31 46 34 39 45 33 4d 6c 36 37 35 45 6c 59 59 41 46 67 68 71 70 41 69 4b 4f 71 0a 09 65 61 67 4c 56 5a 55 38 7a 4b 75 50 77 36 35 30 4e 48 41 43 76 4e 4a 62 6a 4b 42 6a 4d 73 57 64 57 61 46 4d 6a 2f 37 63 32 54 42 35 49 6b 4a 77 69 36 31 59 36 42 2b 75 56 4b 37 38 57 39 75 39 49 2f 68 46 0a 09 41 4b 30 70 57 63 4d 39 59 35 4b 62 4b 4d 76 7a 34 77 45 77 74 36 34 45 58 66 53 38 65 56 42 52 6d 71 68 2f 32 39 79 67 78 4e 39 4e 74 42 62 48 45 69 47 69 47 51 38 76 78 49 56 33 55 36 46 6f 6d 4e 64 6d 0a 09 78 4b 50 4d 37 56 5a 6d 73 79 46 49 78 51 35 48 73 78 67 48 62 30 73 6b 78 6c 44 49 64 65 50 74 59 73 48 4c 6d 70 4b 39 50 58 34 33 4b 33 73 42 54 Data Ascii: A4IBDwAwggEKAoIBAQC1y4D4VYBPHLwnHk1qfi1F49E3Ml675ElYYAFghqpAiKOqeagLVZU8zKuPw650NHACvNJbjKBjMsWdWaFMj/7c2TB5IkJwi61Y6B+uVK78W9u9I/hFAK0pWcM9Y5KbKMvz4wEwt64EXfS8eVBRmqh/29ygxN9NtBbHEiGiGQ8vxIV3U6FomNdmxKPM7VZmsyFIxQ5HsxgHb0skxlDIdePtYsHLmpK9PX43K3sBT
2024-10-02 04:03:05 UTC	194	IN	Data Raw: 62 32 66 48 71 71 6e 56 68 35 4a 4a 31 71 52 75 6a 56 48 6c 4d 72 39 75 50 50 6d 4c 35 0a 09 43 36 69 67 76 79 4d 43 6a 38 53 2f 75 6c 78 64 6f 44 77 42 4b 34 4b 33 55 4b 52 6c 6b 46 53 6d 31 30 62 78 78 79 76 74 78 6d 69 4d 6f 76 69 77 63 6a 6d 2b 47 54 78 38 43 66 44 39 53 6e 70 6f 4e 34 4e 32 0a 09 77 77 3d 3d 0a 09 3c 2f 64 61 74 61 3e 0a 09 3c 6b 65 79 3e 53 69 67 6e 69 6e 67 4b 65 79 3c 2f 6b 65 79 3e 0a 09 3c 73 74 72 69 6e 67 3e 41 73 73 65 74 4d 61 6e 69 66 65 73 74 53 69 67 6e 69 6e 67 3c 2f 73 74 72 69 6e 67 3e 0a 3c 2f 64 69 63 74 3e 0a 3c 2f 70 6c 69 73 74 3e 0a Data Ascii: b2fHqqnVh5JJ1qRujVHlMr9uPPmL5C6igvyMCj8S/ulxdoDwBK4K3UKRlkFSm10bxxyvtxmiMoviwcjm+GTx8CfD9SnpoN4N2ww==</data><key>SigningKey</key><string>AssetManifestSigning</string></dict></plist>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.11.12	49361	17.253.13.134	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 04:03:04 UTC	312	OUT	GET /assets/macos/com_apple_MobileAsset_routined_defaults/com_apple_MobileAsset_routined_defaults.xml HTTP/1.1 Host: mesu.apple.com Accept: / If-Modified-Since: Tue, 25 Jun 2019 19:58:17 GMT User-Agent: MobileAsset/1.1 Accept-Language: en-us Accept-Encoding: br, gzip, deflate Connection: keep-alive
2024-10-02 04:03:05 UTC	443	IN	HTTP/1.1 304 Not Modified Date: Wed, 02 Oct 2024 04:03:05 GMT Etag: "3cbf2f96d44cc62a0c56a8b0c5259f89" Cache-Control: max-age=300 Vary: Accept-Encoding Connection: close Via: https/1.1 usmia1-edge-fx-006.ts.apple.com (acdn/255.14450), 1.1 f2b25186ddd6c6eba84de9b968deb3f0.cloudfront.net (CloudFront), https/1.1 usmia1-edge-mx-016.ts.apple.com (acdn/255.14450) X-Cache: miss CDNUUID: f1b0dacb-7b56-4b18-ab06-d031afb5d9da-20944221290

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.11.12	49364	151.101.3.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 04:03:05 UTC	369	OUT	GET /2021/mobileassets/041-40471/B96AF6E1-5FF6-4786-9956-944A1AFE086A/com_apple_MobileAsset_KextDenyList/404087a7302927411b6ea0e05114d2c68355185e.zip HTTP/1.1 Host: updates.cdn-apple.com Accept: / Accept-Language: en-us Connection: keep-alive Accept-Encoding: br, gzip, deflate User-Agent: mobileassetd (unknown version) CFNetwork/976 Darwin/18.2.0 (x86_64)
2024-10-02 04:03:05 UTC	810	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9666 Content-Type: binary/octet-stream x-amz-replication-status: REPLICA Last-Modified: Thu, 01 Apr 2021 18:53:40 GMT ETag: "8f73807ce1a48ff98008a03d9669362f" x-amz-server-side-encryption: AES256 x-amz-version-id: .l7Qpn6hTdnLFBARDkSFQPRgRWtNgdJJ Server: AmazonS3 Via: 1.1 4715507645a6516d2df35cd342cb5be0.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: yeUTcXhYrjr4z6xgM-U4e71qe_yDDG4Nj_Gaz8bV3h9NjGZeyfjANw== Cache-Control: max-age=2592000, public Accept-Ranges: bytes Age: 594940 Date: Wed, 02 Oct 2024 04:03:05 GMT x-cdn: fsly X-Served-By: cache-iad-kiad7000149-IAD, cache-pdk-kpdk1780067-PDK X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 496, 0 X-Timer: S1727841786.876857,VS0,VE1
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 50 4b 03 04 14 00 00 08 00 00 09 7b 48 52 00 00 00 00 00 00 00 00 00 00 00 00 09 00 10 00 4d 45 54 41 2d 49 4e 46 2f 55 58 0c 00 00 00 00 00 22 c8 21 60 f5 01 f5 01 50 4b 03 04 14 00 00 00 08 00 09 7b 48 52 bb 69 4e 69 8b 00 00 00 ab 00 00 00 24 00 10 00 4d 45 54 41 2d 49 4e 46 2f 63 6f 6d 2e 61 70 70 6c 65 2e 5a 69 70 4d 65 74 61 64 61 74 61 2e 70 6c 69 73 74 55 58 0c 00 22 c8 21 60 22 c8 21 60 f5 01 f5 01 4b 2a c8 c9 2c 2e 31 30 b8 ca c8 c4 cc c2 ca c6 ce c1 c9 15 2f 20 16 5c 92 98 97 92 58 94 e2 92 59 94 9a 5c 92 5f 54 19 90 5a 94 5b 1c 1e 96 5a 54 9c 99 9f 07 54 10 92 5f 92 98 13 9a 97 9c 9f 5b 50 94 5a 5c 9c 9a e2 54 59 92 5a 1c 1d 94 9a 9c 5f 94 e2 9c 5f 9a 57 12 2f 20 08 33 c5 2d 33 27 15 6c 80 a0 e3 5b 01 26 c1 80 e7 02 5c c2 ff c1 a0 71 09 87 b0 Data Ascii: PK{HRMETA-INF/UX"!`PK{HRiNi$META-INF/com.apple.ZipMetadata.plistUX"!`"!`K*,.10/ \XY\_TZ[ZTT_[PZ\TYZ__W/ 3-3'l[&\q
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 3f 93 67 e9 7a bc 03 4e 33 16 00 47 2b c0 89 29 58 06 68 1f c4 68 4f 0c 92 32 fa 7b 0b bc a2 2b c1 34 15 52 bc 4f d6 fe 2d b6 12 91 03 8e a6 62 cb cf c0 27 56 af db ed 9a 68 69 2a 52 54 25 72 a3 80 d0 e0 a5 54 c6 b2 70 a7 95 92 62 2c 6a cb e9 1d 27 e7 d2 e7 f0 56 49 aa 12 ee 1d 88 50 95 d9 4a fc 1a bf e9 ef 6e ef d7 54 aa 60 a1 f7 70 d3 3c 2d 50 ab a6 c4 5e b5 c0 a6 d1 46 ad c1 c4 18 79 bf 3c 41 19 bc 6b f5 fb 07 87 a1 79 cd fc 18 72 ca 66 bc f0 a6 3e 83 70 eb c2 25 59 64 27 e5 d9 c1 d2 f8 ee 0e 3d 60 73 2c bb 55 7c 05 22 17 8f 17 37 7e 70 eb 15 0e 7e 62 3e 5b a0 e6 45 26 68 ec cb 2c 0a 2f a5 82 28 45 85 43 23 9c d8 02 62 de 6a 55 76 36 01 2e 20 ac 9b dd a1 be 1b ed ca 2d b4 93 67 3a f9 80 51 ef 1f 90 e3 ce 22 15 f6 9f c5 db f7 18 1d 33 a9 c7 71 fe 7f bd Data Ascii: ?gzN3G+)XhhO2{+4RO-b'Vhi*RT%rTpb,j'VIPJnT`p<-P^Fy<Akyrf>p%Yd'=`s,U\|"7~p~b>[E&h,/(EC#bjUv6. -g:Q"3q
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 5b f5 be c8 53 e6 d7 7e 4d 24 5e a5 d6 4d 6d df ae 34 1c bd a3 f1 89 f2 7e 42 37 cb f3 48 6e f5 ef 0e f9 12 31 7b d3 97 c6 3f 84 89 70 16 e4 8b 16 08 89 80 a6 bd 79 f9 a9 c1 e2 c5 91 ef c1 f0 b7 17 25 4c 0d 63 10 c6 84 05 d1 9c 64 4c 32 ff 0f 6a ac ff 1f 1c 54 02 15 85 0e 62 85 42 2f 56 18 37 9e c2 86 88 2a a0 92 d0 23 b9 2f a2 2f fe fc 14 06 d7 c0 0b dc 1c 8f 53 e2 52 e5 fb 99 44 ef 68 4c 87 55 d9 69 0b b9 aa f6 e7 c7 42 f0 41 9d 83 bf 95 ae b2 db 4d bb 19 62 bd 87 d2 e7 59 e9 a8 5b 64 40 6b 1d d4 a8 d4 96 f4 b4 ac e9 7c 85 b3 4b a8 2f ea 10 7f 9e a0 43 45 4f 3c 6a b1 7b ae fe c9 74 78 5d a0 82 62 e6 70 47 e1 a6 5f 3b 9a 8f ad 29 ca ed cb be be fc 02 61 37 ab fc 12 94 9d 12 d9 6d 1d 11 3d 98 d0 70 64 11 61 da 78 38 b9 39 28 30 cb 06 07 a8 75 07 17 aa a5 Data Ascii: [S~M$^Mm4~B7Hn1{?py%LcdL2jTbB/V7*#//SRDhLUiBAMbY[d@k\|K/CEO<j{tx]bpG_;)a7m=pdax89(0u
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: e6 8d d5 d7 f2 3c 24 19 9f f5 3f fa 55 88 61 92 94 56 ad 97 d7 e0 76 d6 66 6a ad 74 2a eb 62 69 3f 19 e9 a8 8d 79 24 eb f8 58 b7 65 2c 3a e1 f5 d0 39 25 a5 ca fe 64 bc 69 8b 4e 57 af ec 03 c6 fd 52 6d 2d f9 a9 92 13 d9 1c 5e c8 4d b5 00 0c 61 ef 99 69 07 e7 b7 21 e6 45 8a ef ac 97 86 03 3b 48 91 53 32 fc b6 81 91 32 c2 8c 57 64 00 ed 3a 95 14 3f 65 29 61 b0 7e a4 4f 76 09 b6 ef 22 47 c5 e3 5c af d9 d6 fa 34 9f de 8a dc 3a e3 d5 b3 3d 5d 9b 8a 92 4b 3c 6b d5 ae ec 5b ad bd 48 ef 96 ac fa 79 f7 82 60 6a d3 9a 14 25 f2 b1 1d 5d 7d 83 1f db 31 12 2b 4e c7 c6 2e 21 f2 45 49 30 be 08 f0 b9 4d f0 e9 fb bb db ab 6f 1b bf 05 67 c8 62 3e 22 01 54 fe fa fe 30 a2 44 a9 05 87 4a 90 f0 e7 1d 14 11 8f 02 66 bb f6 06 42 a5 2e 9d 83 c7 fd d2 12 1f db 17 f7 58 bb 62 27 c4 Data Ascii: <$?UaVvfjt*bi?y$Xe,:9%diNWRm-^Mai!E;HS22Wd:?e)a~Ov"G\4:=]K<k[Hy`j%]}1+N.!EI0Mogb>"T0DJfB.Xb'
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: a8 fc 76 fa 6e 3e 5f 0f e3 4d fc c2 fd 82 67 47 37 79 b6 2e 7c 17 56 f7 e3 c7 04 fd d3 59 c6 d0 3b ba 19 78 31 42 f5 dc f1 9b cf 6c 7c 2f 9c 29 b2 90 0c 26 bb 62 7c 51 91 73 d1 92 35 e5 a8 a5 b1 39 b0 2c 41 e3 2f 57 9b 8b d4 d9 28 d2 4c 99 a3 d0 d6 3c 04 d2 e7 69 3f 31 c5 26 bf 0e 1f 47 e8 e7 40 19 d3 75 fe 92 d6 a5 ed 3e 25 6c 05 2a d7 f8 6d 30 13 ff 09 89 fb 19 cf 98 e6 cf cf f7 fe e3 f1 f1 97 63 9e 04 cc 5f fe 14 b1 9f 87 1e 1f ed a9 c6 3d 1e bc ff 39 b2 f7 1f e3 15 44 89 d9 89 90 39 fb 14 84 57 6c 94 74 81 45 91 a1 c6 2a ab 94 36 f9 e2 ac 31 b1 44 ab 45 a0 a2 a3 13 54 6d 55 ce 6f 83 d7 c1 3c f5 dd aa a5 d3 3f 9a 83 11 b8 fb c4 dc 2d 54 06 f5 42 4c 06 ab 66 0a 2a 19 57 7d a1 5a 4a 34 a1 28 6f aa 65 0d d8 94 49 a1 3a e1 54 92 56 b3 32 be 2a cf 1c c9 c8 Data Ascii: vn>_MgG7y.\|VY;x1Bl\|/)&b\|Qs59,A/W(L<i?1&G@u>%lm0c_=9D9WltE61DETmUo<?-TBLfW}ZJ4(oeI:TV2
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: f1 54 af b6 f3 f5 ac 31 66 87 40 c1 06 4d b5 40 5e 57 61 8d 53 88 a3 80 14 8d 39 b2 f6 95 05 09 15 90 98 90 11 de 07 70 5c 4d 4e 15 88 0e 9b b5 50 2a 79 72 d5 56 78 cc ff 1b a0 50 28 77 08 cf a6 1f 3f dd fb c0 24 2a 55 49 c1 2f 67 9f 1c 17 2a 9a 7d 31 d5 05 29 14 8a 25 f1 28 29 ac 0e 35 17 e1 e1 aa 4d d6 59 47 ad 8d 44 e5 fc 66 19 31 42 74 ce c3 79 cf bc 48 b7 03 af 9a da ce ee 4b 65 f3 af ba 63 e2 52 42 aa 46 c4 66 72 ff 34 90 d1 0c da 72 91 a3 1f 4d 75 31 b0 39 52 88 c2 a1 20 9c a8 42 3b a4 58 a5 76 c0 2f a9 50 61 31 9d f1 d8 e2 e1 9e b6 6a dc 3c 62 fc cd 23 b7 9f ff f8 3e 6c 3f 95 b0 90 7c 0a b4 64 92 24 30 95 57 c2 aa 40 10 ed 50 ef c1 d6 6c b2 42 70 59 6c 97 b0 89 d9 49 12 63 82 ca 80 7c 24 9b cc 56 41 c6 b3 a1 9d 53 73 7a bb c8 bf d2 c0 df a1 7d 2a Data Ascii: T1f@M@^WaS9p\MNPyrVxP(w?$UI/g}1)%()5MYGDf1BtyHKecRBFfr4rMu19R B;Xv/Pa1j<b#>l?\|d$0W@PlBpYlIc\|$VASsz}
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: c9 2c 2e 31 30 b8 c2 c8 c4 cc c2 ca c6 ce 17 2f 20 e5 ec e6 54 9a 97 92 93 1a 9c 91 5f 54 12 96 5a 54 9c 99 9f 17 5c 52 94 99 97 1e 2f 20 04 93 f4 4c 49 cd 2b c9 4c cb 4c 2d 8a 17 10 f5 cd 4f ca cc 49 75 2c 2e 4e 2d 09 28 ca 2f 48 2d 2a c9 4c 2d 8e 81 29 f5 4b cc 4d 0d 32 36 8b 17 50 4a ce cf d5 4b 2c 28 c8 49 d5 43 d2 a1 e7 9d 5a 51 e2 92 9a 57 e9 03 74 c9 65 0e 4e 2e 6e 1e 5e a0 99 f1 ce f9 b9 05 89 25 99 40 75 99 25 95 50 67 c4 c5 c7 07 a5 16 96 66 16 a5 a6 38 55 fa 07 c7 0b f0 03 95 e5 95 00 9d 02 55 20 c0 c8 29 a0 12 83 6c 22 87 a0 9e 73 74 46 f6 84 e9 eb f7 5d b8 74 f9 2a 03 18 30 32 42 68 06 7e 06 54 f0 08 00 50 4b 01 02 1e 03 14 00 00 08 00 00 09 7b 48 52 00 00 00 00 00 00 00 00 00 00 00 00 09 00 0c 00 00 00 00 00 00 00 00 40 ed 41 00 00 00 00 4d Data Ascii: ,.10/ T_TZT\R/ LI+LL-OIu,.N-(/H-L-)KM26PJK,(ICZQWteN.n^%@u%Pgf8UU )l"stF]t02Bh~TPK{HR@AM
2024-10-02 04:03:05 UTC	20	IN	Data Raw: 05 06 00 00 00 00 0c 00 0c 00 90 04 00 00 1c 21 00 00 00 00 Data Ascii: !

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.11.12	49365	151.101.3.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 04:03:05 UTC	366	OUT	GET /2024/patches/052-54451/D609556E-69B1-482E-9C33-B2E3510A1311/com_apple_MobileAsset_TimeZoneUpdate/c5a4d0df08e8faecf4faebbbadc4d96a07d9d990.zip HTTP/1.1 Host: updates.cdn-apple.com Accept: / Accept-Language: en-us Connection: keep-alive Accept-Encoding: br, gzip, deflate User-Agent: mobileassetd (unknown version) CFNetwork/976 Darwin/18.2.0 (x86_64)
2024-10-02 04:03:05 UTC	975	IN	HTTP/1.1 200 OK Connection: close Content-Length: 568729 Content-Type: binary/octet-stream x-amz-replication-status: COMPLETED Last-Modified: Tue, 13 Feb 2024 18:29:53 GMT ETag: "ba17f6fc89141bd64effb2e5065b8c97" x-amz-server-side-encryption: AES256 x-amz-meta-digest-sh1: 37984d682973375ad4ccfafb5117e3b833b586dc x-amz-meta-digest-sha256: 3d0247fae4fe69f45d7740508261cd447bd036cf74b1eec30eb52f657882879c x-amz-version-id: fvvl15pBSo72r19fxAhSvZtBMc4JsbVb Server: AmazonS3 Via: 1.1 9bfafde51fc331b971140cbd2b98172e.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: NOk3Yiv60idWOcrwMOH_TFGNKzD1j88TXnEkT1_z-TrJJvd48BI_ZA== Cache-Control: max-age=2592000, public Accept-Ranges: bytes Date: Wed, 02 Oct 2024 04:03:05 GMT Age: 1882261 x-cdn: fsly X-Served-By: cache-iad-kjyo7100067-IAD, cache-pdk-kpdk1780091-PDK X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 124007, 1 X-Timer: S1727841786.882393,VS0,VE2
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 50 4b 03 04 14 00 00 08 00 00 29 5f 49 58 00 00 00 00 00 00 00 00 00 00 00 00 09 00 10 00 4d 45 54 41 2d 49 4e 46 2f 55 58 0c 00 00 00 00 00 9d 83 c6 65 f5 01 f5 01 50 4b 03 04 14 00 00 00 08 00 29 5f 49 58 4c 24 4f 8a 8e 00 00 00 ae 00 00 00 24 00 10 00 4d 45 54 41 2d 49 4e 46 2f 63 6f 6d 2e 61 70 70 6c 65 2e 5a 69 70 4d 65 74 61 64 61 74 61 2e 70 6c 69 73 74 55 58 0c 00 9d 83 c6 65 9d 83 c6 65 f5 01 f5 01 4b 2a c8 c9 2c 2e 31 30 b8 ca c8 c4 cc c2 ca c6 ce c1 c9 15 2f 20 16 5c 92 98 97 92 58 94 e2 92 59 94 9a 5c 92 5f 54 19 90 5a 94 5b 1c 1e 96 5a 54 9c 99 9f 07 54 10 92 5f 92 98 13 9a 97 9c 9f 5b 50 94 5a 5c 9c 9a e2 54 59 92 5a 1c 1d 94 9a 9c 5f 94 e2 9c 5f 9a 57 12 2f 20 08 33 c5 2d 33 27 15 6c 80 a0 e3 5b 01 26 21 06 81 d4 6f 82 4c a5 c2 ff c1 a0 71 Data Ascii: PK)_IXMETA-INF/UXePK)_IXL$O$META-INF/com.apple.ZipMetadata.plistUXeeK*,.10/ \XY\_TZ[ZTT_[PZ\TYZ__W/ 3-3'l[&!oLq
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: b5 10 1b db f1 51 32 d1 c7 78 78 19 87 31 da 12 b3 4e 5b 62 d6 39 a6 d3 a2 74 6a 3a 63 29 5d 92 e3 64 ab 94 84 68 5c 5a 92 62 51 ea a1 ac 87 1d 22 f3 e9 71 65 49 89 6b 7a 18 6d d0 74 19 57 23 33 9b 49 45 e5 05 32 9e d1 23 19 e6 e0 26 24 15 4e 63 42 81 aa 68 2f 14 55 b6 14 e6 93 e2 52 46 e2 04 8d c2 8d 9e 8a 4a f1 b8 9d 41 3e 45 09 69 d6 fc f7 69 6a 44 a3 d6 ee cb 48 6a 42 d2 c9 a4 9c 44 3f 27 e5 c5 e0 80 14 97 d1 37 a4 51 6e 8f 2c b1 71 e8 db 4e d9 39 f8 93 30 e3 27 35 d8 4a 10 d5 b0 d1 9f 92 62 dc 07 4f 49 49 43 0a d2 07 61 17 aa 4c 53 74 29 62 48 19 32 25 eb 06 99 c2 3c 52 92 49 85 fa f0 a9 a8 06 7f 72 8a d5 c2 29 45 d6 75 39 e8 53 f6 1a 72 1c 7e d0 8f e9 27 11 bf 9c 09 45 e5 78 1c 0f f8 a1 0d dc ab 31 8d f8 e9 1c a4 79 0c cc 68 29 21 13 ff 82 ac 87 e3 Data Ascii: Q2xx1N[b9tj:c)]dh\ZbQ"qeIkzmtW#3IE2#&$NcBh/URFJA>EiijDHjBD?'7Qn,qN90'5JbOIICaLSt)bH2%<RIr)Eu9Sr~'Ex1yh)!
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 69 58 73 8c ca 00 56 01 6a 58 ce f6 a0 e3 69 87 fe 06 b0 15 70 3e 61 d0 0e d9 ed 19 64 91 66 0c be 65 41 75 08 17 53 5a 2e 1b 44 c9 8e c9 32 28 ab 08 ef 1c 6c 5a d7 94 b4 cd 8b 7d 97 25 18 0a 63 b1 76 36 6c 48 41 18 24 27 6d cd c1 db c2 d6 17 d8 66 cc 94 0d 63 86 23 72 8d 3b 9b 43 65 08 87 97 ec b2 47 e2 52 28 7b 6c 47 b4 70 1a fb 61 07 af a5 72 72 d0 71 0f d2 b8 d3 21 82 3b 0a 3b 8a c5 c6 10 51 af e1 68 23 44 69 39 21 c5 b3 32 65 a4 bd 70 0c 0e 49 46 72 f8 80 51 78 f1 39 e9 14 07 bf 90 95 2c eb 08 60 e0 57 ec 31 e1 fb 20 f8 7c 55 3b 25 4f 88 e8 5e 56 23 f9 99 a7 64 6c 59 c4 5a 93 93 14 40 a8 1e 1c 50 d2 99 bc 94 19 79 41 72 91 2a 6a 88 da 74 2a 2f 65 27 0d ec a5 50 ae 9c ba 58 67 66 63 41 b1 b5 3a b6 17 c1 bc c3 32 b6 a2 04 a7 61 6c c5 82 9f 71 70 d8 a0 Data Ascii: iXsVjXip>adfeAuSZ.D2(lZ}%cv6lHA$'mfc#r;CeGR({lGparrq!;;Qh#Di9!2epIFrQx9,`W1 \|U;%O^V#dlYZ@PyArjt/e'PXgfcA:2alqp
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 42 5b 60 89 fa 75 25 c5 cf 43 1c 22 0d 83 12 1c 55 e2 8e 57 67 f4 20 6a 91 5a 83 25 18 32 42 d4 ec 2d 7e 14 5b 3c 3d ed 10 4c 28 d8 a2 32 2f 6a 8b 60 84 c1 51 c4 aa 0e 99 4f 8e d3 dd 62 56 13 a6 10 7b 44 1d bc 3f 03 33 ca 90 01 7f 60 e3 c0 60 80 0c f9 03 1b 86 28 4d 87 b6 8c f8 02 e2 d5 12 7c 36 7d 01 12 96 12 96 00 a1 28 62 3d 8b a5 c5 c1 aa 55 4b 80 e5 04 cb bb e0 b0 af 8f e8 18 01 9b d7 a9 fd 9b 1c 62 46 25 15 c7 36 c8 96 18 a9 14 36 79 16 0f 3f 22 d1 7d ac 2d 08 63 d0 9d 3c 3d 5e 95 ad 22 e1 b7 21 80 8b 31 79 5c 10 5c 3a 72 c0 1d 3b 9a 30 a2 cc ea f4 58 45 b7 04 88 d1 54 ba 34 0b 1e 16 80 02 63 8a c9 8f a5 e2 32 8d f6 7c 76 97 c7 a8 5f a0 5e 55 f0 f0 b8 8e 02 c6 e9 8c 47 1b a1 06 4b a4 c8 0b e6 fd 04 6c 45 b3 8a 9a 98 47 eb e6 d9 7b 49 21 d0 e8 9b 2c Data Ascii: B[`u%C"UWg jZ%2B-~[<=L(2/j`QObV{D?3``(M\|6}(b=UKbF%66y?"}-c<=^"!1y\\:r;0XET4c2\|v_^UGKlEG{I!,
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 9c 4e 33 1b a7 fe 6f 11 a3 b1 87 f9 52 37 6b ed 63 36 1d 66 d6 96 6d c5 dc 33 c9 39 7d 0f 30 6d 24 2d f9 1c f4 1f 65 e5 66 cf b6 a8 b0 b2 24 fe 2a ac 9c 54 56 39 dc 9f 24 d0 0b b3 1c 5d 58 e1 d1 f0 25 9a 35 23 ed f6 d0 1a 75 e6 65 b3 c7 c2 40 0f 69 9b b2 e5 3e d1 26 7b 96 98 72 03 f7 21 a6 21 a7 7c 1a 34 c3 34 11 cd e9 af 0c 89 b9 72 0d 31 9f a1 b1 fe 1f cd e6 0a 9f 0d d9 f2 6d 78 3a ce 46 31 5b 3e 6d f5 cb 5e f7 54 d1 d6 68 4e 7f 77 13 ee 45 d2 79 23 4f 73 47 58 4b 73 e7 11 5d c9 9c cf 50 9f 17 42 da 1c d3 ec d1 6c 7d a6 be 2e d7 96 75 96 2f 9a 37 d2 b3 62 0c 53 39 29 bb 99 65 ca 6c 55 cb 6e 41 3f e1 eb 51 8c cd 76 67 8a d3 6b 6b 79 23 68 7a d7 48 8e 6e 82 d0 65 88 d9 2e 5f d9 b9 25 05 d9 ea 6b 5a 73 ca b2 f3 39 36 d3 54 36 67 4c 4b 37 d7 62 73 2d b4 6d Data Ascii: N3oR7kc6fm39}0m$-ef$*TV9$]X%5#ue@i>&{r!!\|44r1mx:F1[>m^ThNwEy#OsGXKs]PBl}.u/7bS9)elUnA?Qvgkky#hzHne._%kZs96T6gLK7bs-m
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 35 3f 6f 70 f3 53 7d c2 12 f9 49 b4 bb 87 e4 27 32 92 ab fd 71 0f ca e3 2d 37 ff cb df 97 d0 fb 08 d1 5c d3 0d ab 7c b7 f4 11 61 8f 92 15 37 e4 7b e1 38 b3 17 09 f6 e0 e6 87 b9 2f e4 bc bb af d5 59 ff a9 7f ca 4f a7 91 e6 3c e1 3b 09 f7 f8 dc 1c bd b4 6b fb 79 7a 9a d9 6f 6e ec 12 c5 53 34 3e a4 5e 48 66 33 d4 cd 3f 0c 88 ba cd 75 35 37 9d be 6f 90 59 1b b8 fe 0d e6 ef 74 a1 17 6e a5 f4 4c cb ac 3f 3f 7d 4a cc 66 fe e6 26 db 3f f0 35 23 c5 66 50 7e dc df 0f 8e 8e 0b e5 52 24 7f af 3f 2a 9e a3 56 4c cf ba 73 d3 c7 88 79 02 66 9e 60 e7 9f 15 d0 96 d2 3d c0 02 71 8b b2 68 ef 69 74 a7 31 1f 41 48 2f 39 86 6c 22 6b 48 0f d0 2b ae 1d b8 ae 21 5b d8 95 20 9d ff ed 41 ca 5a 5c d7 b1 1c 6b 41 b7 90 0d 90 e7 af 11 3e c2 4f f2 d2 c4 3c 27 e2 b5 f4 b2 32 d6 58 65 ac Data Ascii: 5?opS}I'2q-7\\|a7{8/YO<;kyzonS4>^Hf3?u57oYtnL??}Jf&?5#fP~R$?*VLsyf`=qhit1AH/9l"kH+![ AZ\kA>O<'2Xe
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 7a ab 96 dc d1 b7 7b 41 73 6c 72 19 7d 33 cd 9c 13 d9 de f2 40 39 d6 b9 e4 70 ae 73 f9 fa 30 e3 4e db 27 6f 72 c9 91 7d 76 e1 7e ba e1 5c 3d dc f6 fb d9 9e ee ff 3e 11 d8 f8 7f e6 c8 d5 69 6e 8e dc 73 dc ec 1c 3c 32 c8 d5 a9 bd af 34 e7 6d ae c6 cc 68 8e 7b d5 fc d9 90 9f c3 19 19 38 73 f0 38 d6 dd 0a ed dd eb 1a 92 1b 5d f0 1c f6 2a b6 56 78 ba dc 96 e6 e6 c8 d7 87 bd 8a ad 11 39 7a 5d 72 98 1a cb 8d d7 79 0e e7 fe 36 77 8d ca cd 61 ee 2c 72 6b b1 fd 87 a9 75 f7 1c a6 a5 b9 d9 a9 33 47 af eb b8 f0 1c e6 4e c8 4d eb f6 ce c2 d4 47 ae d6 ed 1c 66 94 93 db db cd 8e 91 5b ef 3a 72 3c 07 9f 73 b9 bb 57 9e e3 98 ff 53 1f 76 0e b3 8c dc 5a ec 3d 90 fb 4a d8 9b b7 ee e7 ce a8 b5 56 9a e9 a5 72 cb e0 39 b2 cb e0 39 7a ad 1c 66 2f 0e 34 fa 66 0e de 52 5e c6 3a 97 Data Ascii: z{Aslr}3@9ps0N'or}v~\=>ins<24mh{8s8]*Vx9z]ry6wa,rku3GNMGf[:r<sWSvZ=JVr99zf/4fR^:
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 83 53 cc 52 f9 ca 63 ce 15 f7 2f 91 65 16 f7 51 8d f2 df 4c 26 c5 88 d9 d6 61 fe 7a 35 c2 be e9 e6 3b 1e fe 75 77 6e 1c 69 5a 96 2a 40 eb 71 ff 42 d7 9c a3 fc 17 8b 3c 77 fe 2f 35 a8 35 85 88 f9 3b 08 fe bf 7b f0 5f cf e7 8e c8 20 ab 2d c8 f2 99 fa a6 7b 88 84 4b 99 fd 4c 37 aa a5 71 85 98 bf b3 c8 5f 0b f8 ea cd bf f6 b5 5b e1 3e 7e 8b 4c 42 d7 0d ee 85 43 07 18 43 bb 54 fa 7d 32 6d 2d d5 b9 19 a9 e4 af e8 aa 18 45 7b 2f c9 57 a5 ec df e1 0d 33 ce f4 d7 6e eb 45 fe 4c 35 7f c7 41 bf 34 93 59 ab 22 c4 7d df 66 b6 b9 87 d0 c8 a2 27 ab 8f 6e b3 28 77 2d ce 8f 58 dd 4f 7c 68 c4 c5 bd e4 20 fb ff 37 b2 d7 8c dc a8 29 77 77 61 c7 0a 34 ae e0 27 47 1e b2 96 f8 3b e9 35 53 50 8a eb 76 d8 fc 4e b2 87 7c 92 9c 8c 72 7a 4a 5e 6e dd b1 ac a1 a3 6e d9 3b c5 2b 4b fe Data Ascii: SRc/eQL&az5;uwniZ*@qB<w/55;{_ -{KL7q_[>~LBCCT}2m-E{/W3nEL5A4Y"}f'n(w-XO\|h 7)wwa4'G;5SPvN\|rzJ^nn;+K
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: db c5 ff 2c fe a0 d8 53 52 5c 52 51 52 55 52 57 d2 5c d2 5e 72 7b 4d 77 c9 61 25 47 95 ac 2b d9 5c f2 b1 92 fe 92 91 92 89 92 ed 25 33 25 9f 28 39 b9 44 2e 99 2f d1 4a d2 25 99 92 d3 4a ce 2a 39 af e4 c2 92 2f 96 7c b9 e4 aa 92 6b 4b 6e 2c b9 b9 e4 d6 92 3b 4a ee 2a f9 51 c9 83 25 3f 2b 79 bc e4 37 25 4f 97 3c 57 f2 52 c9 9f 4a de 28 f9 5b c9 bb 25 ff 2e 21 a5 45 a5 e5 a5 2b 4a 6b 4b 2b eb 9a 4a db 4a 7f 5d d4 55 7a 68 69 4f e9 da d2 4d a5 c7 95 f6 95 0e 97 8e 97 4e 95 ee 28 dd 53 1a 2c 0d 97 2a a5 6a 69 aa f4 94 d2 4f 97 d6 af 3c b3 f4 dc d2 0b 4a 2f 29 bd bc f4 ab a5 d7 94 de 50 ba af f4 3b a5 b7 97 fe b0 f4 be d2 9f 94 3e 52 fa 8b d2 5f 97 fe ae f4 d9 d2 17 4b 5f 29 3d b9 e2 f5 d2 b7 4a df 29 7d bf f4 bf a5 85 65 65 65 95 65 35 65 8d 65 ab ca 3a cb 0e Data Ascii: ,SR\RQRURW\^r{Mwa%G+\%3%(9D./J%J9/\|kKn,;JQ%?+y7%O<WRJ([%.!E+JkK+JJ]UzhiOMN(S,*jiO<J/)P;>R_K_)=J)}eeee5ee:
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 94 1e de fa 58 8d 39 c7 79 db 9d cf 52 9d 3c 0d fd b4 01 75 15 07 ea b3 ed 17 e8 f3 d5 ac ef d5 d5 43 d5 94 1f aa fe 2c d3 dd 67 eb 7e 58 47 f9 1f d6 fd 87 f1 ff a9 bb 9c d9 f5 e5 f5 f5 96 2d 99 63 92 3f 06 76 fb 3f d9 aa b2 79 79 71 ab d9 67 0f ab c7 53 6d b6 df 9c 37 fb 6a 28 bf af c6 ec ef 1d 4d b4 9f 77 34 7d b1 99 f2 5f 6c 7e a8 99 f2 0f 35 9b b6 46 6d e8 af b4 ed cb fe 5a 6d f6 89 da c7 7b a2 6d d4 66 a9 2e 4d 3f 69 fa c5 0b 2b f8 dc be 81 f9 82 1b 98 7f a1 fc 1b ac bf 6f d4 99 fc 8d 6c 6c 6e 6c 70 ce bb 43 2a 9d f3 91 97 2f c3 ef ce d0 75 d3 33 53 9d 3b 5f cc 39 77 18 da b0 61 65 f6 78 1d 54 45 f9 83 aa cc 79 62 ce fb dc f4 7f 37 50 fe df 0d bb 18 bf 8b db 99 eb 1c a4 7c 51 e5 51 e8 57 93 e7 28 e6 e3 0e c3 fc 78 09 7a ea aa a6 fa ea aa 9e 65 65 cd Data Ascii: X9yR<uC,g~XG-c?v?yyqgSm7j(Mw4}_l~5FmZm{mf.M?i+ollnlpC*/u3S;_9waexTEyb7P\|QQW(xzee

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.11.12	49366	151.101.3.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 04:03:05 UTC	367	OUT	GET /2024/patches/062-08173/234EE7F7-CC33-4CD3-85FC-60590A103560/com_apple_MobileAsset_CoreSuggestions/84f6102e2a09dd10dd694d795792a7771b6014fc.zip HTTP/1.1 Host: updates.cdn-apple.com Accept: / Accept-Language: en-us Connection: keep-alive Accept-Encoding: br, gzip, deflate User-Agent: mobileassetd (unknown version) CFNetwork/976 Darwin/18.2.0 (x86_64)
2024-10-02 04:03:05 UTC	968	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2329779 Content-Type: binary/octet-stream x-amz-replication-status: REPLICA Last-Modified: Sat, 01 Jun 2024 00:33:54 GMT ETag: "62aa6495f721aac6496f611421080d83" x-amz-server-side-encryption: AES256 x-amz-meta-digest-sh1: 0ec95a14339de39c7a1806530a314739b0d9b820 x-amz-meta-digest-sha256: 4e17bd8d251294168f135d3b54187c7176100897ec179db388f62f95e5ccc92c x-amz-version-id: SHPF9jDyk4KI91WDXWXzZ2gAG87u0GXv Server: AmazonS3 Via: 1.1 341de8df4217bc427eae27ed066ab4ce.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish X-Amz-Cf-Pop: IAD55-P2 X-Amz-Cf-Id: O2quXQjlcjSfAgMML0jAGtGaFuB90zT-pp2EWW9jcncrhWbCSfdnLQ== Cache-Control: max-age=2592000, public Accept-Ranges: bytes Age: 1957718 Date: Wed, 02 Oct 2024 04:03:05 GMT x-cdn: fsly X-Served-By: cache-iad-kiad7000103-IAD, cache-gnv1820031-GNV X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 20264, 0 X-Timer: S1727841786.885094,VS0,VE1
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 50 4b 03 04 14 00 00 08 00 00 10 99 b8 58 00 00 00 00 00 00 00 00 00 00 00 00 09 00 10 00 4d 45 54 41 2d 49 4e 46 2f 55 58 0c 00 00 00 00 00 20 48 51 66 f5 01 f5 01 50 4b 03 04 14 00 00 00 08 00 10 99 b8 58 1b 62 8d ac 8e 00 00 00 ae 00 00 00 24 00 10 00 4d 45 54 41 2d 49 4e 46 2f 63 6f 6d 2e 61 70 70 6c 65 2e 5a 69 70 4d 65 74 61 64 61 74 61 2e 70 6c 69 73 74 55 58 0c 00 20 48 51 66 20 48 51 66 f5 01 f5 01 4b 2a c8 c9 2c 2e 31 30 b8 ca c8 c4 cc c2 ca c6 ce c1 c9 15 2f 20 16 5c 92 98 97 92 58 94 e2 92 59 94 9a 5c 92 5f 54 19 90 5a 94 5b 1c 1e 96 5a 54 9c 99 9f 07 54 10 92 5f 92 98 13 9a 97 9c 9f 5b 50 94 5a 5c 9c 9a e2 54 59 92 5a 1c 1d 94 9a 9c 5f 94 e2 9c 5f 9a 57 12 2f 20 08 33 c5 2d 33 27 15 6c 80 a0 e3 5b 01 26 21 86 e8 37 fd 82 cc 9f 85 ff 83 41 e3 Data Ascii: PKXMETA-INF/UX HQfPKXb$META-INF/com.apple.ZipMetadata.plistUX HQf HQfK*,.10/ \XY\_TZ[ZTT_[PZ\TYZ__W/ 3-3'l[&!7A
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 9b 5b 23 55 01 9e 8a e6 30 cf 31 c2 ab ff a2 30 98 79 7f 6f d7 d6 8b db c6 0c 58 a2 74 67 44 85 0b a5 85 f1 12 b6 65 c3 3c 9f c9 48 53 17 19 21 45 5b 92 9b cf ed 3d d7 f3 f2 8b 97 94 a7 1c 93 38 e1 5a 07 a3 46 0e 59 02 82 67 85 cc c1 a2 8a ca a8 30 b7 f9 78 9e 1a d4 bc 6f 6c ec af 93 5b 2e 5e 85 15 68 68 36 60 50 c3 20 bc 31 4e 0c 51 20 d2 a5 36 85 f2 82 8c e6 45 5d 29 8b 3e fd f6 f8 e9 25 ef 1c 86 47 51 9b 4e 47 28 e7 ca 6d 15 52 4b d2 3c 13 9c 18 d3 fd 1e a4 7c 27 95 4b f6 5c 3b 7d f6 a5 27 7f 87 26 8c 52 c6 d6 82 3a c9 30 15 31 43 91 43 2a 60 fe c9 53 26 35 3f 31 29 cc 75 dc 10 b4 33 84 cd b7 42 3f 68 a3 6f bf 0b 0f e2 55 6c 99 65 2a e6 65 42 f3 db a6 96 b2 88 85 56 40 ed 5b 8d 22 8b ce b1 0e 92 27 06 d3 c2 ae 1b 97 97 56 54 97 e0 9e 38 c9 b2 21 96 6d Data Ascii: [#U010yoXtgDe<HS!E[=8ZFYg0xol[.^hh6`P 1NQ 6E])>%GQNG(mRK<\|'K\;}'&R:01CC`S&5?1)u3B?hoUleeBV@["'VT8!m
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: de ec fb 44 dc 31 53 e5 87 be 65 bf c5 7e 62 14 3f 43 df a4 12 ac c4 2b 7b b2 8c 7e 42 8f 97 12 d9 a3 59 bb 9d 51 b4 68 8c 50 06 99 fc 14 48 d1 f5 b5 e9 57 e3 1a d4 76 84 12 fb b5 ed ff 01 50 4b 03 04 14 00 00 08 08 00 11 7a 28 50 28 7d 24 f9 38 99 01 00 4c 95 08 00 20 00 10 00 41 73 73 65 74 44 61 74 61 2f 43 6f 6d 70 69 6c 65 64 50 61 74 74 65 72 6e 73 2e 70 6c 64 61 74 55 58 0c 00 e6 ce 3e 66 d1 62 16 5e 00 00 00 00 ec bd 77 7c d3 c5 ff 38 7e 49 9a d5 95 a4 0e 50 51 e2 84 a2 85 32 14 41 04 07 22 2a a6 93 51 d2 41 d2 a6 6d 68 46 c9 68 6d 09 d0 c1 2a a5 b6 08 2d ab b2 37 ca 10 90 0d 6f c5 3d 18 be 55 f0 ed c4 d2 42 05 d4 37 fa 56 df ae fe 9e 77 cf 67 d2 b4 40 ed e7 e1 fb bf df b7 9a bb d7 dd eb ee 79 cf 7d 77 cf bb 04 49 ea 7d 2e 49 ea 3e 83 a4 a4 7f 9d Data Ascii: D1Se~b?C+{~BYQhPHWvPKz(P(}$8L AssetData/CompiledPatterns.pldatUX>fb^w\|8~IPQ2A"QAmhFhm-7o=UB7Vwg@y}wI}.I>
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 0f 2a 2a dd 29 c6 4a f7 22 f8 ec 33 54 16 3c 38 bd 72 7a 57 c3 5c 63 fd a2 aa b8 82 84 aa fa a3 71 35 19 43 93 e7 d5 f4 f5 ce ab ef 5f 37 1f 7c cd 7c 9b 39 69 7e 8d b7 6e 81 61 da b2 85 c6 3e 71 0b 8d c3 2c 0b 8d 99 79 0b 2d cf 1a 16 82 cf 59 58 fd 65 f5 e2 e5 5d 0d 4b d2 13 72 97 5a 2a 33 96 5a b6 5a 96 56 af 1e bb 74 51 8a 71 e9 22 df a2 7a 80 53 5f 9f 3e b3 be fe 59 c3 f3 8b ae 4d 5d be 60 68 f2 f2 05 fb 8b 56 1b 9f 35 ac 05 b9 af 9d 3a 3e 65 ed 54 78 9e ba 61 c9 ba 29 ef e6 ad 9b f2 3e 7c be a8 5e b7 ac ab 61 c3 b8 81 29 1b c6 7d 0f da 95 62 7c c1 70 74 ec 96 8c ee de 2d 36 3d 58 da ec 84 6d c6 fb 5c db 2c ab c7 ee ca 73 a5 ef 4e 58 67 db 03 b6 b3 d7 a8 35 ef b5 fc 5c b7 d7 f9 7d d2 01 8b b7 ee 90 31 c3 75 a8 7a 7c ca a1 6a 4b de a1 ea a5 89 87 aa 8f Data Ascii: *)J"3T<8rzW\cq5C_7\|\|9i~na>q,y-YXe]KrZ3ZZVtQq"zS_>YM]`hV5:>eTxa)>\|^a)}b\|pt-6=Xm\,sNXg5\}1uz\|jK
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 52 3e ab f9 dc f0 f9 f4 cf 6b be 88 fb a2 fa cb 69 5f 96 7d 59 fd d5 84 af 8a 4f c7 9d 76 9c 2e 69 a8 38 93 d4 98 d3 58 dc 58 d2 94 d6 54 d4 b4 f0 6c e9 b9 da e6 b4 e6 85 e7 d3 ce d7 5e 48 b9 98 79 d1 7d b1 e6 62 ed b7 71 df e5 7c 57 75 c9 70 29 e9 52 f6 0f 39 3f 14 fe 98 f6 63 ce 8f b3 ff 53 fb 53 d2 4f 96 9f 16 fc 5c f7 4b d2 2f 05 bf 54 fe 37 fb 37 c3 6f b5 7f 8c f9 a3 e6 cf c4 3f b3 99 f8 bb 97 3d ca c2 a4 c3 d9 58 f9 e3 ec 1d f9 13 ec 0b f9 93 ec 23 89 81 a5 2a e2 59 77 65 22 eb ab 4a 62 93 54 c9 2c 5a 3d 9a 4d 56 8f 61 3a 49 0a 73 85 8e 67 37 87 65 b2 8c b0 1c 96 1f 39 91 1d 8e b4 b1 61 12 3b bb 5f e3 60 0e 8d 93 7d af c9 67 a1 5a 17 5b aa 75 b3 f7 b5 1e 36 43 e7 65 3b 75 05 ac 59 57 c4 5e 56 17 b3 8a a8 d3 b1 0f 86 45 18 9e 95 bc 64 d8 26 79 32 f1 Data Ascii: R>ki_}YOv.i8XXTl^Hy}bq\|Wup)R9?cSSO\K/T77o?=X#*Ywe"JbT,Z=MVa:Isg7e9a;_`}gZ[u6Ce;uYW^VEd&y2
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: d9 d9 78 a9 8b dd 28 45 bd ea 26 da 16 b0 5b 68 0c bd 18 c3 c3 6e 93 7e 2b ec e0 0e e9 f7 82 b6 bb a4 97 84 5e f7 94 fe a8 e3 63 f4 12 fd b2 d8 3d 84 4b 6f 29 d2 10 2b e5 34 b8 59 3f e9 fb 22 1f 20 72 0b bb 4f 3a 41 f4 bf 5f 6a 06 f4 32 d9 03 52 0b 7b 42 8a b6 f8 a0 94 db a2 97 0d 93 ee 14 63 3e 2c 60 b9 d8 a3 22 b7 b2 c7 a4 28 bf c7 45 6e 23 3f 11 c3 46 49 ed 2c 59 d4 d9 99 41 8a fe 20 5e 3a 58 d8 67 62 a0 2d d6 8f a1 fa 71 6d ea 2d 2c 95 78 95 2e 78 05 f6 2f 9d 21 f0 34 13 7d 59 34 76 b6 14 65 9b 4b fc 9a 48 fc b2 11 bf 1c c4 af 7c e0 97 14 da b9 81 be 4a c2 cd 2b 70 73 b2 42 29 fa e3 22 1a 63 32 8d 31 85 c6 98 46 63 94 4a 51 7f ca a5 a1 c2 07 cd 10 65 37 9b 45 3c ad 20 9e b6 b4 a0 4c aa 84 4c ec ac 9a c6 99 47 e3 cc a7 71 6a 69 9c 85 34 ce 62 1a 67 29 Data Ascii: x(E&[hn~+^c=Ko)+4Y?" rO:A_j2R{Bc>,`"(En#?FI,YA ^:Xgb-qm-,x.x/!4}Y4veKH\|J+psB)"c21FcJQe7E< LLGqji4bg)
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: cb c4 fe 43 f2 f8 99 e4 f1 5f 92 c7 6f 24 8f 3f 41 1e dd e5 88 33 93 a3 3c a4 72 94 47 88 1c e5 a1 a0 f7 2a 39 ca 23 4c 0e eb 7a 39 8e 17 21 47 79 68 e4 28 0f 9d 1c e5 71 8d bc ad 3c ba 50 fb 1b e4 28 8f 9b e4 28 8f 9b e5 6d e5 71 ab 1c e5 71 bb 1c e5 71 a7 1c e5 d1 43 8e f2 88 96 a3 1c ee a6 3c 46 8e f2 e8 23 47 7e f6 95 a3 3c fa cb 51 1e f7 12 ee 03 e5 28 8f 41 72 94 c7 03 72 94 c7 83 72 94 c7 30 ea ff b0 1c e5 f1 a8 1c e5 f1 98 1c e5 f1 b8 1c e5 f1 84 1c e5 f1 94 1c e5 f1 b4 1c e5 11 27 47 79 24 c8 51 1e 49 44 ef 68 b9 5f 1e bc 6c 61 29 72 94 83 51 8e eb da 34 39 5f d7 16 b0 0c c1 3f 0b 33 11 5f 32 c5 78 45 cc 22 f8 a8 67 39 24 13 ab 18 cf c9 f2 e4 b3 84 4d da e5 15 3a 5e ef 14 f5 b9 6c 92 1c c7 71 13 dd 5e e2 53 a1 c8 9d ac 48 ce e7 62 1b 9b 2c c6 b7 Data Ascii: C_o$?A3<rG*9#Lz9!Gyh(q<P((mqqqC<F#G~<Q(Arrr0'Gy$QIDh_la)rQ49_?3_2xE"g9$M:^lq^SHb,
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 5c e3 d5 2b dd a2 ff 32 a5 57 c3 6d 62 85 12 63 d5 ab 94 18 ab 5e 43 7c 58 47 78 6d 20 bc 36 29 71 cd f1 82 12 63 d5 5b 94 18 ab de 46 7c 7c 49 89 b1 ea 9d d4 ef 65 e2 f7 1e 51 b6 b1 7d 4a 9c 33 0f 88 b2 9e 1d 52 a2 2e ff 43 89 f8 bd 2a f0 2b 64 af 91 1e bd a1 44 5f f1 96 12 6d f6 1d e2 ef 7b 4a f4 15 47 49 b7 8f d3 78 a8 e3 5e f6 a1 a0 03 f6 ff 4a 3c b7 39 45 e3 fd 4b e4 26 f6 19 e9 c7 17 22 8f 61 5f 89 7c 22 fb 5a 79 58 cc dd 67 94 bf 8b 35 57 93 f2 4f b1 16 3d 47 f4 7f 23 e8 3f cb 2e 28 71 9c 6f 95 78 ee f3 bd 28 67 b2 4b 24 a7 1f 95 e8 bf 7f 56 7a 58 57 15 fa ef 5f 95 76 16 aa 42 ff fd bb 12 fd f7 9f 4a f4 df 4c 85 fe 5b aa 42 ff 1d a2 42 ff ad 50 a1 ff 56 a9 ae 81 7c 58 c0 8f 87 ab d0 8f 47 aa d0 8f 6b 55 e8 c7 a3 54 e8 c7 af 55 a1 1f bf 5e 65 a4 7e Data Ascii: \+2Wmbc^C\|XGxm 6)qc[F\|\|IeQ}J3R.C*+dD_m{JGIx^J<9EK&"a_\|"ZyXg5WO=G#?.(qox(gK$VzXW_vBJL[BBPV\|XGkUTU^e~
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 14 65 37 2a 14 63 71 86 50 8c c5 c5 87 56 08 9b 4b 24 be 24 87 a2 bf 1d 13 8a fe 76 5c 28 d7 05 2b 1b 2f fa 17 b0 d4 d0 66 5d ab 0f 9c 69 98 20 ea df 30 9a 45 2e 79 26 4b e4 3f 57 66 87 e2 9d ae dc 50 bc 7b 36 31 14 ef 9e d9 c4 fb f7 e6 39 44 3e d5 9c 2f f2 2f c6 f8 e9 f6 84 a2 4e 15 84 e2 3e e6 99 50 5c 07 17 87 f2 b8 45 26 fb 3a 14 f6 cb a1 30 ff 13 7d 25 44 77 99 c8 f3 d9 f4 50 ae f3 f9 6c 66 28 ee 93 66 13 ff e6 84 e2 5a 63 6e 28 c6 04 9f 0d c5 33 b8 79 a1 0e b6 3c 14 f7 64 f3 43 71 4f 56 4b b2 5f 48 bc 5b 4c ba b5 94 64 fe 7c a8 df 76 1d 02 d7 95 a1 78 0f 6c b5 d0 25 33 5b 4b fd d7 93 4c 37 12 0d 9b 09 ce 8b 04 67 6b 68 b0 0f 70 b0 1d a1 18 c7 da 15 8a 73 db ee 50 9c db f6 92 4e ed 0f 45 fb 3c 18 8a f6 79 38 14 d7 c7 af 02 0d c7 43 71 7d fc 5a 28 5f Data Ascii: e7*cqPVK$$v\(+/f]i 0E.y&K?WfP{619D>//N>P\E&:0}%DwPlf(fZcn(3y<dCqOVK_H[Ld\|vxl%3[KL7gkhpsPNE<y8Cq}Z(_
2024-10-02 04:03:05 UTC	1378	IN	Data Raw: 41 df 5d b4 33 b1 5b 45 9e cd 6e a7 fc ce 08 d4 c1 1e 11 a8 83 d1 11 a8 3f 77 47 e0 f9 7e 4c 04 d2 d9 27 02 e9 ec 1b 81 74 f6 8f 40 3a ef 8d c0 3d c6 40 ea 3f 88 e8 79 20 02 cf f7 1f 8c c0 f3 fd 61 11 38 df 3d 1c 81 6b f6 47 23 f0 7c ff b1 08 8c 5d 3d 2e fa db d9 13 11 38 cf 3c 45 74 3d 1d 81 f3 8c 7f fe 49 a0 71 93 22 90 bf a3 45 6e 62 63 45 7d 0e 4b 89 c0 b9 db 48 78 a7 11 9c 0c e2 8f 89 f8 93 49 fc b1 10 7f 72 88 3f 56 e2 4b 1e e5 76 e2 8f 93 e8 9b 44 fc 71 13 7f bc 34 4e 21 f1 a7 88 f8 33 99 f0 9c 42 fc 99 46 fd 4b 89 3f e5 c4 9f 19 c4 9f 59 c4 9f 0a e2 4f 25 f1 a7 8a f8 53 4d fc 99 47 fc 99 4f 74 d5 06 f8 83 7a ba 98 f4 64 69 04 ce f9 cb 40 c7 be a6 be 2b 22 70 6e 5f 15 81 73 fb 1a d2 a5 75 a4 4b 1b 08 e6 26 e2 d5 0b c4 ab 2d c4 ab 6d c4 ab 97 88 57 Data Ascii: A]3[En?wG~L't@:=@?y a8=kG#\|]=.8<Et=Iq"EnbcE}KHxIr?VKvDq4N!3BFK?YO%SMGOtzdi@+"pn_suK&-mW

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.11.12	49370	17.253.13.134	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 04:03:07 UTC	302	OUT	GET /assets/macos/com_apple_MobileAsset_KextDenyList/com_apple_MobileAsset_KextDenyList.xml HTTP/1.1 Host: mesu.apple.com Accept: / If-Modified-Since: Tue, 06 Apr 2021 18:14:44 GMT User-Agent: MobileAsset/1.1 Accept-Language: en-us Accept-Encoding: br, gzip, deflate Connection: keep-alive
2024-10-02 04:03:07 UTC	321	IN	HTTP/1.1 304 Not Modified Date: Wed, 02 Oct 2024 04:03:07 GMT Etag: "1afa42570224d35bc0a21a7660a0d130" Cache-Control: max-age=300 Vary: Accept-Encoding Connection: close Via: http/1.1 usmia1-edge-fx-005.ts.apple.com (acdn/255.14450) X-Cache: hit-fresh CDNUUID: 1ec5da95-1756-4ed4-8261-dcd5cc7bbb2e-21011457505

System Behavior

Analysis Process: mono-sgen32 PID: 625, Parent PID: 537

General

Start time (UTC):	04:03:05
Start date (UTC):	02/10/2024
Path:	/Library/Frameworks/Mono.framework/Versions/4.4.2/bin/mono-sgen32
Arguments:	-
File size:	3722408 bytes
MD5 hash:	8910349f44a940d8d79318367855b236

Chronological Activities

Analysis Process: open PID: 625, Parent PID: 537

General

Start time (UTC):	04:03:05
Start date (UTC):	02/10/2024
Path:	/usr/bin/open
Arguments:	/usr/bin/open /Users/bernard/Desktop/Presentation.pptx
File size:	105952 bytes
MD5 hash:	34bd93241fa5d2aee225941b1ca14fa4

Chronological Activities

Analysis Process: xpcproxy PID: 626, Parent PID: 1

General

Start time (UTC):	04:03:05
Start date (UTC):	02/10/2024
Path:	/usr/libexec/xpcproxy
Arguments:	-
File size:	44048 bytes
MD5 hash:	4764d9eafe6b7dac23253a9f8b7f73d6

Chronological Activities

Analysis Process: Microsoft PowerPoint PID: 626, Parent PID: 1

General

Start time (UTC):	04:03:05
Start date (UTC):	02/10/2024
Path:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
Arguments:	/Applications/Microsoft PowerPoint.app/Contents/MacOS/Microsoft PowerPoint
File size:	30072704 bytes
MD5 hash:	a27fcf153298f0494213c60a8138654e

Chronological Activities

Analysis Process: xpcproxy PID: 632, Parent PID: 1

General

Start time (UTC):	04:03:09
Start date (UTC):	02/10/2024
Path:	/usr/libexec/xpcproxy
Arguments:	-
File size:	44048 bytes
MD5 hash:	4764d9eafe6b7dac23253a9f8b7f73d6

Chronological Activities

Analysis Process: Office365ServiceV2 PID: 632, Parent PID: 1

General

Start time (UTC):	04:03:09
Start date (UTC):	02/10/2024
Path:	/Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2
Arguments:	/Applications/Microsoft PowerPoint.app/Contents/SharedSupport/Office365ServiceV2.app/Contents/MacOS/Office365ServiceV2
File size:	694304 bytes
MD5 hash:	c76d5ed86d9dca9ee41a2c47addb7405

Chronological Activities

Analysis Process: xpcproxy PID: 661, Parent PID: 1

General

Start time (UTC):	04:04:26
Start date (UTC):	02/10/2024
Path:	/usr/libexec/xpcproxy
Arguments:	-
File size:	44048 bytes
MD5 hash:	4764d9eafe6b7dac23253a9f8b7f73d6

Chronological Activities

Analysis Process: eficheck PID: 661, Parent PID: 1

General

Start time (UTC):	04:04:26
Start date (UTC):	02/10/2024
Path:	/usr/libexec/firmwarecheckers/eficheck/eficheck
Arguments:	/usr/libexec/firmwarecheckers/eficheck/eficheck --integrity-check-daemon
File size:	74048 bytes
MD5 hash:	328beb81a2263449258057506bb4987f

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

macOS Analysis Report Presentation.pptx

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Persistence and Installation Behavior

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/Users/bernard/Desktop/~$Presentation.pptx

/Users/bernard/Library/Containers/com.microsoft.Office365ServiceV2/Data/Library/Caches/Microsoft/uls/com.microsoft.Office365ServiceV2/logs/apple-device-log-20241001-2303.log

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/FontCache/systemfontmetadata.json

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CatalogCacheMetaData.xml

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectbronze_apple.jpg

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectgalaxy_apple.jpg

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectgold_apple.jpg

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectlava_apple.jpg

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectocean_apple.jpg

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectrainbowglitter_apple.jpg

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectrosegold_apple.jpg

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/CloudGraphicsResources/Graphics/inkeffectsilver_apple.jpg

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/GraphicsCache/1/oart.json

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/Office/16.0/Floodgate/PowerPoint.CampaignStates.json

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/Office/16.0/WebServiceCache/AllUsers/officeclient.microsoft.com/C0A390DF-1012-B84C-AA3B-629416397471

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Application Support/Microsoft/Office/16.0/microsoft powerpoint_Rules.xml

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Caches/Microsoft/uls/com.microsoft.Powerpoint/logs/apple-device-log-20241001-2303.log

/Users/bernard/Library/Containers/com.microsoft.Powerpoint/Data/Library/Caches/com.microsoft.ctrlstrcaches/com.microsoft.Powerpoint.ctrlstrcache.en.plist

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/ar.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/cs.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/da.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/de.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/el.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/en.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/es.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/fi.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/fr.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/he.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/hu.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/id.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/it.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/ja.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/ko.strings

/Users/bernard/Library/Group Containers/UBF8T346G9.Office/User Content.localized/Proofing Tools.localized/.localized/nl.strings

macOS Analysis Report
Presentation.pptx